Security Directory

P

Pro Market

promarket.org

58

ProMarket is an academic publication affiliated with the Stigler Center at the University of Chicago Booth School of Business, focusing on economic research and policy insights shaping the future of capitalism. The website serves a niche audience of academics, economists, policymakers, and informed readers interested in market economics and capitalism. It operates as a non-profit publication platform, disseminating research and analysis with authoritative backing from a prestigious university center. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. Overall, the site demonstrates professionalism, trustworthiness, and consistent branding, though it could improve privacy compliance and security best practices.

T

The Register

theregister.co.uk

70

The Register is a well-established online technology news and analysis publication targeting IT decision-makers and professionals in the enterprise technology sector. It operates under Situation Publishing and maintains a portfolio of related technology media sites. The website offers a broad range of content including news articles, opinion pieces, special features, vendor voices, webinars, whitepapers, and newsletters, positioning itself as a trusted source in the technology media landscape. The site demonstrates professional design, clear navigation, and mobile optimization, supporting a positive user experience and strong content relevance. Technically, the website employs modern JavaScript libraries and Google services for analytics and advertising, with HTTPS enforced ensuring secure communications. While no explicit CMS or hosting provider is identified, the site performs moderately well with good SEO and accessibility features. Security headers are not explicitly detected, and no vulnerability disclosure or incident response information is published, suggesting areas for improvement in security transparency. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of published security policies and incident response contacts limits comprehensive security assurance. Privacy and cookie policies are present and comprehensive, indicating good privacy compliance. Advertising and tracking are standard for media sites, with Google AdSense and Tag Manager in use. Overall, the website is legitimate and trustworthy, supported by its long operational history and professional presentation. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's credibility. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure information, and improving security headers to further strengthen the security posture.

P

POLITICO

politico.com

74

POLITICO is a leading media organization specializing in political news, policy analysis, and political journalism. It serves a broad audience interested in politics and government affairs, offering a variety of content including news articles, newsletters, podcasts, and video. The website demonstrates a strong market position as a trusted source for political information with a large and diverse content offering. Technically, the site uses a modern technology stack including JavaScript frameworks, video players, and privacy management tools, hosted on a secure HTTPS platform with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no obvious vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though the lack of WHOIS data is a minor anomaly likely due to privacy protection. Strategic recommendations include publishing explicit security and incident response information, adding vulnerability disclosure mechanisms, and enhancing transparency around data retention and privacy practices.

A

Ayuntamiento de Avilés

avilesvoluntariado.org

47

Avilés Voluntariado is a municipal government initiative by the Ayuntamiento de Avilés, Spain, focused on promoting and coordinating volunteer activities within the city. The website serves as an information hub connecting volunteers with local entities and projects, offering training, recognition, and resources to foster community participation. The platform is positioned as a trusted local government service with a clear target audience of citizens interested in volunteering and social engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, BuddyPress, and various plugins for community and GDPR compliance. It is hosted by Acens Technologies, S.L.U., and uses HTTPS with a good security posture, although some security headers could be improved. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing discoverability. From a security perspective, the site demonstrates solid practices such as HTTPS enforcement, GDPR cookie consent, and secure form handling. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's municipal nature, showing consistent registration details and no privacy protection, which is appropriate for a public entity. Overall, the website is professional, trustworthy, and well-maintained, serving its community-oriented mission effectively. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

D

Drugi svet d.o.o.

polovicka.si

50

Polovička.si is a Slovenian e-commerce platform specializing in local deals, gift vouchers, and event promotions primarily targeting consumers in the Celje and Kozjansko regions. The business operates under Drugi svet d.o.o., a small-sized company established in 2012. The website leverages WordPress and WooCommerce technologies, integrating common plugins for social login and email marketing. The platform offers a user-friendly experience with good mobile optimization and clear navigation, supporting local consumers seeking discounted offers. Technically, the site is moderately performant and uses HTTPS with Cloudflare DNS, but lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Contact information is clearly presented, though no phone number is provided. The site maintains a safe content profile with no adult or questionable material. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness.

I

Izdelava spletnih strani, Miha Omejc s.p.

mihaomejc.com

57

Miha Omejc is a seasoned web designer and frontend developer based in Slovenia, offering a comprehensive range of web services including design, programming, e-commerce solutions, SEO optimization, hosting, and consulting. The business operates as a small sole proprietorship with over 20 years of experience and a strong portfolio of completed projects, positioning itself as a reliable and experienced service provider in the Slovenian market. The website is professionally designed with clear navigation and relevant content targeting businesses and agencies seeking web development services. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile optimized and SEO conscious, although performance is moderate. Hosting is supported by Cloudflare DNS and NameCheap registrar, indicating a stable infrastructure. However, there is room for improvement in accessibility and security best practices. From a security perspective, the site lacks visible security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, enhancing trustworthiness. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and compliance documentation to improve its security posture and regulatory adherence.

M

Madbox • Mitja Krančan s.p., oblikovanje in spletne strani

madbox.si

42

Madbox • Mitja Krančan s.p. is a small Slovenian business specializing in modern web design and graphic design services, focusing on mobile-optimized websites and promotional materials. The company targets local businesses and individuals seeking creative and responsive digital solutions. The website is professionally designed using WordPress with Elementor and includes interactive elements such as sliders and animations. Technical infrastructure is modern and includes SEO optimization via Yoast and security measures like HTTPS and Google reCAPTCHA on forms. However, the site lacks explicit privacy and cookie policies, which impacts compliance and trust. Security posture is adequate but could be improved with additional headers and direct contact information for incident response. Overall, the business presents a credible and professional image with room for enhanced privacy and security practices.

E

Escape Room Enigmarium Ljubljana

escape-room.si

41

Escape Room Enigmarium Ljubljana operates a well-established and highly rated escape room entertainment center in Ljubljana, Slovenia. Founded in 2014, it offers immersive physical escape games, team building events, and online gamification experiences. The business holds notable industry recognition such as Terpeca nominations and maintains a strong presence on social media and review platforms like TripAdvisor. Technically, the website is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. Security posture is solid with HTTPS, cookie consent management, and bot protection, though some HTTP security headers could be improved. Privacy compliance is robust, with clear cookie policies and GDPR adherence. Overall, the site reflects a professional, trustworthy, and user-friendly digital presence.

E

Emigma d.o.o.

emigma.com

60

Emigma d.o.o. is a Slovenian digital solutions company with over 20 years of experience, specializing in web and mobile applications across various industries including transportation and healthcare. The company positions itself as a reliable partner offering tailored digital products such as intranet platforms and warehouse management systems. Their website reflects a professional and consistent brand image with clear business information and client references. Technically, the site is built on WordPress with modern libraries like jQuery and FontAwesome, and integrates Google Tag Manager for analytics. While the site is mobile optimized and SEO friendly, it lacks some advanced security headers and formal privacy and terms policies. The domain registration is consistent with the business claims, enhancing trustworthiness.

S

Slovenske železnice d.o.o.

zelezniskimuzej.si

46

Železniški muzej is a Slovenian railway museum operated by Slovenske železnice d.o.o., showcasing the history and heritage of railway transport in Slovenia. The museum offers permanent exhibitions, guided tours, and educational programs targeting the general public, railway enthusiasts, and tourists. The website is professionally designed using WordPress and modern front-end technologies, providing good user experience and mobile optimization. Social media integration and clear contact information enhance its digital presence. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy compliance mechanisms. Overall, the website is trustworthy and serves its cultural and educational mission effectively.

Prometni institut Ljubljana d.o.o is a well-established Slovenian research and development organization specializing in transport, particularly railway transport. The company operates as part of the Slovenske železnice group and holds a leading position in national and international transport research projects. Their services encompass transport technology, infrastructure, economic and legal research, investment documentation, and digitalization in transport. The website reflects a professional and credible business with clear contact information, GDPR-compliant privacy and cookie policies, and ISO 9001:2015 certification, reinforcing trust. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms for data collection, jQuery, and various UI libraries. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. HTTPS is enforced, and no critical vulnerabilities or suspicious domains were detected. The site uses a cookie consent mechanism and collects minimal user data primarily via a contact form. Security posture is solid with HTTPS and spam protection on forms, but lacks publicly available incident response or vulnerability disclosure information. The domain is long-standing and consistent with the business profile, indicating high legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website presents a trustworthy, professional, and secure digital presence for a medium-sized transport research entity. Strategic improvements could include enhanced security headers, publishing security policies, and adding vulnerability disclosure channels to further strengthen security and compliance.

S

SŽ – Vleka in tehnika, d.o.o.

sz-vit.si

55

SŽ – Vleka in tehnika, d.o.o. is a medium-sized Slovenian company specializing in railway vehicle maintenance, train towing, and technical wagon services. It operates as a subsidiary of the Slovenske železnice group, providing comprehensive maintenance, overhaul, wheelset processing, mobile service, and engineering consulting. The company holds multiple ISO certifications, indicating a commitment to quality, environmental management, and occupational health and safety. The website is professionally designed with multilingual support, clear navigation, and detailed contact information, targeting railway operators and transportation sector clients. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Maps API, and Google Tag Manager. It is hosted behind Cloudflare, ensuring good performance and security. The site includes accessibility features and cookie consent mechanisms compliant with GDPR. However, explicit security headers could be improved, and no dedicated security or incident response pages were found. The security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the business profile, having been registered in 2012 and matching the company branding. No suspicious WHOIS patterns were detected. Overall, the website presents a trustworthy and professional digital presence for the company. Strategic recommendations include enhancing security headers, publishing an incident response policy, and adding a vulnerability disclosure mechanism to further improve security and trust.

SŽ-ŽIP, storitve, d.o.o. is a medium-sized Slovenian company founded in 2002, operating as a subsidiary of Slovenske železnice. The company focuses on providing socially responsible employment for disabled railway workers and offers a range of services including comprehensive facility management, vehicle fleet management, production and trade activities, and accommodation services. The website is professionally designed, consistent with the brand, and targets both internal Slovenske železnice stakeholders and external clients requiring related services. Technically, the site is built on WordPress with modern libraries and APIs such as Google Maps and Leaflet, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business profile, indicating legitimacy.

F

Fersped d. o. o.

fersped.si

56

Fersped d. o. o. is a Slovenian logistics and transportation company established in 1997, leveraging its strategic geographic location and strong transport connections to provide fast, comprehensive, and modern logistics solutions to its customers and partners. The company positions itself as a reliable service provider within the transportation sector, targeting business clients requiring efficient logistics services. The website reflects a professional and consistent brand image with clear messaging about its services and business focus. Technically, the site is built on WordPress with modern libraries and plugins such as Google Analytics, Google Tag Manager, and FontAwesome, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. Security posture is decent with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and formal security or privacy policies, which are recommended for compliance and trust enhancement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Visit Celje

visitcelje.eu

41

Visit Celje is a regional tourism promotion website dedicated to showcasing the cultural, historical, and recreational attractions of Celje city in Slovenia. The site offers detailed information on events, experiences, accommodations, and local cuisine, targeting tourists and visitors interested in exploring the city. The business model includes tourism promotion and an online shop for related products, positioning itself as a key regional tourism resource. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as jQuery, Google Maps API, and Google Fonts. The site is mobile-optimized and provides multi-language support, enhancing accessibility for international visitors. Security-wise, the website enforces HTTPS and uses Google reCAPTCHA, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and user trust. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

A

Ayuntamiento de Avilés

avilesparticipa.org

46

Avilés Participa is a government-backed community participation and social change project managed by the Ayuntamiento de Avilés in Spain. The website serves as a platform to engage local citizens, provide information on community projects, events, and volunteering opportunities, and facilitate participation in municipal budget proposals and local councils. The site is well-branded, consistent, and targets the local population with relevant content and resources. Technically, it is built on WordPress with a modern tech stack including Bootstrap, BuddyPress, and various plugins for enhanced functionality. The site is hosted by Acens Technologies and uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Security best practices are partially implemented, with room for improvement in security headers and vulnerability disclosure. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Računsko sodišče Republike Slovenije

rs-rs.si

60

Računsko sodišče Republike Slovenije is the supreme audit institution responsible for auditing public funds and ensuring transparency in the management of state finances in Slovenia. The website serves as an official platform to publish audit reports, ongoing audits, and related information for government officials, media, and the public. The institution holds a strong market position as a government entity with a long-established domain since 1998, registered under the Ministry for Digital Transformation. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as jQuery, Splide.js, and Bootstrap, providing a responsive and accessible user experience. The site is well-structured with clear navigation and SEO-friendly metadata. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is moderate with a clear privacy policy present but no visible cookie consent mechanism. Contact information is comprehensive and trustworthy, including official emails and phone numbers. No advertising or tracking services are detected, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and serves its government oversight function effectively. Strategic improvements in security headers and privacy mechanisms could enhance its security and compliance posture further.

D

Državni svet Republike Slovenije

ds-rs.si

54

The website ds-rs.si is the official online presence of the National Council of the Republic of Slovenia, a governmental institution responsible for legislative consultation and representation of various social interests. The site provides comprehensive information about the council's members, activities, news, events, and contact details, targeting Slovenian citizens and government stakeholders. It maintains a consistent and professional brand image aligned with its official status. Technically, the website is built on Drupal 9 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and Font Awesome. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure reflects a mature digital presence suitable for a government entity. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible incident response or security policy information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The domain registration is consistent with a Slovenian government ministry, reinforcing legitimacy and trust. Overall, the website is a trustworthy and authoritative source of governmental information with room for improvement in security best practices and privacy compliance to enhance user trust and regulatory adherence.

A

Agencija „Gerila ADV“

pressek.rs

61

Pressek.rs is a regional Serbian news portal focused on delivering timely and truthful news from Kragujevac and the Šumadija region. Operated by Agencija „Gerila ADV“, the site offers local news, cultural events, sports updates, job listings, and real estate advertisements, targeting residents and stakeholders in the region. The business model relies primarily on advertising and sponsored listings. Technically, the website uses modern web technologies including Google Analytics, Facebook Pixel, Google Fonts, and a CMS platform likely BCMS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used, but DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is a functional and professional local news outlet with room for improvement in security and privacy compliance.

N

Nimaint

radiorogla.si

41

Radio Rogla is a regional Slovenian media company operating a radio station with live streaming, music charts, and local news content. The website targets the general public in the Štajerska region, providing entertainment and community engagement through various digital channels. The business model centers on media broadcasting with advertising and community-driven content. Technically, the site is built on WordPress with Elementor and WooCommerce plugins, integrating Google Analytics and Google Maps APIs, reflecting a moderate level of digital maturity. The website is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and anonymized Google Analytics tracking; however, it lacks security headers and visible privacy or cookie policies, indicating compliance gaps. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

Projekt O.S.P.

projektosp.si

36

Projekt O.S.P. is a Slovenian non-profit initiative dedicated to the maintenance and safety of climbing sites. It engages the climbing community through donations, volunteering, and awareness campaigns to ensure climbing areas remain safe, accessible, and well-maintained. The website serves as an information hub and donation platform, supported by local climbing organizations and sponsors. Technically, the site is built on WordPress with common plugins and integrates Google Analytics and Adsense for tracking and monetization. While the site uses HTTPS and standard security practices, it lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance. The domain registration is consistent with the organization's Slovenian focus, enhancing trustworthiness. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening.

P

Planinska zveza Slovenije

worldcupslo.com

42

The website worldcupslo.com serves as the official platform for the World Cup in sport climbing held in Koper, Slovenia, organized by Planinska zveza Slovenije. It provides comprehensive event information including schedules, results, news, sponsor details, and multimedia content targeting sport climbing enthusiasts and the general public interested in this sport. The site is well-branded and supported by recognized sponsors and partners, establishing a strong market position within the sport event domain in Slovenia. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and offers good navigation and content relevance. However, performance is moderate and accessibility features are basic, indicating room for technical improvements. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no published privacy or cookie policies, which is a compliance gap. No incident response or vulnerability disclosure mechanisms are evident. The domain registration is transparent and consistent with the website's purpose, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

K

KÜS Service GmbH

kues-service.de

57

KÜS Service GmbH is a German-based full-service provider specializing in operational safety and compliance services for businesses. Their offerings include occupational safety, occupational medicine, accident prevention, electrical inspections, fire protection, and data protection. The company is part of the larger KÜS group, which includes several related subsidiaries and service domains. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. Social media presence and contact information are prominently displayed, enhancing trust and accessibility. Technically, the website employs modern web technologies and plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site is HTTPS secured with no visible security vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no dedicated security or incident response policies are published. Cookie consent mechanisms are implemented, indicating GDPR awareness. Overall, the security posture is solid but could be improved by adding security headers and formal incident response information. The business credibility is high, supported by consistent branding, clear contact details, and a comprehensive service portfolio. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, publishing security policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.

K

KÜS Technik GmbH

kues-technik.de

56

KÜS Technik GmbH is a specialized technical service provider in the automotive sector, officially recognized by the German Kraftfahrt-Bundesamt. The company offers expert services including part approvals, individual vehicle approvals, and technical assessments for manufacturers, importers, and private individuals. Their market position is supported by official designations and a broad portfolio of services related to vehicle parts and modifications. The website reflects a medium-sized enterprise with consistent branding and professional content tailored to a German-speaking audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers and policies could be enhanced. Overall, the site is trustworthy, professional, and well-maintained.

Α

ΑΧΑΪΑ ΑΝΑΠΤΥΞΙΑΚΗ Α.Ε.

achaiasa.gr

48

ΑΧΑΪΑ ΑΝΑΠΤΥΞΙΑΚΗ Α.Ε. is a regional development agency operating primarily in the Achaia region of Greece. The company focuses on the implementation and management of EU-funded rural and fisheries development programs such as LEADER and CLLD. It serves local government entities, agricultural and fisheries stakeholders, and local communities by facilitating sustainable development projects and partnerships. The website reflects a solid regional presence with clear information on programs, news, and contact details. Technically, the site is built on Joomla CMS with common JavaScript libraries and includes accessibility and cookie consent features, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and updating legacy libraries. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and serves its target audience effectively.

Ι

Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας

imkalaig.com

51

The website www.imkalaig.gr serves as the official online presence of the Ιερά Μητρόπολις Καλαβρύτων & Αιγιαλείας, a Greek Orthodox Metropolis. It provides comprehensive information about the Metropolis, including the Metropolitan Bishop, churches, monasteries, religious events, philanthropic activities, and community services. The site targets local parishioners, religious followers, and visitors interested in the ecclesiastical and cultural heritage of the region. The business model is non-profit and government-related, focusing on community engagement and religious service dissemination. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Three.js and Slick Carousel for interactive content. It is built on a CMS platform likely provided by New Media Soft, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly present, and there is room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, confirming legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers and accessibility could further enhance its posture.

Φ

Φορέα Διαχείρισης Χελμού – Βουραϊκού

fdchelmos.gr

52

The website represents the Management Body of Chelmos-Vouraikos, a governmental/non-profit organization responsible for managing 12 protected Natura 2000 areas in Northern Peloponnese, Greece. It serves as a UNESCO Global Geopark, combining natural and cultural heritage with scientific, educational, and tourism infrastructure to promote sustainable local development. The site targets the general public, tourists, researchers, and environmental educators. Technically, the site is built on WordPress using modern plugins like Yoast SEO and Elementor, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism but missing privacy and terms of service pages. Overall, the domain registration is consistent with the organization's profile, indicating legitimacy and trustworthiness.

Ο

Οδηγός του Πολίτη

odigostoupoliti.eu

53

Οδηγός του Πολίτη is a Greek-language informational website providing citizens with timely and reliable information about their interactions with public administration. It is a private initiative by a small scientific team without affiliation to any public entity. The site offers news, legal updates, public service information, and employment opportunities primarily targeting Greek citizens. Technically, it is built on WordPress with common SEO and analytics plugins, including Google Analytics and AdSense for monetization. The site is accessible, mobile-optimized, and uses HTTPS, but lacks explicit privacy and cookie policies. Security posture is adequate with no obvious vulnerabilities, though some security headers could be improved. Overall, the site is legitimate and trustworthy for its informational purpose, but could enhance privacy compliance and contact transparency.

M

Municipality of Kalavrita

kastriacave.gr

37

The website www.kastriacave.gr is an official tourism and cultural heritage site managed by the Municipality of Kalavrita, Greece, promoting the Cave of the Lakes attraction. It provides detailed information about the cave's natural, paleontological, and anthropological significance, along with visitor information and local tourism services. The site targets tourists and researchers interested in natural and cultural heritage. Technically, it is built on Joomla CMS with the Helix framework, uses standard web technologies like jQuery, and integrates Google Analytics for visitor tracking. The site is mobile responsive and has a professional design with clear navigation. Security-wise, the site uses HTTPS but lacks security headers and does not provide privacy or cookie policies, indicating GDPR compliance gaps. No forms or email contacts are present, limiting direct user data collection. Overall, the site is legitimate and trustworthy but could improve privacy and security practices.

A

AECM - European Association of Guarantee Institutions

aecm.eu

45

AECM is a well-established European non-profit association representing guarantee institutions. Founded in 1992, it serves as a platform for knowledge exchange and advocacy towards EU institutions. The website reflects a professional and consistent brand image, targeting financial institutions and stakeholders in the European guarantee sector. The business model is membership-based, focusing on promoting guarantee instruments and facilitating collaboration among members. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several reputable plugins. Hosting is provided by OVH SAS, a known provider. The site demonstrates good digital maturity with mobile optimization, SEO best practices, and cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is trustworthy and professionally maintained, with clear contact information and transparent policies.

D

Društvo za razvoj podeželja med Snežnikom in Nanosom

las-snezniknanos.si

46

The website represents a Slovenian local action group focused on rural development between the Snežnik and Nanos regions. It operates as a non-profit organization facilitating regional projects, cooperation, and community engagement, primarily funded through EU and national programs. The site provides structured information about projects, calls for funding, and organizational details, targeting local municipalities and stakeholders. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and some UI libraries like Slick Carousel and Shadowbox. The site is moderately optimized for mobile devices and has a clear navigation structure but lacks advanced CMS or modern frameworks. Security posture is basic with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is not explicitly provided, limiting user engagement channels. Overall, the site is functional and professional but could improve in privacy compliance, security best practices, and contact transparency.

V

Verkehrsverbund Oberelbe

vvo-online.de

54

Verkehrsverbund Oberelbe (VVO) operates as a regional public transportation authority providing integrated ticketing and mobility services for Dresden and its surrounding areas. The website serves as a comprehensive mobility portal offering timetable information, ticket sales, service updates, and accessibility features. The target audience includes residents and visitors relying on buses, trams, S-Bahn, and ferries within the VVO region. The business model focuses on facilitating seamless public transport usage through digital tools and customer service. Technically, the website employs a modern JavaScript stack with accessibility enhancements such as Eye-Able tools and uses Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no visible security vulnerabilities and demonstrates good SEO and accessibility practices, though mobile optimization is basic. The content is well-structured, multilingual, and professionally presented, supporting a positive user experience. From a security perspective, the site benefits from HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional platform for regional public transport users, with recommendations to improve privacy compliance and security transparency to further strengthen its posture.

T

teilAuto

teilauto.net

58

teilAuto is a well-established carsharing provider operating primarily in the German states of Sachsen, Sachsen-Anhalt, and Thüringen. Founded in 1998, the company offers a range of vehicle classes with a pay-per-use model that includes fuel costs, accessible via a dedicated mobile app and web platform. The website reflects a professional and consistent brand image, emphasizing sustainability and community values, including a notable Gemeinwohl certification. Technically, the site is built on the Contao CMS with modern JavaScript libraries and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and domain transfer protections, though some enhancements like DNSSEC and security headers could improve resilience. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site is user-friendly, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

C

Center Noordung

misijavesolje.si

50

Center Noordung operates an innovative, gamified escape room experience called 'MISIJA: POBEG V VESOLJE' located in Vitanje, Slovenia. The business targets families and groups with a space-themed adventure that combines escape room elements with space technology storytelling. The website is professionally designed using WordPress and Elementor, featuring multilingual support and integrated booking functionality. The technical infrastructure is modern and well-maintained, hosted by NEOSERV.si, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The domain registration is recent but consistent with the business launch, and no suspicious indicators were found. Overall, the site presents a trustworthy and professional digital presence for a niche hospitality entertainment provider.

S

Slovenske železnice

sz.si

63

Slovenske železnice is a large Slovenian railway group providing comprehensive rail mobility and logistics services, including passenger and freight transport, infrastructure management, and construction. The company operates through a network of nine subsidiaries, positioning itself as a leading national transport and logistics provider. The website reflects a professional corporate presence with clear business information and a focus on service offerings. Technically, the site is built on WordPress with modern libraries and SEO tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

L

Ljubljana Airport

lju-airport.si

49

Ljubljana Airport operates as the primary international airport in Slovenia, providing comprehensive flight information, travel destinations, and airport services to passengers and partners. The website is well-structured, professionally designed, and targets travelers and business partners with relevant content and services. The technical infrastructure leverages SilverStripe CMS, Azure DNS hosting, and modern web technologies ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is robust with GDPR-aligned policies and consent management. Overall, the website reflects a mature digital presence consistent with a medium-sized transportation entity.

A

Amebis, d. o. o.

secondego.com

62

SecondEGO is a Slovenian language specialized digital assistant chatbot developed by Amebis, d. o. o., targeting businesses and organizations requiring advanced chatbot solutions with linguistic accuracy. The platform emphasizes ease of training and cost-effectiveness, enabling clients to manage chatbot knowledge without expensive programmers. The website is built on WordPress using Elementor and OceanWP theme, showing good technical maturity with modern libraries and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features such as cookie consent and privacy policy. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and contact information appear professional and trustworthy. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

O

Občina Vojnik

vojnik.si

39

Občina Vojnik is the official municipal government website for the Vojnik municipality in Slovenia, providing residents, businesses, and visitors with comprehensive information about local governance, community services, tourism, and public projects. The site is well-structured and targets local citizens and stakeholders, offering access to forms, announcements, and contact details. The website is built on WordPress, leveraging common web technologies such as jQuery and Font Awesome, and is hosted under a Slovenian registrar consistent with its local government identity. The site demonstrates good digital maturity with mobile optimization and accessibility features, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved with additional security policies and headers. Overall, the website is trustworthy and professional, serving its purpose effectively as a government information portal.

O

Občina Štore

store.si

55

Občina Štore is the official municipal government website for the municipality of Štore in Slovenia. It provides a comprehensive range of e-government services including electronic applications, online tax payments, local news, event calendars, public tenders, and contact forms. The website targets residents and stakeholders of the municipality, facilitating digital interaction with local government. The business model is focused on public service delivery and community engagement, positioning itself as a trusted local government portal. The website is well-branded with consistent municipal imagery and structured data for enhanced search engine understanding. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and TinyMCE, and uses JSON-LD structured data for organization information. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and navigation clarity. Performance is moderate, with room for optimization. Hosting details are not explicitly available, but the site uses HTTPS ensuring encrypted communication. From a security perspective, the website enforces HTTPS and uses secure libraries, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. There is no visible incident response or vulnerability disclosure policy, which could be improved to enhance security posture. Privacy compliance is good with a clear GDPR policy, but the absence of a cookie consent mechanism is a compliance gap. No suspicious or malicious content was detected, and the site maintains a high trustworthiness level. Overall, Občina Štore presents a professional, secure, and user-friendly municipal portal with strong business credibility. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance its security and compliance standing.

M

Mestna občina Celje

celje.si

39

Mestna občina Celje is the official website of the City Municipality of Celje, Slovenia, providing comprehensive information about local government administration, public services, community projects, and citizen resources. The site targets residents, local businesses, and visitors interested in municipal affairs. It operates as a government entity with a medium-sized organizational scope and a well-established presence since 1996. The website uses Joomla CMS with common web technologies such as jQuery and MooTools, and integrates Google Analytics for visitor tracking. The design and content quality are good, with clear navigation and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professionally maintained, serving its public service role effectively.

D

DPK - dravinjski poslovni klub

dpk.si

45

DPK - dravinjski poslovni klub is a Slovenian regional business club focused on connecting executives, entrepreneurs, and craftsmen in the Dravinjska Valley. The club operates as a non-profit entity facilitating networking, events, and business collaboration among its members. The website reflects a small-sized organization with a clear regional focus and a business networking model. Technically, the site is built on WordPress using Astra theme and Elementor page builder, with additional plugins like Yoast SEO and Smart Slider 3, hosted by a Slovenian provider NEOSERV.si. The site is mobile optimized and performs moderately well, with good SEO practices in place. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and formal security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

FRÄNKISCHE Rohrwerke is a manufacturing company specializing in corrugated pipes and pipe systems, operating under the FRÄNKISCHE Group umbrella. The website presents a professional and well-structured digital presence targeting industrial and commercial customers. It offers multilingual support and detailed product information, reflecting a mature business model focused on B2B manufacturing solutions. The company maintains a consistent brand image and provides comprehensive privacy and cookie policies, demonstrating awareness of regulatory compliance. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper, and integrates cookie consent management via Cookiebot. The site is secured with HTTPS and employs tracking and advertising tools from reputable providers including Facebook, LinkedIn, and Etracker. Security posture is solid with no critical vulnerabilities detected, though improvements in security headers and explicit incident response disclosures are recommended. Overall, the website reflects a legitimate and trustworthy business with a good balance of content quality, technical implementation, and privacy compliance.

H

Hitrost.com

hitrost.com

58

Hitrost.com is a Slovenian-based technology company specializing in domain registration and various hosting services including web hosting, reseller hosting, email hosting, VPS hosting, and SSL certificates. The company positions itself as a cost-effective provider leveraging modern technologies such as LiteSpeed web servers and Imunify360 security solutions to deliver performance and security. The website is professionally designed using WordPress CMS with popular plugins, offering a good user experience and clear navigation. Contact information and social media presence are prominently displayed, enhancing business credibility. Technically, the website employs a modern tech stack with WordPress 6.8.1, WPBakery Page Builder, and Slider Revolution. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is decent with HTTPS enforced and use of Imunify360, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and maintained website. This inconsistency impacts trust and suggests the need for further verification. Overall, the site is functional and professional but would benefit from improved transparency and security best practices. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, clarifying incident response procedures, and verifying domain registration details to enhance trust and compliance.

K

Komunala vitanje

komunala-vitanje.si

48

Komunala Vitanje is a small municipal utility company based in Slovenia, providing essential public services such as potable water supply, wastewater management, road maintenance, public area upkeep, and funeral services. The website reflects a local public utility business with a clear focus on community service and environmental stewardship. The company appears to be well-established since 2017 and targets residents and businesses within the Vitanje municipality. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Analytics and CookieYes for cookie consent shows attention to user experience and privacy compliance. Security posture is good with HTTPS enforced and appropriate security headers, though the absence of a public security policy or incident response information suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving its audience effectively.

DarsGo is a Slovenian government-operated portal dedicated to tolling vehicles over 3500 kg. It provides comprehensive services including vehicle and customer registration, toll calculation, payment options, and user support. The website is well-branded and consistent with the parent company DARS d.d., serving as the primary toll system operator in Slovenia. Technically, the site uses a modern Angular framework with supporting libraries such as Bootstrap and PrimeNG, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with secure login forms and cookie consent mechanisms, though explicit security policies and headers are not publicly visible. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the site is professional, trustworthy, and serves its target audience effectively.

O

Oxfam-Magasins du monde

oxfammagasinsdumonde.be

55

Oxfam-Magasins du monde is a well-established Belgian non-profit organization focused on promoting fair trade and social justice through retail shops, campaigns, and volunteer engagement. The website reflects a mature digital presence with a clear organizational structure and multiple subdomains targeting different audience segments such as volunteers, businesses, and youth. The technical infrastructure is based on WordPress CMS with modern libraries like Swiper.js and Leaflet.js, hosted by OVH, a reputable provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, including a cookie consent banner. However, some security headers could be improved, and no explicit incident response contacts or vulnerability disclosure mechanisms were found. Overall, the domain registration data aligns well with the organization's history and legitimacy, supporting a high trust level.

E

Experian Information Solutions, Inc.

businesscreditfacts.com

68

BusinessCreditFacts.com presents itself as a comprehensive resource for business credit information, primarily affiliated with Experian Information Solutions, Inc. The website offers business credit reports, educational content, and tools aimed at small business owners and companies seeking to understand and improve their business credit profiles. The site leverages modern web technologies including jQuery, Bootstrap, and Coveo Search UI to deliver a responsive and user-friendly experience. While the content quality and design are good, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the strong branding and trust signals associated with Experian. Security posture is solid with HTTPS and secure forms, but could be improved with additional security headers and explicit incident response information. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms.

M

MSH Medical School Hamburg – University of Applied Sciences and Medical University

arts-and-social-change.de

54

The website represents the Arts and Social Change faculty of the MSH Medical School Hamburg, an educational institution offering interdisciplinary Bachelor and Master programs focused on art therapy, music therapy, social work, and related fields. The site targets prospective students and professionals interested in the intersection of arts, health, and social sciences. It provides detailed program information, events, and further education opportunities, positioning itself as a niche academic faculty within the German higher education sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hubspot for marketing and analytics. The site is hosted on servers associated with rzone.de and employs HTTPS with a good SSL configuration. Mobile optimization and SEO are well addressed, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Strategic improvements in security headers and incident response transparency could enhance its security posture and trustworthiness further.

J

JCDecaux

jcdecaux.com

56

JCDecaux is a leading global outdoor advertising company founded in 1964 in France. The company operates over one million advertising panels across more than 80 countries, serving advertisers, municipalities, and transport authorities. The website reflects a mature enterprise with a strong market position and comprehensive service offerings in outdoor advertising and street furniture. Technically, the site is built on Drupal 10, uses modern libraries like jQuery, and employs CDN services for performance optimization. The presence of GDPR-compliant consent management and cookie policies indicates good privacy practices. Security posture is solid with HTTPS enforcement and security headers, though explicit security and incident response policies are not publicly detailed. The missing WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.