Security Directory

S

SID - Slovenska izvozna in razvojna banka, d.d., Ljubljana

skladskladov.si

57

Sklad skladov is a Slovenian financial institution managed by SID banka, specializing in providing financing solutions to small, medium, and large enterprises, as well as municipalities and the public sector. The website reflects a professional and well-structured platform that supports EU cohesion policy financial instruments and COVID-19 related funding. The institution holds a strong market position as a key national financial intermediary with a clear focus on innovation, research, and development financing. Technically, the website is built on Drupal 7 with modern front-end technologies, offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high business credibility with clear contact information, certifications, and trust signals such as testimonials and social media presence.

S

Slovenski regionalno razvojni sklad

regionalnisklad.si

44

Slovenski regionalno razvojni sklad (SRRS) is a Slovenian public financial institution dedicated to regional development and rural growth. The organization provides favorable financing through various programs targeting agriculture, entrepreneurship, local infrastructure, and non-profit organizations. The website reflects a well-established institution with a clear market position as a key public funding source in Slovenia. It offers detailed information on financial products, application procedures, and sustainability initiatives, targeting Slovenian businesses, municipalities, and NGOs. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and AOS for animations. It integrates Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and tracking, alongside Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers are not evident, and no public security or incident response policies are found. The WHOIS data is consistent with the website's claims, showing a domain registered in 2020 by a Slovenian registrar, aligning with the organization's timeline. Overall, the website presents a trustworthy and professional public institution with strong content quality and technical implementation. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to improve security posture and transparency.

C

ChargeAfter

chargeafter.com

59

ChargeAfter is a technology-driven finance company specializing in embedded financing and consumer finance solutions through a personalized multi-lender platform. The company positions itself as a key player in the embedded financing market, targeting businesses and consumers seeking flexible financing options. The website reflects a mature digital presence with a WordPress CMS infrastructure, optimized for performance and mobile responsiveness. Integration of multiple analytics and marketing tools indicates a data-driven approach to customer engagement. Security posture is generally good with HTTPS enforced and domain protections in place, though some improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website is professional and trustworthy, with room for enhancement in privacy and security transparency.

S

Splunk LLC

splunk.com

68

Splunk LLC is a leading enterprise technology company specializing in data analytics, security, and observability platforms. Founded in 2003 and headquartered in San Francisco, USA, Splunk offers a comprehensive suite of products including cloud platforms, enterprise security solutions, and observability tools. The company targets large enterprises and organizations seeking to enhance digital resilience and accelerate digital transformation. Splunk holds a strong market position with recognized certifications such as ISO 27001 and SOC 2, and maintains a robust partnership ecosystem including Cisco and its subsidiary AppDynamics. Technically, the website is built on a modern stack leveraging Adobe Experience Manager CMS, Akamai CDN, and advanced analytics and monitoring tools like Google Analytics, Google Tag Manager, and SignalFx RUM. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security best practices are evident with HTTPS enforcement, security headers, and dedicated security advisory pages. From a security posture perspective, Splunk demonstrates a high level of maturity with no detected vulnerabilities or exposed sensitive data. Incident response and vulnerability disclosure mechanisms are in place, though the addition of a security.txt file and explicit Data Protection Officer contact details could enhance transparency. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, Splunk's website and digital presence reflect a professional, trustworthy, and secure enterprise-grade operation. The company’s business credibility is reinforced by comprehensive contact information, certifications, and consistent branding. No adult or questionable content is present, making the site safe for general audiences.

A

Association for Gravestone Studies

gravestonestudies.org

54

The Association for Gravestone Studies is a well-established non-profit organization dedicated to the study and preservation of gravestones internationally. Founded in 1977, it offers educational resources, conferences, publications, and fellowship programs to a niche audience of historians, genealogists, and preservationists. The website reflects a consistent brand and provides clear contact and organizational information. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, hosted on SiteGround, and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy policies are present but basic, hosted externally. Overall, the site is professional, trustworthy, and serves its community effectively.

T

The Compatriot Johann Puch - Janez Puh Juršinci Society

janez-puh.si

36

The Compatriot Johann Puch - Janez Puh Juršinci Society operates as a small non-profit organization focused on preserving the legacy of Johann Puch through museum management and cultural promotion in Slovenia. The website serves as an informational portal for the museum, society activities, and related heritage content, targeting general audiences interested in historical and technical heritage. The society has established partnerships with local government and corporate sponsors, enhancing its community presence. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript with jQuery and Modernizr, but lacks modern CMS or advanced frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. The site is accessible without WAF or blocking mechanisms, but lacks advanced security headers and visible SSL configuration details. Security posture is moderate with cookie consent implemented but missing critical elements such as privacy policy, security headers, and incident response contacts. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. The domain WHOIS data aligns well with the website content and business history, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

P

Planinska zveza Slovenije

pzs.si

43

Planinska zveza Slovenije is a well-established, large non-profit organization dedicated to mountaineering and outdoor activities in Slovenia. It serves a large membership base and manages extensive mountain infrastructure including trails and huts. The website reflects a mature digital presence with rich content, social media integration, and membership services. Technically, the site uses a variety of JavaScript libraries and custom CMS solutions, with moderate performance and basic mobile optimization. Security posture is good with HTTPS and no exposed sensitive data, though improvements in security headers and vulnerability disclosure are recommended. Privacy compliance is addressed with cookie consent and privacy policy. Overall, the domain and website are consistent and trustworthy, supporting the organization's legitimacy.

A

AJPES, Agencija Republike Slovenije za javnopravne evidence in storitve

ajpes.si

58

AJPES is the official Slovenian government agency responsible for maintaining public legal records and providing business-related services such as business registers, financial reports, and official publications. The website serves a broad audience including businesses, government entities, and the general public, offering both free and paid services. It holds a strong market position as the authoritative source for business and financial data in Slovenia. The site is well-branded, consistent, and provides comprehensive content in Slovenian with an option for English. Technically, the website uses a modern technology stack including jQuery, Bootstrap, and Highcharts, hosted behind Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure login mechanisms, though some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with clear cookie consent and privacy policies aligned with GDPR. Overall, the website is professional, trustworthy, and well-maintained, reflecting its government agency status.

L

Life Slovenija

lifeslovenija.si

43

Life Slovenija is an official Slovenian government-supported program focused on environmental protection, nature conservation, and climate change mitigation through the European LIFE financial mechanism. The website serves as a comprehensive information portal providing guidance on project applications, updates on calls, events, and capacity building activities. It is well positioned as a trusted source for stakeholders involved in environmental projects in Slovenia. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Slider Revolution, Google Analytics, and GDPR compliance plugins. The site is mobile optimized, accessible, and performs moderately well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA, and has a cookie consent mechanism. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with minor gaps in privacy and security policy disclosures. Strategic improvements in these areas would enhance compliance and user trust.

The website iobcina.si is a Slovenian government GIS portal managed by Kaliopa d.o.o., providing spatial data and mapping services for numerous municipalities and city municipalities across Slovenia. It offers both anonymous and registered user access, with registered users gaining additional functionalities such as data export, custom drawings, and notifications. The portal is well-established with a domain age since 2005 and a founding company active since 2002, indicating a mature service in the public sector GIS domain. Technically, the site is built on ASP.NET Web Forms with jQuery and Bootstrap, providing a functional but basic user interface with moderate mobile optimization. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers are not detected in the provided data. Privacy and terms of use are comprehensively presented in Slovenian, reflecting GDPR compliance and transparency. Overall, the site is trustworthy and professionally maintained, serving a specialized government audience.

S

Savinjska.info

savinjska.info

48

Savinjska.info is a regional informational portal dedicated to the Savinjska region in Slovenia, providing news, updates, and community information for 31 municipalities. The website serves as a public service platform aiming to connect local governments and citizens, presenting projects and facilitating dialogue. It operates on WordPress with a professional theme and integrates Google Site Kit for analytics and advertising via Google AdSense. The site demonstrates good content quality, clear navigation, and GDPR compliance with privacy and cookie policies in place. However, explicit contact information and detailed security policies are not present. The domain is privacy protected but shows no suspicious patterns and is consistent with the business age and profile.

The Upravno-informacijski servis Celje (UIS) website serves as a regional government portal providing administrative information and services for the Celje area in Slovenia. It aggregates information from various municipal and government bodies to assist citizens with general inquiries related to administrative procedures. The site is primarily informational and targets residents and citizens within the Celje region. Technically, the website uses legacy JavaScript libraries such as jQuery and is hosted behind Cloudflare DNS, though no advanced frameworks or CMS are detected. The site includes a cookie consent mechanism and basic SEO and accessibility features but lacks modern security headers and explicit HTTPS confirmation in the provided data. Security posture is moderate but could be improved with enhanced headers and HTTPS verification. Notably, the WHOIS data shows a domain creation date in the future (2025), which conflicts with website content dated 2020 and earlier, raising concerns about the accuracy of domain registration information. Additionally, the presence of gambling-related promotional content is unusual for a government site and may affect content safety perception. Overall, the site is functional and moderately trustworthy but would benefit from improved security practices, clearer contact information, and correction of WHOIS inconsistencies.

R

Regionalna razvojna agencija Savinjska, d.o.o.

rasr.si

42

Regionalna razvojna agencija Savinjska, d.o.o. is a Slovenian regional development agency established in 2010 by 31 municipalities in the Savinjska region. The organization focuses on fostering a positive development environment by coordinating public, private, and civil society sectors. The website serves as an informational portal highlighting their projects, regional development documents, and contact information. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and accessible, with good SEO practices in place. Security posture is adequate with HTTPS enabled, but could benefit from additional security headers and formal vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy/accessibility statement present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-suited for its governmental and non-profit audience.

The website csd-celje.si operates as a local informational portal primarily targeting Slovenian-speaking audiences. It provides diverse content across categories such as construction, health, business, automotive, and general useful information. The site is built on WordPress, leveraging common plugins like Yoast SEO and jQuery libraries, hosted by a Slovenian provider NEOSERV.si. The domain age and registration details align well with the site's regional focus and business model. From a technical perspective, the site demonstrates moderate performance with good mobile optimization and SEO practices. However, accessibility features are basic, and no advanced security headers are detected. The site uses HTTPS as implied by URLs but lacks explicit security header configurations. No privacy or cookie policies are present, which is a compliance gap under GDPR regulations. Contact information is not explicitly provided, limiting direct communication channels. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are needed in security headers and privacy compliance. The absence of tracking or advertising scripts suggests minimal user tracking, enhancing privacy but also indicating limited monetization strategies. Overall, the site is safe for general audiences with no adult or explicit content. Strategically, the site would benefit from implementing comprehensive privacy and cookie policies, adding clear contact information, and enhancing security headers to improve trust and compliance. These steps will strengthen the site's credibility and reduce potential legal and security risks.

Z

Zavod za zdravstveno zavarovanje Slovenije

zzzs.si

66

Zavod za zdravstveno zavarovanje Slovenije (ZZZS) is the national health insurance institute of Slovenia, established in 1995. It operates as a governmental public service entity responsible for managing mandatory health insurance, issuing health insurance cards, collecting contributions, and ensuring the enforcement of health rights. The website serves insured persons, healthcare providers, and contributors with comprehensive information and electronic services. The organization holds a primary market position as the authoritative health insurance body in Slovenia.

S

Slovenske železnice - Potniški promet

slo-zeleznice.si

63

Slovenske železnice - Potniški promet is the national passenger railway operator in Slovenia, providing comprehensive train travel services including domestic and international routes, ticketing, and travel information. The company is part of the larger Slovenske železnice group with multiple subsidiaries covering freight, infrastructure, and technical services. The website is professionally designed, multilingual, and offers detailed content relevant to travelers. Technically, it is built on WordPress with modern analytics and marketing tools integrated, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a mature digital presence aligned with a large, reputable transportation entity.

O

Območna obrtno-podjetniška zbornica Celje

ooz-celje.si

33

Območna obrtno-podjetniška zbornica Celje is a regional craft and entrepreneurial chamber serving the Celje area in Slovenia. The organization provides a variety of services including business registrations, consulting, issuing permits, event organization, and member benefits. The website reflects a well-structured portal aimed at local businesses and entrepreneurs, with a focus on supporting regional economic development and EU-funded projects. Technically, the site is built on WordPress with common plugins for event management and SEO, and it uses Google Analytics for visitor tracking. The site is mobile-optimized and presents content clearly, although some accessibility features could be improved. Security-wise, HTTPS is enforced and cookie consent is implemented, but security headers are lacking and no explicit privacy or security policies are published. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance.

J

Javni zavod za turizem, šport in kulturo Dobrna

ztsk-dobrna.si

39

The website represents the Javni zavod za turizem, šport in kulturo Dobrna, a public institution focused on promoting tourism, sports, and culture in the Dobrna municipality, Slovenia. It provides local tourist information, cultural event details, and manages community facilities such as the Cultural Home and local market. The site promotes EU co-financed projects and serves a regional audience of tourists and residents. The business model is public-sector oriented with funding from government and EU sources. Technically, the site is built on an outdated Joomla! 1.5 CMS with MooTools and jQuery libraries. The design and user experience are basic with moderate performance and limited mobile optimization. No modern SEO or accessibility features are evident. The hosting is provided by Webtasy, d.o.o., a Slovenian registrar and hosting provider. From a security perspective, the site uses HTTPS but lacks security headers and runs on an unsupported CMS version, exposing it to potential vulnerabilities. No privacy, cookie, or terms policies are present, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional for its informational purpose but requires modernization and security improvements to enhance trust, compliance, and resilience against threats.

T

Trgovinica

trgovinica.net

59

Trgovinica.net is a small Slovenian e-commerce website specializing in regional products related to Drava bike and Pohorje Slovenia. The site is built on WordPress with WooCommerce and uses the Flatsome theme, indicating a modern and user-friendly e-commerce platform. The website offers a bilingual experience with Slovenian as the primary language and English as an alternate. The business appears to be newly established in 2023, consistent with the domain registration date. The site provides basic e-commerce functionalities including product search, shopping cart, and user login. However, contact information is limited to a contact form with no explicit email or phone numbers displayed.

H

Hafencity Institut für systemische Ausbildung

hafencity-institut-systemische-ausbildung.de

59

The Hafencity Institut für Systemische Ausbildung (HISA) is a specialized educational institution based in Hamburg, Germany, offering certified systemic training programs including systemic counseling and mediation. The website reflects a professional and focused approach to education in systemic therapy, targeting individuals seeking advanced qualifications in this niche. The presence of certifications from recognized bodies such as DGSF and SG enhances its credibility and market position within the education sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies and third-party integrations like Cookiebot for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs cookie consent management, though it lacks explicit security policies and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it suitable for its target audience.

H

HMU Health and Medical University

health-and-medical-university-duesseldorf-krefeld.de

54

HMU Health and Medical University is a modern private and state-recognized university located in Düsseldorf/Krefeld, Germany, offering innovative and interdisciplinary degree programs in health and medical fields including Humanmedizin, Psychologie, Sportwissenschaften, and Psychotherapie. It is part of the IRO Group Hochschulverbund, which includes several other medical and business schools, serving over 12,000 students. The university emphasizes practical training in partnership with Helios Klinikum Krefeld and fosters research and personal development in a collaborative academic environment. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries and analytics tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The WHOIS data is minimal but consistent with the hosting provider and domain usage. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.

S

Sigmateh d.o.o.

sigmateh.si

55

Sigmateh d.o.o. is a Slovenian technology company specializing in e-government digital solutions for municipalities. Established in 2012, it offers a suite of services including municipal websites (E-občina), sports field reservation portals, obituary services, and other digital modules tailored for local government needs. The company holds a strong market position in Slovenia with over 150 satisfied clients and is recognized for its innovative and comprehensive municipal IT solutions. The website reflects a professional and consistent brand image aligned with its business focus. Technically, the website employs a modern but straightforward technology stack including jQuery and Bootstrap, with Cloudflare DNS services enhancing reliability. The site is mobile optimized and provides a good user experience, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and lack of incident response or vulnerability disclosure information represent compliance gaps. WHOIS data is transparent and consistent with the business identity, reinforcing legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure program, and improving accessibility features to enhance compliance and user trust.

D

Dundee and Angus College

dundeeandangus.ac.uk

71

Dundee and Angus College is a well-established further education institution in the United Kingdom, serving the Dundee and Angus regions since 1996. The college offers a broad range of courses and apprenticeships aimed at improving study and employment prospects for a diverse student body. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. The institution positions itself as a key regional educational provider with a focus on student success and community engagement. Technically, the website employs modern JavaScript libraries, analytics, and user engagement tools such as Google Tag Manager, Monsido, Freshchat, and Survicate, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, supporting a positive user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response information, which could be improved. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the college. The website scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional online presence for the institution.

A

Ayuntamiento de Avilés

aviles.es

52

The website aviles.es serves as the official municipal government portal for the city of Avilés in Spain. It provides comprehensive information and services related to local government, culture, social services, education, sports, tourism, and citizen engagement. The site targets residents and visitors, offering multilingual content primarily in Spanish, English, and Asturian. The business model is public sector focused, delivering government services and information digitally. The website demonstrates consistent branding and good content quality, supported by structured data markup and official contact details. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies including jQuery, React components, FontAwesome icons, and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible, with good SEO practices evident. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks visible security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are not explicitly found, indicating a compliance gap. WHOIS data could not be retrieved due to registry restrictions, limiting domain trust verification. Overall, the website is a trustworthy and professional government portal with solid technical infrastructure but would benefit from enhanced security headers, explicit privacy compliance documentation, and WHOIS transparency to improve trust and compliance posture.

P

Patientensicherheit

cirrnet.ch

50

Patientensicherheit operates CIRRNET, a critical incident reporting and reacting network serving as a central institution for local incident reporting systems across Switzerland's healthcare sector. The organization focuses on enhancing patient safety by enabling healthcare facilities to anonymously contribute incident reports to a centralized database, thereby supporting nationwide risk assessment and prevention efforts. CIRRNET's market position is that of a key non-profit healthcare network institution with a medium-sized operational scale and a clear focus on Swiss healthcare providers and medical societies. Technically, the website is built on a modern WordPress platform using Elementor for content management and design, supported by LiteSpeed caching and Matomo analytics for performance and user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. The infrastructure supports multilingual content in German, French, and Italian, reflecting the Swiss market. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid baseline security posture. However, there is no explicit security policy or incident response contact information published, and the cookie policy lacks an active consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include implementing a cookie consent mechanism, publishing a formal security policy and incident response contacts, and enhancing accessibility compliance to further strengthen trust and regulatory adherence.

The Deutscher Pflegerat e.V. is a well-established German non-profit association representing the interests of nursing professionals and midwives at the federal level. Founded in 1998, it serves as a political and professional voice advocating for healthcare policy improvements, professional education, and workforce development. The website offers comprehensive resources including press releases, event information, podcasts, and official documents, targeting healthcare professionals, policymakers, and the public in Germany. Technically, the site uses standard web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.

D

Diputación de Cáceres

dip-caceres.es

60

Diputación de Cáceres is the official provincial government institution serving the province of Cáceres, Spain. The website functions as a comprehensive portal providing public services, information, and resources to citizens, public employees, and local government entities. Key services include tax collection, public employment, procurement, and integrity reporting. The site targets local residents and government stakeholders, positioning itself as a trusted government resource. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Select2, and Toolset Blocks plugins. It employs Google Analytics and Metricool for traffic analysis and uses Yoast SEO for search engine optimization. The site is mobile-optimized, accessible, and uses HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent mechanisms compliant with GDPR, and obfuscated email addresses to reduce spam. However, it lacks visible security headers like CSP or HSTS and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML source. Overall, the website is legitimate, professional, and trustworthy, consistent with an official government entity. The absence of WHOIS data due to query restrictions is mitigated by the site's content quality and official social media presence. Strategic recommendations include enhancing security headers, publishing security policies, and adding a security.txt file to improve vulnerability disclosure transparency.

J

Junta de Extremadura

juntaex.es

63

Juntaex.es is the official digital portal for the Junta de Extremadura, a regional government entity in Spain. The website provides citizens with streamlined access to public information, administrative procedures, transparency data, and current news relevant to the Extremadura region. It serves as a comprehensive gateway for residents and interested parties to engage with government services and information efficiently. The site is well-structured with thematic navigation and highlights key public services and data. Technically, the website leverages modern web technologies including Liferay CMS, Bootstrap, Swiper.js, and Matomo analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and employs standard web performance practices. Security is implemented with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be enhanced. From a security posture perspective, the site shows good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. Privacy compliance is supported by cookie policies and GDPR-aligned consent, but contact information for privacy or security concerns is not evident. Overall, Juntaex.es is a credible and professional government website with a solid technical foundation and good user experience. Strategic improvements in security transparency and contact availability would further strengthen trust and compliance.

P

Home - philippka

philippka.de

63

The website philippka.de appears to be a professionally designed WordPress site using WooCommerce for e-commerce capabilities and Rank Math PRO for SEO optimization. The site employs performance enhancements such as WP Rocket and EWWW Image Optimizer, indicating a focus on speed and user experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Contact information is not clearly provided, limiting direct communication channels. The domain WHOIS data shows a 'connect' status with nameservers pointing to DomainControl.com, suggesting the domain is registered but with limited public WHOIS information. Overall, the site is accessible and safe for general audiences but would benefit from improved transparency and compliance documentation.

Experian Information Solutions, Inc. operates a comprehensive Income & Employment Verification Fulfillment Portal branded as Experian Verify. The portal serves multiple user groups including employees, commercial verifiers, social service verifiers, and employers, providing secure, consent-driven access to employment and income data. Experian is a globally recognized leader in credit reporting and data analytics, positioning this service as a critical component of its employer services portfolio. The website demonstrates a mature digital presence with clear navigation, professional design, and extensive use of modern marketing and analytics technologies. Security measures such as HTTPS, Google reCAPTCHA, and secure login portals are implemented, though explicit security headers are not confirmed in the provided data. Privacy compliance is robust with comprehensive policies and consent mechanisms in place. The absence of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand and content quality.

M

Minotaure

minotaure.io

49

Minotaure is a Belgium-based technology company specializing in providing a comprehensive methodological and technological approach to digital project management and website development. Their offerings include UX kits, customizable technical frameworks (Minos and Ariane), and ongoing support services aimed at creating coherent and effective digital ecosystems for organizations. The company targets organizations seeking to build and maintain digital platforms with a focus on user experience and long-term strategy. Technically, the website is built on WordPress 6.8.2, utilizing modern JavaScript libraries such as jQuery, Swiper.js, and Tiny-slider. It integrates Google Tag Manager and Google Analytics for tracking and marketing purposes, alongside a robust cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent controls, with no visible exposed sensitive data or vulnerabilities in the HTML content. However, explicit security headers are not clearly identified and could be improved. The WHOIS data is privacy protected, which is common for small technology providers, and the website content and physical office addresses support the legitimacy of the business. Overall, Minotaure presents a professional, secure, and privacy-conscious digital presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, maintaining updated software, and publishing explicit security policies to further strengthen trust and compliance.

O

Občina Zreče

zrece.si

53

Občina Zreče operates a comprehensive municipal website serving the local community in Slovenia. The site provides a broad range of public services including electronic application submissions, online fee payments, local news, event calendars, and project information. The website targets residents and stakeholders of the Zreče municipality, positioning itself as a key digital gateway for local government services. Technically, the site employs modern web technologies such as jQuery and Bootstrap, with responsive design and accessibility features, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though it lacks published privacy and cookie policies as well as security headers, which are areas for improvement. Overall, the website is trustworthy and professional, reflecting the municipality's commitment to digital public service delivery.

O

Občina Vitanje

vitanje.si

54

Občina Vitanje operates as the official municipal government website for the Vitanje municipality in Slovenia, providing a range of e-government services including electronic application submissions, online tax payments, local news, event information, and community engagement tools. The site targets residents and visitors, aiming to facilitate digital interaction with municipal authorities and promote local tourism and culture. The business model is typical of a public sector entity focused on service delivery and community information dissemination. The domain's long history since 1999 and consistent Slovenian branding reinforce its legitimacy and established presence. Technically, the website employs a modern yet straightforward technology stack including jQuery, Bootstrap, and TinyMCE, supported by structured data in JSON-LD format for enhanced SEO and accessibility. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. The CMS appears to be a custom or proprietary platform tailored for municipal e-services. From a security perspective, the website enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a formal security policy or incident response contacts. No vulnerability disclosures or security.txt files are present. Privacy compliance is partially met with a comprehensive GDPR policy page but lacks a cookie consent mechanism. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The overall risk assessment is low, with no signs of malicious activity or suspicious domains. Strategic recommendations include implementing cookie consent banners, adding security headers, publishing security policies and incident response contacts, and enhancing accessibility. These improvements would strengthen trust, compliance, and user experience for the municipality's digital presence.

O

Občina Slovenske Konjice

slovenskekonjice.si

56

Občina Slovenske Konjice operates as the official municipal government portal for the Slovenske Konjice region in Slovenia. The website facilitates electronic interactions with the municipality, including submission of applications, online fee payments, and dissemination of local news and events. It targets residents and stakeholders within the municipality, providing essential public services and information. The business model is that of a governmental public service platform, with a strong local market position as the authoritative source for municipal information and services. The domain has been registered since 1999, indicating a well-established online presence.

O

Občina Oplotnica

oplotnica.si

40

Občina Oplotnica is the official municipal government website for the Oplotnica municipality in Slovenia. It provides residents and visitors with comprehensive information about local government officials, public services, community events, and administrative resources. The site targets local citizens and government stakeholders, serving as a key communication channel for municipal updates and services. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website is built on WordPress CMS, utilizing common plugins for accessibility, UI enhancements, and content management. The site demonstrates good mobile optimization, accessibility features, and moderate performance. It uses HTTPS with a valid SSL certificate, ensuring secure communications. The technical infrastructure is consistent with a small government entity's digital presence. From a security perspective, the site enforces HTTPS and employs reputable plugins but lacks explicit security headers and a published security.txt or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is trustworthy, professional, and serves its intended audience well. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance. The domain registration data supports the site's legitimacy and long-standing presence.

O

Občina Dobrna

dobrna.si

45

Občina Dobrna operates as the official municipal government portal for the Dobrna region in Slovenia, providing residents and visitors with comprehensive information about local administration, cultural heritage, tourism, public services, and community news. The website serves as a key communication channel for public notices, tenders, and events, supporting transparency and civic engagement. The business model is typical for a local government entity, focusing on service delivery and community support rather than commercial activities. The site targets local citizens, investors, and tourists, positioning itself as a trusted source of official information and regional promotion. Technically, the website is built on the Joomla CMS platform, leveraging common web technologies such as jQuery, Bootstrap, and Font Awesome. The infrastructure supports responsive design and accessibility features, ensuring usability across devices and for users with disabilities. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and published policies could enhance protection and compliance. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the content or scripts. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests opportunities for improvement in security governance and transparency. Privacy compliance is supported by cookie consent and a data protection page, but a dedicated privacy policy page with comprehensive GDPR details would strengthen compliance. Overall, Občina Dobrna's website is a well-maintained, trustworthy municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing formal security and privacy policies, and establishing vulnerability disclosure channels to improve security posture and stakeholder trust.

O

Občina Dobje

dobje.si

38

Občina Dobje is the official municipal government website for the municipality of Dobje pri Planini in Slovenia. It provides residents with public notices, administrative information, citizen services, event calendars, and project updates. The website targets local citizens and functions as a key communication channel for municipal affairs. The business model is governmental public service, with a focus on transparency and community engagement. Technically, the site is built on WordPress CMS with a modern tech stack including jQuery, Swiper.js, and accessibility plugins. The site is mobile-optimized and includes accessibility tools, reflecting a moderate to good level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is trustworthy and professional, suitable for its governmental role. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and compliance standing.

P

Pavel Leonidov

pavel-leonidov.de

51

Pavel Leonidov operates as a freelance software and web developer based in Stuttgart, Germany, specializing in custom software solutions and web development primarily for small businesses and non-profit organizations. The website serves as a professional portfolio showcasing skills, certifications, and open-source projects, emphasizing affordable and tailored solutions. The business model is focused on individual freelance services with continuous client support and hosting. Technically, the website employs a modern technology stack including PHP, Java, JavaScript, and popular CMS platforms like TYPO3 and WordPress. Hosting is managed via domaincontrol.com nameservers, likely GoDaddy, with AWS mentioned for hosting infrastructure. The site is mobile-optimized and uses Google Analytics with privacy-conscious settings such as IP anonymization and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and includes a cookie consent banner compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance but could improve by adding security policies and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-structured with a good balance of content quality, technical implementation, and privacy compliance. The risk level is low, with recommendations focusing on enhancing security headers and formalizing security policies to further strengthen the security posture.

S

Specto, Informacijske tehnologije d.o.o.

specto.si

40

Specto, Informacijske tehnologije d.o.o. is a Slovenian IT development company founded in 2008, specializing in web and mobile application development as well as advanced IT solutions. The company targets businesses seeking custom software solutions to enhance their digital presence and operational efficiency. Their website reflects a professional and consistent brand image with modern design elements and clear service offerings. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, GSAP, and SVG graphics, supported by Google Analytics and Tag Manager for user tracking. However, explicit HTTPS usage is not confirmed in the HTML content, and no security headers or privacy policies are present, indicating room for improvement in security and compliance. The domain registration data is consistent with the company's location and business claims, supporting legitimacy. Overall, the website is well-structured and user-friendly but would benefit from enhanced security practices and privacy compliance documentation.

S

Slovenia Outdoor giz

slovenia-outdoor.com

46

Slovenia Outdoor giz operates a professional and comprehensive online portal dedicated to promoting outdoor tourism in Slovenia. The website offers extensive information on various outdoor activities such as hiking, cycling, winter sports, water experiences, and adrenaline adventures, targeting tourists and outdoor enthusiasts. It also integrates booking functionalities for experiences and accommodations, positioning itself as a key player in Slovenia's active tourism market. The site is well-branded, multilingual, and maintains a consistent and professional digital presence.

Raision seurakunta is a Finnish Evangelical Lutheran Church parish serving the Raisio community in Southwest Finland. The website provides information about religious services, community activities, youth programs, music, and international mission work. It targets local residents and church members, operating as a non-profit religious organization. The site is built on the Liferay CMS platform, utilizing modern web technologies including React, Bootstrap, and Matomo analytics for minimal user tracking. The design is professional, mobile-optimized, and accessible, with clear navigation and relevant content. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is trustworthy, compliant with GDPR, and serves its community effectively.

M

Municipal Museum of the Kalavritan Holocaust

dmko.gr

63

The Municipal Museum of the Kalavritan Holocaust is a small, government-affiliated cultural institution dedicated to preserving and educating about the tragic events of the Kalavritan Holocaust. The website serves as an informative portal offering museum information, digital archives, educational resources, and visitor services. It maintains a consistent brand presence and integrates multilingual support to reach a broader audience. The institution is well-positioned within its niche, supported by partnerships with the Ministry of Culture and related networks. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google reCAPTCHA v3 for form security, cookie consent management, and accessibility tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be considered. Analytics and tracking are implemented via Google Analytics and Tag Manager with user consent mechanisms. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partially addressed through cookie consent but lacks a dedicated privacy policy page, which is a notable gap. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy transparency, security headers, and incident response disclosures would enhance compliance and security posture.

F

Feriköy Protestant Cemetery Initiative

ferikoycemetery.org

47

The Feriköy Protestant Cemetery Initiative is a small non-profit organization dedicated to preserving Istanbul’s main Protestant cemetery as a historic and cultural landmark. Founded in 2018 by scholars affiliated with several research institutes, the Initiative focuses on research, conservation, and public outreach. The website reflects a professional and content-rich platform that serves researchers, historians, and the interested public. Technically, the site is built on WordPress with modern plugins and hosted by SiteGround, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. The domain registration is privacy protected but consistent with the organization's profile and founding date. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.

E

Experian Employer Services

paperlessemployee.com

66

PaperlessEmployee.com is a web-based employee self-service platform operated by Experian Employer Services, providing employees access to tax documents such as W-2 and ACA forms, pay statements, and tax withholding forms. The platform targets employees of companies that use this service, offering a secure portal for document management. The website content is straightforward and business-focused, though it lacks detailed privacy and contact information. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, and ASP.NET MVC frameworks, with session management and error handling implemented. However, the absence of explicit security headers and privacy policies indicates room for improvement in compliance and security posture. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the association with a reputable parent company. Overall, the site is functional and safe but would benefit from enhanced transparency and security measures.

U

Ultima Media Germany GmbH

media-manufaktur.com

58

Ultima Media Germany GmbH is a medium-sized German media company specializing in organizing professional congresses, seminars, and conferences. The company focuses on providing networking opportunities and delivering up-to-date industry knowledge to professionals and decision-makers. Their market position is supported by a significant number of annual events, participants, and speakers, establishing them as a reputable event organizer in the media sector. The website is built on TYPO3 CMS and incorporates modern web technologies including Google Tag Manager and GDPR-compliant consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy compliance, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, well-structured, and trustworthy, with clear contact information and partner affiliations. Strategic recommendations include enhancing security transparency and accessibility features to further strengthen trust and compliance.

H

HERMANN-HENSELMANN-STIFTUNG

hermann-henselmann-stiftung.de

44

The Hermann Henselmann Stiftung is a small non-profit foundation dedicated to preserving and promoting the architectural and cultural legacy of Hermann Henselmann. The website serves as an informational and transactional platform offering publications, event information, and archival content primarily targeted at researchers, historians, and cultural enthusiasts. The foundation operates in a niche cultural sector within Germany. Technically, the website is built on WordPress with common plugins and uses HTTPS, providing a moderate level of performance and mobile optimization. However, it lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. Security posture is adequate but could be improved with better header implementation and published security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

F

FreiwilligenServer Niedersachsen

freiwilligenserver.de

61

FreiwilligenServer Niedersachsen is the official volunteering and civic engagement portal operated under the auspices of the Niedersachsen state government in Germany. It provides comprehensive information, services, and resources related to volunteering, including the Ehrenamtskarte volunteer card, engagement atlases, training programs, and funding databases. The portal targets a broad audience including volunteers, organizations, and government entities, positioning itself as a trusted government resource in the non-profit and civic sector. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern web technologies such as jQuery, Cookiebot for cookie consent management, and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting appears to be managed by Niedersachsen state infrastructure, enhancing trust and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs Matomo analytics to minimize privacy risks. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks a publicly visible security policy or incident response contact, and no security.txt file was found. Overall, FreiwilligenServer Niedersachsen presents a professional, trustworthy, and well-maintained digital presence aligned with government standards. It effectively balances user privacy, accessibility, and content quality, making it a reliable resource for its target audience.

The Niedersächsische Krankenhausgesellschaft e.V. (NKG) is a large non-profit association representing all hospitals in the German state of Niedersachsen. It serves as a key stakeholder in healthcare policy, hospital advocacy, and member services, supporting over 159 hospitals and approximately 120,000 employees. The website provides comprehensive information about the association's goals, committees, health policy positions, and services such as hospital search and seminars. The target audience includes healthcare professionals, hospital administrators, policymakers, and patients within Niedersachsen. Technically, the website is built on the Contao Open Source CMS platform and employs modern JavaScript libraries such as jQuery, Swiper.js, and Mmenu for enhanced user experience. The site is mobile-optimized with good SEO practices and accessibility features, although some improvements in accessibility could be made. The site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. Security-wise, the site demonstrates good practices including CSRF protection cookies and HTTPS enforcement. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the professional presentation and clear contact details support legitimacy. Overall, the website is a credible and professional digital presence for a significant healthcare association in Germany, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and incident response transparency are recommended to enhance trust and security posture.