Security Directory

S

SI - Schweizer Informatik Gesellschaft

swissinformatics.org

60

The Swiss Informatics Society (SI) is a well-established non-profit professional association dedicated to representing and supporting IT professionals across Switzerland. With a membership base of approximately 1500 IT experts, SI offers a broad range of services including specialized interest groups, high-level events such as the Swiss IT Congress, publications like the Digital Magazine, and certification programs such as IT Expert SI and SI Professional. The organization actively engages in policy advocacy and collaborates with national and international partners to promote IT education and professional standards. The website reflects a professional and consistent brand image targeting IT professionals and educators in Switzerland.

S

SEWOBE GmbH

sewobe.de

62

SEWOBE GmbH is a German-based technology company specializing in providing online software solutions for member organizations, such as associations and clubs. Their SaaS platform focuses on membership management and digital transformation, targeting German-speaking markets. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their niche audience. The company maintains a consistent brand presence and offers multiple contact channels including email, phone, and contact forms. Privacy and cookie policies are comprehensive and GDPR-compliant, reflecting a mature approach to data protection. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting appears to be with 1&1 IONOS, supported by stable DNS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. No vulnerabilities or suspicious domains were detected. Overall, SEWOBE demonstrates a solid digital maturity with a secure and compliant web presence. The absence of a public security policy and vulnerability disclosure are areas for improvement. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website content is safe for general audiences and free from adult or questionable material.

Curator.io is a technology company operating a free social media aggregation platform that enables users to collect and display social media content easily. The company, Digital Privacy Corporation, founded in 2013 and based in the US, targets businesses and individuals seeking to enhance their websites with social media feeds. The platform is positioned as an easy-to-use, free service with a modern web presence and notable client logos displayed, indicating a solid market position. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs common marketing and analytics tools like Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security practices include HTTPS enforcement and domain transfer protections, but DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site shows a good baseline posture with no critical vulnerabilities detected. However, the absence of explicit privacy and cookie policies, as well as lack of incident response contacts and security.txt, indicates gaps in compliance and transparency. Tracking scripts are present, suggesting moderate user tracking without clear data retention disclosures. Overall, Curator.io presents a trustworthy and professional online presence with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response information to enhance trust and compliance.

I

ICT Cortex

ictcortex.me

47

ICT Cortex is a Montenegro-based ICT cluster organization focused on fostering digital transformation, innovation, and education within the country's technology sector. Established in 2021, it serves as a collaborative platform for IT professionals, educational institutions, government bodies, and businesses to drive sustainable technological development. The website reflects a professional and consistent brand presence, highlighting key services such as digital transformation advocacy, talent development, and partnerships with academia and industry. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for user insights. Security posture is good with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security policy disclosures are recommended. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, ICT Cortex presents a credible and trustworthy digital presence aligned with its mission to lead Montenegro's ICT sector growth.

I

IAB Serbia

iab.rs

58

IAB Serbia operates as the Interactive Advertising Bureau for Serbia, serving as a key industry association focused on advancing digital advertising standards, education, and market development within the Serbian digital ecosystem. The organization targets digital marketing professionals, media agencies, and companies engaged in digital advertising, providing resources, advocacy, and networking opportunities. Founded in 2019, IAB Serbia holds a leading position in the local digital advertising industry with a clear focus on education and market standards. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as jQuery, Slick Carousel, FontAwesome, and Google Analytics integrated via Google Site Kit. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO optimization is basic but includes structured data (JSON-LD) and Open Graph metadata for social sharing. From a security perspective, the site benefits from HTTPS with excellent SSL configuration and no visible exposed sensitive data. However, it lacks important security headers and does not publish security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and organization. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen the organization's risk posture and regulatory alignment.

Z

Zavod IAB Slovenija

iab.si

57

Zavod IAB Slovenija is a Slovenian industry association focused on promoting and supporting the development of digital and interactive advertising. Established in 2005, it serves as a key sector organization for digital marketing professionals and businesses within Slovenia. The website is built on the Wix platform and uses Cloudflare DNS services, reflecting a modern but standard technical infrastructure. The site is moderately optimized for mobile and SEO, with good design quality and user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. No contact information or social media links were found in the provided content, which limits direct engagement options. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and established organization.

W

Woman.Comm Club

womancomm.club

49

Woman.Comm Club is a regional platform dedicated to empowering women in the communications industry through education, networking, and events. Founded in 2022, it targets successful business women and young professionals in the communications sector within the region. The platform offers mentorship programs, conferences, awards, podcasts, and webinars to foster professional growth and industry advancement. Technically, the website is built on WordPress with Elementor and WooCommerce, hosted with GoDaddy and using Cloudflare DNS services. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS and some security headers, but DNSSEC is not enabled and no incident response or security policies are published. Overall, the platform is credible and professionally presented but would benefit from enhanced privacy and security disclosures.

R

RTL Hrvatska d.o.o.

rtl.hr

67

RTL Hrvatska d.o.o. operates as a leading media company in Croatia, providing a wide range of television and digital content including news, entertainment, reality shows, and series. The company is part of the Central European Media Enterprises (CME) group, indicating a strong market position and backing. Their website rtl.hr serves as a comprehensive portal for their content offerings, targeting a general audience with professionally curated media content. Technically, the website employs modern web technologies and integrates multiple third-party analytics and advertising services, ensuring a robust digital presence. Security-wise, the site enforces HTTPS, uses security headers, and implements GDPR-compliant consent management, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

P

Play Team

ultra.ba

57

Ultra.ba is a Bosnian lifestyle magazine operated by Play Team, providing content on fashion, beauty, astrology, travel, and entertainment. The website targets a general audience interested in contemporary lifestyle topics and maintains a consistent brand presence with active social media channels. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is strong with HTTPS and security headers in place, though privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and contact transparency.

T

Telegraf.rs - Najnovije vesti

telegraf.rs

67

Telegraf.rs is a well-established Serbian online news portal founded in 2011, offering a wide range of news content including politics, business, sports, culture, technology, and lifestyle. It targets a general audience in Serbia and the surrounding region, operating primarily on an advertising-supported business model. The website demonstrates consistent branding and good content quality with a professional design and clear navigation structure. Technically, it employs modern JavaScript libraries, Google Tag Manager, and multiple analytics and advertising platforms, indicating a mature digital infrastructure. Mobile optimization is good, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, it lacks DNSSEC for DNS security and does not publish explicit security policies or incident response contacts. No security blocking mechanisms or WAF challenges were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is basic, with room for improvement in publishing privacy policies and terms of service. Overall, Telegraf.rs presents a moderate risk profile with a solid business presence and technical foundation but could enhance its security posture and privacy transparency. Strategic recommendations include enabling DNSSEC, publishing security and privacy policies, and improving accessibility compliance.

The website netokracija.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business information, contact details, or policies are available for analysis. The domain is registered since 2007 with Moniker Online Services LLC, indicating a long-standing registration, but the lack of DNSSEC and absence of visible content reduces trustworthiness. The technical infrastructure and security posture cannot be fully assessed due to the blocked content. No metadata, scripts, or analytics are present on the error page, indicating no active tracking or marketing tools are currently in use. Overall, the site appears to be down or access restricted, limiting any further security or business analysis.

N

NAF-MEDIA

naf-media.hr

40

NAF-MEDIA is a Croatian company specializing in outdoor advertising, offering both digital (DOOH) and traditional (OOH) large format advertising spaces primarily in key urban locations such as Split and Zagreb. The company targets businesses and advertisers seeking to leverage outdoor media for marketing purposes. The website is built on WordPress using common plugins and themes, indicating a standard CMS infrastructure with moderate digital maturity. The site is accessible, mobile-optimized, and presents its advertising locations clearly with visual content and embedded video. Security posture is basic with HTTPS enabled but lacks advanced security headers and public security policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a compliance risk. Overall, the website is professional and functional but could improve in transparency and security practices.

M

Metropolis Media

metropolis-media.me

36

Metropolis Media is a well-established outdoor advertising company based in Montenegro, operating since 2001 with a domain registered since 2010. The company offers a wide range of advertising services including traditional billboards, backlights, city lights, bigboards, megaboards, and modern digital LED displays. Their extensive network covers major cities and transit points in Montenegro, targeting advertisers seeking broad and effective outdoor media exposure. The website demonstrates a solid technical infrastructure with modern web technologies, multimedia integration via YouTube, and standard analytics tools such as Google Analytics and Tag Manager. Mobile optimization and user experience are good, supporting accessibility and navigation. However, the site lacks privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could improve in privacy compliance and security hardening.

M

Media Marketing

media-marketing.com

61

Media Marketing is an online media publishing platform focused on delivering the latest news, interviews, and insights related to media, communications, marketing, and advertising across Bosnia and Herzegovina and the broader Adriatic region. The website positions itself as a leading source of industry news for marketing professionals and stakeholders in the region. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and OneSignal for push notifications. The site is mobile optimized and employs caching plugins to enhance performance. Security-wise, the site enforces HTTPS and uses some security-related scripts, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces transparency and trust, though the active and professional web presence suggests legitimate operation. Overall, the site is a valuable resource for its target audience but should enhance its privacy disclosures and security posture to improve trust and compliance.

M

Marketing365

marketing365.mk

54

Marketing365.mk is a well-established Macedonian online media platform specializing in marketing, media, and public relations news and insights. Founded in 2013, it serves as a key information source for marketing professionals and the business community in North Macedonia. The website offers a variety of content including interviews, columns, industry reports, and event coverage, targeting marketing and PR stakeholders. Technically, the site is built on WordPress with popular plugins such as Yoast SEO, WPBakery, and Elementor, and integrates analytics and push notification services like Google Analytics, Facebook Pixel, and OneSignal. The site is mobile-optimized and demonstrates good SEO practices.

L

Led Media

ledmedia.ba

49

Led Media is a leading digital outdoor advertising company operating in Bosnia and Herzegovina, offering digital advertising services primarily targeting local businesses and advertisers. The website is built on WordPress using Elementor, indicating a modern and maintainable technical infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

Go2Digital is a Croatian digital outdoor advertising company offering measurable advertising solutions with a significant daily reach. The company positions itself as a leading media provider in Croatia's outdoor advertising market, emphasizing effectiveness and digital innovation. The website reflects a professional business presence with clear contact information and active social media channels. Technically, the site uses modern analytics and tracking tools such as Google Analytics and LinkedIn Insight Tag, and employs standard web technologies including HTML5 video and Google Fonts. However, the site lacks publicly accessible privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS usage and CSRF protections in forms, but missing explicit security headers and incident response information. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security transparency.

D

Dnevnik Mediji d.o.o.

dnevnik.si

57

Dnevnik.si is a well-established Slovenian news media website operated by Dnevnik Mediji d.o.o., providing a broad range of news, opinion, cultural, and sports content targeted at the general Slovenian public. The website operates on an advertising-supported model with subscription options, leveraging multiple ad networks and tracking technologies to monetize content. Technically, the site uses modern tracking and advertising frameworks including Google Tag Manager, DoubleClick, Marfeel SDK, and DotMetrics analytics, indicating a mature digital infrastructure. The site is mobile optimized and employs HTTPS with appropriate caching headers, contributing to a secure and performant user experience. However, explicit privacy and terms of service pages were not found in the provided content, which is a gap in privacy compliance. The site includes a consent management platform for cookie and data processing consent, aligning with GDPR requirements to some extent. Overall, the security posture is good with no visible vulnerabilities or blocking mechanisms detected. The domain is long-standing and registered to a Slovenian registrar consistent with the business, supporting legitimacy. Strategic recommendations include publishing clear privacy and security policies, adding vulnerability disclosure information, and improving contact information visibility to enhance trust and compliance.

C

CRNOBELO.com

crnobelo.com

49

CRNOBELO.com is a Macedonian lifestyle and news portal offering a wide range of content including news, horoscopes, entertainment, recipes, and interviews. The site targets Macedonian-speaking audiences interested in lifestyle and cultural topics. It operates on a Joomla CMS platform with modern web technologies and integrates multiple advertising networks for monetization. The website is professionally designed with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security policies and cookie consent mechanisms. WHOIS data is unavailable, which raises concerns about domain legitimacy, although the website content and branding appear consistent and trustworthy. Overall, the site is a functional and relevant media portal with room for improvement in privacy compliance and security transparency.

C

cubes d.o.o

bloombergadria.com

62

Bloomberg Adria is a media company focused on delivering multi-platform business news content tailored for Southeast Europe. The website serves as a gateway to country-specific subdomains targeting Serbia, Croatia, Bosnia and Herzegovina, Slovenia, and North Macedonia. The business model centers on news publishing with advertising revenue streams, leveraging the Bloomberg brand under license from Bloomberg L.P. The company is a property of Mtel Swiss SA and uses a custom CMS developed by Cubes d.o.o. The website demonstrates a moderate level of digital maturity with modern JavaScript libraries and tracking technologies integrated for analytics and advertising purposes. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance in the region. Security posture is adequate with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and trustworthy but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

A

ADLUUX

adluux.com

62

The website 'ADLUUX' appears to be a small-scale business or service entity established around 2019, as indicated by the domain registration date. The site uses modern web technologies such as Bootstrap 4 for styling and Google Analytics for visitor tracking, hosted under Amazon Registrar, Inc. The content available is minimal and primarily technical, lacking detailed business descriptions, contact information, or privacy and terms policies. The cookie consent mechanism is implemented, indicating some attention to privacy compliance, though no explicit privacy policy is found. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Overall, the site is accessible without WAF or security challenges, but the lack of comprehensive content and contact details limits its business credibility and privacy compliance scores.

H

Hrvatska udruga digitalnih izdavača

hudi.hr

36

Hrvatska udruga digitalnih izdavača (HUDI) is a leading professional association in Croatia that unites online media and other industries involved in digital publishing and advertising. The organization focuses on standardizing digital media metrics, advocating for fair regulation of global tech platforms, and supporting the growth and sustainability of the Croatian digital media market. HUDI collaborates with major Croatian media companies and provides research, factchecking, and technological innovation services to its members. Technically, the website is built on WordPress with modern web technologies including Google Fonts and Google Tag Manager. It is mobile-optimized and includes standard privacy and cookie compliance mechanisms. The site uses HTTPS with a valid SSL certificate and anonymizes IP addresses in Google Analytics, reflecting a good security posture. However, some security headers are missing, and there is no public security policy or incident response information. The security posture is solid with no visible vulnerabilities or exposed sensitive data. GDPR compliance is evident through privacy and cookie policies. The WHOIS data is privacy protected due to GDPR, which is common and justified for this type of organization. The website is trustworthy, professionally maintained, and linked to reputable Croatian media entities. Overall, HUDI presents a credible and professional digital presence with a strong focus on the Croatian digital media ecosystem. Strategic improvements could include enhanced security headers, publishing security policies, and adding terms of service for completeness.

E

Eldra d.o.o.

eldra.hr

47

Eldra d.o.o. is a well-established Croatian company specializing in the rental of high-quality audio, video, lighting equipment, and technical production services. Founded in 1991, the company has a strong market presence and serves businesses and event organizers requiring professional event production solutions. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their target audience. The business model focuses on equipment rental and technical support, positioning Eldra as a trusted local leader in their sector. Technically, the website is built on WordPress and utilizes common plugins such as Contact Form 7 for forms, Akismet for spam protection, and Cookiebot for cookie consent management. The site uses HTTPS with Cloudflare DNS, ensuring secure connections. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and documented security policies or incident response plans. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy, consistent with the company's history and location. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no critical issues found. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility. The website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable digital presence for Eldra d.o.o.

Entrio.hr is a well-established Croatian online ticketing platform founded in 2011, specializing in the sale of tickets for concerts, festivals, conferences, exhibitions, and theater performances. The platform targets event attendees and organizers primarily in Croatia and neighboring regions, offering a comprehensive and user-friendly service for event discovery and ticket purchase. The website demonstrates a mature digital presence with multi-language support and integration with major social media and marketing platforms.

The website 3dprintaj.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2015 with DreamHost, LLC and uses SiteGround name servers, indicating a stable registration and hosting setup. However, the lack of accessible content, absence of privacy, cookie, or terms of service policies, and no visible contact information severely limit the ability to assess the business or its services. Technically, the site does not show evidence of modern security headers or DNSSEC, and no analytics or tracking scripts are present. Overall, the site appears to be either misconfigured or intentionally restricted, resulting in a poor user experience and low trustworthiness.

Coca-Cola HBC AG is a leading consumer packaged goods company and a strategic bottling partner of The Coca-Cola Company. The company operates across multiple countries primarily in Europe and Africa, offering a broad portfolio of beverages. The website reflects a mature enterprise with extensive market presence, multiple country-specific sites, and a customer portal, indicating a well-established business model focused on bottling and distribution. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and compliance tools such as OneTrust for cookie consent and UserWay for accessibility. The infrastructure appears robust with good performance, mobile optimization, and SEO practices. Hosting is likely via Akamai, enhancing content delivery and security. Security posture is strong with HTTPS enforced, presence of key security headers, and no visible vulnerabilities or exposed sensitive data. The site demonstrates compliance with GDPR and other privacy regulations, supported by comprehensive privacy and cookie policies. However, the absence of a public vulnerability disclosure policy and incident response contact details suggests areas for improvement. Overall, the website and business present a low-risk profile with high trustworthiness. Strategic recommendations include enhancing transparency on security incident response, maintaining up-to-date third-party components, and formalizing vulnerability disclosure processes to further strengthen security and compliance.

L

LEDO plus d.o.o.

ledo.hr

57

LEDO plus d.o.o. is the largest domestic producer of industrial ice cream and the leading distributor of frozen food in Croatia, with a strong market presence and a comprehensive product portfolio. The company targets general consumers in Croatia and surrounding regions, offering a variety of frozen food products and culinary inspiration through recipes. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager, hosted likely by Hrvatski Telekom, ensuring good performance and SEO. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

B

Badel 1862

antiquepelinkovac.hr

49

Antique Pelinkovac is a premium Croatian herbal liqueur brand operated under the parent company Badel 1862. The website serves as a brand showcase, providing detailed storytelling about the product's heritage, production process, product range, and enjoyment tips including cocktail recipes. The brand positions itself as a historic and premium offering in the hospitality sector, targeting adult consumers with a focus on quality and tradition. The website is built on WordPress, hosted by a Croatian hosting provider, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent and an age verification overlay to restrict underage access. The site demonstrates good digital maturity with responsive design, SEO optimization, and social media integration. Security posture is solid with HTTPS and basic protections, though lacks explicit security headers and incident response disclosures. Privacy compliance is partially met via cookie consent but lacks a visible privacy policy page. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

U

UNIP

unip.hr

43

UNIP is a Croatian association established in 2022 to promote and protect the rights of publishers of informational publications. It focuses on collective rights management, advocacy, and professional development within the media sector. The website reflects a small but professional organization targeting media publishers and related legal entities in Croatia. Technically, the site is built on WordPress with Elementor, using modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and headers. Overall, the site is trustworthy and well-aligned with its stated business purpose.

H

Hrvatski Telekom d.d.

kekspay.hr

62

KEKS Pay is a Croatian financial technology service offering a mobile application for fast, no-fee money transfers, bill payments, parking payments, and other financial transactions. Sponsored by Erste Banka and registered under Hrvatski Telekom d.d., the platform targets both individual consumers and business users, providing a convenient and secure payment ecosystem. The website is professionally designed, mobile-optimized, and provides clear information about its services and privacy practices. Technically, it leverages modern JavaScript frameworks (Vue.js, Nuxt.js) and integrates with major app stores for broad platform support. Security practices include encryption, biometric and PIN protection, and compliance with EU standards, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, with a strong market position in Croatia's fintech sector.

L

LAQO by Croatia osiguranje

laqo.hr

64

LAQO by Croatia osiguranje is a pioneering digital insurance provider in Croatia, offering fully digital insurance products including vehicle, property, travel, and pet insurance. The company leverages modern web technologies and a user-friendly mobile app to deliver seamless insurance contracting and claims processes. Positioned as an innovative market player, LAQO targets Croatian residents seeking convenient and cost-effective insurance solutions. The website demonstrates strong digital maturity with Angular framework, Google Tag Manager, and integration of live chat support. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, LAQO presents a trustworthy and professional online presence aligned with its business objectives.

Z

Zavarovalnica Triglav, d.d.

triglav.si

56

Zavarovalnica Triglav, d.d. is a leading Slovenian insurance company offering a broad range of insurance products including vehicle, home, life insurance, and pension savings. The company targets both individual and business customers within Slovenia, leveraging a strong online presence and digital platforms for service delivery. The website reflects a mature business with consistent branding and comprehensive service offerings. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and IBM WebSphere Portal, with integrations for analytics and cookie consent management. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, although explicit security policy and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's market position as a reputable insurer.

Mastercard.hr is the Croatian localized website of Mastercard, a leading global payments technology company. The site provides information about Mastercard's payment solutions and services tailored for the Croatian market, targeting consumers and businesses. The website reflects Mastercard's strong market position and brand consistency, offering key services such as payment cards, digital payment solutions, and merchant services. The site is professionally designed with excellent content quality and clear navigation, optimized for mobile devices and fast performance via Akamai CDN.

P

Privredna banka Zagreb

pbz.hr

64

Privredna banka Zagreb (PBZ) is a well-established Croatian bank founded in 1996, offering a comprehensive range of retail banking services including accounts, cards, loans, savings, and digital banking solutions. The website reflects a mature digital presence with clear navigation, professional design, and detailed product information targeting retail customers in Croatia. The domain age and registration details align with the bank's history and legitimacy, reinforcing trustworthiness. Technically, the site employs modern web technologies, CDNs, and analytics tools such as Google Tag Manager and Google Analytics, ensuring a robust infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies could be enhanced. Overall, the site demonstrates high professionalism, compliance with GDPR, and a strong business credibility profile.

P

Podravka d.d.

podravka.hr

55

Podravka d.d. is a well-established Croatian multinational company specializing in food, agriculture, and pharmaceutical products. With a history dating back to 1947 and a domain registered since 2000, Podravka holds a leading market position in Southeast and Central Europe, exporting to over 60 countries. The website reflects a mature digital presence with comprehensive corporate information, strong branding, and a focus on sustainability and innovation. Technically, the site is built on WordPress using modern libraries such as jQuery, Slick Carousel, and AOS, hosted on Microsoft Azure DNS infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-aligned with the company's business stature.

F

Fonoa

fonoa.com

66

Fonoa is a technology company specializing in tax intelligence solutions for innovators and e-businesses managing indirect taxes globally. Their platform offers integrated services including tax ID validation, tax calculation, e-invoicing, and tax return reporting and filing. Positioned as a trusted tax automation platform, Fonoa targets businesses needing to comply with complex and evolving global tax laws. The website reflects a mature digital presence with modern technologies, comprehensive content, and strong branding consistency. The technical infrastructure leverages Webflow CMS, advanced analytics, and multiple marketing and tracking tools, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website presents a professional, trustworthy, and well-maintained digital asset supporting Fonoa's business objectives.

E.ON Hrvatska is a large energy company focused on providing sustainable energy solutions including electricity, gas, solar power, and electric vehicle charging for households and businesses in Croatia. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site uses modern web technologies such as Adobe Experience Manager, Usercentrics for consent management, and integrates multiple marketing and analytics tools while maintaining GDPR compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and well-positioned to support E.ON's business objectives in the Croatian energy market.

S

SPAR Hrvatska

spar.hr

67

SPAR Hrvatska operates a professional retail website serving as the digital presence for SPAR supermarkets and INTERSPAR hypermarkets in Croatia. The site offers product catalogs, recipes, and customer services, targeting general consumers seeking groceries and household products. The business is positioned as a large retail entity with a consistent brand and a well-structured website. Technically, the website is built on Adobe Experience Manager, leveraging Adobe Analytics and modern JavaScript libraries. It employs Cloudflare Turnstile captcha for bot protection and a consent manager for GDPR compliance, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and bot protection in place, but lacks explicit security headers and visible security policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages. No contact information or incident response details are publicly available, which could be improved. Overall, the website is trustworthy and professional with no signs of malicious content or blocking. Strategic improvements in privacy transparency, security headers, and contact availability would enhance compliance and user trust.

J

Jadran-galenski laboratorij d.d. JGL d.d.

jgl.hr

62

Jadran-galenski laboratorij d.d. (JGL) is a well-established Croatian pharmaceutical company specializing in sterile products for ophthalmology, ENT, and medicines targeting senses and cardiovascular health. The company has a strong market presence in Croatia and operates multiple subsidiaries and partner entities, including pharmacies, specialized labs, and educational portals. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to both general consumers and healthcare professionals. Technically, the site uses modern CMS (eZ Platform), integrates Google Tag Manager and Meta Pixel for analytics and marketing, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, compliant with GDPR, and professionally managed.

A

Aleph

alephholding.com

65

Aleph is a global digital advertising enabler focused on emerging markets, providing innovative advertising, payment, and technology solutions to empower businesses worldwide. The company holds a strong market position with partnerships across major digital platforms and a presence in over 140 local markets. Their offerings include proprietary technology, credit and payment solutions, and educational programs to foster digital marketing expertise. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and consent management, though explicit privacy and terms policies are missing. The absence of WHOIS data reduces domain trustworthiness, but the website content and partnerships indicate a legitimate and professional business. Overall, Aleph demonstrates a mature digital presence with room for improvement in transparency and contact information.

The website opads.us is registered to Optimus Prime Informatika, a Croatian company established in 2013. The domain registration is stable and consistent with the registrant's information, indicating legitimacy. However, the website itself is extremely minimal, containing only a brief greeting and a version number, with no metadata, contact information, or business description. This lack of content severely limits the ability to assess the company's market position or services from the site alone. Technically, the site is hosted behind Cloudflare DNS but lacks DNSSEC and security headers, and no CMS or frameworks are detected. The SSL configuration is basic, and no privacy or cookie policies are present, indicating poor privacy compliance. Security posture is weak due to missing headers and lack of incident response information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility.

The website www.coingecko.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) human verification challenge page. The HTML content indicates a Turnstile captcha is active, preventing access to the actual site content. Consequently, no business information, metadata, or contact details are available for extraction or analysis. The WHOIS query for the domain returned no registration data, which is unusual for a well-known service and raises questions about domain legitimacy or WHOIS data availability. The technical infrastructure appears to rely on Cloudflare for security and DDoS protection, but no further technical or security details can be assessed due to the blocking mechanism. Overall, the site cannot be properly evaluated in its current state, and the lack of WHOIS data further complicates trust assessment.

T

TRKKN

trkkn.com

78

TRKKN is a technology company specializing in analytics, cloud, and marketing technology solutions, partnering with Google Marketing Platform and Google Cloud. Their services focus on digital analytics, conversion optimization, ad tech, artificial intelligence, cloud engineering, and data strategy, targeting businesses undergoing digital transformation. The website demonstrates a moderate level of digital maturity with modern frontend technologies and integration of marketing and consent tools. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking visible security headers and formal privacy or terms policies. Overall, the site is professional and business-focused but would benefit from enhanced transparency and security practices.

P

PushPushGo

pushpushgo.com

68

PushPushGo is a mature technology company founded in 2016, specializing in multichannel user engagement platforms including web push, mobile push, onsite notifications, and WhatsApp channels. The company positions itself as a GDPR-compliant, feature-rich solution provider targeting businesses seeking to improve customer retention and conversion through personalized messaging. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks and third-party marketing and analytics tools, hosted on reputable infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and a bug bounty program, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website and business present a trustworthy and professional image suitable for its target market.

G

giosg

giosg.com

76

Giosg is a technology company specializing in flexible digital experience solutions, including AI assistants, live communication tools, and interactive content aimed at automating support and boosting sales. The company targets businesses seeking to enhance customer engagement and lead capture through advanced SaaS offerings. The website is professionally designed, leveraging HubSpot CMS and modern web technologies, with good SEO and mobile optimization. Privacy compliance is well addressed through Cookiebot integration, providing granular cookie consent management. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, which slightly impacts trust but does not detract from the professional presentation and legitimate business focus. Overall, Giosg presents a credible and technically mature digital presence with room for improvement in transparency and contact accessibility.

ShareMedia is a Serbian-based technology company operating a content discovery platform designed to help users discover and manage digital content. The platform targets content creators, marketers, and media professionals, offering services centered around content discovery and management. The website is professionally designed with a clear login interface and consistent branding, reflecting a small but focused technology business founded in 2020. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, AdminLTE, and Chart.js, hosted under a Serbian registrar. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security measures include HTTPS enforcement and CSRF protection on forms, but lack advanced HTTP security headers and DNSSEC. The security posture is adequate for a small platform but could be improved by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. No vulnerabilities or adult content were detected, and no WAF or blocking mechanisms interfere with access. WHOIS data aligns well with the website's origin and business claims, supporting legitimacy. Overall, the site is functional and moderately secure but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

E

Elementor Website Builder

elementor.com

68

Elementor is a leading technology company specializing in WordPress website building solutions. Their platform offers a comprehensive suite of products including a drag-and-drop website builder, AI-powered design tools, hosting services, ecommerce solutions, and accessibility enhancements. The company targets web professionals such as developers, designers, and marketers, positioning itself as a market leader with a strong brand presence and a large enterprise-scale operation founded in 2004. Technically, the website is built on WordPress with Elementor plugins and integrates modern analytics and marketing tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Visual Website Optimizer for A/B testing. The site demonstrates excellent SEO, accessibility, and mobile optimization, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses Cloudflare DNS, and implements cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible in the provided content, representing areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, Elementor's website is professional, secure, and compliant with privacy regulations to a good extent. The business is credible and well-established with a strong market position. Strategic recommendations include publishing explicit privacy and security policies, providing clear contact information, and adding a security.txt file to enhance transparency and trust.

D

Degordian

degordian.com

60

Degordian is a well-established digital-first agency founded in 2013, specializing in brand communication, performance marketing, digital production, and employer branding. The company operates through multiple specialized agencies focusing on marketing, technology, and HR verticals, positioning itself as a performance-driven partner for businesses aiming to advance digitally. The website reflects a professional and modern digital presence with consistent branding and clear navigation, targeting business clients seeking integrated digital solutions. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, GSAP for animations, and CleanTalk for anti-spam protection. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and accessible, with SEO best practices implemented through Yoast SEO. GDPR compliance is partially addressed with a cookie consent mechanism, though explicit privacy and terms policies are not found. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs anti-spam and cookie compliance plugins. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. DNSSEC is not enabled, which is a recommended improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Degordian's website demonstrates a strong digital maturity and business credibility with room for improvement in privacy transparency and security policy publication. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

JSPM.IO is a specialized CDN package provider supporting the JSPM project, targeting developers and technology users who require efficient package delivery via CDN. The website presents a focused business model centered on the JSPM ecosystem, with a small company footprint and a mature domain age since 2013. The site leverages modern web technologies such as importmaps and ES modules, hosted on infrastructure sponsored by CacheFly and using Cloudflare DNS services. The technical implementation is modern and performant, with good mobile optimization and basic accessibility features. Security posture is moderate; while HTTPS is implied, DNSSEC is not enabled and no security headers were detected, indicating room for improvement. Privacy and cookie policies are absent, which impacts compliance and trust. No contact information or forms are present, limiting direct communication channels. Overall, the site is professional and trustworthy but would benefit from enhanced security practices and compliance documentation.

C

Canva Pty Ltd

canva.com

72

Canva Pty Ltd operates a leading online graphic design platform offering a comprehensive Visual Suite that includes tools for creating social media content, presentations, videos, and print products. The company targets a broad audience including individuals, businesses, educators, and students, positioning itself as a freemium SaaS provider with extensive adoption by major enterprises, including 95% of Fortune 500 companies. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation. Technically, the site leverages modern web technologies such as React, uses Sentry for error monitoring, and integrates Google Identity Services for authentication. The platform supports multiple operating systems including web, Android, iOS, Windows, and Mac, and demonstrates fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR compliance indicators. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, Canva presents a low-risk profile with high business credibility and trustworthiness. The absence of WHOIS data is likely due to privacy or registry restrictions and does not detract from the legitimacy of the business. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and providing clear data protection officer contact information to enhance transparency and trust.