Security Directory

D

e-Documenta Pannonica – Čezmejna baza podatkov o kulturni dediščini izbranih 120 krajev na čezmejnem slovensko-madžarskem območju – Prekmurja v Sloveniji in Železne županije na Madžarskem

documenta-pannonica.si

52

The website www.documenta-pannonica.si serves as a cross-border cultural heritage database focusing on 120 selected locations in the Slovenian-Hungarian border region, specifically Prekmurje in Slovenia and the Železna županija in Hungary. It provides detailed information on archival materials, immovable and intangible cultural heritage, notable personalities, and audio-visual content. The platform targets researchers, historians, and cultural enthusiasts interested in this niche area. The multilingual support (Slovenian, Hungarian, English) enhances accessibility for a broader audience. Technically, the site is built on WordPress with common plugins for multilingual content and GDPR cookie compliance, hosted by a Slovenian provider. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and formal privacy or security policies. Analytics are implemented via Google Analytics with moderate user tracking. Overall, the site is professionally designed with consistent branding and trustworthy content, though it would benefit from enhanced privacy documentation and security hardening.

Općina Krapinske Toplice operates an official municipal website providing comprehensive information and services to residents and stakeholders of the Krapinske Toplice municipality in Croatia. The site offers detailed administrative content including organizational structure, public notices, procurement, and community engagement resources. The website is positioned as a local government authority portal, serving a small-sized municipality with a focus on transparency and public service. Technically, the site is built on WordPress CMS using Elementor page builder, leveraging modern web technologies such as jQuery and Font Awesome for UI elements. Hosting and domain registration are consistent with a Croatian academic network provider, ensuring local presence and legitimacy. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the website is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation.

R

Razvojna agencija Sotla

ra-sotla.si

40

Razvojna agencija Sotla is a Slovenian regional development agency established in 2003, focusing on regional development programs, entrepreneurship support, and project management primarily in the Obsotelje and Kozjansko regions. The agency operates as a non-profit entity serving local governments, entrepreneurs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern plugins such as Elementor and Events Manager, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR cookie requirements, and free from suspicious indicators.

R

Regionalni centar kompetentnosti u turizmu i ugostiteljstvu Zabok

rcktu-zabok.hr

34

The website represents the Regional Center of Competence in Tourism and Hospitality located in Zabok, Croatia. It serves as an educational institution offering secondary education, adult courses, workshops, retraining, and consulting services focused on tourism and hospitality sectors. The center aims to develop professional skills, creativity, and social responsibility among students and professionals, supported by EU funding. The site is well-structured, professionally designed, and targets students, adult learners, and regional businesses in the tourism and hospitality industry. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and terms of service pages and a vulnerability disclosure policy. Overall, the domain registration and hosting are consistent with the business profile, indicating legitimacy and trustworthiness.

B

Business Angels Impact Fund

baif.hr

54

Business Angels Impact Fund is a Croatian-based investment fund focused on supporting startups and companies that generate social and environmental impact. The website presents a professional and consistent brand image, targeting investors and social enterprises. The technical infrastructure is built on WordPress using Elementor and Astra theme, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is moderate with HTTPS enabled but lacking advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

D

Dom zdravlja Krapinsko zagorske županije

dzkzz.hr

49

Dom zdravlja Krapinsko zagorske županije is a public healthcare provider serving the Krapinsko-zagorska County in Croatia. The organization offers a range of primary healthcare services including family medicine, pediatrics, palliative care, and radiology. The website reflects a well-established regional healthcare institution with multiple branch offices, targeting local residents seeking accessible medical care. The business model is government-funded, focusing on essential healthcare delivery rather than commercial services. The website content is comprehensive and professionally presented, supporting patient engagement through news updates and satisfaction surveys. Technically, the website is built on WordPress with modern plugins such as Elementor and Smart Slider 3, ensuring a responsive and accessible user experience. The site uses HTTPS and includes GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. However, some security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The presence of GDPR compliance and a dedicated privacy policy page indicates attention to data protection. However, the absence of explicit security policy and incident response information could be addressed to enhance trust and preparedness. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include implementing additional security headers, maintaining up-to-date software, and publishing clear security and incident response policies to further strengthen the security posture and user trust.

P

Pomurski muzej Murska Sobota

pomurski-muzej.si

44

Pomurski muzej Murska Sobota is a regional museum dedicated to preserving and showcasing the cultural heritage of the Pomurje region in Slovenia. The website provides comprehensive information about exhibitions, events, educational programs, and digital collections, targeting a broad audience including families, schools, and cultural enthusiasts. The museum positions itself as a key cultural institution in the region with a focus on both physical and digital heritage preservation. Technically, the website is built on the WBCE CMS platform with modern web technologies such as Bootstrap, jQuery, and Revolution Slider. It is hosted under a reputable Slovenian registrar (Arnes) and uses HTTPS with a valid SSL configuration. The site is mobile-optimized and includes basic accessibility features. Google Analytics is used for visitor tracking, and a cookie consent banner with opt-in is implemented, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its cultural mission effectively. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance further.

P

Pučko otvoreno učilište Katarina Zrinska – Ozalj

poukz.hr

54

Pučko otvoreno učilište Katarina Zrinska – Ozalj is a small educational institution based in Croatia, founded in 2022. The organization offers a variety of educational and creative programs targeting children, youth, retirees, and adults, focusing on lifelong learning and community engagement. The website reflects a local community-oriented business model with clear contact information and social media presence, positioning itself as a trusted local educational provider. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and visually appealing user experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO optimization. Hosting and domain registration are consistent with the business location, enhancing trustworthiness. From a security perspective, the website implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of terms of service and security policies suggests an opportunity to strengthen compliance and user trust. Overall, the website is functional, professional, and safe for general audiences. The risk level is low, but strategic improvements in security posture and privacy transparency would enhance the institution's digital maturity and trustworthiness.

A

Azelija Eko d.o.o.

azelija-eko.hr

47

Azelija Eko d.o.o. is a Croatian municipal service company specializing in waste management, recycling, cemetery services, public lighting maintenance, and chimney sweeping within the Ozalj region and surrounding municipalities. The company operates fixed and mobile recycling yards and provides essential environmental services to local residents and businesses. The website reflects a local government service provider with clear contact information and service descriptions, targeting the regional community. Technically, the website is built on Joomla CMS with a Bootstrap framework and uses common JavaScript libraries such as jQuery and Font Awesome for UI elements. The site includes image sliders and responsive design elements, indicating moderate digital maturity. Hosting is provided by CARNET, a reputable Croatian academic network, which aligns with the local focus. From a security perspective, the site lacks visible security headers and explicit HTTPS enforcement in the provided data, which lowers its security posture. No privacy or cookie policies were found, indicating potential GDPR compliance gaps. The site does not use tracking or advertising technologies, which reduces privacy risks but also limits marketing insights. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance improvements, and clearer policies to strengthen trust and regulatory adherence.

The website www.peresobralik.ee represents the Estonian non-profit organization Eesti Lasterikaste Perede Liit, which focuses on promoting family-friendly dining establishments through a certification mark. The site targets families with children in Estonia and provides information about the certification, news updates, and regional member organizations. The business model is non-profit and community-oriented, aiming to enhance societal recognition and support for families with children. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Owl Carousel, Font Awesome, and Google Fonts. The site is moderately performant, mobile-optimized, and has a clear navigation structure. However, it lacks advanced SEO and accessibility features. The hosting provider is not explicitly identified from the content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the website is legitimate, safe, and professionally presented but has room for improvement in privacy compliance and security best practices. The WHOIS data aligns well with the website's claims, supporting its trustworthiness.

V

Valvoline

valvoline.ee

51

Valvoline.ee is the Estonian localized website for Valvoline, a globally recognized lubricant and automotive chemical brand with a history dating back to 1866. The website presents product offerings primarily focused on lubricants, coolants, and maintenance chemicals targeting automotive, industrial, and motorsports sectors. The site demonstrates a moderate level of digital maturity with use of common JavaScript libraries and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The website is accessible without WAF or blocking mechanisms, indicating no access restrictions. Overall, the site is professionally designed with good content relevance but could improve in privacy compliance and security posture.

D

Dalmatia Storytelling

dalmatiastorytelling.com

43

Dalmatia Storytelling is a niche cultural tourism business founded in 2021, offering storytelling experiences in the Dalmatia region through interpretive guides, theatrical groups, and technology. The website is professionally designed using WordPress and Elementor, with multilingual support and a clear focus on cultural and travel audiences. The technical infrastructure is modern and includes popular libraries and frameworks, hosted by a reputable provider Hetzner Online GmbH. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a comprehensive cookie policy and GDPR consent. Business credibility is supported by consistent branding and structured data.

R

Regionalni Centar za Investicije - Međimurje d.o.o.

rci.hr

60

Regionalni Centar za Investicije - Međimurje d.o.o. is a government-affiliated regional investment center focused on supporting local businesses and stakeholders in the Međimurje region of Croatia. The organization provides services including investment support, dissemination of information on EU and national tenders, and regional development initiatives. The website reflects a professional and consistent brand presence, targeting local entrepreneurs and agricultural producers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

M

Mesap d.o.o.

mesap.hr

46

Mesap d.o.o. operates the Međimurski sajam poduzetništva (MESAP), a business focused on renting various event and business spaces including conference halls, large event halls, and a business club/cafe in Croatia. The company targets businesses and event organizers in the region, providing facilities equipped with modern amenities such as WiFi, projectors, and parking. The website reflects a small-sized, regionally focused business with a professional online presence and clear contact information. Technically, the site is built on Joomla CMS with the Helix Ultimate framework and uses Bootstrap and jQuery for responsive design and interactivity. Hosting is provided by Totohost, a Croatian hosting provider. The website is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, showing a long-established Croatian entity. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

K

Konplast d.o.o.

kipos.hr

40

Kipos.hr is a Croatian business website serving as a login portal for KIPOS, a bookkeeping and business information system developed by Konplast d.o.o. The platform targets business users requiring accounting and bookkeeping software solutions. The website is primarily a secure login interface with client-side encryption for credentials, indicating a focus on protecting user data during authentication. The business appears to be a small-sized technology provider with a niche market in Croatia, founded in 2014, and maintains consistent branding with its parent company Konplast d.o.o. The website lacks public-facing content such as privacy or cookie policies and does not provide contact information on the login page, which limits transparency for external users.

Integrirani promet zagrebačkog područja d.o.o. is a public sector company owned primarily by the City of Zagreb and two surrounding counties. It focuses on integrated passenger transport planning and management in the Zagreb metropolitan area. The website serves as an informational portal presenting the company's mission, master plans, and news related to transportation projects. Technically, the site is built on an older WordPress version with common plugins such as Contact Form 7 and Google Maps integration. While the site is functional and provides relevant content, it uses outdated software versions that pose security risks. The security posture is basic with HTTPS enabled but lacks modern security headers and updated libraries. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and professional but requires technical and compliance improvements to enhance security and user trust.

Ž

Županijska uprava za ceste Krapinsko-Zagorske županije

zuc-kzz.hr

56

Županijska uprava za ceste Krapinsko-Zagorske županije is a Croatian government agency responsible for managing county roads within the Krapinsko-Zagorska region. The website serves as an official platform providing information on road maintenance, closures, public procurement, financial plans, and legal documentation. It targets local residents, businesses, and stakeholders involved in regional infrastructure. The business model is that of a public sector entity focused on infrastructure management and transparency. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Contact Form 7, and Slider Revolution. It uses modern web technologies including HTTPS, Google Fonts, and jQuery. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, some improvements can be made in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA for forms, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is indicated by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professional, reflecting its government entity status. Strategic recommendations include implementing cookie consent, enhancing security headers, properly configuring analytics, and publishing security and incident response information to improve compliance and security posture.

Z

Zagorska razvojna agencija

zara.hr

47

Zagorska razvojna agencija (ZARA) is a regional development agency focused on fostering sustainable growth and economic development in Krapinsko-zagorska County, Croatia. The agency acts as a partner for excellence and creativity, supporting local government bodies, public institutions, and businesses through project management, consulting, and strategic planning. It holds recognized certifications such as ISO 9001, ISO 21502, and ISO 26000, and is a member of the UN Global Compact network, underscoring its commitment to sustainability and governance standards. Technically, the website is built on WordPress using Elementor, with modern web technologies including jQuery and Font Awesome. It integrates marketing tools like Brevo for newsletter management and employs accessibility and GDPR compliance plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not clearly detected, and there is no dedicated security policy or incident response contact information, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively communicates its mission and services to its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response visibility to further strengthen its security posture.

T

Telia Eesti AS

winterplace.ee

45

Otepää Winterplace is Estonia's largest winter park located in the city center of Otepää, offering a variety of winter leisure activities including snowtubing, ice skating, igloo cinema, and play areas for children. The business targets families, youth, and groups such as schools and companies, positioning itself as a premier winter entertainment destination in Estonia. The website reflects a well-structured and visually appealing platform with integration of social media and mapping services to enhance user engagement. Technically, the site employs modern JavaScript libraries and Google services, managed via the Greativ CMS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic consent mechanisms, but lacks explicit privacy policies and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence for the business.

U

Ugandi Resto

ugandiresto.ee

44

Ugandi Resto is a well-established restaurant located in Otepää, Estonia, offering a unique blend of Nordic and Mediterranean cuisine. The business has a strong local presence with over 23 years of history and multiple prestigious awards, positioning it as a reputable hospitality provider in the region. The website reflects a professional and customer-friendly approach with clear service offerings including dining, private event hosting, and gift cards. Technically, the website uses modern web technologies and a proprietary CMS, delivering a good user experience with mobile optimization and rich content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies and limited security headers. The security posture is adequate but could be enhanced to meet higher standards. Overall, the site is trustworthy and well-maintained but should address compliance and security improvements to reduce risk and enhance user trust.

J

Johnson & Johnson Health Care System Inc.

jjcustomerconnect.com

61

Johnson & Johnson Customer Connect is a specialized order management platform designed for Johnson & Johnson's direct customers and distributors. The website serves as a portal to search for markets that have opted into this service, facilitating streamlined order processing within the healthcare sector. The platform is clearly targeted at B2B users within the Johnson & Johnson ecosystem, reflecting an enterprise-grade business model supported by a well-established parent company. Technically, the website employs a traditional web stack including Bootstrap for responsive design, jQuery for interactivity, and several UI enhancement libraries such as DataTables and Swiper. The site demonstrates basic mobile optimization and a moderate performance profile. However, there is no evidence of advanced CMS or analytics integration, suggesting a focused, internal-use application rather than a public-facing marketing site. From a security perspective, the domain is registered with appropriate safeguards such as clientTransferProhibited status and uses DNS servers consistent with Johnson & Johnson's infrastructure. However, the absence of visible HTTPS confirmation, security headers, and privacy or cookie policies indicates room for improvement in security posture and compliance. No contact or incident response information is publicly available, which may limit transparency and user trust. Overall, the website is functional and consistent with its business purpose but lacks several modern security and privacy best practices. Strategic improvements in HTTPS deployment, security headers, and policy disclosures would enhance trust and compliance, supporting the platform's role within a global healthcare enterprise.

V

Viðskiptablaðið

vb.is

58

Viðskiptablaðið is a well-established Icelandic business news website founded in 1997, providing news and analysis primarily in the Icelandic language. The site targets Icelandic-speaking audiences interested in business, finance, and general news. It operates on a business model combining advertising and subscription services, with a professional and consistent brand presence. Technically, the website uses modern web technologies including Google Analytics, Facebook Pixel, Cloudflare DNS, and Airserve for advertising. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and Cloudflare DNS, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the domain's WHOIS data confirms legitimacy and long-term operation, supporting a high trust level.

L

Liata podlaha Bratislava (liata dlažba) | Lejeme

lejeme-podlahy.sk

42

The website www.lejeme-podlahy.sk represents a small local business specializing in liquid flooring and related services in Bratislava, Slovakia. The site is built on WordPress using the GeneratePress theme and Elementor page builder, indicating a modern and maintainable technical infrastructure. Performance optimization is enhanced by WP Rocket, contributing to moderate loading speeds and good mobile responsiveness. However, the website lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. No explicit contact information or security policies are present, which limits the business's credibility and security posture. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

P

Rekonštrukcia Bratislava (rekonštrukčné práce) | Prerábka

profi-prerabka.sk

44

The website www.profi-prerabka.sk is a Slovakian local service provider specializing in apartment and home renovation and reconstruction services, primarily targeting customers in Bratislava. The site is built on WordPress using the GeneratePress theme and Elementor page builder, with standard SEO optimization via Yoast SEO. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy and cookie policies are absent, indicating a gap in GDPR compliance. Contact information and social media presence are not explicitly found, which may affect user trust and business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

M

Maliarske práce Bratislava (maliar Bratislava) | Môj Maliar

moj-maliar.sk

42

The website www.moj-maliar.sk represents a small local painting service provider based in Bratislava, Slovakia. The business focuses on offering painting and plastering services primarily targeting residential and commercial clients within the Bratislava region. The website is built on WordPress using the GeneratePress theme and Elementor page builder, indicating a moderate level of digital maturity with a focus on usability and design. The technical infrastructure includes modern fonts and optimization plugins such as WP Rocket, contributing to moderate performance and good mobile responsiveness. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact emails, phone numbers, or social media links were explicitly found in the provided content, limiting direct communication channels and trust signals. Overall, the website is professional and relevant to its business domain but would benefit from enhanced privacy compliance and security practices.

P

Pracenamieru.sk

pracenamieru.sk

36

Pracenamieru.sk is an online platform founded in 2016 that offers professional academic writing assistance primarily targeting students in Slovakia and neighboring countries. The service emphasizes anonymity, originality, and customer satisfaction, providing a range of academic work types including seminar, bachelor, diploma, and MBA papers. The business model revolves around an online ordering system with options for installment payments and free revisions, supported by a team of approximately 50 experts. The website features testimonials and a cookie consent mechanism, reflecting a moderate level of trust and compliance with privacy regulations. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js, and tracking tools such as Google Analytics and Hotjar. It is hosted by Active24 with DNSSEC enabled and uses HTTPS, ensuring a secure connection. The site is mobile-optimized with good navigation and content quality, although accessibility features are basic. No CMS or major frameworks are detected, indicating a custom-built solution. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks explicit HTTP security headers and published security policies or incident response contacts. Forms include honeypot fields to mitigate bot submissions, and cookie consent is implemented. However, the absence of direct company contact details and security disclosures suggests room for improvement in transparency and security posture. Overall, the website presents a legitimate, small-scale educational service with good content and technical implementation but moderate security and privacy compliance maturity. Strategic enhancements in security headers, incident response transparency, and contact information disclosure would strengthen trust and resilience.

M

Môj Kúrenár

moj-kurenar.sk

44

Môj Kúrenár is a small local heating service provider based in Bratislava, Slovakia, specializing in heating installation and repair services. The website is built on WordPress using Elementor and the GeneratePress theme, indicating a modern and maintainable technical infrastructure. The site is mobile-optimized and presents professional content relevant to its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and credible but would benefit from enhanced privacy and security measures.

Jogadores Anônimos is a Brazilian non-profit organization dedicated to supporting individuals struggling with compulsive gambling. The website serves as a hub for information, recovery literature, and access to support groups both online and in-person. It provides contact details including regional offices, WhatsApp helplines, and educational resources. The organization positions itself as a self-sustained community without affiliations to political or religious entities. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted on HostGator Brazil. The site is mobile-optimized and SEO-friendly but lacks published privacy and cookie policies, which are critical for compliance. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and incident response information are missing. Overall, the site is trustworthy, professional, and safe for general audiences seeking help with gambling addiction.

The website www.knihkupectvipant.cz operates as an online bookstore specializing in books related to 20th century history and contemporary society, primarily targeting Czech-speaking audiences interested in educational content. The business supports educational initiatives and promotes its offerings through a structured e-commerce platform with clear navigation and product categorization. The site integrates modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Google Analytics, and Facebook Pixel to enhance user experience and marketing capabilities. Security measures include HTTPS and CAPTCHA for forms, but lack advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presentation appear professional and legitimate. Privacy and cookie policies exist but are basic, with limited GDPR compliance indicators. Contact information is limited to an email address and inquiry forms, with no phone or physical address disclosed. Overall, the site demonstrates a moderate level of digital maturity and security posture, suitable for a small specialized e-commerce business.

L

LERIKA Tax & Accounting, s.r.o.

lerika.cz

39

LERIKA Tax & Accounting, s.r.o. is a small professional services firm based in Prague, Czech Republic, specializing in tax consulting, accounting, payroll management, and related economic advisory services. The company targets businesses primarily in the Czech and Slovak markets, offering a broad range of financial and administrative services including company liquidation, real estate valuation, and investment support. The website is built on WordPress and uses several common plugins and libraries, but it runs outdated versions which pose security risks. The site is accessible, uses HTTPS, and includes Google Analytics with privacy-conscious settings. However, it lacks explicit privacy and cookie policies, and security headers are missing, indicating room for improvement in compliance and security posture. Contact information is clearly provided, supporting business credibility.

G

GDPR CENTRUM

gdprcentrum.cz

58

GDPR CENTRUM is a Czech-based small business collective of IT and legal professionals specializing in GDPR certification, implementation, consultancy, and software development. The company targets small businesses, sole proprietors, and online merchants, offering affordable and free GDPR compliance tools including a documentation generator. The website is professionally designed with clear navigation and comprehensive content in Czech, reflecting a strong focus on GDPR education and practical compliance support. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap and jQuery 1.12.4, with good mobile optimization but lacking some modern security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but missing advanced security configurations and incident response details. WHOIS data is unavailable, which reduces domain trustworthiness, but the detailed content and contact information support legitimacy. Overall, the site provides valuable GDPR compliance resources with room for improvement in privacy transparency and security best practices.

C

Cyklostezka Bečva, z.s.

cyklostezkabecva.cz

56

Cyklostezka Bečva, z.s. operates a regional cycling and recreational trail along the Bečva river in the Czech Republic, targeting cyclists, tourists, inline skaters, and cross-country skiers. The organization focuses on providing safe, scenic routes with minimal motor traffic, supported by regional municipalities and tourism partners. The website reflects a small non-profit entity with a clear mission to promote outdoor activities and regional tourism. Technically, the website uses modern JavaScript libraries such as jQuery and Font Awesome, integrates Google Analytics and Tag Manager for visitor tracking, and is hosted on Wedos servers. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and formal privacy or terms of service pages. The WHOIS data confirms domain legitimacy with consistent registration details dating back to 2006, supporting the organization's credibility. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, though improvements in security policies and accessibility could enhance its posture.

F

Foire Internationale de Marseille

foiredemarseille.com

48

Foire Internationale de Marseille is a well-established event organizer hosting the annual international fair in Marseille, France, attracting hundreds of thousands of visitors and numerous exhibitors. The website provides comprehensive information about the event, including themes, schedules, and exhibitor details, targeting a broad audience of visitors and participants. Technically, the site is built on WordPress with a modern tech stack including jQuery, Font Awesome, and Google Fonts, and integrates analytics and consent management tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness despite the professional presentation and content quality. Overall, the site is functional, informative, and user-friendly but would benefit from enhanced transparency and compliance documentation.

V

Verdun Expo Meuse

verdunexpomeuse.com

52

Verdun Expo Meuse is a regional event organizer based in France, specializing in the Foire Nationale de Verdun and the Village de Noël de Verdun. The company provides event organization services and equipment rental, targeting local exhibitors and the general public interested in regional fairs. The website is built on WordPress with a professional theme and includes social media integration, indicating a moderate level of digital maturity. Technically, the site uses modern libraries such as jQuery and FlexSlider, and it is mobile optimized with good SEO practices. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact information appear professional and trustworthy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

MONEV is a French association established in 1928 that manages and owns the Parc des Expositions "Théophile Giraud" in Montluçon. It organizes a wide range of events including agricultural, cultural, commercial, and sporting activities. The organization emphasizes sustainable development, notably through a large photovoltaic solar panel installation on its premises. The website targets event organizers and the general public interested in regional exhibitions and fairs. The business model revolves around event management and venue rental, positioning MONEV as a key regional player in the exhibition and event sector. Technically, the website is built on the WebSee CMS platform and utilizes common JavaScript libraries such as jQuery, Jssor Slider, and Fancybox for interactive features. The site is moderately performant, mobile-optimized, and accessible, with basic SEO practices in place. However, there is no evidence of advanced analytics or tracking services, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible HTTP security headers and explicit security or privacy policies. Cookie consent is implemented, reflecting some privacy compliance. The absence of WHOIS data limits domain trust verification, but the website content and contact information appear legitimate and consistent with a regional association. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy front for MONEV's business activities, though improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

L

Light Touch Studio

light-touch.fr

53

Light Touch Studio is a small creative agency based in Guadeloupe, France, specializing in graphic design, web development, and content strategy. With 15 years of experience, the company emphasizes collaborative and tailored communication solutions for brands seeking to enhance their visibility and identity. The website is professionally designed using WordPress and Elementor, showcasing a portfolio of client projects and clear contact options including a GDPR-compliant contact form. The technical infrastructure is modern and hosted by OVH, a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the website reflects a trustworthy and credible business with a focus on quality creative services.

The Macedonian Stock Exchange (Македонска Берза АД Скопје) operates as the primary regulated securities market in North Macedonia, providing official listings, trading platforms, market data, indices, and regulatory information. The website targets investors, listed companies, brokers, and financial professionals, offering comprehensive market insights and educational resources. The business model centers on facilitating capital market operations and compliance within the Macedonian financial sector. Technically, the website employs a modern web stack including jQuery, Bootstrap, and C3.js for interactive charts, hosted on a local provider (uhost.mk). The site is mobile-optimized with good SEO and accessibility basics, though some enhancements could improve accessibility compliance. The infrastructure supports dynamic market data updates and user interaction via search and contact forms. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is good with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a financial institution, with moderate technical maturity and compliance. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen the platform.

L

Leitmotiv Online Medien GmbH & Co. KG

backstagepro.de

48

Backstage PRO is a well-established German professional network platform dedicated to the music industry, connecting musicians, bands, event organizers, and related businesses. It offers a comprehensive suite of services including booking opportunities, a musician marketplace, industry news, and premium cooperation campaigns. The platform is supported by notable partners such as Musikhaus Thomann, enhancing its market credibility and reach. The website is professionally designed, content-rich, and targets music professionals seeking networking and business opportunities within the German music scene. Technically, the site employs modern web technologies including Google Analytics 4, Google Tag Manager, and cookie consent management, with a mobile-optimized experience and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the platform demonstrates a mature digital presence with strong business credibility and user trust.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

C

CancanIT

cancanit.com

63

CancanIT is a specialized online certification provider focused on professional web developers. Established in 2010, it offers a broad range of certification exams covering front-end and back-end web technologies, including HTML5, CSS3, JavaScript, PHP, MySQL, and more. The company targets freelance workers, job seekers, and career starters aiming to validate their skills and improve marketability. The website is well-structured with clear navigation and professional branding, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, and jQuery, hosted likely via GoDaddy infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with visible privacy and cookie policies and a consent banner, but no detailed GDPR compliance indicators or data protection officer information. Overall, the security posture is adequate for the business type, with no critical vulnerabilities detected. The domain WHOIS data is consistent and supports legitimacy with a long registration history and no privacy protection. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach. The content is safe for general audiences, focused on education and certification without any adult or questionable material. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing incident response contacts, and improving privacy compliance transparency to strengthen trust and security culture.

N

Neuland visuelle Gestaltung GmbH

neuland.li

67

Neuland visuelle Gestaltung GmbH is a professional graphic design agency based in Schaan, Liechtenstein, specializing in functional visual concepts for digital and analog applications. The company serves a diverse clientele including government bodies, cultural institutions, and private enterprises, positioning itself as a trusted local design partner. Their portfolio showcases expertise in branding, corporate design, signage, digital interfaces, and campaign development. Technically, the website is built on the concrete5 CMS and leverages modern JavaScript libraries such as jQuery, Pixi.js, and Anime.js, alongside the Foundation framework, providing a responsive and visually engaging user experience. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a credible and professional business with room for improvement in security and privacy transparency.

S

Streetwork Liechtenstein

streetwork.li

61

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

K

KASPI - poduzetnički inkubator

kaspi.hr

15

KASPI is a modern entrepreneurial incubator based in Croatia, founded in 2022, serving startups, entrepreneurs, craftsmen, freelancers, and digital nomads. It offers incubation programs, affordable workspace rental, mentorship, and networking opportunities. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-branded and consistent, with good content quality and user experience. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Social media presence on Facebook and Instagram supports engagement and trust. Overall, the business appears legitimate and well-positioned regionally with support from EU funds and local partners.

S

Sisačko-moslavačka županija

smz.hr

59

Sisačko-moslavačka županija operates an official regional government website providing comprehensive information about county administration, public projects, news, tenders, and contact details. The site targets residents, businesses, and public officials within the Sisak-Moslavina County in Croatia. The website is built on Joomla CMS with Helix Ultimate framework and uses modern web technologies including Bootstrap and jQuery. It features good mobile optimization and accessibility tools, including an accessibility menu and cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and well-aligned with its government function.

Z

Zadarska županija

zadarska-zupanija.hr

47

Zadarska županija is the official regional government website for the Zadar County in Croatia, providing public administration and citizen services. The website serves as an information portal targeting residents and visitors of the region. It is built on Joomla CMS with the Helix Ultimate framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. The site demonstrates good technical maturity with HTTPS enforced and security headers implemented, reflecting a solid security posture. However, it lacks critical compliance documents such as a privacy policy and terms of service, which are essential for GDPR compliance and user trust. No contact emails or phone numbers were explicitly found, which may hinder user communication. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and compliance transparency.

E

EUROPE DIRECT CENTAR KARLOVAC

europedirect-karlovac.eu

55

Europedirect Karlovac operates as a regional European Union information center based in Karlovac, Croatia. It serves as a public outreach and informational hub, providing EU-related news, publications, and event information primarily targeting local citizens, government bodies, and regional stakeholders. The website is professionally designed using WordPress with Elementor and Yoast SEO, reflecting a moderate to good level of digital maturity. It offers multilingual support with Croatian as the primary language and English as an alternate. The business model is non-commercial, focusing on public service and EU policy dissemination.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.

H

Hrvatski košarkaški savez

hks-cbf.hr

45

The Hrvatski košarkaški savez (Croatian Basketball Federation) operates as the national governing body for basketball in Croatia, providing official news, league information, team rosters, and historical data related to Croatian basketball. The website serves basketball fans, players, clubs, and the broader sports community in Croatia. It maintains a strong digital presence with official social media channels and regularly updated content. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, and various UI libraries such as Owl Carousel and Font Awesome. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google Analytics for tracking. However, it lacks several important security headers like Content-Security-Policy and X-Frame-Options, which could be improved to enhance security posture. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. Overall, the website is legitimate and professional, though WHOIS data is unavailable due to GDPR privacy protections. The absence of a cookie consent mechanism may represent a compliance gap. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and maintaining regular updates to WordPress and plugins to mitigate vulnerabilities.

ALSENTA s.r.o. is a Czech Republic based technology company founded in 2008, specializing in providing digital tools and services to enhance business efficiency. Their offerings include B2B identification tools (Seeky.cz), supplier engagement and reverse auction platforms (Alsenta.com), comprehensive business data services (LightData.cz), and outsourcing of procurement activities. The company also manages several related projects such as B2Bpoptavka.CZ and iFirmy.cz, positioning itself as a multifaceted service provider in the B2B and business intelligence space. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence.

U

Urząd Miasta Zielona Góra

zielonagora.pl

60

The website www.zielona-gora.pl is the official online portal for the City Office of Zielona Góra, Poland. It serves as a government information hub providing residents, visitors, and businesses with access to city authorities, departments, local districts, public services, cultural events, and tourism information. The site is positioned as a trusted municipal government resource with clear branding and official social media presence. The business model is public service oriented, focusing on transparency and accessibility for the local community. Technically, the website is built on WordPress using the Avada theme, incorporating common plugins such as Contact Form 7, Cookie Notice, and WP Accessibility Helper. The site demonstrates moderate performance and good mobile optimization, with accessibility features implemented to support diverse users. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and a dedicated security policy page. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic with a privacy policy present and GDPR considerations addressed. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a safe, legitimate government portal with a solid foundation but could benefit from enhanced security policies and technical hardening. The risk level is low, with recommendations focusing on improving security headers, incident response transparency, and privacy documentation to strengthen compliance and user trust.