Security Directory

L

Luka Koper

luka-kp.si

61

Luka Koper is a large, established port operator based in Slovenia, specializing in connecting Central Europe with maritime transport routes. The company offers reliable port services and a network of maritime and rail connections to support global logistics solutions. The website reflects a professional business presence with clear branding and relevant content targeting logistics and transport stakeholders. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not published. Overall, the site is trustworthy and well-maintained, suitable for its business audience.

The website represents the official Greek governmental Special Management Service for the Fisheries and Sea Operational Program. It provides comprehensive information about fisheries programs, regulatory frameworks, calls for proposals, and related news targeting professionals and stakeholders in the fisheries sector. The site is well-structured, professionally designed, and consistent with its governmental role. Technically, it is built on WordPress with common plugins and uses Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which is a gap for transparency and security readiness. Overall, the site is trustworthy and serves its public service function effectively.

Wizards Solutions ltd is a Greek technology company specializing in comprehensive web solutions including website construction, e-commerce platforms, internet marketing, social media marketing, CMS applications, hosting, and custom web applications. The company targets businesses seeking to establish or enhance their online presence with modern, user-friendly, and scalable digital solutions. Their market position appears to be that of a local/regional service provider with a focus on quality and customer support. Technically, the website employs standard web technologies including JavaScript and Google Analytics for tracking. The site is bilingual (Greek and English), moderately optimized for performance and mobile use, but lacks advanced SEO and accessibility features. No explicit CMS is detected, though CMS applications are promoted as services. Hosting details are not disclosed. From a security perspective, the site uses HTTPS implied by links but lacks visible security headers and does not provide privacy or cookie policies, nor incident response contacts. Tracking is implemented without a cookie consent mechanism, indicating privacy compliance gaps. No forms or sensitive data collection points are present, reducing immediate risk exposure. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance improvements, and clearer policy disclosures to strengthen user trust and regulatory adherence.

Plezalni center Ljubljana is Slovenia's largest climbing center, offering a wide range of climbing programs, courses, and facilities including bouldering halls and climbing walls. The center targets climbers of all ages and skill levels, providing training, camps, and equipment rental. The website is built on WordPress using the Avada theme and LayerSlider plugin, with integration of Google Analytics and Tag Manager for tracking. The technical infrastructure is modern and supports mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks comprehensive security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

S

Slavko Curuvija Foundation

slavkocuruvijafondacija.rs

56

The Slavko Ćuruvija Foundation is a Serbian non-profit organization dedicated to promoting free, independent, and responsible media in Serbia. The foundation engages in advocacy, educational programs, and research to support media freedom and journalist safety. The website reflects a well-established NGO with a clear mission and active presence in the media freedom sector. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the domain registration and WHOIS data align well with the organization's profile, indicating legitimacy and trustworthiness.

С

Савет за штампу

savetzastampu.rs

56

The website represents 'Савет за штампу', an independent self-regulatory body in Serbia overseeing media ethics and journalist code compliance. It serves as a platform for monitoring media conduct, resolving complaints, and educating journalists. The organization holds a reputable position in the Serbian media landscape, collaborating with various media associations and international bodies. Technically, the site is built on WordPress with a modern theme and integrates Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy/cookie policies. The domain is well-registered and consistent with the organization's profile. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

gov1.info is a small informational website focused on providing content related to the White House, including parody sections and detailed information about White House tours and related topics. The site has been active since 2008, with domain registration consistent with this timeline. The website uses Webflow CMS and standard web technologies including Google Analytics and StatCounter for traffic analysis. Hosting and DNS are managed via Cloudflare and IONOS SE respectively. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Contact information is limited to a single email address. Overall, the site is functional but basic in design and content quality.

P

PJ Media

pjmedia.com

62

PJ Media is a well-established conservative news and commentary website founded in 1999, operating under the Salem Media Group umbrella. It offers a range of content including news articles, opinion columns, podcasts, and videos, targeting a politically conservative audience. The business model combines advertising revenue with a VIP subscription program offering premium content. The website demonstrates consistent branding and a professional online presence, positioning itself as a niche media outlet within the conservative segment. Technically, the site employs a modern technology stack including Bootstrap for responsive design, Google Analytics and Chartbeat for analytics, and multiple advertising networks such as Google DoubleClick, Amazon Ads, and Criteo. Hosting and DNS services are managed via Cloudflare, providing reliable performance and security. The site is mobile-optimized and features good SEO practices, although accessibility features are basic. From a security perspective, PJ Media enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and explicit security headers like CSP or X-Frame-Options are not evident in the HTML. No direct security policies or incident response contacts are publicly disclosed. Advertising and tracking scripts are extensive, indicating a moderate to extensive user tracking level, which is typical for media sites but requires ongoing monitoring for privacy compliance. Overall, PJ Media presents a low-risk profile with a solid business foundation and mature technical infrastructure. Strategic improvements could focus on enhancing DNS security, implementing comprehensive security headers, and increasing transparency around security policies and incident response. Privacy compliance is adequate with clear privacy and cookie policies and consent mechanisms in place.

Android Authority is a prominent technology media website specializing in Android-related content including news, reviews, buyer's guides, deals, and how-to articles. It targets Android users and tech enthusiasts, providing comprehensive and up-to-date information to assist consumers in making informed technology purchases. The website operates primarily on an advertising and affiliate marketing business model, leveraging its extensive content and audience reach to generate revenue. Technically, the site employs modern web technologies such as React and Next.js, integrates multiple analytics and advertising services, and demonstrates good mobile optimization and SEO practices. However, the absence of WHOIS data and registrant information raises moderate trust concerns. Security posture is limited by missing security headers and unclear SSL configuration, and privacy compliance is weak due to lack of visible privacy and cookie policies in the provided content. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy transparency.

P

Pro Market

promarket.org

58

ProMarket is an academic publication affiliated with the Stigler Center at the University of Chicago Booth School of Business, focusing on economic research and policy insights shaping the future of capitalism. The website serves a niche audience of academics, economists, policymakers, and informed readers interested in market economics and capitalism. It operates as a non-profit publication platform, disseminating research and analysis with authoritative backing from a prestigious university center. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. Overall, the site demonstrates professionalism, trustworthiness, and consistent branding, though it could improve privacy compliance and security best practices.

L

Law Street Media

lawstreetmedia.com

68

Law Street Media is a specialized legal news media company founded in 2012, focusing on delivering legal news that impacts business sectors. The website targets business professionals, legal experts, and investors by providing news, insights, analytics, and podcasts related to mergers and acquisitions, tech policy, and other legal topics. The business model is primarily content publishing with subscription options. Technically, the site is built on WordPress with a modern Newspaper theme, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as HubSpot, Pardot, and Google Analytics. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

A

Ayuntamiento de Avilés

avilesvoluntariado.org

47

Avilés Voluntariado is a municipal government initiative by the Ayuntamiento de Avilés, Spain, focused on promoting and coordinating volunteer activities within the city. The website serves as an information hub connecting volunteers with local entities and projects, offering training, recognition, and resources to foster community participation. The platform is positioned as a trusted local government service with a clear target audience of citizens interested in volunteering and social engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, BuddyPress, and various plugins for community and GDPR compliance. It is hosted by Acens Technologies, S.L.U., and uses HTTPS with a good security posture, although some security headers could be improved. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing discoverability. From a security perspective, the site demonstrates solid practices such as HTTPS enforcement, GDPR cookie consent, and secure form handling. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's municipal nature, showing consistent registration details and no privacy protection, which is appropriate for a public entity. Overall, the website is professional, trustworthy, and well-maintained, serving its community-oriented mission effectively. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

S

SALESmanago

salesmanago.pl

75

SALESmanago is a Poland-based technology company specializing in marketing automation and customer engagement platforms tailored for eCommerce businesses. Their platform offers a comprehensive suite of services including email marketing, social media marketing, mobile marketing automation, and personalized content delivery. Positioned as a trusted partner for ambitious marketing teams, SALESmanago targets both B2B and B2C sectors with a SaaS business model. The website reflects a mature digital presence with consistent branding and professional content aimed at driving revenue growth for clients.

I

Izdelava spletnih strani, Miha Omejc s.p.

mihaomejc.com

57

Miha Omejc is a seasoned web designer and frontend developer based in Slovenia, offering a comprehensive range of web services including design, programming, e-commerce solutions, SEO optimization, hosting, and consulting. The business operates as a small sole proprietorship with over 20 years of experience and a strong portfolio of completed projects, positioning itself as a reliable and experienced service provider in the Slovenian market. The website is professionally designed with clear navigation and relevant content targeting businesses and agencies seeking web development services. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile optimized and SEO conscious, although performance is moderate. Hosting is supported by Cloudflare DNS and NameCheap registrar, indicating a stable infrastructure. However, there is room for improvement in accessibility and security best practices. From a security perspective, the site lacks visible security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, enhancing trustworthiness. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and compliance documentation to improve its security posture and regulatory adherence.

S

Slovenske železnice d.o.o.

zelezniskimuzej.si

46

Železniški muzej is a Slovenian railway museum operated by Slovenske železnice d.o.o., showcasing the history and heritage of railway transport in Slovenia. The museum offers permanent exhibitions, guided tours, and educational programs targeting the general public, railway enthusiasts, and tourists. The website is professionally designed using WordPress and modern front-end technologies, providing good user experience and mobile optimization. Social media integration and clear contact information enhance its digital presence. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy compliance mechanisms. Overall, the website is trustworthy and serves its cultural and educational mission effectively.

F

Fersped d. o. o.

fersped.si

56

Fersped d. o. o. is a Slovenian logistics and transportation company established in 1997, leveraging its strategic geographic location and strong transport connections to provide fast, comprehensive, and modern logistics solutions to its customers and partners. The company positions itself as a reliable service provider within the transportation sector, targeting business clients requiring efficient logistics services. The website reflects a professional and consistent brand image with clear messaging about its services and business focus. Technically, the site is built on WordPress with modern libraries and plugins such as Google Analytics, Google Tag Manager, and FontAwesome, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. Security posture is decent with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and formal security or privacy policies, which are recommended for compliance and trust enhancement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Madwise d.o.o.

madwise.si

46

Madwise d.o.o. is a Slovenian digital marketing agency specializing in web development, SEO, online advertising, and lead generation. Established in 2014, the company has built a strong market position with a portfolio of notable clients and certifications including Google Partner and Meta Certified Partner. Their website reflects a professional and comprehensive service offering targeting businesses seeking to enhance their digital presence. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Salesmanago, indicating a mature digital infrastructure. The website is well-optimized for mobile devices and SEO, with clear navigation and high-quality content. Security posture is good with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a high level of professionalism and trustworthiness with no signs of malicious content or blocking mechanisms.

A

Ayuntamiento de Avilés

avilesparticipa.org

46

Avilés Participa is a government-backed community participation and social change project managed by the Ayuntamiento de Avilés in Spain. The website serves as a platform to engage local citizens, provide information on community projects, events, and volunteering opportunities, and facilitate participation in municipal budget proposals and local councils. The site is well-branded, consistent, and targets the local population with relevant content and resources. Technically, it is built on WordPress with a modern tech stack including Bootstrap, BuddyPress, and various plugins for enhanced functionality. The site is hosted by Acens Technologies and uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Security best practices are partially implemented, with room for improvement in security headers and vulnerability disclosure. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Centro Niemeyer

centroniemeyer.es

55

Centro Niemeyer is a cultural center located in Avilés, Asturias, Spain, designed by the renowned architect Óscar Niemeyer. It serves as a hub for arts and cultural manifestations including music, cinema, theater, dance, and exhibitions. The website reflects a well-established institution with a clear focus on cultural programming and public engagement through events and guided visits. The site targets a general audience interested in cultural activities and provides ticket sales and newsletter subscriptions as part of its business model. Technically, the website is built on WordPress with modern plugins for SEO, event management, and GDPR compliance. It uses Google Analytics and Google Tag Manager for analytics and tracking, with a cookie consent mechanism in place, indicating good privacy compliance. Security posture is solid with HTTPS enforced, though some security headers are missing. The WHOIS data is unavailable due to registry restrictions, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is well-maintained, user-friendly, and trustworthy.

1

1 Million Bot

1millionbot.com

60

1 Million Bot is a Spanish-based technology company specializing in advanced AI solutions, including generative AI, conversational assistants, and custom AI agents. Founded in 2018, the company targets enterprises, universities, and public administrations with a SaaS platform named Millie and bespoke AI services. Their market position is strong within Spanish-speaking markets, supported by numerous awards and a professional online presence. Technically, the website is built on WordPress with the Divi theme, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. The hosting and DNS infrastructure leverage Google Cloud services, ensuring reliable performance and scalability. Security posture is good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the website is professional, content-rich, and trustworthy, though it lacks some compliance documentation and explicit security disclosures.

D

Državno odvetništvo Republike Slovenije

dodv-rs.si

61

Državno odvetništvo Republike Slovenije is the official government legal institution responsible for protecting the state's property and legal interests through representation in domestic and international courts and arbitrations. The website serves as an information portal for the public and government entities, providing access to legal reports, news, and contact information. The institution holds a medium-sized government entity status with a domain age consistent with its digital presence since 2017. Technically, the website is built on TYPO3 CMS with Bootstrap framework, featuring modern web technologies including Google reCAPTCHA and Google Analytics with a consent mechanism. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS and basic security best practices, though it lacks some advanced HTTP security headers and formal security policies. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies. Overall, the website is professional, trustworthy, and serves its government function effectively.

A

Agencija „Gerila ADV“

pressek.rs

61

Pressek.rs is a regional Serbian news portal focused on delivering timely and truthful news from Kragujevac and the Šumadija region. Operated by Agencija „Gerila ADV“, the site offers local news, cultural events, sports updates, job listings, and real estate advertisements, targeting residents and stakeholders in the region. The business model relies primarily on advertising and sponsored listings. Technically, the website uses modern web technologies including Google Analytics, Facebook Pixel, Google Fonts, and a CMS platform likely BCMS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used, but DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is a functional and professional local news outlet with room for improvement in security and privacy compliance.

S

SoftNET

softnet.rs

60

SoftNET is a well-established regional telecommunications provider founded in 1996, offering a broad range of communication services including data transmission, telephony, and system integration primarily targeting businesses in Southeast Europe. The company operates a modern IP network with offices in multiple countries, positioning itself as a reliable partner for multinational corporations. The website reflects a professional and consistent brand image with clear contact information and a multilingual presence. Technically, the site uses a mix of legacy and modern web technologies, including Bootstrap and jQuery, with room for modernization and security improvements. Security posture is moderate; HTTPS is presumably enabled, but DNSSEC is not, and security headers are missing. Cookie consent is implemented, but no explicit privacy policy or terms of service were found, indicating partial privacy compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

Nimaint

radiorogla.si

41

Radio Rogla is a regional Slovenian media company operating a radio station with live streaming, music charts, and local news content. The website targets the general public in the Štajerska region, providing entertainment and community engagement through various digital channels. The business model centers on media broadcasting with advertising and community-driven content. Technically, the site is built on WordPress with Elementor and WooCommerce plugins, integrating Google Analytics and Google Maps APIs, reflecting a moderate level of digital maturity. The website is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and anonymized Google Analytics tracking; however, it lacks security headers and visible privacy or cookie policies, indicating compliance gaps. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Gorska reševalna zveza Slovenije (GRZS) is a well-established Slovenian non-profit organization dedicated to voluntary mountain rescue and safety education. The website clearly communicates its mission to assist people in mountain accidents and difficult terrains, emphasizing prevention and training. The organization maintains a strong market position as the primary mountain rescue entity in Slovenia, supported by partnerships with governmental and related organizations. The site targets hikers, mountain visitors, and potential donors, offering multiple avenues for support and engagement. Technically, the website is built using the Hugo static site generator, hosted on Netlify, and employs modern web technologies such as lazy loading, Swiper.js for galleries, and Google Analytics for tracking. The site is mobile-optimized, fast-loading, and accessible, with clear navigation and multilingual support. Privacy compliance is addressed with a visible privacy policy, cookie consent mechanism, and GDPR-aligned newsletter signup form. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with a consistent Slovenian registrar and a domain age appropriate for the organization's history. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for GRZS, with minor recommendations to enhance security headers and incident response transparency.

P

Projekt O.S.P.

projektosp.si

36

Projekt O.S.P. is a Slovenian non-profit initiative dedicated to the maintenance and safety of climbing sites. It engages the climbing community through donations, volunteering, and awareness campaigns to ensure climbing areas remain safe, accessible, and well-maintained. The website serves as an information hub and donation platform, supported by local climbing organizations and sponsors. Technically, the site is built on WordPress with common plugins and integrates Google Analytics and Adsense for tracking and monetization. While the site uses HTTPS and standard security practices, it lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance. The domain registration is consistent with the organization's Slovenian focus, enhancing trustworthiness. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening.

Ο

Οδηγός του Πολίτη

odigostoupoliti.eu

53

Οδηγός του Πολίτη is a Greek-language informational website providing citizens with timely and reliable information about their interactions with public administration. It is a private initiative by a small scientific team without affiliation to any public entity. The site offers news, legal updates, public service information, and employment opportunities primarily targeting Greek citizens. Technically, it is built on WordPress with common SEO and analytics plugins, including Google Analytics and AdSense for monetization. The site is accessible, mobile-optimized, and uses HTTPS, but lacks explicit privacy and cookie policies. Security posture is adequate with no obvious vulnerabilities, though some security headers could be improved. Overall, the site is legitimate and trustworthy for its informational purpose, but could enhance privacy compliance and contact transparency.

M

Municipality of Kalavrita

kastriacave.gr

37

The website www.kastriacave.gr is an official tourism and cultural heritage site managed by the Municipality of Kalavrita, Greece, promoting the Cave of the Lakes attraction. It provides detailed information about the cave's natural, paleontological, and anthropological significance, along with visitor information and local tourism services. The site targets tourists and researchers interested in natural and cultural heritage. Technically, it is built on Joomla CMS with the Helix framework, uses standard web technologies like jQuery, and integrates Google Analytics for visitor tracking. The site is mobile responsive and has a professional design with clear navigation. Security-wise, the site uses HTTPS but lacks security headers and does not provide privacy or cookie policies, indicating GDPR compliance gaps. No forms or email contacts are present, limiting direct user data collection. Overall, the site is legitimate and trustworthy but could improve privacy and security practices.

S

Slovenske železnice

sz.si

63

Slovenske železnice is a large Slovenian railway group providing comprehensive rail mobility and logistics services, including passenger and freight transport, infrastructure management, and construction. The company operates through a network of nine subsidiaries, positioning itself as a leading national transport and logistics provider. The website reflects a professional corporate presence with clear business information and a focus on service offerings. Technically, the site is built on WordPress with modern libraries and SEO tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

S

STIEBEL ELTRON

stiebel-eltron.com.au

48

STIEBEL ELTRON is a well-established company specializing in premium hot water and heating solutions, with a strong focus on energy efficiency and sustainability. The website reflects a mature business with over 100 years of expertise, offering a broad range of products including electric water heaters, heat pumps, ventilation systems, room heaters, and water filters. Their market position is reinforced by industry certifications and a consistent brand presence targeting Australian residential and commercial customers. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized, well-structured, and provides a professional user experience. However, there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy-protected, which is common for commercial entities, though it limits direct verification of registrant details. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with recommendations focusing on improving security headers, implementing cookie consent for privacy compliance, and publishing incident response or vulnerability disclosure policies to enhance trust and compliance.

S

STIEBEL ELTRON New Zealand

stiebel-eltron.co.nz

48

STIEBEL ELTRON New Zealand is a medium-sized company specializing in the supply of German-engineered heating and ventilation products including heat pumps, water heaters, room heaters, and ventilation systems tailored for the New Zealand market. The company holds a strong market position supported by recognized certifications such as the Superbrand status and memberships in reputable industry associations. Their website reflects a professional and consistent brand image targeting homeowners and businesses seeking energy-efficient heating solutions. Technically, the website employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enabled and secure forms, but missing key security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite active tracking scripts. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the website's security and trustworthiness.

M

Mestna občina Celje

celje.si

39

Mestna občina Celje is the official website of the City Municipality of Celje, Slovenia, providing comprehensive information about local government administration, public services, community projects, and citizen resources. The site targets residents, local businesses, and visitors interested in municipal affairs. It operates as a government entity with a medium-sized organizational scope and a well-established presence since 1996. The website uses Joomla CMS with common web technologies such as jQuery and MooTools, and integrates Google Analytics for visitor tracking. The design and content quality are good, with clear navigation and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professionally maintained, serving its public service role effectively.

C

Confluence

confluence-lab.eu

57

Confluence is a specialized 12-week pre-acceleration program aimed at supporting deep tech startups in product development and market testing with established industry enterprises. The website is built on the Wix platform, leveraging standard Wix technologies and Google Analytics for visitor tracking. The technical infrastructure is modern but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and trust. The absence of visible contact information and WHOIS data due to privacy protection limits full verification of business credentials. Overall, the site presents a professional image consistent with a legitimate startup accelerator but would benefit from enhanced security and compliance features.

K

Komunala vitanje

komunala-vitanje.si

48

Komunala Vitanje is a small municipal utility company based in Slovenia, providing essential public services such as potable water supply, wastewater management, road maintenance, public area upkeep, and funeral services. The website reflects a local public utility business with a clear focus on community service and environmental stewardship. The company appears to be well-established since 2017 and targets residents and businesses within the Vitanje municipality. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Analytics and CookieYes for cookie consent shows attention to user experience and privacy compliance. Security posture is good with HTTPS enforced and appropriate security headers, though the absence of a public security policy or incident response information suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving its audience effectively.

T

TIC Vitanje

tic-vitanje.si

41

TIC Vitanje operates as a local tourist information center focused on promoting tourism in Vitanje and the Rogla-Pohorje destination. The website provides comprehensive information about local attractions, events, accommodations, and cultural offerings, including the Center Noordung. The organization targets tourists, local residents, families, schools, and groups, offering services such as guided tours, event organization, and cultural exhibitions. The business model centers on tourism promotion and community engagement, supported by partnerships with local government and tourism entities. Technically, the website is built on WordPress with modern libraries such as jQuery and Bootstrap, integrating Google Analytics and YouTube for enhanced user experience and tracking. The site is mobile optimized and performs moderately well, with good SEO practices and structured data for enhanced search visibility. From a security perspective, the site uses HTTPS and implements basic security best practices, including secure cookies and consent checkboxes for personal data processing. However, it lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or suspicious activities were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent banner. Overall, the website presents a trustworthy and professional digital presence for TIC Vitanje, with clear business credibility and good content quality. Strategic improvements in security policies, cookie consent mechanisms, and incident response readiness would enhance its security posture and compliance.

RUNE Group S.A. operates the RUNE Rural Network Project, focusing on deploying ultra-wide broadband infrastructure in rural areas of Slovenia and Croatia. The company positions itself as a regional telecommunications infrastructure provider, targeting underserved rural communities with high-speed fiber optic networks. Their business model centers on network construction, maintenance, and providing telecommunication infrastructure services, supported by active procurement and news updates indicating ongoing expansion and operations since at least 2019. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates analytics tools like Google Analytics and Hotjar for user behavior insights. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit incident response policies are not published. From a security and compliance perspective, the site includes privacy and cookie policies with GDPR considerations, though lacks a consent mechanism for cookies and formal vulnerability disclosure or incident response contacts. WHOIS data is unavailable due to EURid privacy restrictions, but the website's professional presentation, consistent branding, and valid contact information support its legitimacy. Overall, the website presents a trustworthy and professional digital presence for a medium-sized telecommunications company focused on rural broadband infrastructure. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and compliance standing.

D

DARS d.d.

dars.si

60

DARS d.d. is the Slovenian national motorway operator responsible for toll collection, motorway maintenance, traffic management, and infrastructure investments. The company operates a vinjetni toll system and an electronic toll system (DarsGo) for heavy vehicles. The website reflects a well-established, state-owned enterprise with a clear focus on transportation infrastructure and public service. The site targets Slovenian motorway users, transport companies, and the general public, providing comprehensive information about services, projects, and traffic updates. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for spam protection. The site is mobile-optimized with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is solid with HTTPS, secure forms, and no exposed sensitive data. The use of reCAPTCHA and cookie consent aligns with GDPR requirements. The domain is long-established (since 1996) and registered with a Slovenian registrar consistent with the business location, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency by publishing security policies and incident response contacts. The site effectively supports the company’s role as a key national transportation infrastructure operator.

M

MSH Medical School Hamburg – University of Applied Sciences and Medical University

arts-and-social-change.de

54

The website represents the Arts and Social Change faculty of the MSH Medical School Hamburg, an educational institution offering interdisciplinary Bachelor and Master programs focused on art therapy, music therapy, social work, and related fields. The site targets prospective students and professionals interested in the intersection of arts, health, and social sciences. It provides detailed program information, events, and further education opportunities, positioning itself as a niche academic faculty within the German higher education sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hubspot for marketing and analytics. The site is hosted on servers associated with rzone.de and employs HTTPS with a good SSL configuration. Mobile optimization and SEO are well addressed, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Strategic improvements in security headers and incident response transparency could enhance its security posture and trustworthiness further.

S

Slovenski regionalno razvojni sklad

regionalnisklad.si

44

Slovenski regionalno razvojni sklad (SRRS) is a Slovenian public financial institution dedicated to regional development and rural growth. The organization provides favorable financing through various programs targeting agriculture, entrepreneurship, local infrastructure, and non-profit organizations. The website reflects a well-established institution with a clear market position as a key public funding source in Slovenia. It offers detailed information on financial products, application procedures, and sustainability initiatives, targeting Slovenian businesses, municipalities, and NGOs. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and AOS for animations. It integrates Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and tracking, alongside Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers are not evident, and no public security or incident response policies are found. The WHOIS data is consistent with the website's claims, showing a domain registered in 2020 by a Slovenian registrar, aligning with the organization's timeline. Overall, the website presents a trustworthy and professional public institution with strong content quality and technical implementation. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to improve security posture and transparency.

S

Splunk LLC

splunk.com

68

Splunk LLC is a leading enterprise technology company specializing in data analytics, security, and observability platforms. Founded in 2003 and headquartered in San Francisco, USA, Splunk offers a comprehensive suite of products including cloud platforms, enterprise security solutions, and observability tools. The company targets large enterprises and organizations seeking to enhance digital resilience and accelerate digital transformation. Splunk holds a strong market position with recognized certifications such as ISO 27001 and SOC 2, and maintains a robust partnership ecosystem including Cisco and its subsidiary AppDynamics. Technically, the website is built on a modern stack leveraging Adobe Experience Manager CMS, Akamai CDN, and advanced analytics and monitoring tools like Google Analytics, Google Tag Manager, and SignalFx RUM. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security best practices are evident with HTTPS enforcement, security headers, and dedicated security advisory pages. From a security posture perspective, Splunk demonstrates a high level of maturity with no detected vulnerabilities or exposed sensitive data. Incident response and vulnerability disclosure mechanisms are in place, though the addition of a security.txt file and explicit Data Protection Officer contact details could enhance transparency. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, Splunk's website and digital presence reflect a professional, trustworthy, and secure enterprise-grade operation. The company’s business credibility is reinforced by comprehensive contact information, certifications, and consistent branding. No adult or questionable content is present, making the site safe for general audiences.

C

Church Monuments Society

churchmonumentssociety.org

52

The Church Monuments Society is a UK-based non-profit organization dedicated to the appreciation, study, and conservation of church monuments, including tomb carvings and funerary art. Established in 2001, the society offers excursions, study days, publications, and advisory services to enthusiasts and scholars. The website reflects a focused niche audience interested in cultural heritage and historical monuments. Technically, the site is built on WordPress with integration of FontAwesome icons and Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the organization's credibility.

G

Geoprostor

geoprostor.net

65

The website geoprostor.net hosts the PISO portal, a spatial information system designed for Slovenian municipalities. It provides public, internal, and professional GIS services to local government entities, facilitating access to spatial data and related services. The platform is positioned as a key government service for spatial data management in Slovenia, targeting municipal users and public sector stakeholders. The business model is focused on providing digital spatial data infrastructure and support services to municipalities, with offerings including public data access, internal tools, professional services, web services, seminars, and user support. Technically, the site is built on ASP.NET WebForms with a modern front-end stack including jQuery, jQuery UI, Bootstrap 5, and Font Awesome. It uses Google Analytics with IP anonymization for visitor tracking and includes a cookie consent mechanism compliant with GDPR. The site is mobile responsive and has a professional design with clear navigation. However, it lacks some modern security headers and explicit contact or security policy pages. From a security perspective, the site enforces HTTPS and uses cookie consent, but does not expose detailed security policies or incident response contacts. The WHOIS data is unavailable, which reduces trust in domain registration transparency. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a moderate security posture with room for improvement in security headers and transparency. The overall risk is moderate; the site appears legitimate and professionally maintained but would benefit from enhanced security practices and clearer business contact information to improve trust and compliance.

S

Slovenske železnice - Potniški promet

slo-zeleznice.si

63

Slovenske železnice - Potniški promet is the national passenger railway operator in Slovenia, providing comprehensive train travel services including domestic and international routes, ticketing, and travel information. The company is part of the larger Slovenske železnice group with multiple subsidiaries covering freight, infrastructure, and technical services. The website is professionally designed, multilingual, and offers detailed content relevant to travelers. Technically, it is built on WordPress with modern analytics and marketing tools integrated, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a mature digital presence aligned with a large, reputable transportation entity.

O

Območna obrtno-podjetniška zbornica Celje

ooz-celje.si

33

Območna obrtno-podjetniška zbornica Celje is a regional craft and entrepreneurial chamber serving the Celje area in Slovenia. The organization provides a variety of services including business registrations, consulting, issuing permits, event organization, and member benefits. The website reflects a well-structured portal aimed at local businesses and entrepreneurs, with a focus on supporting regional economic development and EU-funded projects. Technically, the site is built on WordPress with common plugins for event management and SEO, and it uses Google Analytics for visitor tracking. The site is mobile-optimized and presents content clearly, although some accessibility features could be improved. Security-wise, HTTPS is enforced and cookie consent is implemented, but security headers are lacking and no explicit privacy or security policies are published. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance.

H

HMU Health and Medical University

health-and-medical-university-duesseldorf-krefeld.de

54

HMU Health and Medical University is a modern private and state-recognized university located in Düsseldorf/Krefeld, Germany, offering innovative and interdisciplinary degree programs in health and medical fields including Humanmedizin, Psychologie, Sportwissenschaften, and Psychotherapie. It is part of the IRO Group Hochschulverbund, which includes several other medical and business schools, serving over 12,000 students. The university emphasizes practical training in partnership with Helios Klinikum Krefeld and fosters research and personal development in a collaborative academic environment. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries and analytics tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The WHOIS data is minimal but consistent with the hosting provider and domain usage. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

Č

Časnik Finance - poslovni dnevnik, novice, dogodki

finance.si

63

Finance.si is the largest Slovenian online media platform dedicated to business and financial news, operated by Časnik Finance. Established in 2001, it serves a broad audience of business professionals and the general public interested in finance. The website offers news, events, and other media content focused on the Slovenian market. Technically, the site employs modern web technologies including Google Analytics, TikTok analytics, and Google Tag Manager, with a custom or proprietary CMS. The site is hosted by HITROST.COM and uses HTTPS with good security headers, ensuring secure and reliable access. However, explicit privacy and terms of service pages were not found in the provided content, though a cookie consent mechanism is implemented. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

E

Ekvilib Inštitut

ekvilib.org

45

Ekvilib Inštitut is a Slovenian non-profit organization specializing in corporate social responsibility, human rights, and development cooperation. The organization provides education, consulting, and certification services focused on work-life balance, sustainable business practices, and responsible citizenship. It holds recognized certifications for socially responsible employers and family-friendly companies, positioning itself as a trusted entity in the Slovenian non-profit sector. The website is professionally designed, content-rich, and targets organizations and individuals interested in social responsibility and sustainable development. Technically, the site runs on WordPress with a modern tech stack including Google Analytics and various plugins, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to malformed responses, limiting domain trust verification. Overall, the site is trustworthy and professional but could improve privacy compliance and security practices.

S

SoftNET d.o.o.

softnet.si

63

SoftNET d.o.o. is a well-established telecommunications company founded in 1996 in Slovenia, offering a broad range of business communication services including VoIP, IP VPN MPLS, Ethernet Private Line, and mobile telephony. The company operates a high-performance IP network and has expanded its presence internationally across Southeast Europe and Asia. The website reflects a professional and business-oriented approach, targeting corporate customers with integrated telecommunication solutions. Technically, the site uses a variety of established JavaScript libraries and frameworks, including Bootstrap and jQuery, and implements Google Analytics for user behavior tracking with proper cookie consent mechanisms. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers and explicit security policies. The WHOIS data confirms domain legitimacy and consistency with the company’s history. Overall, the website is trustworthy, well-branded, and compliant with privacy regulations.

R

RCL Group

rcl-group.com

64

RCL Group is a medium-sized technology company based in Slovenia, specializing in business information systems tailored for various industries including retail, automotive, publishing, and business intelligence. With over 30 years of experience and a presence in multiple European countries, they offer integrated ERP solutions such as Microsoft Dynamics 365 Business Central alongside proprietary software suites like cBBIS and cDMS. Their business model focuses on B2B software solutions and system integration, targeting companies seeking comprehensive management systems. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, Bootstrap, and Chart.js, indicating a mature digital infrastructure. The site is mobile-optimized with good navigation and basic accessibility features. Cookie consent mechanisms and privacy policies are implemented, supporting GDPR compliance. However, some security best practices such as security headers and explicit incident response information are missing. From a security perspective, the site uses HTTPS and protects forms with reCAPTCHA, but lacks published security policies and vulnerability disclosure channels. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business references support its authenticity. Overall, the security posture is good but could be improved with additional transparency and technical controls. The overall risk assessment suggests a trustworthy and professional business website with minor gaps in security transparency and domain registration data. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to strengthen trust and compliance.