High-risk security reports

R

REGARTIS s.r.o.

regartis.com

44

REGARTIS s.r.o. is a specialized consulting company focused on providing compliance and advisory services primarily for the chemical industry. Their expertise includes navigating complex regulatory frameworks such as REACH, CLP, UK REACH, BPR, and RoHS, targeting businesses that require adherence to national and European legislation. The company maintains a professional online presence with multilingual support and offers educational resources like webinars and training courses, positioning itself as a niche expert in the Czech Republic and broader EU market. Technically, the website employs a modern technology stack including jQuery, Select2, PhotoSwipe, Google Analytics, and Drift chat for customer engagement. The site is built on a custom CMS platform, optimized for mobile devices, and includes GDPR-compliant consent mechanisms. While performance is moderate, the site demonstrates good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site uses HTTPS and implements GDPR consent banners, indicating a baseline of privacy compliance. However, the absence of WHOIS registration data for the domain www.regartis.com raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected, but security headers should be enhanced to improve protection. Overall, REGARTIS s.r.o. presents a credible and professional business front with solid technical implementation and privacy compliance. The primary risk lies in the unclear domain registration status, which should be addressed to strengthen trust and legitimacy. Strategic recommendations include verifying domain registration, enhancing security headers, and maintaining regular audits of third-party scripts and privacy policies.

The website mladýCHEMIK.cz is an educational platform dedicated to organizing and promoting a chemistry competition for young students in the Czech Republic. It is managed by the Střední průmyslová škola chemická Pardubice and supported by regional government and chemical industry partners. The site provides competition information, results, and educational materials targeting 8th and 9th grade students. Technically, the site is built on WordPress with a responsive theme and uses standard plugins for enhanced user experience. The site is secured with HTTPS and shows no signs of malicious content or vulnerabilities, though it lacks advanced security headers and formal privacy or cookie policies. Business credibility is strong due to clear institutional backing and partner endorsements, but contact information is limited in the visible content. Overall, the site is professional, trustworthy, and serves its educational purpose effectively.

Focus Rostfrei is a specialized German trade magazine dedicated to stainless, acid-resistant, and heat-resistant steels. It serves industry professionals by providing news, technical articles, event information, and directories. The website is professionally designed using WordPress CMS and integrates multiple plugins for enhanced user experience, including e-paper subscriptions and event management. The site is GDPR compliant with a clear privacy and cookie policy, and it supports multilingual sister publications targeting broader European markets. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and secure login forms, though improvements like implementing a Content-Security-Policy header and publishing incident response contacts are recommended. The domain WHOIS data is missing or not publicly available, which raises concerns about registration legitimacy despite the active and professional website presence. Overall, the site is a credible industry resource but should address WHOIS transparency and enhance security headers to improve trust and compliance.

D

Dilman Dila

dilmandila.com

40

Dilman Dila's website serves as a personal portfolio highlighting his work as a writer, filmmaker, and storyteller. The site is well-structured with clear navigation to sections such as About, Fiction, Films, Blog, and Contact. It targets literary and film enthusiasts and serves primarily as a personal branding and content publishing platform. The website uses WordPress CMS with modern plugins and themes, ensuring a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is decent with HTTPS enabled but lacks security headers and formal incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration transparency but does not necessarily reflect on the website's content quality or legitimacy. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

S

Superbrands Slovakia

slovaksuperbrands.com

49

Superbrands Slovakia operates as a local branch of the global Superbrands organization, focusing on recognizing and promoting leading brands within Slovakia. The website serves as a portal for brand-related programs, events, and media campaigns, targeting businesses, brand managers, and marketing professionals. The company is positioned as an established authority in brand recognition with a history dating back to 2012 and is part of the parent company United Guides Holding Kft. The site content is primarily in Slovak, with a professional and consistent branding approach.

G

Generon

generon.sk

43

Generon is a Slovakian company specializing in integrated solar roofing solutions, developed under the parent company Terran Slovakia s.r.o., a leading roofing tile manufacturer in Central and Eastern Europe. Their product uniquely integrates solar cells into traditional roofing tiles, offering an aesthetic and ecological alternative for energy-conscious customers. The website is well-structured, professionally designed, and optimized for SEO and mobile devices. Technically, it leverages WordPress with Elementor, includes modern JavaScript libraries, and integrates Google Analytics and MailerLite for marketing and analytics. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and policies could enhance protection. No critical vulnerabilities or suspicious content were detected, and privacy compliance is well addressed with comprehensive policies and consent management. Overall, the site reflects a mature digital presence aligned with the company's market position and business goals.

Mediahost s.r.o. is a Slovak-based small technology company specializing in web hosting, domain registration, and web design services. Established in 2005, the company has a stable market presence primarily serving Slovak and Czech customers. Their offerings include affordable hosting packages, domain registration for multiple TLDs, and comprehensive web design including SEO optimization. The website is professionally designed with clear navigation and relevant content, targeting small to medium businesses and individuals seeking internet presence solutions. Technically, the site uses classic HTML, CSS, and JavaScript without modern frameworks or CMS, indicating a traditional but functional infrastructure. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy compliance documentation. Contact information is clearly provided, enhancing business credibility. Overall, the company appears legitimate and established with room for improvement in security and privacy compliance.

K

Körber-Stiftung

eustory.eu

45

EUSTORY is a well-established European non-profit network initiated by Körber-Stiftung, focused on organizing research-based history competitions for young people across more than 20 countries. The website reflects a professional educational platform targeting youth, educators, and history enthusiasts, with a clear mission to promote understanding and overcome divisions through historical research. The network has a medium-sized presence with a long history dating back to 2000, supported by a reputable foundation.

E

Emil Löffelhardt GmbH & Co. KG

loeffelhardt.de

46

Emil Löffelhardt GmbH & Co. KG operates a professional B2B website focused on the electrotechnical wholesale sector, serving electricians, industry, public authorities, and trade customers primarily in Germany. The company is a medium-sized, family-owned business with over 115 years of experience, positioning itself as a reliable and knowledgeable partner offering a broad product range, consulting, and services including training and logistics. The website is built on TYPO3 CMS and employs modern web technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and Matomo analytics configured with cookie consent enforcement, though explicit cookie banners and security headers are missing. The WHOIS data aligns with the business claims, indicating legitimacy and consistency. Overall, the site reflects a trustworthy and professional business presence with room for improvement in privacy compliance and security best practices.

The website etrisbank.de is currently inaccessible, returning a 403 Forbidden error with minimal HTML content indicating a firewall block. This prevents any meaningful analysis of the website's content, services, or user interface. The domain is registered with standard German name servers via INWX, suggesting legitimate registration, but no further business details or digital assets are publicly accessible. The lack of accessible content and security headers, combined with no visible privacy or cookie policies, results in a very low digital maturity and security posture score. Without access to the site, it is impossible to evaluate the company's market position, services, or compliance status. Strategic recommendations focus on resolving access issues, enabling HTTPS, and publishing essential compliance and contact information.

R

Regionalverband Großraum Braunschweig

regionalverband-braunschweig.de

49

Regionalverband Großraum Braunschweig is a regional governmental organization responsible for regional development, mobility, and sustainable planning in the Großraum Braunschweig area of Germany. It coordinates public transport services, regional planning, and climate protection initiatives, serving multiple cities and counties. The website reflects a mature digital presence using TYPO3 CMS and modern frontend technologies, with good mobile optimization and accessibility. Privacy and cookie consent mechanisms are implemented in compliance with GDPR. Security posture is solid with HTTPS and consent management, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

M

MEVA-HU Kft

mevakomi.hu

44

MEVA-HU Kft is a Hungarian company specializing in industrial products including waste storage, oil management, warehousing, workshop equipment, and outdoor equipment. The company operates a B2B e-commerce platform supported by regional partner sites in Slovakia, Poland, Germany, and the Czech Republic. Their market position is that of an established regional supplier with a comprehensive product catalog and ISO 9001:2015 certification, indicating quality management standards. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for industrial clients. Technically, the site uses a BohemiaSoft e-commerce platform with common JavaScript libraries and Google Analytics for tracking. Security posture is generally good with HTTPS, CSRF protections, and cookie consent mechanisms, though some outdated libraries and missing security headers present moderate risks. Privacy compliance is strong with clear GDPR-aligned policies and consent banners. Overall, the site is trustworthy and credible, with clear contact information and certifications. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security and trust.

G

GALÉN - SYMPOSION s.r.o.

gsymposion.cz

46

Galén Symposion is a Czech Republic-based company specializing in organizing medical conferences, congresses, symposia, and professional seminars since 2000. Their website reflects a focused business model targeting healthcare professionals and institutions, offering event management and VIP services. The site is professionally designed with consistent branding and clear navigation, supporting their market position as an established event organizer in the healthcare sector. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.3 and jQuery UI, alongside modern tools like AOS for animations and Google Fonts for typography. Google Analytics and Adsense are integrated for analytics and advertising purposes. While HTTPS is enabled, the absence of security headers and the use of outdated libraries present moderate security risks. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found, indicating partial privacy compliance. WHOIS data is missing, which reduces domain trustworthiness, though the website content and branding suggest a legitimate business. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but has room for improvement in security posture and privacy compliance.

F

FETMED

fetmed.cz

47

FETMED is a specialized healthcare provider in the Czech Republic focusing on fetal medicine, genetics, and gynecology. The company operates two physical centers in Olomouc and Ostrava, offering comprehensive prenatal diagnostics, genetic consultations, psychological counseling, and pediatric cardiology. Their market position is that of a trusted regional specialist with experienced medical professionals and advanced diagnostic technologies. The website is professionally designed, mobile-optimized, and provides clear service information and contact channels. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA, ensuring a functional and user-friendly experience. Performance is moderate with good mobile responsiveness and basic accessibility features. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages are present, which impacts compliance and trust. Security posture is generally good with HTTPS enforced and use of CAPTCHA for forms, but the absence of security headers and WHOIS transparency reduces the overall security confidence. No vulnerabilities or exposed sensitive data were detected. Cookie consent is implemented properly, supporting GDPR compliance to some extent. Overall, the website is a credible and professional healthcare service platform with room for improvement in privacy disclosures and security hardening. The lack of WHOIS data is a concern but may be due to local registry policies. Strategic recommendations include publishing privacy and terms policies, adding security headers, and maintaining updated libraries to enhance security and compliance.

The domain netcontent.cc is newly registered as of October 25, 2024, and currently serves only a 404 Not Found error page with no accessible content. There is no metadata, structured data, or business information available on the website, indicating it is either under development or inactive. The technical infrastructure includes Cloudflare DNS and an nginx web server, but no CMS or frameworks are detected. Security posture is minimal with no visible security headers or HTTPS information provided. The lack of privacy, cookie, or terms of service policies further reduces compliance and trustworthiness. Overall, the website is not operational and provides no business or user value at this time.

N

Nemocnice České Budějovice, a.s.

csklg.cz

43

The website csklg.cz serves as the official platform for the 1st Czechoslovak Congress of Medical Genetics, scheduled for April 2025 in Luhačovice, Czech Republic. It is organized by Nemocnice České Budějovice and associated professional genetics societies from Czechia and Slovakia. The site provides detailed program schedules, speaker information, venue details, registration instructions, and contact information, targeting medical genetics professionals and researchers. The business model focuses on event organization and professional networking within the healthcare genetics sector. The domain is newly registered in 2024, aligning with the event timeline, and hosted via Active24.

S

SANOPHARM CZ s.r.o.

cytogenomika2025.cz

42

The website cytogenomika2025.cz serves as the official platform for the 58th Annual Cytogenomic Conference held in Prague, Czech Republic. It provides detailed information about the event, including dates, location, program, partners, and exhibitors. The site targets healthcare professionals, geneticists, and researchers interested in cytogenomic and genomic research and diagnostics. The business behind the site is SANOPHARM CZ s.r.o., a small healthcare-related entity organizing this scientific event. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience.

The website ublg.cz represents the Ústav biologie a lékařské genetiky 2. LF UK a FN Motol, an academic and healthcare institute affiliated with Charles University and the Motol University Hospital in the Czech Republic. It serves as an informational and service portal for patients, students, and laboratory service applicants, providing access to satisfaction surveys, genetic counseling information, educational videos, and event registration. The site is modest in size and scope, targeting a specialized audience in healthcare and education sectors. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design and is structured with clean HTML5 markup. However, it lacks advanced SEO and accessibility features and does not appear to use a CMS or advanced analytics tools. Performance is moderate with good mobile optimization but basic accessibility. From a security perspective, the site is accessible over HTTPS (assumed from domain context though SSL details not provided), but lacks visible security headers and published security or privacy policies. No contact information or incident response channels are provided, which limits transparency and user trust. The WHOIS data is consistent and supports the legitimacy of the domain, which has been active since 2011. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and policy disclosures to improve trust and regulatory adherence.

The website at cevf-iua2024.si is currently inaccessible with no visible content beyond an empty HTML skeleton. The domain WHOIS data is suspicious due to a creation date set in the future (2025-02-15), which undermines trust and legitimacy. The site is protected or blocked by Cloudflare's WAF, preventing content analysis. No business, contact, or policy information is available, indicating the site is either under construction or improperly configured. The technical infrastructure is minimal with no detectable technologies or security headers. The security posture is weak due to lack of HTTPS verification and absence of security best practices. Overall, the site presents a high risk due to lack of transparency and accessibility.

Pykonik is a well-established community organization focused on Python programming enthusiasts in Kraków, Poland. The website serves as a hub for event announcements, speaker presentations, and community engagement. It has a strong local presence with a history dating back to 2008, supported by active social media channels and meetup events. The business model revolves around organizing and promoting Python user group meetings and related social gatherings. Technically, the site is built on a modern stack including Python, Django, Bootstrap, and uses Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enabled but lacks advanced security headers and DNSSEC is not configured. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy but could improve in security and compliance areas.

The website venturecafewarsaw.org is currently inaccessible to users, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, preventing any meaningful content or business information from being displayed. The domain is registered since 2017 with a reputable registrar but lacks DNSSEC and any visible security headers or HTTPS enforcement in the provided data. No privacy, cookie, or terms of service policies are present, nor are there any contact details or forms for user interaction. The site appears to be either under maintenance, restricted by access controls, or misconfigured. Due to the lack of accessible content, a comprehensive analysis of the business, technical infrastructure, and security posture is not feasible. The overall risk is elevated due to the absence of transparency and user-facing information.

J

JetBrains

jetbrains.com

32

JetBrains is a leading software vendor specializing in intelligent development tools such as IntelliJ IDEA and the Kotlin programming language. The company targets software developers and teams, offering a broad portfolio of IDEs, team collaboration tools, and AI-powered developer solutions. Their market position is strong, supported by a professional and content-rich website that reflects their technology focus and innovation leadership. The technical infrastructure includes modern JavaScript frameworks, Google Tag Manager, and Optimizely for analytics and experimentation, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and error reporting mechanisms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the website demonstrates high professionalism, excellent user experience, and strong privacy compliance, though WHOIS data is unavailable, which slightly impacts domain trust assessment.

M

MoorFutures - MoorFutures

moorfutures-mv.de

45

The website 'MoorFutures - MoorFutures' is a German-language platform focused on environmental sustainability, specifically offering carbon certificates related to moorland rewetting projects in Mecklenburg-Vorpommern, Germany. The business appears to be a small, niche entity founded around 2022, targeting environmentally conscious individuals and organizations interested in climate protection. The website uses WordPress CMS with the Avada theme and Yoast SEO plugin, indicating a moderate level of technical infrastructure and digital maturity. The design and content quality are good, with clear focus and consistent branding, but lack comprehensive privacy and security policies. Security posture is weak due to missing security headers and unclear SSL configuration. No contact information or privacy compliance mechanisms are visible, which impacts trust and compliance scores. Overall, the site is safe and professional but would benefit from enhanced security and privacy practices.

V

Verkehrsverbund Rhein-Neckar GmbH

vrn.de

49

Verkehrsverbund Rhein-Neckar GmbH operates as a regional public transportation authority in the Rhein-Neckar area of Germany, providing comprehensive services including bus, train, and tram schedules, ticketing, and mobility solutions such as carsharing and e-scooters. The website serves as a central portal for journey planning, traffic updates, and customer service, targeting commuters and general public users in the region. The business model is focused on facilitating public transport and mobility services within a defined geographic area, positioning VRN as a key regional transport provider. Technically, the website is built on the Imperia CMS platform and leverages modern web technologies including jQuery, Leaflet for maps, and Foundation for responsive design. It integrates Matomo analytics with user consent, demonstrating a mature approach to data privacy. Accessibility features such as skip links and visual assistance tools are implemented, enhancing usability for diverse users. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transport entity. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy communication. The overall risk is low given the nature of the business and the absence of suspicious indicators. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, enhancing HTTP security headers, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

G

Good Time Holding GmbH

gt-holding.de

48

Good Time Holding GmbH is a well-established German holding company specializing in children's and family entertainment, managing several subsidiaries and a portfolio of popular brands. The website reflects a professional and modern digital presence built on Drupal 10, with strong mobile optimization and clear navigation. Privacy compliance is well addressed through a comprehensive privacy policy and an integrated consent management system (Klaro). Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Overall, the website is trustworthy, safe, and well-aligned with the company's business focus.

N

NBtech

nbtech.fr

46

NBtech is a French industrial engineering and technical consulting company founded in 2014, specializing in automotive, aeronautics, railway, and industrial maintenance sectors. The company provides pragmatic and comprehensive solutions including mechanical and electronic testing, incident analysis, and industrial methods consulting. Their client portfolio includes major industry players such as Bosch, Thales, Airbus, Renault, Stellantis, and SNCF, indicating a strong market position. The website is professionally designed, well-structured, and includes detailed information about services, partners, and company values. Technically, the site is built on WordPress with Elementor, uses modern libraries and frameworks, and is hosted by PLANETHOSTER. It implements GDPR-compliant cookie consent and privacy policies, and integrates Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with good privacy compliance and trustworthy business information.

E

EGE Elektro-Großhandel Einkauf GmbH

ege-bonn.de

44

EGE Elektro-Großhandel Einkauf GmbH is a well-established German community of electrical wholesalers with over 50 years of experience. The company focuses on providing quality products, personalized service, and attractive purchasing conditions to electrical trade and industry partners across Germany. Their website reflects a professional and consistent brand image, emphasizing trust and partnership. Technically, the site is built on TYPO3 CMS with Bootstrap 5, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is supported by a clear privacy and cookie policy with consent mechanisms. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and technical hardening.

W

Wirtschaftsinitiative Smart Living e.V.

smart-living-germany.de

43

Wirtschaftsinitiative Smart Living e.V. is a German non-profit association comprising approximately 40 companies, associations, and alliances focused on advancing the digitalization of home and living environments. The organization aims to establish Germany as a leading international market for Smart Living applications, offering services such as a showroom map, information on funding, and organizing working groups and events. The website is professionally designed using WordPress with Yootheme and UIkit frameworks, providing good mobile optimization and clear navigation. However, it lacks visible cookie consent mechanisms and security headers, which are important for GDPR compliance and security best practices. The security posture is moderate with HTTPS enabled but could be improved with additional headers and policies. The domain WHOIS data is limited but consistent with a small non-profit entity. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security practices are recommended.

N

Niedax Rico Engineering

rico-engineering.de

49

Rico Engineering GmbH is a German engineering company specializing in cable route planning and mechanical services with over 50 years of experience. The company operates as part of the Niedax Group and targets industrial clients requiring expert planning support throughout all project phases. The website is professionally designed using TYPO3 CMS and modern web technologies, providing clear navigation and relevant business content. Contact information is prominently displayed, supporting effective client communication. The technical infrastructure is solid, hosted likely by Deutsche Telekom, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website reflects a credible and trustworthy business presence with room for enhanced security and compliance maturity.

M

Münchener Verein Versicherungsgruppe

maklerview.de

48

Maklerview.de is a professional blog platform serving partners and intermediaries of the Münchener Verein Versicherungsgruppe, a German insurance group. The website provides industry news, practical tips, and community engagement content tailored for insurance brokers. It positions itself as a niche content hub within the finance sector, targeting German-speaking insurance professionals. The business model revolves around content delivery and community support rather than direct sales. The site is moderately sized and was founded around 2021, aligning with the domain's apparent age.

B

benevol Schweiz

dossier-freiwillig-engagiert.ch

49

The website 'Dossier freiwillig engagiert' is a Swiss non-profit digital platform managed by benevol Schweiz that recognizes and documents voluntary and unpaid engagement. It serves volunteers and organizations by providing a national quality label and a digital dossier to showcase volunteer experience and competencies. The platform is positioned as a recognized resource within Switzerland's voluntary sector, supported by reputable partners such as benevol Schweiz and SAJV. The site is professionally designed, multilingual, and provides clear navigation and relevant content tailored to its audience. Technically, the website employs modern JavaScript libraries including jQuery and Numeral.js, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No CMS or hosting provider details are explicitly detected. The site uses external scripts responsibly and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerability disclosure or security.txt files are present. The WHOIS data aligns well with the website's claims, showing consistent registrant information and domain legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for improvement in security policy transparency and technical security headers. The business credibility is high due to clear contact information, partner endorsements, and professional presentation. The risk level is low, and the site is suitable for its intended audience without any adult or questionable content.

O

Ocean Orchids d.o.o.

oceanorchids.si

43

Ocean Orchids d.o.o. is a Slovenian-based company specializing in the cultivation and retail of orchids and tropical plants, operating both an e-commerce platform and a physical tropical garden attraction. The company has a well-established market presence since 2003, targeting orchid enthusiasts and home gardeners primarily in Slovenia. Their website is built on a modern WordPress and WooCommerce stack, featuring good design, mobile optimization, and SEO practices. The technical infrastructure includes popular plugins for analytics and marketing, with hosting provided by HITROST.COM. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though no explicit security policy or incident response information is publicly available. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a niche retail business model with a focus on customer engagement through blog content and social media.

H

Homeogarden d.o.o.

homeogarden.com

42

Homeogarden d.o.o. operates a regional e-commerce platform specializing in natural gardening solutions, targeting customers primarily in Slovenia, Croatia, Germany, and Austria. The company has established a consistent brand presence with localized websites and a decade-long domain history, indicating stable market positioning within the retail gardening sector. Their business model focuses on direct online sales of gardening products emphasizing natural and sustainable solutions. Technically, the website is built on WordPress with WooCommerce, leveraging popular marketing and analytics tools such as Google Tag Manager and Microsoft Clarity, reflecting a moderate level of digital maturity and marketing sophistication. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and security headers represents areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

L

Ljubljanske mlekarne

l-m.si

45

Ljubljanske mlekarne is a leading Slovenian dairy company specializing in the production and wholesale of milk and dairy products. Established in 2007, it maintains strong ties with over 2000 local farms, ensuring product traceability and quality. The company operates a professional website built on WordPress, featuring multiple product brands and comprehensive company information. The technical infrastructure includes modern JavaScript libraries and analytics tools, with hosting supported by Google Cloud DNS services. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie banners and policies. Overall, the website reflects a mature digital presence with good content quality and user experience.

B

BTC d.d.

misijazeleno.si

48

BTC d.d. is a large Slovenian company specializing in sustainable urban development, real estate management, logistics, and innovation ecosystems. The company positions itself as a leader in sustainability with a strong focus on green energy, environmental protection, and social responsibility. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at business partners, visitors, and the local community. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with visible cookie consent and privacy policies. Overall, BTC d.d. demonstrates high business credibility and trustworthiness supported by multiple awards and certifications.

A

Aarau Regio

aarau-regio.ch

44

Aarau Regio is a regional governmental entity focused on coordinating cooperation and projects within the Aarau region in Switzerland. The website serves as an information portal highlighting current projects, regional cooperation efforts, and news relevant to residents and stakeholders. The organization emphasizes regional development, spatial and traffic planning, and nature and landscape protection. The website is built on the TYPO3 CMS platform and incorporates modern web technologies including jQuery, Owl Carousel, and analytics tools such as Google Analytics and Matomo. While the site is well-structured and professionally designed, it lacks visible cookie consent mechanisms and detailed privacy compliance features, which may pose GDPR compliance challenges. Security posture is moderate with HTTPS enforced but missing advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data align well with the website's governmental nature, indicating legitimacy and trustworthiness.

The website spinagroup.nl currently displays only a maintenance placeholder page with minimal content, indicating the shop is temporarily unavailable. There is no metadata, structured data, or business information presented, limiting insight into the company's operations or market position. The domain was registered in March 2022, consistent with a relatively new business, but the lack of content and policies reduces the site's credibility and user trust. Technically, the site lacks HTTPS information and security headers, and no analytics or advertising technologies are detected, suggesting a very basic or incomplete digital infrastructure. Security posture is weak due to missing HTTPS and absence of privacy or cookie policies, which also impacts GDPR compliance. Overall, the site is low in content quality, technical sophistication, and business credibility, resulting in a low AI score and high risk from a security and compliance perspective.

The website supkadavid.cz represents ADD ADVERTISING DESIGN, a small Czech graphic design agency founded in 2007. The company offers a range of services including graphic design, web design, corporate identity, printing materials, and advertising graphics. The website content is primarily in Czech and targets local clients seeking professional design services. The business appears to be a small, service-oriented agency with a focus on personalized client solutions and portfolio presentation. Technically, the website relies on outdated Flash technology, which significantly impacts usability, accessibility, and security. The site lacks modern web standards such as responsive design and accessibility features. There is no evidence of HTTPS enforcement or security headers, which weakens the security posture. Google Analytics is used for tracking, but no cookie consent or privacy policies are present, indicating poor privacy compliance. From a security perspective, the absence of HTTPS, security headers, and privacy policies are notable weaknesses. The use of Flash technology introduces potential vulnerabilities and compatibility issues. The WHOIS data shows a consistent and long-standing domain registration, supporting the legitimacy of the business. However, the website would benefit from modernization and improved security and privacy practices. Overall, the website scores moderately due to its business credibility and content relevance but is held back by technical and security shortcomings. Strategic improvements in technology stack, security implementation, and privacy compliance are recommended to enhance trust and user experience.

P

PIKA SERVIS d.o.o.

mojsvet.com

46

PIKA SERVIS d.o.o. is a small Slovenian technology company specializing in computer hardware sales, repair services, web hosting, domain registration, and website development. Established in 2002, it serves local businesses, individual consumers, and educational institutions primarily in Murska Sobota. The company emphasizes customer satisfaction and offers integrated web solutions including AI-assisted site building. Technically, the website uses modern web technologies and is mobile optimized, though it lacks some advanced security headers. The site is served over HTTPS with a valid SSL certificate and includes a cookie consent mechanism, indicating basic privacy compliance. However, the domain is a subdomain without public WHOIS registration, which introduces some legitimacy concerns. Overall, the business appears credible with moderate trustworthiness but would benefit from improved security practices and clearer domain registration transparency.

E

Ekonomska šola Murska Sobota

vss-ms.si

46

Ekonomska šola Murska Sobota is an educational institution based in Slovenia, focused on providing secondary and higher vocational education in economics and informatics. The website serves as an informational platform for students, teachers, and staff, reflecting a regional educational provider with a medium-sized operation founded in 2009. The technical infrastructure is based on WordPress with the Divi theme and several accessibility and cookie consent plugins, indicating a moderate level of digital maturity. The site integrates social media via Facebook SDK but lacks advanced analytics or marketing tools. Security posture is moderate, with HTTPS implied but missing explicit security headers and no visible privacy or security policies. The absence of contact information and formal policies suggests areas for improvement in transparency and compliance. Overall, the website is professional and safe for general audiences but would benefit from enhanced privacy compliance and security practices.

L

Ljudska univerza Murska Sobota

tkpomurje.si

46

The website tkpomurje.si represents a regional educational project named 'Projekt Temeljne kompetence 2023-2029' focused on foundational competencies in the Pomurje region of Slovenia. It offers various educational programs including computer courses, language courses, and professional exam preparation, supported by EU co-funding. The site is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and maintainable technical infrastructure. Hosting is provided by a reputable Slovenian provider NEOSERV.si. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. The site lacks explicit incident response and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-suited for its educational mission.

D

Digitalna agencija Ideaz, d.o.o.

ideaz.si

46

Digitalna agencija Ideaz, d.o.o. is a Slovenian-based digital agency specializing in web development, design, content production, and digital marketing services. Established in 2011, the company serves brands and businesses aiming to enhance their online presence and marketing effectiveness. The website reflects a professional and consistent brand image with a clear focus on client services and portfolio references. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for compliance and tracking, hosted by NEOSERV.si. The site demonstrates good mobile optimization, SEO practices, and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in its market niche.

E

EBONITETE.SI

ebonitete.si

44

EBONITETE.SI is a Slovenian business credit rating agency established in 2012, offering creditworthiness evaluations and financial reliability information for companies. Positioned as the first credit rating agency in Slovenia, it targets businesses seeking reliable partner evaluations. The website is built on WordPress with Elementor, integrating modern technologies such as Google Tag Manager and Microsoft Clarity for analytics and marketing. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS and security headers implemented, but lacks publicly disclosed security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is legitimate and professionally maintained but would benefit from enhanced transparency and compliance documentation.

M

MDS Display

mdsdisplays.com

47

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

N

NPO

omroepzwart.nl

49

Omroep ZWART is a Dutch public broadcasting platform under the NPO umbrella, established in 2020. It focuses on cultural diversity and representation through radio, podcast, television, and online media content. The website offers a modern user experience with video streaming capabilities and active social media engagement. Technically, it employs a robust tech stack including Bitmovin Player, Google Tag Manager, and multiple analytics services, indicating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professionally maintained, serving a general audience with safe content.

P

Pigolabs

piwigo.com

47

Piwigo.com is a mature and reputable online image library and digital asset management platform operated by Pigolabs, founded in 2008. The company targets a broad range of professional users including travel and tourism organizations, public sector entities, businesses, non-profits, and photographers. Their SaaS business model offers a free trial and subscription pricing, emphasizing ease of use, collaboration, and GDPR compliance. The website is professionally designed with clear navigation and rich content, supporting multiple languages and showcasing strong trust indicators such as client logos and testimonials. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted under a domain registered with Gandi SAS. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Security evaluation shows no critical vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure policy are areas for improvement. Overall, the site is trustworthy, safe, and professionally maintained with a high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

S

Slovenski regionalno razvojni sklad

srrs.si

38

Slovenski regionalno razvojni sklad (SRRS) is a Slovenian public financial institution established in 2020, focused on providing favorable financing and subsidies to support regional development, agriculture, entrepreneurship, local infrastructure, and non-profit organizations across Slovenia. The institution operates multiple financial product programs tailored to different sectors and prioritizes sustainability, green transition, and social responsibility. The website reflects a professional and comprehensive digital presence with clear communication channels and extensive program information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, reCAPTCHA, and accessibility features, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and reCAPTCHA protection on forms, though explicit security headers could be more visible. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanisms. Overall, SRRS presents a trustworthy and authoritative online presence aligned with its government-backed mission.