Security Directory

C

CBS News

cbsnews.com

68

CBS News is a major American news media organization providing breaking news, live streaming, and comprehensive coverage of national and international events. Owned by Paramount Global, it holds a strong market position as a trusted source of news with a broad target audience. The website features a professional design, extensive multimedia content, and a well-structured navigation system. Technically, the site employs modern JavaScript frameworks, tag management, and consent management tools, ensuring a good user experience across platforms including web, iOS, and Android. Security posture is strong with HTTPS enforcement and consent mechanisms for GDPR compliance, although explicit security headers could be further confirmed. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, CBS News demonstrates a mature digital presence with good privacy and security practices.

T

The Register

theregister.co.uk

70

The Register is a well-established online technology news and analysis publication targeting IT decision-makers and professionals in the enterprise technology sector. It operates under Situation Publishing and maintains a portfolio of related technology media sites. The website offers a broad range of content including news articles, opinion pieces, special features, vendor voices, webinars, whitepapers, and newsletters, positioning itself as a trusted source in the technology media landscape. The site demonstrates professional design, clear navigation, and mobile optimization, supporting a positive user experience and strong content relevance. Technically, the website employs modern JavaScript libraries and Google services for analytics and advertising, with HTTPS enforced ensuring secure communications. While no explicit CMS or hosting provider is identified, the site performs moderately well with good SEO and accessibility features. Security headers are not explicitly detected, and no vulnerability disclosure or incident response information is published, suggesting areas for improvement in security transparency. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of published security policies and incident response contacts limits comprehensive security assurance. Privacy and cookie policies are present and comprehensive, indicating good privacy compliance. Advertising and tracking are standard for media sites, with Google AdSense and Tag Manager in use. Overall, the website is legitimate and trustworthy, supported by its long operational history and professional presentation. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's credibility. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure information, and improving security headers to further strengthen the security posture.

P

POLITICO

politico.com

74

POLITICO is a leading media organization specializing in political news, policy analysis, and political journalism. It serves a broad audience interested in politics and government affairs, offering a variety of content including news articles, newsletters, podcasts, and video. The website demonstrates a strong market position as a trusted source for political information with a large and diverse content offering. Technically, the site uses a modern technology stack including JavaScript frameworks, video players, and privacy management tools, hosted on a secure HTTPS platform with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no obvious vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though the lack of WHOIS data is a minor anomaly likely due to privacy protection. Strategic recommendations include publishing explicit security and incident response information, adding vulnerability disclosure mechanisms, and enhancing transparency around data retention and privacy practices.

J

Jewella Privacy LLC

bazanekretnina.me

68

Bazanekretnina.me is a regional real estate listing platform focused on Montenegro and the surrounding Balkan region. It provides a comprehensive catalog of properties including apartments, houses, commercial spaces, and land for sale and rent. The platform also features real estate news and agency partnerships, positioning itself as a key player in the regional real estate market. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for property seekers and sellers. Technically, it employs modern web technologies and integrates Matomo analytics for user tracking, although privacy and cookie policies are not explicitly presented. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers. The domain is privacy protected by Jewella Privacy LLC, a common practice for such businesses, and the domain age aligns with the site's recent launch. Overall, Bazanekretnina.me is a credible and functional real estate platform with room for improvement in privacy compliance and security best practices.

A

Ayuntamiento de Avilés

avilesvoluntariado.org

47

Avilés Voluntariado is a municipal government initiative by the Ayuntamiento de Avilés, Spain, focused on promoting and coordinating volunteer activities within the city. The website serves as an information hub connecting volunteers with local entities and projects, offering training, recognition, and resources to foster community participation. The platform is positioned as a trusted local government service with a clear target audience of citizens interested in volunteering and social engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, BuddyPress, and various plugins for community and GDPR compliance. It is hosted by Acens Technologies, S.L.U., and uses HTTPS with a good security posture, although some security headers could be improved. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing discoverability. From a security perspective, the site demonstrates solid practices such as HTTPS enforcement, GDPR cookie consent, and secure form handling. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's municipal nature, showing consistent registration details and no privacy protection, which is appropriate for a public entity. Overall, the website is professional, trustworthy, and well-maintained, serving its community-oriented mission effectively. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

CONSUL DEMOCRACY is an open source software platform designed to facilitate citizen participation in government, promoting transparency and democratic engagement. The platform is widely adopted by over 250 cities and organizations worldwide and is supported by notable international organizations such as UNDP and the European Union. The website serves as a hub for information about the software, its features, user community, partners, and latest news. Technically, the site is built on WordPress with modern web technologies and offers multilingual support. Security posture is adequate with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the civic tech space.

V

ver.di - Vereinte Dienstleistungsgewerkschaft

dju.social

48

The website dju.social is a Mastodon-based decentralized social network instance operated by the German trade union ver.di, specifically its Deutsche Journalistinnen- und Journalisten-Union (dju) division. It provides a platform for media professionals and interested parties to engage in friendly and constructive social exchange. The platform leverages the open-source Mastodon software (version 4.2.17) and offers features such as user profiles, content discovery, and hashtag exploration. The domain registration is consistent with the organization's identity and country, indicating legitimacy and trustworthiness. Technically, the site uses modern web technologies including React and WebSockets, with a moderate performance profile and good mobile optimization. However, some security best practices such as enabling DNSSEC and implementing security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information and security policies are not explicitly provided on the explored page. The security posture is generally good with HTTPS enforced and domain transfer protection enabled, but improvements are recommended to enhance DNS security and security headers. The content is safe for general audiences, focusing on media and journalism without any adult or explicit content. Overall, the site is professionally designed, trustworthy, and serves a niche community effectively.

W

Webtasy, d.o.o.

celjepomoje.si

57

The website celjepomoje.si serves as a participatory budgeting platform for the municipality of Celje, Slovenia, enabling citizens and youth to engage in local budget allocation decisions. It is built on the open source Consul Democracy platform and managed by Webtasy, d.o.o., a Slovenian company. The platform is well-positioned as a government civic engagement tool with clear project information and a focus on transparency and community participation. Technically, the site uses modern web technologies including Ruby on Rails and Turbolinks, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, but lacks some security headers and formal privacy/cookie policies. Analytics usage is minimal and privacy-friendly via Plausible Analytics. Overall, the site is professional, trustworthy, and safe for general audiences, though improvements in privacy compliance and security hardening are recommended.

Servis 48 is a digital platform operated by the City Municipality of Celje, Slovenia, designed to facilitate citizen participation in reporting and tracking public service issues. The website provides an interactive map-based interface for submitting and reviewing initiatives related to municipal services such as public lighting, road maintenance, and environmental concerns. The platform targets local citizens and serves as a transparent channel for community engagement. Technically, the site leverages a combination of JavaScript libraries including ArcGIS API, jQuery, and Materialize CSS to deliver a responsive and interactive user experience. While the site is mobile-optimized and includes accessibility statements, it only partially complies with accessibility standards and lacks some modern security headers. Security posture is moderate with HTTPS usage but outdated libraries and missing headers present potential risks. Privacy compliance is basic, with no dedicated privacy policy page but includes user consent for data processing in forms. Overall, the site is a legitimate government service with a solid business credibility score but could improve in security and privacy transparency.

The website www.us-rs.si is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this blocking mechanism, no actual website content, metadata, or business information is available for analysis. The site appears to be protected by Cloudflare's WAF, which prevents automated access and content scraping. Consequently, no insights into the company's business model, services, or security posture can be reliably derived from the provided data. The technical infrastructure includes Cloudflare security services but lacks visible security headers or SSL configuration details. Overall, the site cannot be evaluated for compliance, security, or business credibility in its current state.

K

Kabi d.o.o.

homeoffice.rs

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate efficient remote work for small and medium enterprises primarily in Serbia. The platform offers a suite of tools including collaboration, project management, work time tracking, and email marketing, complemented by additional IT services such as Microsoft Office 365 and Google G Suite integration. The company positions itself as a niche provider focused on enabling virtual office environments with a flexible and secure cloud infrastructure. Technically, the website is built using modern web standards with responsive design and uses a CMS platform (BCMS) for content management. Hosting is provided by Adriahost, a regional registrar and hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. Contact forms include CAPTCHA and GDPR consent checkboxes, indicating some attention to data protection, although no formal privacy or cookie policies are published. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and explicit security headers. There is no published security policy or incident response information, which represents a compliance and trust gap. The domain registration data is consistent with the business claims and shows a legitimate and active status. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security practices, and clearer communication of security policies to strengthen user trust and regulatory adherence.

K

kABI d.o.o.

bazanekretnina.com

67

Bazanekretnina.com is a regional real estate listing platform primarily serving Serbia, Montenegro, Croatia, Slovenia, Spain, Bosnia and Herzegovina, and Italy. The platform offers a wide range of property types including apartments, houses, land, and commercial spaces for sale and rent. The business is operated by kABI d.o.o., a company established in 2007, indicating a mature presence in the regional real estate market. The website targets individuals and businesses interested in real estate transactions within the Balkan region and selected European countries. It provides multilingual support and advanced search capabilities to enhance user experience. Technically, the website employs modern web technologies including Google Fonts, Font Awesome icons, and JavaScript libraries such as Select2 and Swiper for UI components. The site is mobile optimized and uses structured data (JSON-LD) to improve SEO and search engine visibility. Hosting details are not explicitly identified, but the domain is registered with DNC Holdings, Inc. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No contact information such as emails or phone numbers is directly available on the analyzed page, which may affect user confidence and support accessibility. Overall, Bazanekretnina.com presents as a professional and regionally focused real estate platform with good content quality and technical implementation. The main risks relate to privacy compliance gaps and limited visible security policies. Strategic improvements in these areas would enhance trustworthiness and regulatory adherence.

A

Arctur d.o.o.

arctur.si

63

Arctur d.o.o. is a well-established Slovenian technology company specializing in high performance computing, cloud computing, project management, and digital design services. With over 30 years of experience, the company positions itself as an innovator merging research, science, art, and business to deliver advanced technological solutions primarily targeting industries such as healthcare, tourism, government, and NGOs. Their website reflects a professional and modern digital presence with clear service offerings and a strong emphasis on interdisciplinary innovation. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with integration of analytics tools like Matomo and Google Analytics. The site is mobile-optimized, fast-loading, and accessible, with a cookie consent mechanism in place ensuring compliance with privacy regulations. The absence of a CMS or third-party hosting providers suggests a controlled hosting environment, likely self-managed. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Arctur.si demonstrates a high level of professionalism, technical maturity, and business credibility. The domain registration data aligns well with the company’s stated history and location, reinforcing legitimacy. Strategic recommendations include publishing formal security policies, incident response information, and enhancing security headers to further strengthen the security posture.

P

Planinska zveza Slovenije

worldcupslo.com

42

The website worldcupslo.com serves as the official platform for the World Cup in sport climbing held in Koper, Slovenia, organized by Planinska zveza Slovenije. It provides comprehensive event information including schedules, results, news, sponsor details, and multimedia content targeting sport climbing enthusiasts and the general public interested in this sport. The site is well-branded and supported by recognized sponsors and partners, establishing a strong market position within the sport event domain in Slovenia. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and offers good navigation and content relevance. However, performance is moderate and accessibility features are basic, indicating room for technical improvements. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no published privacy or cookie policies, which is a compliance gap. No incident response or vulnerability disclosure mechanisms are evident. The domain registration is transparent and consistent with the website's purpose, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

Ι

Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας

imkalaig.com

51

The website www.imkalaig.gr serves as the official online presence of the Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας, a Greek Orthodox Metropolis. It provides comprehensive information about the Metropolis, including the Metropolitan Bishop, churches, monasteries, religious events, philanthropic activities, and community services. The site targets local parishioners, religious followers, and visitors interested in the ecclesiastical and cultural heritage of the region. The business model is non-profit and government-related, focusing on community engagement and religious service dissemination. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Three.js and Slick Carousel for interactive content. It is built on a CMS platform likely provided by New Media Soft, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly present, and there is room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, confirming legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers and accessibility could further enhance its posture.

The website odontotos.com is dedicated to promoting the Odontotos rack railway, a historic and scenic narrow-gauge railway line in Greece connecting Diakopto and Kalavryta. It serves as an informational portal targeting tourists and railway enthusiasts, providing detailed historical context, technical specifications, renovation updates, schedules, ticket prices, and regional tourism links. The site is primarily in Greek with some English navigation options, reflecting its regional focus. From a technical perspective, the website is built using basic HTML, CSS, and JavaScript without modern CMS or frameworks. The design is dated and lacks mobile optimization and accessibility features. There is no evidence of HTTPS enforcement or security headers, which raises concerns about security posture. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. Contact information is limited but includes an email and phone numbers, and social media presence is limited to a Facebook group link. Security-wise, the site lacks modern security best practices such as HTTPS, security headers, and secure forms. There are no visible vulnerabilities but also no advanced protections. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations. Overall, the site is functional for informational purposes but requires significant improvements in security, privacy, and technical modernization. The overall risk is moderate given the lack of security controls and privacy compliance, but the content is safe and non-malicious. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, improving mobile responsiveness, and enhancing user experience and trust signals.

D

Društvo za razvoj podeželja med Snežnikom in Nanosom

las-snezniknanos.si

46

The website represents a Slovenian local action group focused on rural development between the Snežnik and Nanos regions. It operates as a non-profit organization facilitating regional projects, cooperation, and community engagement, primarily funded through EU and national programs. The site provides structured information about projects, calls for funding, and organizational details, targeting local municipalities and stakeholders. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and some UI libraries like Slick Carousel and Shadowbox. The site is moderately optimized for mobile devices and has a clear navigation structure but lacks advanced CMS or modern frameworks. Security posture is basic with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is not explicitly provided, limiting user engagement channels. Overall, the site is functional and professional but could improve in privacy compliance, security best practices, and contact transparency.

V

Verkehrsverbund Oberelbe

vvo-online.de

54

Verkehrsverbund Oberelbe (VVO) operates as a regional public transportation authority providing integrated ticketing and mobility services for Dresden and its surrounding areas. The website serves as a comprehensive mobility portal offering timetable information, ticket sales, service updates, and accessibility features. The target audience includes residents and visitors relying on buses, trams, S-Bahn, and ferries within the VVO region. The business model focuses on facilitating seamless public transport usage through digital tools and customer service. Technically, the website employs a modern JavaScript stack with accessibility enhancements such as Eye-Able tools and uses Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no visible security vulnerabilities and demonstrates good SEO and accessibility practices, though mobile optimization is basic. The content is well-structured, multilingual, and professionally presented, supporting a positive user experience. From a security perspective, the site benefits from HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional platform for regional public transport users, with recommendations to improve privacy compliance and security transparency to further strengthen its posture.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.sk

50

STIEBEL ELTRON GmbH & Co. KG operates a localized Slovak website offering advanced heating, ventilation, and renewable energy solutions including heat pumps, water heaters, and rekuperation units. The company is positioned as a technological leader in the energy sector with a strong focus on ecological and energy-efficient products. The website targets end customers, professional partners, and installers, providing comprehensive product information, partner zones, and training resources. Technically, the site uses modern JavaScript libraries, a custom or enterprise CMS, and integrates Piwik PRO analytics with privacy controls. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not found. The domain registration is consistent with the business identity, indicating high legitimacy. Overall, the website is professional, well-structured, and compliant with GDPR requirements.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.pl

56

STIEBEL ELTRON GmbH & Co. KG operates a professional and comprehensive website focused on heating, ventilation, and renewable energy solutions, targeting end customers, professional installers, and business partners primarily in Poland. The company is positioned as an international leader with nearly 100 years of history, offering a broad portfolio of products including heat pumps, ventilation systems, water heaters, and energy management solutions. The website reflects a mature digital presence with multilingual support and detailed product and support information. Technically, the website is built on Adobe Experience Manager (AEM) and employs modern JavaScript libraries such as RequireJS, Modernizr, Swiper, and Greensock TweenMax. It integrates Piwik PRO for analytics and uses a consent management platform to comply with GDPR and cookie regulations. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It uses secure cookies and has a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt page and incident response contact details suggests room for improvement in transparency and security communication. Overall, the website is trustworthy and professional, though the lack of WHOIS data for the domain limits domain registration trust analysis. The site is not blocked by WAF or security challenges, allowing full content access and analysis. Strategic recommendations include publishing vulnerability disclosure information, incident response contacts, and enhancing security framework transparency to further strengthen trust and compliance.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.nl

57

STIEBEL ELTRON GmbH & Co. KG operates a professional and comprehensive website focused on sustainable heating, ventilation, and hot water solutions, primarily targeting consumers and businesses in the Netherlands and broader European markets. The company positions itself as a leader in energy-efficient technologies, offering a broad range of products including heat pumps, ventilation systems, and smart home services. The website reflects a mature digital presence with strong branding, clear navigation, and extensive customer support resources. Technically, the website leverages modern JavaScript libraries and analytics tools such as Piwik PRO, and is likely built on Adobe Experience Manager, indicating a robust enterprise-grade CMS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security measures include HTTPS enforcement, secure cookie management, and consent mechanisms compliant with GDPR. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks explicit incident response contact details and a vulnerability disclosure policy, which could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent management. Overall, the website is trustworthy, professional, and well-aligned with the company's business objectives. Strategic recommendations include enhancing accessibility, publishing incident response contacts, and adding a security.txt file to improve transparency and security readiness.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.it

57

STIEBEL ELTRON Italia is a localized website for the German-based STIEBEL ELTRON GmbH & Co. KG, a well-established company specializing in energy-efficient building solutions such as heat pumps, thermal storage, and ventilation systems. The company has a strong international presence with multiple production sites and subsidiaries, targeting building professionals and homeowners in Italy. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website uses modern JavaScript libraries and analytics tools, including RequireJS, Modernizr, and Piwik PRO, and is likely built on Adobe Experience Manager CMS. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security best practices such as HTTPS enforcement and cookie consent mechanisms are implemented, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism aligned with GDPR requirements. However, explicit security policies and incident response contacts are not found, which could be enhanced. Overall, the website presents a low-risk profile with high business credibility and good technical maturity. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security and incident response policies to further strengthen trust and compliance.

S

STIEBEL ELTRON KFT.

stiebel-eltron.hu

56

STIEBEL ELTRON KFT. is a market-leading Hungarian company specializing in renewable energy-based building engineering systems, including advanced heating and hot water production equipment. The website targets both end users and professional partners such as resellers, installers, and planners, offering product information, services, and professional training. The company positions itself strongly in the energy sector with a focus on heat pumps, ventilation, and hot water solutions. The digital presence is supported by a modern CMS (Adobe Experience Manager) and includes multi-language support and social media engagement.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.fr

54

STIEBEL ELTRON GmbH & Co. KG is a well-established German manufacturer specializing in innovative and eco-responsible heating, ventilation, and water heating solutions, with a strong presence in the French market. The company emphasizes renewable energy technologies, particularly heat pumps, and supports both professional installers and private customers through a comprehensive network and digital tools. The website reflects a mature business with a clear market position and a focus on quality and sustainability. Technically, the website employs modern JavaScript libraries and analytics tools, with a likely enterprise CMS backend. It is well-optimized for mobile and SEO, though some accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be more visible. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which slightly impacts trust but is not uncommon for European domains with privacy protections. The website includes comprehensive privacy, cookie, and compliance policies, indicating good GDPR adherence. Social media presence and professional contact information further support credibility. Overall, the site is professional, secure, and compliant, serving a large enterprise in the energy sector with a focus on renewable heating solutions.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.ch

60

STIEBEL ELTRON GmbH & Co. KG is a well-established company specializing in renewable energy heating solutions, particularly heat pumps, ventilation systems, and smart home energy management. The website serves the Swiss market with localized content and is part of a broader international presence. The company emphasizes sustainability and customer service, offering comprehensive product information, planning tools, and support services. The digital infrastructure uses modern JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience. Privacy compliance is robust, with clear cookie consent mechanisms and a detailed privacy policy. Security posture is solid with HTTPS enforcement and secure cookie practices, though some security headers could be improved. Overall, the website reflects a mature, professional business with strong market positioning in the energy sector.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.be

55

STIEBEL ELTRON GmbH & Co. KG operates a professional website focused on sustainable heating, ventilation, and hot water solutions, targeting both professionals and consumers in Belgium. The company positions itself as a leading provider of energy-efficient products such as heat pumps, electric heating, and ventilation systems. The website is well-branded, consistent, and provides comprehensive product information and support resources. Technically, the site uses modern JavaScript libraries, Adobe Experience Manager CMS, and Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is moderate with cookie consent and privacy policies in place, but lacks visible security headers and explicit incident response information. Overall, the site is trustworthy and compliant with GDPR, though WHOIS data is restricted, which is common for commercial entities. Strategic improvements in security headers and transparency could enhance trust further.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.co.za

59

STIEBEL ELTRON South Africa operates as a regional branch of the established German company STIEBEL ELTRON GmbH & Co. KG, specializing in manufacturing and distributing renewable energy solutions including heat pumps, solar systems, and electric heating products. The website targets both consumers and businesses in South Africa seeking sustainable energy and heating solutions, positioning itself as a reputable and experienced player in the energy sector with a history dating back to 1924. Technically, the website employs modern JavaScript frameworks and asynchronous loading techniques, with a likely enterprise CMS backend. It is mobile-optimized and SEO-friendly, with good content quality and clear navigation. The site uses Piwik PRO for analytics, indicating a privacy-conscious approach to user tracking. However, some security headers are missing, and no explicit security or incident response policies are published. The security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but improvements can be made by adding security headers and publishing vulnerability disclosure information. WHOIS data is unavailable, likely due to privacy protection, which is common for corporate domains. The website is fully accessible with no WAF or blocking detected. Overall, the website is professional, trustworthy, and well-maintained, with minor technical and security enhancements recommended to further strengthen its posture and compliance.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.vn

61

STIEBEL ELTRON Vietnam is a subsidiary of the well-established German company STIEBEL ELTRON GmbH & Co. KG, specializing in innovative and energy-efficient heating and water solutions. The website reflects a mature digital presence with comprehensive product offerings in renewables, domestic hot water, and water filtration, targeting both consumers and businesses in Vietnam. The company leverages a modern technical infrastructure, likely based on Adobe Experience Manager, with integrated analytics and cookie consent mechanisms ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though some security headers could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with the company's global brand.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.in

59

STIEBEL ELTRON GmbH & Co. KG is a well-established global company specializing in energy-efficient heating and renewable energy solutions, including heat pumps, domestic hot water systems, and room heating. The Indian subsidiary website reflects a strong market presence with comprehensive product offerings and a focus on sustainable comfort technologies. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for residential and commercial customers interested in renewable energy solutions. Technically, the site uses modern JavaScript frameworks, Adobe Experience Manager CMS, and integrates Piwik PRO analytics with privacy-conscious configurations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

STIEBEL ELTRON Ireland operates as a regional branch of the established German company STIEBEL ELTRON GmbH & Co. KG, specializing in manufacturing and distributing heat pumps, ventilation systems, electric hot water, and heating products. The website targets homeowners, installers, and partners, providing product information, installer training, and aftersales services. The company has a strong market position in the energy sector with a history dating back to 1924. Technically, the website is built on a modern stack including JavaScript libraries such as RequireJS and Modernizr, with Adobe Experience Manager likely as the CMS. The site is mobile-optimized, well-structured, and uses Piwik PRO for analytics with a comprehensive cookie consent mechanism, reflecting good digital maturity. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers are not detected. Privacy compliance is robust with a detailed privacy policy and cookie consent. No incident response contacts or vulnerability disclosure pages were found, representing an area for improvement. Overall, the website is professional, trustworthy, and secure with minor recommendations to enhance security headers and incident response transparency. The domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this business type.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.co.uk

59

STIEBEL ELTRON UK is a subsidiary of the STIEBEL ELTRON Group, specializing in manufacturing and distributing renewable energy heating solutions such as heat pumps, solar systems, and electric hot water products. The company targets homeowners, installers, and partners in the UK market, offering comprehensive product ranges and aftersales support. The website reflects a mature and professional business with consistent branding and a strong focus on renewable energy technologies. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates Piwik PRO for analytics with GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and incident response contacts are absent. The WHOIS data is unavailable due to domain naming rules issues, which slightly impacts trust but the website content and external references support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, positioning the company as a credible player in the energy sector.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.com

60

STIEBEL ELTRON GmbH & Co. KG is a large enterprise operating internationally in the energy sector, specializing in efficient solutions for hot water, room heating, air conditioning, and renewable energy technologies such as heat pumps and ventilation systems. The company maintains a professional and comprehensive website that targets both general consumers and professionals in building services. Their market position is strong with subsidiaries and agencies in over 120 countries, reflecting a broad global footprint. Technically, the website is built on a modern stack including RequireJS, Modernizr, and Piwik PRO analytics, likely managed via Adobe Experience Manager CMS. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers could be made. Performance is moderate, with a well-structured navigation and rich content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but the lack of explicit security headers and incident response information suggests room for enhancement. Overall, the website presents a low risk with strong business credibility and privacy compliance, but domain registration opacity slightly reduces trust. Strategic recommendations include improving domain WHOIS transparency, adding security headers, and publishing a vulnerability disclosure policy to strengthen security posture and stakeholder trust.

T

Theben AG

theben.de

59

Theben AG is a well-established German company specializing in building automation products including KNX systems, DALI lighting control, presence and motion detectors, smart home solutions, time switches, and climate control devices. Founded in 1921, it holds a strong market position as an expert and innovator in energy-efficient building technology. The website reflects a professional and comprehensive digital presence targeting professional installers, OEM partners, and smart home users. Technically, the site uses SilverStripe CMS, integrates modern marketing and consent management tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and content-rich, supporting Theben AG's credibility and market leadership.

STIEBEL ELTRON is a well-established international company specializing in building technology and renewable energy solutions, particularly heat pumps and ventilation systems. The company holds a strong market position as a technology leader with a comprehensive product and service portfolio targeting both end consumers and professional partners. Their website reflects a mature digital presence with extensive content, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response contacts and vulnerability disclosure policies could be improved. Overall, the website and business demonstrate high credibility and compliance with GDPR.

G

GEMA

gema.de

65

GEMA is a prominent collective rights management organization in Germany, serving over 100,000 members and millions of music users. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Liferay CMS, React, and Usercentrics for GDPR compliance. The content is primarily in German with English alternatives, targeting music creators and users. The site offers comprehensive information about membership, rights management, and licensing services, positioning GEMA as a key player in the German music industry. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information publicly. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, though it could improve transparency by publishing privacy policies and security contact details.

R

Rightmove

rightmove.co.uk

62

Rightmove is the UK's leading online property portal, offering a comprehensive platform for buying, renting, and valuing properties. The website provides extensive listings including residential, commercial, and overseas properties, supported by property news and guides. It targets UK property buyers, renters, investors, and estate agents, positioning itself as a market leader in the real estate sector. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is well optimized for both desktop and mobile users, featuring responsive design and accessibility considerations. Performance appears fast with efficient content delivery. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data due to domain naming rules error is unusual but does not detract significantly from the site's legitimacy given its market presence and content quality. Overall, Rightmove demonstrates a mature digital presence with strong business credibility and user experience. However, improvements in transparency around privacy policies, security disclosures, and WHOIS data would enhance trust and compliance posture.

Dresdner Verkehrsbetriebe AG operates the MOBI platform, a comprehensive multimodal mobility service in Dresden, Germany. The website presents a well-structured and professional digital presence highlighting integrated public transport, bike- and carsharing, and electric vehicle charging services. The company positions itself as a local leader in sustainable urban mobility, supported by partnerships with local government and recognized organizations. The site targets residents and visitors seeking flexible and environmentally friendly transportation options. Technically, the website employs modern web standards including responsive design, SVG icons, and optimized images with WebP support. While no explicit CMS or frameworks are detected, the site demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No security headers or incident response policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The WHOIS data aligns with the business claims, showing consistent domain registration without privacy protection, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, though enhancements in security policies and privacy compliance would strengthen its posture. The absence of tracking scripts suggests a privacy-conscious approach. Strategic recommendations include implementing security headers, cookie consent, and publishing security and incident response policies.

G

GIT SECURITY

git-sicherheit.de

49

GIT SECURITY is a specialized media portal focused on security-related topics including management, IT security, fire protection, and safety. It serves security professionals and decision-makers by providing news, articles, product information, events, webinars, whitepapers, and videos. The portal is affiliated with Wiley-VCH, a reputable publishing company, enhancing its credibility and market position within the security media niche. The website is professionally designed with consistent branding and good content quality, targeting a medium-sized audience primarily in Germany.

D

Duo Security

duo.com

80

Duo Security, a Cisco company founded in 2009 and headquartered in Ann Arbor, Michigan, specializes in identity security and multi-factor authentication solutions. The company offers a comprehensive suite of products including MFA, Single Sign-On, Passwordless Authentication, Device Trust, and Identity Intelligence, targeting enterprises, SMBs, government agencies, and managed service providers. Duo Security holds a strong market position as a leading provider in identity security, leveraging Cisco's global presence and resources. The website reflects a mature, professional business with clear branding and consistent messaging. Technically, the site is hosted on Amazon AWS infrastructure, employs modern web technologies, and integrates advanced analytics and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although DNSSEC is not enabled, which is recommended for enhanced DNS security. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. Contact information and social media presence are transparent and verified, enhancing business credibility. Overall, the website demonstrates a high level of digital maturity and trustworthiness, suitable for its enterprise audience.

T

The Compatriot Johann Puch - Janez Puh Juršinci Society

janez-puh.si

36

The Compatriot Johann Puch - Janez Puh Juršinci Society operates as a small non-profit organization focused on preserving the legacy of Johann Puch through museum management and cultural promotion in Slovenia. The website serves as an informational portal for the museum, society activities, and related heritage content, targeting general audiences interested in historical and technical heritage. The society has established partnerships with local government and corporate sponsors, enhancing its community presence. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript with jQuery and Modernizr, but lacks modern CMS or advanced frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. The site is accessible without WAF or blocking mechanisms, but lacks advanced security headers and visible SSL configuration details. Security posture is moderate with cookie consent implemented but missing critical elements such as privacy policy, security headers, and incident response contacts. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. The domain WHOIS data aligns well with the website content and business history, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

E

Experience Slovenia | Feel, enjoy, live. Like a local.

experience-slovenia.si

48

Experience Slovenia is a small hospitality business focused on offering tailored Slovenian travel experiences. The website's primary service is booking customized local experiences in Slovenia, targeting general tourists interested in authentic travel. The domain has been registered since 2017, indicating a stable presence in the market. However, the website content is minimal and appears to rely heavily on JavaScript for rendering, with no visible main content in the provided HTML snapshot. Technical infrastructure includes usage of Amazon AWS for hosting and Google Tag Manager for analytics, but lacks visible CMS or frameworks. Security posture is weak due to absence of security headers, privacy policies, and contact information. No forms or data collection mechanisms are visible, limiting exposure but also reducing user engagement and trust. Overall, the site requires significant improvements in content delivery, security, and compliance to enhance its digital maturity and user trust.

The Statistical Office of the Republic of Slovenia (SURS) operates the website www.stat.si as the official government portal for disseminating national statistical data. The site offers a wide range of statistical information including population, economy, labor market, inflation, and other key indicators relevant to Slovenia. It targets researchers, government officials, businesses, and the general public interested in official statistics. The business model is that of a government agency providing public data and services, with a strong market position as the primary national statistics provider in Slovenia. The website content is well-structured, professionally designed, and consistent with government branding.

The Upravno-informacijski servis Celje (UIS) website serves as a regional government portal providing administrative information and services for the Celje area in Slovenia. It aggregates information from various municipal and government bodies to assist citizens with general inquiries related to administrative procedures. The site is primarily informational and targets residents and citizens within the Celje region. Technically, the website uses legacy JavaScript libraries such as jQuery and is hosted behind Cloudflare DNS, though no advanced frameworks or CMS are detected. The site includes a cookie consent mechanism and basic SEO and accessibility features but lacks modern security headers and explicit HTTPS confirmation in the provided data. Security posture is moderate but could be improved with enhanced headers and HTTPS verification. Notably, the WHOIS data shows a domain creation date in the future (2025), which conflicts with website content dated 2020 and earlier, raising concerns about the accuracy of domain registration information. Additionally, the presence of gambling-related promotional content is unusual for a government site and may affect content safety perception. Overall, the site is functional and moderately trustworthy but would benefit from improved security practices, clearer contact information, and correction of WHOIS inconsistencies.

A

Alumni Association

alumni-association.de

57

The website represents an Alumni Association based in Germany, likely serving a small community of alumni members. The business appears to be a non-commercial or community-focused entity with limited public-facing services. The website is powered by TYPO3 CMS and integrates Cookiebot for cookie consent management, indicating a basic level of digital maturity and compliance with cookie regulations. However, the absence of explicit privacy and terms of service pages limits its compliance posture. Technically, the site uses modern web technologies but lacks visible security headers and SEO optimization, which could impact discoverability and security. The security posture is moderate with HTTPS implied but no advanced security practices evident. Overall, the site is functional but would benefit from enhanced compliance documentation and security hardening.

Č

Časnik Finance - poslovni dnevnik, novice, dogodki

finance.si

63

Finance.si is the largest Slovenian online media platform dedicated to business and financial news, operated by Časnik Finance. Established in 2001, it serves a broad audience of business professionals and the general public interested in finance. The website offers news, events, and other media content focused on the Slovenian market. Technically, the site employs modern web technologies including Google Analytics, TikTok analytics, and Google Tag Manager, with a custom or proprietary CMS. The site is hosted by HITROST.COM and uses HTTPS with good security headers, ensuring secure and reliable access. However, explicit privacy and terms of service pages were not found in the provided content, though a cookie consent mechanism is implemented. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

M

Mladinski center Šentjur

mladi-sentjur.si

62

Mladinski center Šentjur is a Slovenian non-profit youth center focused on empowering young people through education, skill development, and community engagement. The organization provides logistical, technical, and content support for youth activities and runs various projects and events aimed at youth development. The website reflects a well-structured platform with clear navigation, event listings, and active social media integration, targeting youth in the Šentjur region. Technically, the site uses standard web technologies and a CMS platform, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy policies, terms of service, and security headers, which are recommended for compliance and trust. Overall, the domain registration is consistent and long-standing, supporting the legitimacy of the organization.

K

Kabi d.o.o.

homeoffice.si

56

Kabi d.o.o. operates the Kabi Home Office platform, a cloud-based solution designed to facilitate effective remote work for small and medium-sized enterprises primarily in Slovenia. Their offerings include collaboration tools, project management, work time tracking, and email marketing, complemented by professional IT services such as business email hosting and security solutions. The company positions itself as a comprehensive provider of flexible and secure business tools for remote work environments. Technically, the website is built on a modern stack with HTML5, CSS3, JavaScript, and uses Google Fonts and Bootstrap components. The site is mobile-optimized and uses a CMS likely BCMS. Performance is moderate with good accessibility and basic SEO. Security best practices include HTTPS enforcement, CAPTCHA on forms, and a cookie consent mechanism, though some security headers and policies are missing. The security posture is solid but could be improved by publishing explicit privacy, security, and incident response policies. No vulnerabilities or exposed sensitive data were detected. The site is free from WAF blocking or security challenges, allowing full content access. Overall, the website is professional, trustworthy, and well-suited for its target audience, though it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

K

KABI d.o.o.

antivirus.si

55

The website antivirus.si represents KABI d.o.o., a Slovenian company founded in 2005, offering WithSecure branded cybersecurity solutions primarily targeting businesses. Their key offerings include endpoint protection (EPP), endpoint detection and response (EDR), centralized cloud-based security management, and patch management services. The site is professionally designed with clear calls to action, including a 30-day free trial, and is localized in Slovenian for the local market. Technically, the site uses standard web technologies with a CMS likely BCMS, and integrates cookie consent mechanisms but lacks advanced SEO and accessibility features. Security posture is moderate with CAPTCHA on forms and cookie consent but lacks published privacy policies, security headers, and incident response information. The domain registration data is consistent with the business, indicating legitimacy and stability. Overall, the site scores well on business credibility and content quality but could improve in privacy compliance and security best practices.

K

Kabi d.o.o.

agent1.si

56

Agent1.si is a professional website operated by Kabi d.o.o., offering a specialized CRM software solution tailored for real estate agencies and agents primarily in Slovenia and Southeast Europe. The platform focuses on digitalizing real estate agency operations, integrating portfolio management, project management, document handling, marketing, and AI features. The company positions itself as a leading provider in its niche with a mature domain and consistent branding. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Slick Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, serving a clear business purpose in the real estate technology sector.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.