Security Directory

L

Lumar IG d.o.o.

lumar.si

43

Lumar IG d.o.o. is a well-established Slovenian company specializing in the design and construction of high-quality, sustainable prefabricated wooden houses. With over 30 years of experience and a domain registered since 1999, Lumar holds a strong market position as a leading manufacturer of energy-efficient homes in Slovenia and neighboring markets. Their product portfolio includes various house models such as Avantgarde, Classic, Individual, Greenline, and Blackline, catering to diverse customer needs. The company emphasizes sustainability, energy efficiency, and customer-centric architectural services, supported by numerous awards and certifications. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and modern technology usage.

J

Jewella Privacy LLC

bazanekretnina.me

68

Bazanekretnina.me is a regional real estate listing platform focused on Montenegro and the surrounding Balkan region. It provides a comprehensive catalog of properties including apartments, houses, commercial spaces, and land for sale and rent. The platform also features real estate news and agency partnerships, positioning itself as a key player in the regional real estate market. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for property seekers and sellers. Technically, it employs modern web technologies and integrates Matomo analytics for user tracking, although privacy and cookie policies are not explicitly presented. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers. The domain is privacy protected by Jewella Privacy LLC, a common practice for such businesses, and the domain age aligns with the site's recent launch. Overall, Bazanekretnina.me is a credible and functional real estate platform with room for improvement in privacy compliance and security best practices.

I

Izdelava spletnih strani, Miha Omejc s.p.

mihaomejc.com

57

Miha Omejc is a seasoned web designer and frontend developer based in Slovenia, offering a comprehensive range of web services including design, programming, e-commerce solutions, SEO optimization, hosting, and consulting. The business operates as a small sole proprietorship with over 20 years of experience and a strong portfolio of completed projects, positioning itself as a reliable and experienced service provider in the Slovenian market. The website is professionally designed with clear navigation and relevant content targeting businesses and agencies seeking web development services. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile optimized and SEO conscious, although performance is moderate. Hosting is supported by Cloudflare DNS and NameCheap registrar, indicating a stable infrastructure. However, there is room for improvement in accessibility and security best practices. From a security perspective, the site lacks visible security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, enhancing trustworthiness. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and compliance documentation to improve its security posture and regulatory adherence.

K

Kabi d.o.o.

homeoffice.rs

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate efficient remote work for small and medium enterprises primarily in Serbia. The platform offers a suite of tools including collaboration, project management, work time tracking, and email marketing, complemented by additional IT services such as Microsoft Office 365 and Google G Suite integration. The company positions itself as a niche provider focused on enabling virtual office environments with a flexible and secure cloud infrastructure. Technically, the website is built using modern web standards with responsive design and uses a CMS platform (BCMS) for content management. Hosting is provided by Adriahost, a regional registrar and hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. Contact forms include CAPTCHA and GDPR consent checkboxes, indicating some attention to data protection, although no formal privacy or cookie policies are published. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and explicit security headers. There is no published security policy or incident response information, which represents a compliance and trust gap. The domain registration data is consistent with the business claims and shows a legitimate and active status. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security practices, and clearer communication of security policies to strengthen user trust and regulatory adherence.

K

kABI d.o.o.

bazanekretnina.com

67

Bazanekretnina.com is a regional real estate listing platform primarily serving Serbia, Montenegro, Croatia, Slovenia, Spain, Bosnia and Herzegovina, and Italy. The platform offers a wide range of property types including apartments, houses, land, and commercial spaces for sale and rent. The business is operated by kABI d.o.o., a company established in 2007, indicating a mature presence in the regional real estate market. The website targets individuals and businesses interested in real estate transactions within the Balkan region and selected European countries. It provides multilingual support and advanced search capabilities to enhance user experience. Technically, the website employs modern web technologies including Google Fonts, Font Awesome icons, and JavaScript libraries such as Select2 and Swiper for UI components. The site is mobile optimized and uses structured data (JSON-LD) to improve SEO and search engine visibility. Hosting details are not explicitly identified, but the domain is registered with DNC Holdings, Inc. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No contact information such as emails or phone numbers is directly available on the analyzed page, which may affect user confidence and support accessibility. Overall, Bazanekretnina.com presents as a professional and regionally focused real estate platform with good content quality and technical implementation. The main risks relate to privacy compliance gaps and limited visible security policies. Strategic improvements in these areas would enhance trustworthiness and regulatory adherence.

A

Arctur d.o.o.

arctur.si

63

Arctur d.o.o. is a well-established Slovenian technology company specializing in high performance computing, cloud computing, project management, and digital design services. With over 30 years of experience, the company positions itself as an innovator merging research, science, art, and business to deliver advanced technological solutions primarily targeting industries such as healthcare, tourism, government, and NGOs. Their website reflects a professional and modern digital presence with clear service offerings and a strong emphasis on interdisciplinary innovation. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with integration of analytics tools like Matomo and Google Analytics. The site is mobile-optimized, fast-loading, and accessible, with a cookie consent mechanism in place ensuring compliance with privacy regulations. The absence of a CMS or third-party hosting providers suggests a controlled hosting environment, likely self-managed. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Arctur.si demonstrates a high level of professionalism, technical maturity, and business credibility. The domain registration data aligns well with the company’s stated history and location, reinforcing legitimacy. Strategic recommendations include publishing formal security policies, incident response information, and enhancing security headers to further strengthen the security posture.

P

Planinska zveza Slovenije

worldcupslo.com

42

The website worldcupslo.com serves as the official platform for the World Cup in sport climbing held in Koper, Slovenia, organized by Planinska zveza Slovenije. It provides comprehensive event information including schedules, results, news, sponsor details, and multimedia content targeting sport climbing enthusiasts and the general public interested in this sport. The site is well-branded and supported by recognized sponsors and partners, establishing a strong market position within the sport event domain in Slovenia. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and offers good navigation and content relevance. However, performance is moderate and accessibility features are basic, indicating room for technical improvements. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no published privacy or cookie policies, which is a compliance gap. No incident response or vulnerability disclosure mechanisms are evident. The domain registration is transparent and consistent with the website's purpose, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

Ι

Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας

imkalaig.com

51

The website www.imkalaig.gr serves as the official online presence of the Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας, a Greek Orthodox Metropolis. It provides comprehensive information about the Metropolis, including the Metropolitan Bishop, churches, monasteries, religious events, philanthropic activities, and community services. The site targets local parishioners, religious followers, and visitors interested in the ecclesiastical and cultural heritage of the region. The business model is non-profit and government-related, focusing on community engagement and religious service dissemination. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Three.js and Slick Carousel for interactive content. It is built on a CMS platform likely provided by New Media Soft, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly present, and there is room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, confirming legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers and accessibility could further enhance its posture.

D

Društvo za razvoj podeželja med Snežnikom in Nanosom

las-snezniknanos.si

46

The website represents a Slovenian local action group focused on rural development between the Snežnik and Nanos regions. It operates as a non-profit organization facilitating regional projects, cooperation, and community engagement, primarily funded through EU and national programs. The site provides structured information about projects, calls for funding, and organizational details, targeting local municipalities and stakeholders. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and some UI libraries like Slick Carousel and Shadowbox. The site is moderately optimized for mobile devices and has a clear navigation structure but lacks advanced CMS or modern frameworks. Security posture is basic with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is not explicitly provided, limiting user engagement channels. Overall, the site is functional and professional but could improve in privacy compliance, security best practices, and contact transparency.

O

Občina Štore

store.si

55

Občina Štore is the official municipal government website for the municipality of Štore in Slovenia. It provides a comprehensive range of e-government services including electronic applications, online tax payments, local news, event calendars, public tenders, and contact forms. The website targets residents and stakeholders of the municipality, facilitating digital interaction with local government. The business model is focused on public service delivery and community engagement, positioning itself as a trusted local government portal. The website is well-branded with consistent municipal imagery and structured data for enhanced search engine understanding. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and TinyMCE, and uses JSON-LD structured data for organization information. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and navigation clarity. Performance is moderate, with room for optimization. Hosting details are not explicitly available, but the site uses HTTPS ensuring encrypted communication. From a security perspective, the website enforces HTTPS and uses secure libraries, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. There is no visible incident response or vulnerability disclosure policy, which could be improved to enhance security posture. Privacy compliance is good with a clear GDPR policy, but the absence of a cookie consent mechanism is a compliance gap. No suspicious or malicious content was detected, and the site maintains a high trustworthiness level. Overall, Občina Štore presents a professional, secure, and user-friendly municipal portal with strong business credibility. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance its security and compliance standing.

D

DARS d.d.

dars.si

60

DARS d.d. is the Slovenian national motorway operator responsible for toll collection, motorway maintenance, traffic management, and infrastructure investments. The company operates a vinjetni toll system and an electronic toll system (DarsGo) for heavy vehicles. The website reflects a well-established, state-owned enterprise with a clear focus on transportation infrastructure and public service. The site targets Slovenian motorway users, transport companies, and the general public, providing comprehensive information about services, projects, and traffic updates. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for spam protection. The site is mobile-optimized with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is solid with HTTPS, secure forms, and no exposed sensitive data. The use of reCAPTCHA and cookie consent aligns with GDPR requirements. The domain is long-established (since 1996) and registered with a Slovenian registrar consistent with the business location, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency by publishing security policies and incident response contacts. The site effectively supports the company’s role as a key national transportation infrastructure operator.

Dresdner Verkehrsbetriebe AG operates the MOBI platform, a comprehensive multimodal mobility service in Dresden, Germany. The website presents a well-structured and professional digital presence highlighting integrated public transport, bike- and carsharing, and electric vehicle charging services. The company positions itself as a local leader in sustainable urban mobility, supported by partnerships with local government and recognized organizations. The site targets residents and visitors seeking flexible and environmentally friendly transportation options. Technically, the website employs modern web standards including responsive design, SVG icons, and optimized images with WebP support. While no explicit CMS or frameworks are detected, the site demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No security headers or incident response policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The WHOIS data aligns with the business claims, showing consistent domain registration without privacy protection, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, though enhancements in security policies and privacy compliance would strengthen its posture. The absence of tracking scripts suggests a privacy-conscious approach. Strategic recommendations include implementing security headers, cookie consent, and publishing security and incident response policies.

The Statistical Office of the Republic of Slovenia (SURS) operates the website www.stat.si as the official government portal for disseminating national statistical data. The site offers a wide range of statistical information including population, economy, labor market, inflation, and other key indicators relevant to Slovenia. It targets researchers, government officials, businesses, and the general public interested in official statistics. The business model is that of a government agency providing public data and services, with a strong market position as the primary national statistics provider in Slovenia. The website content is well-structured, professionally designed, and consistent with government branding.

M

Mladinski center Šentjur

mladi-sentjur.si

62

Mladinski center Šentjur is a Slovenian non-profit youth center focused on empowering young people through education, skill development, and community engagement. The organization provides logistical, technical, and content support for youth activities and runs various projects and events aimed at youth development. The website reflects a well-structured platform with clear navigation, event listings, and active social media integration, targeting youth in the Šentjur region. Technically, the site uses standard web technologies and a CMS platform, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy policies, terms of service, and security headers, which are recommended for compliance and trust. Overall, the domain registration is consistent and long-standing, supporting the legitimacy of the organization.

K

Kabi d.o.o.

homeoffice.si

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate effective remote work for small and medium-sized enterprises primarily in Slovenia. Their offerings include collaboration tools, project management, work time tracking, and email marketing, complemented by professional IT services such as business email hosting and security solutions. The company positions itself as a comprehensive provider of flexible and secure business tools for remote work environments. Technically, the website is built on a modern stack with HTML5, CSS3, JavaScript, and uses Google Fonts and Bootstrap components. The site is mobile-optimized and uses a CMS likely BCMS. Performance is moderate with good accessibility and basic SEO. Security best practices include HTTPS enforcement, CAPTCHA on forms, and a cookie consent mechanism, though some security headers and policies are missing. The security posture is solid but could be improved by publishing explicit privacy, security, and incident response policies. No vulnerabilities or exposed sensitive data were detected. The site is free from WAF blocking or security challenges, allowing full content access. Overall, the website is professional, trustworthy, and well-suited for its target audience, though it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

K

KABI d.o.o.

antivirus.si

55

The website antivirus.si represents KABI d.o.o., a Slovenian company founded in 2005, offering WithSecure branded cybersecurity solutions primarily targeting businesses. Their key offerings include endpoint protection (EPP), endpoint detection and response (EDR), centralized cloud-based security management, and patch management services. The site is professionally designed with clear calls to action, including a 30-day free trial, and is localized in Slovenian for the local market. Technically, the site uses standard web technologies with a CMS likely BCMS, and integrates cookie consent mechanisms but lacks advanced SEO and accessibility features. Security posture is moderate with CAPTCHA on forms and cookie consent but lacks published privacy policies, security headers, and incident response information. The domain registration data is consistent with the business, indicating legitimacy and stability. Overall, the site scores well on business credibility and content quality but could improve in privacy compliance and security best practices.

K

Kabi d.o.o.

agent1.si

56

Agent1.si is a professional website operated by Kabi d.o.o., offering a specialized CRM software solution tailored for real estate agencies and agents primarily in Slovenia and Southeast Europe. The platform focuses on digitalizing real estate agency operations, integrating portfolio management, project management, document handling, marketing, and AI features. The company positions itself as a leading provider in its niche with a mature domain and consistent branding. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Slick Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, serving a clear business purpose in the real estate technology sector.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.

The Deutscher Pflegerat e.V. is a well-established German non-profit association representing the interests of nursing professionals and midwives at the federal level. Founded in 1998, it serves as a political and professional voice advocating for healthcare policy improvements, professional education, and workforce development. The website offers comprehensive resources including press releases, event information, podcasts, and official documents, targeting healthcare professionals, policymakers, and the public in Germany. Technically, the site uses standard web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.

S

Specto, Informacijske tehnologije d.o.o.

specto.si

40

Specto, Informacijske tehnologije d.o.o. is a Slovenian IT development company founded in 2008, specializing in web and mobile application development as well as advanced IT solutions. The company targets businesses seeking custom software solutions to enhance their digital presence and operational efficiency. Their website reflects a professional and consistent brand image with modern design elements and clear service offerings. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, GSAP, and SVG graphics, supported by Google Analytics and Tag Manager for user tracking. However, explicit HTTPS usage is not confirmed in the HTML content, and no security headers or privacy policies are present, indicating room for improvement in security and compliance. The domain registration data is consistent with the company's location and business claims, supporting legitimacy. Overall, the website is well-structured and user-friendly but would benefit from enhanced security practices and privacy compliance documentation.

S

SPM SPORTPLATZ MEDIA GMBH

teamtip.net

49

Teamtip is a German-based online platform specializing in football prediction games, offering users the ability to create private prediction groups for major European leagues and international tournaments. The platform supports a free-to-use model with additional white label solutions for companies seeking marketing and user engagement tools. The business is positioned as a niche player in the sports media sector, targeting football fans, social groups, and corporate clients. Technically, the website employs modern web technologies including Vue.js and integrates a consent management platform to ensure GDPR compliance. The platform is accessible via web and mobile apps on iOS and Android, providing a good user experience with live score updates and customizable game rules. Security posture is solid with HTTPS enforced and domain transfer protections, though formal security policies and incident response contacts are not publicly documented. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, supporting a trustworthy and professional online presence.

V

VEMA Versicherungsmakler Genossenschaft eG

vema.media

65

VEMAmedia is a specialized video production service brand under the VEMA Versicherungsmakler Genossenschaft eG, based in Karlsruhe, Germany. The company offers a range of video services including livestreams, recruiting videos, image films, and social media videos, supported by two professional studios. Their target audience primarily consists of businesses seeking to enhance their employer branding and recruitment efforts through high-quality video content. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a small media production business. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, with standard CSS and HTML5, but lacks visible advanced frameworks or CMS identification. Security posture is moderate; HTTPS is implied, and forms include CSRF tokens, but no explicit security headers were detected in the provided data. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were found. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

L

Lokalna akcijska skupina Od Pohorja do Bohorja

las-pohorje-bohor.si

64

Lokalna akcijska skupina Od Pohorja do Bohorja is a Slovenian local action group focused on regional development initiatives between Pohorje and Bohorje. The organization facilitates community projects, public calls for funding, and workshops to support rural and cultural development. The website serves as an information hub for local municipalities, project applicants, and stakeholders, providing news updates and project details. Technically, the site is built on a CMS platform (BCMS) using modern web technologies like Bootstrap and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS, CAPTCHA on contact forms, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business profile, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though it lacks explicit privacy and terms of service pages.

V

VKF Finanz GmbH

vdiep.de

62

VKF Finanz GmbH operates as a regional insurance broker in Germany, offering a range of private and commercial insurance products including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing services such as construction financing and loans. The website is professionally designed, well-structured, and targets German-speaking customers seeking insurance solutions. The business model focuses on personalized insurance brokerage with a regional market presence in Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built using the 'cm Homepage-Baukasten' CMS platform, hosted on webgo.de servers, and employs modern web technologies including HTML5, CSS3, JavaScript, and FriendlyCaptcha for form security. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with external dependencies on content delivery networks and partner domains. From a security perspective, the site enforces HTTPS and uses FriendlyCaptcha to protect forms from bots. Cookie consent mechanisms are implemented in compliance with GDPR. However, explicit security headers are missing, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a trustworthy and professional front for VKF Finanz GmbH with good privacy compliance and security posture. Recommendations include adding security headers, publishing a security policy, and implementing a vulnerability disclosure process to enhance trust and security maturity.

R

Razvojna agencija Kozjansko

ra-kozjansko.si

58

Razvojna agencija Kozjansko is a regional development agency based in Šentjur, Slovenia, focused on rural and community development programs. The agency has a strong local presence with 25 years of operational history and offers services including project management, entrepreneurial incubation, tourism information, and public procurement support. The website reflects a professional and consistent brand image targeting local stakeholders and community members. Technically, the site uses modern web technologies and a custom CMS, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and privacy policies. Overall, the domain registration and website content are consistent and trustworthy, with no signs of blocking or malicious activity.

P

PHP Community Foundation

phpc.chat

56

The PHP Community Chat website serves as a dedicated platform for PHP developers and enthusiasts to engage via popular chat channels such as Discord and IRC. Operated by the PHP Community Foundation, the site supports community building and knowledge sharing within the PHP ecosystem. The platform is positioned as a niche community resource with a clear focus on developer engagement and support. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and hosted on DigitalOcean, ensuring reliable performance and good mobile optimization. The site uses HTTPS with a valid SSL certificate, but lacks advanced security headers and DNSSEC, which could enhance its security posture. No analytics or tracking scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as missing security headers, represent compliance and security gaps. There is no evidence of incident response or vulnerability disclosure mechanisms, which could be improved to strengthen trust and security readiness. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security hardening would enhance its credibility and resilience against emerging threats.

A

Akvarij-terarij, Maribor

akvarij-terarij.si

44

Akvarij-terarij Maribor is a well-established aquarium and terrarium institution in Slovenia with a strong regional and European reputation. The website presents detailed information about the institution's history, animal species, and visitor information, targeting families, tourists, and educational groups. The business operates under the parent company Javno podjetje Snaga, d.o.o., and has a long tradition dating back to 1953. Technically, the website uses a basic but functional tech stack including Bootstrap and jQuery, hosted by a Slovenian provider NEOSERV.si. The site is accessible and mobile responsive to a basic degree but lacks advanced SEO and accessibility features. Security posture is moderate with no HTTPS or security headers information available from the HTML content, and no forms or sensitive data collection detected. Privacy and cookie policies are missing, indicating compliance gaps with GDPR. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

哔

哔哩哔哩游戏

biligame.com

57

The website www.biligame.com serves as a gaming platform branded under 哔哩哔哩游戏 (Bilibili Games), targeting gaming enthusiasts and creators within the Bilibili community. It offers game reservation and download services, leveraging Bilibili's unique gaming culture. The site is technically modern, utilizing Vue.js and other contemporary web technologies, and is optimized for both PC and mobile platforms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the branding and content strongly associate with the reputable Bilibili company. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and privacy compliance is low due to missing policies and contact information. Overall, the site is functional and professional but requires improvements in transparency and security to enhance trust.

V

VKF Finanz GmbH

vkf-finanz.de

59

VKF Finanz GmbH operates as a regional insurance broker in Germany, specializing in both private and commercial insurance products. Their website presents a professional and user-friendly interface, offering a range of insurance services including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing options such as construction financing and loans, indicating a diversified financial services portfolio. The site targets German-speaking customers primarily in regions like Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via digidor.de with CDN support, and employs modern web standards including HTTPS and CAPTCHA protections to secure user interactions. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks explicit security headers and incident response information. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

S

Software & Design Loos

ferienprogramm-online.de

58

Software & Design Loos operates the website www.ferienprogramm-online.de, offering SFP+, a specialized software platform designed to streamline the organization and management of leisure and holiday programs primarily for German municipalities, youth offices, clubs, and schools. The platform supports both online and offline registrations, automated fair allocation of limited spots, and integrated billing with ePayment options. With over 35 years of experience and a growing customer base exceeding 300 clients nationwide, the company holds a strong market position in this niche. The website presents comprehensive product information, customer testimonials, and references, reinforcing its credibility. Technically, the website is built on a modern stack including HTML5, CSS3, Bootstrap, and JavaScript libraries such as Swiper.js and FontAwesome. It is hosted on Strato servers and employs HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No major performance issues or broken elements were detected. From a security perspective, the site uses HTTPS and secure forms with GDPR-compliant consent mechanisms. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is strong, with a clear privacy and cookie policy. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is professional, trustworthy, and well-suited for its target audience. The absence of detailed WHOIS registrant information is a minor concern but does not detract significantly from legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and considering a security.txt file to improve transparency and trust.

Experian Switzerland AG operates as a leading provider of data-driven decisioning solutions focused on risk, fraud, and identity management. The company leverages advanced analytics and platform-based services to enable faster, data-based decisions primarily targeting financial institutions and enterprises. As part of the global Experian group, it maintains a strong market position in Switzerland and Europe with a comprehensive portfolio of services. The website reflects a mature digital presence with professional design and clear business messaging. Technically, the site is built on Adobe Experience Manager, integrates advanced analytics tools like Piwik PRO and Google Tag Manager, and employs robust cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy and vulnerability disclosure page suggests room for improvement in transparency and incident readiness. Overall, the site demonstrates high business credibility and technical maturity, suitable for its enterprise audience.

Experian Ireland operates as a key regional branch of Experian plc, providing business data, analytical, and marketing services primarily focused on credit information and consumer data in Ireland. The website reflects a mature enterprise-level digital presence with a professional design and comprehensive cookie consent management, indicating strong privacy compliance and user awareness. The technical infrastructure leverages Adobe Experience Manager CMS, Adobe Launch for tag management, and multiple analytics and marketing tools such as Piwik Pro, Hotjar, and Drift chat, demonstrating a modern and integrated technology stack. Security posture is robust with HTTPS enforced and bot detection cookies in use, though explicit security headers and incident response information are not evident, suggesting areas for improvement. Overall, the domain and website content align with a reputable financial services provider, though WHOIS data is privacy protected, limiting domain registration transparency.

S

Sponsoo GmbH

sponsoo.in

60

Sponsoo GmbH operates a leading online marketplace for sports sponsorship, connecting athletes, teams, clubs, associations, and sports events with sponsors and brands. The platform facilitates sponsorship deals by providing profiles and offers, targeting a broad audience in the sports and marketing sectors. The company has established a strong market position since its founding in 2014, supported by reputable media coverage and European institutional backing. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF protection in forms. Social login options are implemented securely. However, the absence of explicit security headers and published security policies indicates room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with its business goals. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.

S

Sponsoo GmbH

sponsoo.ch

60

Sponsoo GmbH operates Europe's largest online marketplace for sports sponsorship, connecting thousands of athletes, teams, clubs, associations, and events with sponsors and companies. The platform facilitates sponsorship profile creation, portfolio browsing, and deal support, positioning itself as a leading player in the European sports marketing sector. The website is professionally designed, multilingual, and integrates modern web technologies including AngularJS, Google Analytics, and Facebook Pixel for marketing and tracking purposes. Security posture is solid with HTTPS and CSRF protections, though improvements are needed in security headers and cookie consent mechanisms. The business demonstrates legitimacy with consistent WHOIS data and transparent registration details. Overall, the platform offers a trustworthy and functional service for its target audience.

V

VRM

vrm.de

73

VRM is a well-established regional media company in Germany, founded in 1850, operating multiple regional newspapers and digital media brands. The company offers a broad range of services including advertising sales, subscription management, printing and logistics, and digital services. The website reflects a professional and consistent brand image targeting regional readers and media consumers. Technically, the site is built on TYPO3 CMS, uses modern cookie consent mechanisms, and integrates Google Tag Manager for analytics. The hosting provider is uvensys.de, consistent with domain WHOIS data. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

N

Nomago

nomago.si

54

Nomago is a large Slovenian transportation and travel services company established in 2017. The company offers a wide range of services including bus tickets, vehicle rentals, travel packages, bike rentals, airport shuttle services, and driving school programs. The website is professionally designed with excellent content quality and clear navigation, targeting general travelers and commuters in Slovenia and Europe. Technically, the site uses modern web technologies such as Bootstrap, Leaflet.js, and Cookiebot for cookie consent management, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and consent management in place, though some security headers could be improved and explicit security policies are not published. WHOIS data confirms the domain's legitimacy and consistent registration with a Slovenian registrar. Overall, the website is trustworthy, secure, and compliant with GDPR requirements, providing a positive user experience.

M

Mein-Office Webdesign

webagentur-fuer-aerzte.de

63

Mein-Office Webdesign is a specialized web design and development agency focused on serving healthcare professionals including doctors, dentists, clinics, and other medical practitioners. Established since 2002, the company offers tailored website solutions emphasizing professional design, SEO optimization, and GDPR compliance. Their market position is that of a niche expert with a strong reputation and long-standing client relationships. Technically, the website is built on the Redaxo CMS platform, utilizing modern frontend technologies such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement in security headers and explicit security policies. Overall, the website demonstrates a solid digital maturity level appropriate for a small specialized agency. The business credibility is high, supported by transparent contact information and trust signals such as customer satisfaction claims. No critical vulnerabilities or compliance gaps were detected, and the content is safe for general audiences.

M

Mein-Office Webdesign

arzt-website-hessen.de

63

Mein-Office Webdesign is a specialized web design and development agency focused on serving medical professionals such as doctors, dentists, clinics, and other healthcare providers primarily in Germany. Established in 2002, the company offers tailored website solutions including SEO optimization, mobile responsiveness, and ongoing maintenance services. Their market position is that of a niche expert with over two decades of experience, emphasizing quality and customer satisfaction. Technically, the website is built on the Redaxo CMS platform, utilizing modern frontend technologies like Swiper.js and jQuery, and demonstrates good SEO and mobile optimization practices. Security-wise, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, though it lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences, with clear contact information and a consistent brand presence.

F

Freundeskreis des Deutschen Handballs e.V.

fddh.de

36

Freundeskreis des Deutschen Handballs e.V. is a small non-profit organization dedicated to supporting German handball through funding, event support, and promotion of inclusion, particularly for deaf athletes. The website serves as an information hub with news, newsletters, and downloadable resources targeting handball enthusiasts and community members. Technically, the site is built on WordPress 6.8.2, hosted on a German hosting provider, and demonstrates good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced but lacks security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

S

Sponsoo GmbH

sponsoo.de

59

Sponsoo GmbH operates Europe's largest online marketplace for sports sponsorship, connecting thousands of athletes, teams, clubs, associations, and events with sponsors across more than 300 sports disciplines. The platform facilitates profile creation, offer listings, and supports deal negotiation, targeting athletes and companies seeking sponsorship opportunities. The company is positioned as a leading player in the European sports sponsorship market with a medium-sized business footprint and a founding year of 2014. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Hosting is provided by netcup, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements CSRF tokens in forms, but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. No vulnerability disclosure or incident response contacts are published. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, cookie consent, and transparency around security policies would enhance the security posture and compliance standing.

P

Paul-Ehrlich-Institut

pei.de

71

The Paul-Ehrlich-Institut (PEI) is a German federal institute under the Federal Ministry of Health, specializing in the regulation, research, and safety monitoring of vaccines and biomedicines. The website serves as an authoritative source for pharmaceutical companies, healthcare professionals, and the public, providing regulatory guidance, safety information, and research insights. It maintains a strong market position as a national regulatory authority with active international collaborations. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers could be improved. The site uses HTTPS exclusively and implements a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, and security headers could be enhanced. The WHOIS data is restricted per DENIC policy but consistent with the official nature of the domain and its nameservers. Overall, the PEI website is a professional, trustworthy, and secure platform that effectively supports its regulatory and informational mission. Strategic improvements in security policy transparency and header implementation would further strengthen its security posture.

D

DSB-Shop

dsb-shop.net

52

DSB-Shop is a specialized German e-commerce platform focused on retailing shooting sports merchandise, including official event products, training equipment, and fan articles. The website targets members and enthusiasts of German shooting sports, offering a niche product catalog with a clear market position. The business has been established since 2009, indicating a mature presence in its sector. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript with libraries like Modernizr. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in SEO and performance tuning. Hosting and domain registration are consistent with the German market focus. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, it lacks DNSSEC and visible security headers, and does not publish a dedicated security policy or incident response contacts. Privacy compliance is addressed with a privacy policy, cookie consent mechanism, and terms of service, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional e-commerce presence with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance its posture and trustworthiness.

K

Ketterer Antriebe

ketterer.de

49

Ketterer Antriebe is a well-established German manufacturing company specializing in customized drive solutions including BLDC motors, linear drives, and gear technology. With a history dating back to 1832, the company positions itself as a market leader in mechanical and electromechanical drive technologies, serving industrial clients in automation, ergonomics, and logistics sectors. Their website reflects a professional and comprehensive presentation of their products and services, targeting B2B customers in manufacturing and engineering. Technically, the website employs modern tracking and consent management tools such as Google Analytics and Usercentrics CMP, hosted likely by dmsolutions.de. The site is mobile-optimized, well-structured, and SEO-friendly. Security-wise, HTTPS is enforced with anonymized IP tracking, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

H

H. Maurer GmbH & Co. KG

maurer-schramberg.de

49

H. Maurer GmbH & Co. KG is a well-established heating, climate, and sanitary specialist company based in Schramberg, Germany, with a history dating back to 1933. The company operates with a medium-sized workforce and a group structure including 13 subsidiaries, serving private, commercial, industrial, and construction clients primarily in Baden-Württemberg and Saxony. Their service portfolio is comprehensive, covering modern heating technologies, bathroom planning and renovation, renewable energy solutions, and building automation. The website reflects a mature digital presence built on TYPO3 CMS, featuring customer reviews and interactive tools such as virtual exhibitions and budget planners. Technically, the site employs modern web standards and integrates analytics and marketing pixels responsibly with a cookie consent mechanism. Security posture is adequate with HTTPS and consent management but could benefit from enhanced security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though explicit privacy and terms of service documents are not clearly found in the provided content.

METZ CONNECT GmbH is a German-based company specializing in high-quality contact technology and connection elements for electrical engineering and electronics sectors. Their product portfolio includes cabling solutions, connectors, and intelligent system components targeting building automation, industrial automation, and transportation industries. The company positions itself as a technological leader with a strong international presence across Europe, America, and Asia. Their website reflects a professional and comprehensive digital presence with detailed product information, configurators, and support resources. Technically, the website uses modern JavaScript frameworks and a proprietary CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and secure forms, although some security headers and explicit incident response policies are missing. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professionally maintained, though the lack of WHOIS data introduces some uncertainty about domain registration details.

B

Brugger GmbH

brugger-magnet.de

59

Brugger GmbH is a medium-sized German manufacturer specializing in industrial magnetic systems and fastening solutions. The company emphasizes sustainable and economically produced magnets tailored for industrial applications. Their website reflects a professional B2B focus, targeting industrial clients seeking innovative magnetic solutions. The site is well-branded and consistent, providing clear information about their products and services, though direct contact details are limited to forms rather than explicit emails or phone numbers. Technically, the website is built on a modern stack including Pimcore CMS, uses HTTPS with strong security headers, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Performance and mobile optimization are good, and accessibility features are present. The site employs Cookiebot for GDPR-compliant cookie consent management, indicating a mature approach to privacy. From a security perspective, the site demonstrates good practices with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The domain registration aligns with the company's geographic location and business sector, supporting legitimacy. Overall, Brugger GmbH's website is professional, secure, and privacy-conscious, suitable for its industrial B2B audience. Strategic improvements include publishing terms of service, security policies, and incident response contacts to further strengthen trust and compliance.

D

Deutscher Hockey-Bund

hockey.de

62

The website magazin.hockey.de serves as the official online presence of the Deutscher Hockey-Bund (German Hockey Federation), providing comprehensive information about national hockey teams, competitions, and related news. It targets hockey enthusiasts and stakeholders within Germany, positioning itself as the authoritative source for hockey-related content in the country. The business model centers on information dissemination and fan engagement rather than commercial transactions. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Publisher Tags for advertising. The site is well-structured with good SEO and mobile optimization, though explicit CMS or hosting details are not evident. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and integrates a robust cookie consent mechanism, reflecting good privacy compliance. However, explicit security headers are not visible in the HTML content, and no dedicated security or incident response policies are published. The use of multiple third-party tracking and advertising services is transparent and consent-based, aligning with GDPR requirements. Overall, the website demonstrates a solid security posture and privacy compliance suitable for a national sports federation. The absence of contact details and terms of service pages slightly limits business credibility transparency. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information to improve trust and compliance.

M

Mein-Office Webdesign

webdesignbuero-offenbach.de

59

Mein-Office Webdesign is a small, established web agency based in Offenbach, Germany, with over 20 years of experience delivering customized web design, programming, and SEO services. The company emphasizes personalized consultation, high-quality responsive design, and GDPR compliance, targeting local businesses and organizations. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern frontend technologies such as jQuery and Slick Carousel, and mentions the use of the Redaxo CMS, supporting content management capabilities. Mobile optimization and SEO fundamentals are well implemented. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and documented policies. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates a solid digital presence aligned with the company's business claims.

The website id-medienservice.de is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. This prevents a full analysis of the company's services, contact details, or compliance documentation. The domain uses Cloudflare nameservers and security services, indicating an intent to protect the site from automated access or attacks. However, the lack of visible content and registrant data limits the ability to assess the business or security posture comprehensively. The technical infrastructure relies on Cloudflare's security platform, but no additional technologies or CMS platforms are detectable. Security headers and policies are not visible due to the blocked content. Overall, the site currently presents as inaccessible and lacking public-facing business or compliance information.

A

ASV Köln e.V.

asv-koeln.de

53

ASV Köln e.V. is a well-established sports club based in Cologne, Germany, with a history spanning over 90 years. The organization offers a broad range of sports and fitness activities, including fitness courses, children's sports, various sports disciplines, and community events. The club targets a diverse audience including families, seniors, and sports enthusiasts, positioning itself as a central hub for active living in the Cologne region. The business model is primarily membership-based, supported by partnerships and sponsorships from local companies. The website reflects a professional and community-focused brand with strong trust indicators such as testimonials and partner logos. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics, with AJAX-enabled forms and a responsive design optimized for mobile devices. Hosting appears to be managed via your-server.de, and the site uses HTTPS with a valid SSL configuration. While no explicit CMS or major frameworks are detected, the site demonstrates good SEO and accessibility practices, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and provides a cookie consent mechanism compliant with GDPR. However, no dedicated security policy or incident response contact information is found, and security headers are not evident in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies, and user data collection is limited to necessary contact and newsletter forms. Overall, ASV Köln's website is a secure, professional, and user-friendly platform that effectively supports its community sports mission. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.