Security Directory

C

Home | Contra Corner | Bob Peterson

contracorner.com

52

ContraCorner.com is a personal website operated by Bob Peterson, focusing on contra dance calling, public domain music streaming, iOS app development blogging, and memorial pages. The site serves a niche community audience interested in folk dance and personal projects rather than commercial business activities. The website is built using Sandvox CMS and hosted on A2 Hosting, with a technology stack including HTML5, CSS, JavaScript, and jQuery 1.9.1. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no DNSSEC or security headers implemented. No privacy or cookie policies are present, and no contact information is provided, limiting compliance and user trust. Overall, the site is safe, with no adult or explicit content, and accessible without WAF or blocking mechanisms.

S

Stijn de Vries

stijndv.com

56

Stijn de Vries operates a professional personal design portfolio website showcasing his expertise in design, branding, and marketing-related services. The site highlights his educational background and work experience with various companies, positioning him as an independent designer targeting businesses and individuals seeking creative design solutions. The website is hosted on Cloudflare Pages, leveraging modern web technologies and performance optimizations, including preloading and mobile responsiveness. Analytics are implemented via Microsoft Clarity and Cloudflare Insights, though no explicit cookie consent mechanism is present. From a security perspective, the website benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which could enhance its security posture. There is no visible privacy policy, cookie policy, or terms of service, which impacts compliance with GDPR and related regulations. Contact information is limited to a single email address, with no phone or physical address provided. No forms or incident response information are present, and no vulnerability disclosure or security.txt files are found. Overall, the website is professionally designed, trustworthy, and technically sound but would benefit from improved privacy compliance and enhanced security headers. The domain registration is consistent with the business timeline and shows no suspicious patterns, supporting the legitimacy of the site.

V

Various, Inc.

aff.com

67

AdultFriendFinder is a well-established adult dating platform operated by Various, Inc., with a domain age dating back to 1997. It serves a mature audience seeking casual dating, friendships, and adult social networking. The platform leverages modern web technologies including React-based JavaScript modules and Google reCAPTCHA Enterprise for bot protection, ensuring a secure and user-friendly experience. The website is mobile-optimized and SEO-friendly, with clear navigation and professional branding. Security posture is solid with HTTPS enforced, though improvements are recommended in DNSSEC deployment and security headers. Business credibility is strong, supported by transparent contact information and a recognized brand presence in the adult dating market.

O

Odtebezavisi

odtebezavisi.mk

55

Odtebezavisi.mk is a Macedonian-language online casino information portal focused on providing expert reviews, guides, and recommendations for online gambling platforms targeting Macedonian players. The site positions itself as an independent and trustworthy source promoting responsible gambling and offering detailed insights into casino bonuses, games, payment methods, and legal licensing in North Macedonia. Technically, the website uses modern web standards with HTML5, CSS3, JavaScript, and integrates Matomo analytics for user tracking. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS but lacks explicit security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data reduces transparency but is common in affiliate marketing sites. Overall, the site presents a moderate risk profile with good content quality and business credibility.

pygame.org is the official website for the pygame open source project, a Python library for multimedia and game development. The site serves as a community hub offering news, project hosting, documentation, and resources for Python game developers. The website demonstrates a consistent brand and good content quality focused on its niche audience of developers and hobbyists. Technically, the site uses established but somewhat dated technologies such as Bootstrap 3 and jQuery 1.12.4, with basic mobile optimization and accessibility features. Security posture is moderate due to lack of visible security headers and incomplete WHOIS data, though no blocking or WAF challenges were detected. Privacy and cookie policies are absent, indicating room for compliance improvements. Overall, pygame.org is a trusted community resource with a moderate risk profile primarily due to incomplete domain registration transparency and limited security best practices.

O

Občina Izola - Isola

izola.si

53

Občina Izola - Isola is the official municipal government website serving the residents of Izola, Slovenia. It provides a comprehensive e-government platform enabling citizens to submit applications electronically, pay municipal fees online, receive local news and event updates, and subscribe to municipal notifications. The website is bilingual (Slovenian and Italian) reflecting the local community's linguistic diversity. The business model focuses on public service delivery and community engagement, positioning itself as a trusted local government portal. Technically, the site employs modern web technologies including jQuery, Bootstrap, and structured data for SEO and accessibility. The site is mobile optimized and offers a good user experience with clear navigation and regularly updated content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and published security policies. Privacy compliance is good with a clear GDPR policy, but the absence of a cookie consent banner is a minor gap. Overall, the site is professional, trustworthy, and well-maintained, serving its public sector mandate effectively.

The domain bg-patriarshia.bg is currently protected by Cloudflare's security mechanisms, presenting a Turnstile human verification challenge that blocks direct access to the website's content. Due to this, no substantive business or service information is accessible. The domain is active with Cloudflare nameservers and WHOIS data redacted for GDPR compliance, indicating privacy protection but limiting transparency. The lack of visible privacy policies, contact information, or business details restricts a full assessment of the organization's operations or market position. Technically, the site uses modern security infrastructure but lacks visible security headers or compliance disclosures. Overall, the site appears legitimate but is currently inaccessible for detailed analysis.

L

Lumar IG d.o.o.

lumar.si

43

Lumar IG d.o.o. is a well-established Slovenian company specializing in the design and construction of high-quality, sustainable prefabricated wooden houses. With over 30 years of experience and a domain registered since 1999, Lumar holds a strong market position as a leading manufacturer of energy-efficient homes in Slovenia and neighboring markets. Their product portfolio includes various house models such as Avantgarde, Classic, Individual, Greenline, and Blackline, catering to diverse customer needs. The company emphasizes sustainability, energy efficiency, and customer-centric architectural services, supported by numerous awards and certifications. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and modern technology usage.

The website petsymposium.org represents the Privacy Enhancing Technologies Symposium (PETS) and its associated open access journal, Proceedings on Privacy Enhancing Technologies (PoPETs). It serves as a platform for privacy researchers and professionals to submit, review, and publish research papers on privacy technologies. The organization behind the site is The Free Haven Project, a US-based entity with a domain established in 2007, indicating a mature and stable presence in the academic privacy research community. The site provides detailed event information, submission deadlines, and links to past symposiums and awards, targeting an audience of privacy experts and academics. Technically, the website employs standard HTML and CSS with responsive design, ensuring good mobile usability and navigation clarity. However, there is no evidence of advanced frameworks or CMS usage, and no analytics or tracking scripts were detected, reflecting a minimalistic and privacy-conscious technical approach. The hosting and registrar information is consistent with the domain's academic nature, though no explicit hosting provider details were found. From a security perspective, the site uses HTTPS (implied by the URL), but no DNSSEC is enabled, and no security headers were detected in the provided data. There are no visible privacy or cookie policies, which is a compliance gap, especially for GDPR. No incident response or vulnerability disclosure information is present. The WHOIS data is transparent and consistent with the website's claims, enhancing trustworthiness. Overall, the security posture is moderate but could be improved by implementing DNSSEC, security headers, and formal privacy and cookie policies. The overall risk assessment is low given the academic nature and lack of sensitive transactions or personal data collection on the homepage. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing a vulnerability disclosure policy to enhance security and compliance posture. These steps will improve trust and align the site with best practices for privacy and security in academic publishing.

J

Jewella Privacy LLC

bazanekretnina.me

68

Bazanekretnina.me is a regional real estate listing platform focused on Montenegro and the surrounding Balkan region. It provides a comprehensive catalog of properties including apartments, houses, commercial spaces, and land for sale and rent. The platform also features real estate news and agency partnerships, positioning itself as a key player in the regional real estate market. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for property seekers and sellers. Technically, it employs modern web technologies and integrates Matomo analytics for user tracking, although privacy and cookie policies are not explicitly presented. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers. The domain is privacy protected by Jewella Privacy LLC, a common practice for such businesses, and the domain age aligns with the site's recent launch. Overall, Bazanekretnina.me is a credible and functional real estate platform with room for improvement in privacy compliance and security best practices.

I

Izdelava spletnih strani, Miha Omejc s.p.

mihaomejc.com

57

Miha Omejc is a seasoned web designer and frontend developer based in Slovenia, offering a comprehensive range of web services including design, programming, e-commerce solutions, SEO optimization, hosting, and consulting. The business operates as a small sole proprietorship with over 20 years of experience and a strong portfolio of completed projects, positioning itself as a reliable and experienced service provider in the Slovenian market. The website is professionally designed with clear navigation and relevant content targeting businesses and agencies seeking web development services. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile optimized and SEO conscious, although performance is moderate. Hosting is supported by Cloudflare DNS and NameCheap registrar, indicating a stable infrastructure. However, there is room for improvement in accessibility and security best practices. From a security perspective, the site lacks visible security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, enhancing trustworthiness. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and compliance documentation to improve its security posture and regulatory adherence.

K

Kabi d.o.o.

homeoffice.rs

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate efficient remote work for small and medium enterprises primarily in Serbia. The platform offers a suite of tools including collaboration, project management, work time tracking, and email marketing, complemented by additional IT services such as Microsoft Office 365 and Google G Suite integration. The company positions itself as a niche provider focused on enabling virtual office environments with a flexible and secure cloud infrastructure. Technically, the website is built using modern web standards with responsive design and uses a CMS platform (BCMS) for content management. Hosting is provided by Adriahost, a regional registrar and hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. Contact forms include CAPTCHA and GDPR consent checkboxes, indicating some attention to data protection, although no formal privacy or cookie policies are published. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and explicit security headers. There is no published security policy or incident response information, which represents a compliance and trust gap. The domain registration data is consistent with the business claims and shows a legitimate and active status. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security practices, and clearer communication of security policies to strengthen user trust and regulatory adherence.

K

kABI d.o.o.

bazanekretnina.com

67

Bazanekretnina.com is a regional real estate listing platform primarily serving Serbia, Montenegro, Croatia, Slovenia, Spain, Bosnia and Herzegovina, and Italy. The platform offers a wide range of property types including apartments, houses, land, and commercial spaces for sale and rent. The business is operated by kABI d.o.o., a company established in 2007, indicating a mature presence in the regional real estate market. The website targets individuals and businesses interested in real estate transactions within the Balkan region and selected European countries. It provides multilingual support and advanced search capabilities to enhance user experience. Technically, the website employs modern web technologies including Google Fonts, Font Awesome icons, and JavaScript libraries such as Select2 and Swiper for UI components. The site is mobile optimized and uses structured data (JSON-LD) to improve SEO and search engine visibility. Hosting details are not explicitly identified, but the domain is registered with DNC Holdings, Inc. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No contact information such as emails or phone numbers is directly available on the analyzed page, which may affect user confidence and support accessibility. Overall, Bazanekretnina.com presents as a professional and regionally focused real estate platform with good content quality and technical implementation. The main risks relate to privacy compliance gaps and limited visible security policies. Strategic improvements in these areas would enhance trustworthiness and regulatory adherence.

A

Arctur d.o.o.

arctur.si

63

Arctur d.o.o. is a well-established Slovenian technology company specializing in high performance computing, cloud computing, project management, and digital design services. With over 30 years of experience, the company positions itself as an innovator merging research, science, art, and business to deliver advanced technological solutions primarily targeting industries such as healthcare, tourism, government, and NGOs. Their website reflects a professional and modern digital presence with clear service offerings and a strong emphasis on interdisciplinary innovation. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with integration of analytics tools like Matomo and Google Analytics. The site is mobile-optimized, fast-loading, and accessible, with a cookie consent mechanism in place ensuring compliance with privacy regulations. The absence of a CMS or third-party hosting providers suggests a controlled hosting environment, likely self-managed. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Arctur.si demonstrates a high level of professionalism, technical maturity, and business credibility. The domain registration data aligns well with the company’s stated history and location, reinforcing legitimacy. Strategic recommendations include publishing formal security policies, incident response information, and enhancing security headers to further strengthen the security posture.

P

Planinska zveza Slovenije

worldcupslo.com

42

The website worldcupslo.com serves as the official platform for the World Cup in sport climbing held in Koper, Slovenia, organized by Planinska zveza Slovenije. It provides comprehensive event information including schedules, results, news, sponsor details, and multimedia content targeting sport climbing enthusiasts and the general public interested in this sport. The site is well-branded and supported by recognized sponsors and partners, establishing a strong market position within the sport event domain in Slovenia. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and offers good navigation and content relevance. However, performance is moderate and accessibility features are basic, indicating room for technical improvements. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no published privacy or cookie policies, which is a compliance gap. No incident response or vulnerability disclosure mechanisms are evident. The domain registration is transparent and consistent with the website's purpose, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

Ι

Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας

imkalaig.com

51

The website www.imkalaig.gr serves as the official online presence of the Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας, a Greek Orthodox Metropolis. It provides comprehensive information about the Metropolis, including the Metropolitan Bishop, churches, monasteries, religious events, philanthropic activities, and community services. The site targets local parishioners, religious followers, and visitors interested in the ecclesiastical and cultural heritage of the region. The business model is non-profit and government-related, focusing on community engagement and religious service dissemination. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Three.js and Slick Carousel for interactive content. It is built on a CMS platform likely provided by New Media Soft, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly present, and there is room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, confirming legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers and accessibility could further enhance its posture.

D

Društvo za razvoj podeželja med Snežnikom in Nanosom

las-snezniknanos.si

46

The website represents a Slovenian local action group focused on rural development between the Snežnik and Nanos regions. It operates as a non-profit organization facilitating regional projects, cooperation, and community engagement, primarily funded through EU and national programs. The site provides structured information about projects, calls for funding, and organizational details, targeting local municipalities and stakeholders. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and some UI libraries like Slick Carousel and Shadowbox. The site is moderately optimized for mobile devices and has a clear navigation structure but lacks advanced CMS or modern frameworks. Security posture is basic with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is not explicitly provided, limiting user engagement channels. Overall, the site is functional and professional but could improve in privacy compliance, security best practices, and contact transparency.

O

Občina Štore

store.si

55

Občina Štore is the official municipal government website for the municipality of Štore in Slovenia. It provides a comprehensive range of e-government services including electronic applications, online tax payments, local news, event calendars, public tenders, and contact forms. The website targets residents and stakeholders of the municipality, facilitating digital interaction with local government. The business model is focused on public service delivery and community engagement, positioning itself as a trusted local government portal. The website is well-branded with consistent municipal imagery and structured data for enhanced search engine understanding. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and TinyMCE, and uses JSON-LD structured data for organization information. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and navigation clarity. Performance is moderate, with room for optimization. Hosting details are not explicitly available, but the site uses HTTPS ensuring encrypted communication. From a security perspective, the website enforces HTTPS and uses secure libraries, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. There is no visible incident response or vulnerability disclosure policy, which could be improved to enhance security posture. Privacy compliance is good with a clear GDPR policy, but the absence of a cookie consent mechanism is a compliance gap. No suspicious or malicious content was detected, and the site maintains a high trustworthiness level. Overall, Občina Štore presents a professional, secure, and user-friendly municipal portal with strong business credibility. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance its security and compliance standing.

D

DARS d.d.

dars.si

60

DARS d.d. is the Slovenian national motorway operator responsible for toll collection, motorway maintenance, traffic management, and infrastructure investments. The company operates a vinjetni toll system and an electronic toll system (DarsGo) for heavy vehicles. The website reflects a well-established, state-owned enterprise with a clear focus on transportation infrastructure and public service. The site targets Slovenian motorway users, transport companies, and the general public, providing comprehensive information about services, projects, and traffic updates. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for spam protection. The site is mobile-optimized with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is solid with HTTPS, secure forms, and no exposed sensitive data. The use of reCAPTCHA and cookie consent aligns with GDPR requirements. The domain is long-established (since 1996) and registered with a Slovenian registrar consistent with the business location, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency by publishing security policies and incident response contacts. The site effectively supports the company’s role as a key national transportation infrastructure operator.

Dresdner Verkehrsbetriebe AG operates the MOBI platform, a comprehensive multimodal mobility service in Dresden, Germany. The website presents a well-structured and professional digital presence highlighting integrated public transport, bike- and carsharing, and electric vehicle charging services. The company positions itself as a local leader in sustainable urban mobility, supported by partnerships with local government and recognized organizations. The site targets residents and visitors seeking flexible and environmentally friendly transportation options. Technically, the website employs modern web standards including responsive design, SVG icons, and optimized images with WebP support. While no explicit CMS or frameworks are detected, the site demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No security headers or incident response policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The WHOIS data aligns with the business claims, showing consistent domain registration without privacy protection, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, though enhancements in security policies and privacy compliance would strengthen its posture. The absence of tracking scripts suggests a privacy-conscious approach. Strategic recommendations include implementing security headers, cookie consent, and publishing security and incident response policies.

G

GIT SECURITY

git-sicherheit.de

49

GIT SECURITY is a specialized media portal focused on security-related topics including management, IT security, fire protection, and safety. It serves security professionals and decision-makers by providing news, articles, product information, events, webinars, whitepapers, and videos. The portal is affiliated with Wiley-VCH, a reputable publishing company, enhancing its credibility and market position within the security media niche. The website is professionally designed with consistent branding and good content quality, targeting a medium-sized audience primarily in Germany.

D

Duo Security

duo.com

80

Duo Security, a Cisco company founded in 2009 and headquartered in Ann Arbor, Michigan, specializes in identity security and multi-factor authentication solutions. The company offers a comprehensive suite of products including MFA, Single Sign-On, Passwordless Authentication, Device Trust, and Identity Intelligence, targeting enterprises, SMBs, government agencies, and managed service providers. Duo Security holds a strong market position as a leading provider in identity security, leveraging Cisco's global presence and resources. The website reflects a mature, professional business with clear branding and consistent messaging. Technically, the site is hosted on Amazon AWS infrastructure, employs modern web technologies, and integrates advanced analytics and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although DNSSEC is not enabled, which is recommended for enhanced DNS security. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. Contact information and social media presence are transparent and verified, enhancing business credibility. Overall, the website demonstrates a high level of digital maturity and trustworthiness, suitable for its enterprise audience.

T

The Compatriot Johann Puch - Janez Puh Juršinci Society

janez-puh.si

36

The Compatriot Johann Puch - Janez Puh Juršinci Society operates as a small non-profit organization focused on preserving the legacy of Johann Puch through museum management and cultural promotion in Slovenia. The website serves as an informational portal for the museum, society activities, and related heritage content, targeting general audiences interested in historical and technical heritage. The society has established partnerships with local government and corporate sponsors, enhancing its community presence. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript with jQuery and Modernizr, but lacks modern CMS or advanced frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. The site is accessible without WAF or blocking mechanisms, but lacks advanced security headers and visible SSL configuration details. Security posture is moderate with cookie consent implemented but missing critical elements such as privacy policy, security headers, and incident response contacts. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. The domain WHOIS data aligns well with the website content and business history, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

The Statistical Office of the Republic of Slovenia (SURS) operates the website www.stat.si as the official government portal for disseminating national statistical data. The site offers a wide range of statistical information including population, economy, labor market, inflation, and other key indicators relevant to Slovenia. It targets researchers, government officials, businesses, and the general public interested in official statistics. The business model is that of a government agency providing public data and services, with a strong market position as the primary national statistics provider in Slovenia. The website content is well-structured, professionally designed, and consistent with government branding.

M

Mladinski center Šentjur

mladi-sentjur.si

62

Mladinski center Šentjur is a Slovenian non-profit youth center focused on empowering young people through education, skill development, and community engagement. The organization provides logistical, technical, and content support for youth activities and runs various projects and events aimed at youth development. The website reflects a well-structured platform with clear navigation, event listings, and active social media integration, targeting youth in the Šentjur region. Technically, the site uses standard web technologies and a CMS platform, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy policies, terms of service, and security headers, which are recommended for compliance and trust. Overall, the domain registration is consistent and long-standing, supporting the legitimacy of the organization.

K

Kabi d.o.o.

homeoffice.si

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate effective remote work for small and medium-sized enterprises primarily in Slovenia. Their offerings include collaboration tools, project management, work time tracking, and email marketing, complemented by professional IT services such as business email hosting and security solutions. The company positions itself as a comprehensive provider of flexible and secure business tools for remote work environments. Technically, the website is built on a modern stack with HTML5, CSS3, JavaScript, and uses Google Fonts and Bootstrap components. The site is mobile-optimized and uses a CMS likely BCMS. Performance is moderate with good accessibility and basic SEO. Security best practices include HTTPS enforcement, CAPTCHA on forms, and a cookie consent mechanism, though some security headers and policies are missing. The security posture is solid but could be improved by publishing explicit privacy, security, and incident response policies. No vulnerabilities or exposed sensitive data were detected. The site is free from WAF blocking or security challenges, allowing full content access. Overall, the website is professional, trustworthy, and well-suited for its target audience, though it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

K

KABI d.o.o.

antivirus.si

55

The website antivirus.si represents KABI d.o.o., a Slovenian company founded in 2005, offering WithSecure branded cybersecurity solutions primarily targeting businesses. Their key offerings include endpoint protection (EPP), endpoint detection and response (EDR), centralized cloud-based security management, and patch management services. The site is professionally designed with clear calls to action, including a 30-day free trial, and is localized in Slovenian for the local market. Technically, the site uses standard web technologies with a CMS likely BCMS, and integrates cookie consent mechanisms but lacks advanced SEO and accessibility features. Security posture is moderate with CAPTCHA on forms and cookie consent but lacks published privacy policies, security headers, and incident response information. The domain registration data is consistent with the business, indicating legitimacy and stability. Overall, the site scores well on business credibility and content quality but could improve in privacy compliance and security best practices.

K

Kabi d.o.o.

agent1.si

56

Agent1.si is a professional website operated by Kabi d.o.o., offering a specialized CRM software solution tailored for real estate agencies and agents primarily in Slovenia and Southeast Europe. The platform focuses on digitalizing real estate agency operations, integrating portfolio management, project management, document handling, marketing, and AI features. The company positions itself as a leading provider in its niche with a mature domain and consistent branding. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Slick Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, serving a clear business purpose in the real estate technology sector.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.

The Deutscher Pflegerat e.V. is a well-established German non-profit association representing the interests of nursing professionals and midwives at the federal level. Founded in 1998, it serves as a political and professional voice advocating for healthcare policy improvements, professional education, and workforce development. The website offers comprehensive resources including press releases, event information, podcasts, and official documents, targeting healthcare professionals, policymakers, and the public in Germany. Technically, the site uses standard web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.

S

Studo GmbH

studo.com

78

Studo GmbH is a medium-sized technology company specializing in digital solutions for students and universities primarily in the DACH region and Slovenia. Their flagship product, the Studo App, supports over 500,000 students daily and offers a suite of modules aimed at improving academic communication, administration, and student engagement. The company positions itself as a trusted partner for universities, emphasizing quality, sustainability, and personal collaboration. Their market presence is reinforced by partnerships with over 50 universities and student unions and multiple industry certifications including TÜV SÜD and ISO standards. Technically, the website is well-constructed with modern web technologies, hosted on Cloudflare, and uses privacy-conscious analytics (Piwik PRO). The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, domain transfer protection, and annual accessibility audits. However, DNSSEC is not enabled, and some security headers are not explicitly detected. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though no explicit cookie consent mechanism was found. Overall, the security posture is robust with no visible vulnerabilities or exposed sensitive data. The company demonstrates a mature approach to data protection and software quality, supported by certifications and awards. The domain WHOIS data is consistent and supports the legitimacy of the business. The website content is safe for general audiences and professionally presented. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner, publishing a security.txt file, and adding more explicit security headers to further enhance trust and compliance.

S

Specto, Informacijske tehnologije d.o.o.

specto.si

40

Specto, Informacijske tehnologije d.o.o. is a Slovenian IT development company founded in 2008, specializing in web and mobile application development as well as advanced IT solutions. The company targets businesses seeking custom software solutions to enhance their digital presence and operational efficiency. Their website reflects a professional and consistent brand image with modern design elements and clear service offerings. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, GSAP, and SVG graphics, supported by Google Analytics and Tag Manager for user tracking. However, explicit HTTPS usage is not confirmed in the HTML content, and no security headers or privacy policies are present, indicating room for improvement in security and compliance. The domain registration data is consistent with the company's location and business claims, supporting legitimacy. Overall, the website is well-structured and user-friendly but would benefit from enhanced security practices and privacy compliance documentation.

N

Najstarejša trta

najstarejsatrta.si

40

The website 'Najstarejša trta' appears to be a small Slovenian site focused on the theme of the oldest vine, likely related to wine or viticulture. The domain is recently registered in 2023 with a Slovenian registrar, consistent with the website's Slovenian language content. The site is built on WordPress, using standard web technologies such as PHP, JavaScript, and CSS, and includes common libraries like Google Fonts and Font Awesome. The technical infrastructure is basic but functional, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and good SSL configuration; however, the absence of security headers and privacy policies indicates room for improvement. No contact or incident response information is provided, which limits transparency and trust. Overall, the site is safe for general audiences and does not contain adult or explicit content.

S

Sächsische Dampfschifffahrt

saechsische-dampfschifffahrt.de

51

Sächsische Dampfschifffahrt operates as a regional transportation and tourism company specializing in river cruises along the Elbe river in Germany. The company offers scheduled cruises, charter events, conference hosting, and onboard gastronomy services, targeting tourists and local travelers interested in scenic river journeys. The website is built on WordPress with multilingual support and employs modern web technologies including JavaScript and CSS. It features a cookie consent mechanism via the Borlabs Cookie plugin and uses Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit privacy or terms of service pages detected. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy disclosures and security practices are recommended.

The Friends of Kensal Green Cemetery is a UK-based registered charity dedicated to the preservation and restoration of the historic Kensal Green Cemetery. The organization operates through community engagement, guided tours, events, and collaboration with the cemetery's owning company. Their market position is that of a niche heritage non-profit with a strong local and historical focus. Technically, the website is built with basic HTML, CSS, and JavaScript, with no detected CMS or advanced frameworks. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance enhancements. Security posture is limited, with no visible HTTPS confirmation or security headers, and no public security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy practices.

Z

Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

dmh-eh.de

52

The Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH) operates the website dmh-eh.de to promote and organize the Deutsche Meisterschaften der E-Handwerke, a national competition for electrical trade apprentices and professionals. The site serves as an information hub for participants, sponsors, and the general public interested in the electrical trade sector in Germany. It is well-positioned as a central association with a clear focus on vocational excellence and youth development in the energy sector. Technically, the website uses a TYPO3 CMS platform hosted on rzone.de servers, leveraging modern JavaScript libraries and a consent management platform (Usercentrics) to comply with GDPR. The site integrates Google Tag Manager and TikTok analytics for tracking, with a moderate level of user tracking balanced by explicit consent mechanisms. The site is mobile-optimized and presents good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and resilience. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture.

S

SPM SPORTPLATZ MEDIA GMBH

teamtip.net

49

Teamtip is a German-based online platform specializing in football prediction games, offering users the ability to create private prediction groups for major European leagues and international tournaments. The platform supports a free-to-use model with additional white label solutions for companies seeking marketing and user engagement tools. The business is positioned as a niche player in the sports media sector, targeting football fans, social groups, and corporate clients. Technically, the website employs modern web technologies including Vue.js and integrates a consent management platform to ensure GDPR compliance. The platform is accessible via web and mobile apps on iOS and Android, providing a good user experience with live score updates and customizable game rules. Security posture is solid with HTTPS enforced and domain transfer protections, though formal security policies and incident response contacts are not publicly documented. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, supporting a trustworthy and professional online presence.

S

SportlerPlus

sportlerplus.com

70

SportlerPlus is a German e-commerce retailer specializing in sports nutrition products such as protein powders and dietary supplements. The website is built on the Shopify platform, leveraging various third-party apps for customer reviews, product labeling, and upselling. The target audience primarily consists of fitness enthusiasts and athletes seeking high-quality nutrition products to enhance their performance. The site presents a professional design with good mobile optimization and clear navigation, supporting a positive user experience.

V

VEMA Versicherungsmakler Genossenschaft eG

vema.media

65

VEMAmedia is a specialized video production service brand under the VEMA Versicherungsmakler Genossenschaft eG, based in Karlsruhe, Germany. The company offers a range of video services including livestreams, recruiting videos, image films, and social media videos, supported by two professional studios. Their target audience primarily consists of businesses seeking to enhance their employer branding and recruitment efforts through high-quality video content. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a small media production business. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, with standard CSS and HTML5, but lacks visible advanced frameworks or CMS identification. Security posture is moderate; HTTPS is implied, and forms include CSRF tokens, but no explicit security headers were detected in the provided data. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were found. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

Anolisgroup is a Slovenian-based creative and technology company established in 2010, specializing in visual communication, web and mobile application development, VR & AR solutions, and product design. Their portfolio showcases a variety of projects involving graphic design, programming, 3D modeling, and content preparation, targeting businesses seeking integrated digital and visual solutions. The website reflects a small-sized enterprise with a niche market position focused on creative technological services. Technically, the website employs traditional web technologies including HTML5, CSS, and JavaScript with libraries such as jQuery, Isotope, and Fancybox. The presence of older technologies like Cufon indicates some legacy components. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS is explicitly identified, though custom CMS development is mentioned in project descriptions. From a security perspective, the website lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There are no visible privacy or cookie policies, nor contact information for data protection or incident response, indicating gaps in compliance with GDPR and best practices. No forms or analytics scripts are detected, reducing data collection risks but also limiting user engagement tracking. Overall, the website is functional and professional in design and content but requires significant improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information.

L

Lokalna akcijska skupina Od Pohorja do Bohorja

las-pohorje-bohor.si

64

Lokalna akcijska skupina Od Pohorja do Bohorja is a Slovenian local action group focused on regional development initiatives between Pohorje and Bohorje. The organization facilitates community projects, public calls for funding, and workshops to support rural and cultural development. The website serves as an information hub for local municipalities, project applicants, and stakeholders, providing news updates and project details. Technically, the site is built on a CMS platform (BCMS) using modern web technologies like Bootstrap and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS, CAPTCHA on contact forms, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business profile, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though it lacks explicit privacy and terms of service pages.

V

VKF Finanz GmbH

vdiep.de

62

VKF Finanz GmbH operates as a regional insurance broker in Germany, offering a range of private and commercial insurance products including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing services such as construction financing and loans. The website is professionally designed, well-structured, and targets German-speaking customers seeking insurance solutions. The business model focuses on personalized insurance brokerage with a regional market presence in Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built using the 'cm Homepage-Baukasten' CMS platform, hosted on webgo.de servers, and employs modern web technologies including HTML5, CSS3, JavaScript, and FriendlyCaptcha for form security. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with external dependencies on content delivery networks and partner domains. From a security perspective, the site enforces HTTPS and uses FriendlyCaptcha to protect forms from bots. Cookie consent mechanisms are implemented in compliance with GDPR. However, explicit security headers are missing, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a trustworthy and professional front for VKF Finanz GmbH with good privacy compliance and security posture. Recommendations include adding security headers, publishing a security policy, and implementing a vulnerability disclosure process to enhance trust and security maturity.

R

Razvojna agencija Kozjansko

ra-kozjansko.si

58

Razvojna agencija Kozjansko is a regional development agency based in Šentjur, Slovenia, focused on rural and community development programs. The agency has a strong local presence with 25 years of operational history and offers services including project management, entrepreneurial incubation, tourism information, and public procurement support. The website reflects a professional and consistent brand image targeting local stakeholders and community members. Technically, the site uses modern web technologies and a custom CMS, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and privacy policies. Overall, the domain registration and website content are consistent and trustworthy, with no signs of blocking or malicious activity.

P

PHP Community Foundation

phpc.chat

56

The PHP Community Chat website serves as a dedicated platform for PHP developers and enthusiasts to engage via popular chat channels such as Discord and IRC. Operated by the PHP Community Foundation, the site supports community building and knowledge sharing within the PHP ecosystem. The platform is positioned as a niche community resource with a clear focus on developer engagement and support. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and hosted on DigitalOcean, ensuring reliable performance and good mobile optimization. The site uses HTTPS with a valid SSL certificate, but lacks advanced security headers and DNSSEC, which could enhance its security posture. No analytics or tracking scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as missing security headers, represent compliance and security gaps. There is no evidence of incident response or vulnerability disclosure mechanisms, which could be improved to strengthen trust and security readiness. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security hardening would enhance its credibility and resilience against emerging threats.

M

MagentaCLOUD

magentacloud.de

54

MagentaCLOUD is a cloud storage service operated under the Magenta brand, associated with Deutsche Telekom, targeting general users seeking secure file storage and sharing solutions. The website is built on the Nextcloud platform, leveraging modern web technologies including Vue.js and hosted on the Open Telekom Cloud infrastructure. The platform integrates multiple security features such as two-factor authentication, password policies, and end-to-end encryption, reflecting a mature security posture. However, the absence of visible privacy and cookie policies, as well as contact information for security incidents, indicates areas for compliance and transparency improvement. Overall, the site demonstrates a professional and trustworthy presence aligned with a major telecommunications provider.

A

Akvarij-terarij, Maribor

akvarij-terarij.si

44

Akvarij-terarij Maribor is a well-established aquarium and terrarium institution in Slovenia with a strong regional and European reputation. The website presents detailed information about the institution's history, animal species, and visitor information, targeting families, tourists, and educational groups. The business operates under the parent company Javno podjetje Snaga, d.o.o., and has a long tradition dating back to 1953. Technically, the website uses a basic but functional tech stack including Bootstrap and jQuery, hosted by a Slovenian provider NEOSERV.si. The site is accessible and mobile responsive to a basic degree but lacks advanced SEO and accessibility features. Security posture is moderate with no HTTPS or security headers information available from the HTML content, and no forms or sensitive data collection detected. Privacy and cookie policies are missing, indicating compliance gaps with GDPR. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

哔

哔哩哔哩游戏

biligame.com

57

The website www.biligame.com serves as a gaming platform branded under 哔哩哔哩游戏 (Bilibili Games), targeting gaming enthusiasts and creators within the Bilibili community. It offers game reservation and download services, leveraging Bilibili's unique gaming culture. The site is technically modern, utilizing Vue.js and other contemporary web technologies, and is optimized for both PC and mobile platforms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the branding and content strongly associate with the reputable Bilibili company. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and privacy compliance is low due to missing policies and contact information. Overall, the site is functional and professional but requires improvements in transparency and security to enhance trust.

V

VKF Finanz GmbH

vkf-finanz.de

59

VKF Finanz GmbH operates as a regional insurance broker in Germany, specializing in both private and commercial insurance products. Their website presents a professional and user-friendly interface, offering a range of insurance services including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing options such as construction financing and loans, indicating a diversified financial services portfolio. The site targets German-speaking customers primarily in regions like Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via digidor.de with CDN support, and employs modern web standards including HTTPS and CAPTCHA protections to secure user interactions. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks explicit security headers and incident response information. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe.de

63

BHE Bundesverband Sicherheitstechnik e.V. is a leading German non-profit industry association specializing in security technology. The organization provides certifications, training programs, publications, and advocacy services to security professionals, companies, and planners. Their market position is strong within Germany, supported by multiple certification schemes and a broad network of industry partners. The website reflects a professional and consistent brand image targeting security technology stakeholders. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, hosted by punkt.de GmbH. It employs modern web technologies with a moderate performance profile and good mobile optimization. The site uses Matomo analytics with cookies disabled, indicating a privacy-conscious approach. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics but lacks explicit incident response contacts and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site demonstrates a solid security posture with room for improvement in security headers and privacy compliance. The overall risk assessment is low, with recommendations to enhance security headers, implement cookie consent, and publish incident response information to further strengthen trust and compliance.

E

EWS Schönau

ews-schoenau.de

49

EWS Schönau is a German renewable energy provider focused on delivering 100% green electricity, biogas, and related energy services to both private and commercial customers. The company emphasizes citizen-owned energy generation and active participation in the energy transition. Their website reflects a mature digital presence with modern technologies such as Vue.js and client-side form validation, offering calculators for various energy tariffs and detailed service information. Multiple certifications and awards underscore their credibility and commitment to sustainability. However, the site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are visible in the provided content. Security posture is moderate with HTTPS implied but no visible security headers or vulnerability disclosures. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.