Security Directory

R

Regionalni centar kompetentnosti u turizmu i ugostiteljstvu Zabok

rcktu-zabok.hr

34

The website represents the Regional Center of Competence in Tourism and Hospitality located in Zabok, Croatia. It serves as an educational institution offering secondary education, adult courses, workshops, retraining, and consulting services focused on tourism and hospitality sectors. The center aims to develop professional skills, creativity, and social responsibility among students and professionals, supported by EU funding. The site is well-structured, professionally designed, and targets students, adult learners, and regional businesses in the tourism and hospitality industry. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and terms of service pages and a vulnerability disclosure policy. Overall, the domain registration and hosting are consistent with the business profile, indicating legitimacy and trustworthiness.

S

Specijalna bolnica za medicinsku rehabilitaciju Krapinske Toplice

sbkt.hr

47

Specijalna bolnica za medicinsku rehabilitaciju Krapinske Toplice is a specialized healthcare provider focused on medical rehabilitation services for neurological, cardiovascular, orthopedic, rheumatologic, and internal medicine patients, including both adults and children. The hospital also offers outpatient specialist services, health tourism, and preventive health programs. The website reflects a well-established regional medical institution with a clear market position and a comprehensive service portfolio. The target audience primarily includes patients and healthcare consumers seeking rehabilitation and wellness services in Croatia. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for enhanced functionality such as forms and galleries. The site is mobile optimized, accessible, and SEO friendly, with good content quality and consistent branding. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though there is room for improvement in implementing security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting the legitimacy and trustworthiness of the entity.

P

Pomurski muzej Murska Sobota

pomurski-muzej.si

44

Pomurski muzej Murska Sobota is a regional museum dedicated to preserving and showcasing the cultural heritage of the Pomurje region in Slovenia. The website provides comprehensive information about exhibitions, events, educational programs, and digital collections, targeting a broad audience including families, schools, and cultural enthusiasts. The museum positions itself as a key cultural institution in the region with a focus on both physical and digital heritage preservation. Technically, the website is built on the WBCE CMS platform with modern web technologies such as Bootstrap, jQuery, and Revolution Slider. It is hosted under a reputable Slovenian registrar (Arnes) and uses HTTPS with a valid SSL configuration. The site is mobile-optimized and includes basic accessibility features. Google Analytics is used for visitor tracking, and a cookie consent banner with opt-in is implemented, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its cultural mission effectively. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance further.

A

ArhivPRO d.o.o.

eindigo.net

56

ArhivPRO d.o.o. is a Croatian technology company specializing in digital archiving and cataloguing solutions, primarily through their INDIGO platform. The platform targets institutions such as libraries, archives, museums, and schools, enabling them to digitize, manage, and publish diverse materials including books, photographs, and multimedia. The company demonstrates a strong market position in the cultural heritage and education sectors, supported by client references and EU project funding. Technically, the website employs modern web technologies and responsive design, providing a professional user experience. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy/cookie policies. The WHOIS data is privacy protected due to GDPR, which is justified given the nature of the business. Overall, the website and business present a trustworthy and professional image with room for improvement in privacy and security transparency.

S

Sveučilište u Rijeci

uniri.hr

60

Sveučilište u Rijeci is a well-established public university in Croatia, recognized as the second oldest with continuous operation in the country. The institution offers a broad range of higher education programs, research initiatives, and community engagement activities. The website reflects a strong academic and institutional presence, targeting students, researchers, and the general public interested in education and research. It maintains a consistent brand identity and provides comprehensive information about its services and partnerships, including international collaborations such as ERASMUS and YUFE.

P

Pučko otvoreno učilište Katarina Zrinska – Ozalj

poukz.hr

54

Pučko otvoreno učilište Katarina Zrinska – Ozalj is a small educational institution based in Croatia, founded in 2022. The organization offers a variety of educational and creative programs targeting children, youth, retirees, and adults, focusing on lifelong learning and community engagement. The website reflects a local community-oriented business model with clear contact information and social media presence, positioning itself as a trusted local educational provider. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and visually appealing user experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO optimization. Hosting and domain registration are consistent with the business location, enhancing trustworthiness. From a security perspective, the website implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of terms of service and security policies suggests an opportunity to strengthen compliance and user trust. Overall, the website is functional, professional, and safe for general audiences. The risk level is low, but strategic improvements in security posture and privacy transparency would enhance the institution's digital maturity and trustworthiness.

G

Gradska knjižnica i čitaonica Ivana Belostenca

gkc-ivanabelostenca.hr

47

Gradska knjižnica i čitaonica Ivana Belostenca is a small, non-profit public library and cultural institution located in Ozalj, Croatia. It offers library services, cultural events, and access to significant historical works such as the Gazophylacium bilingual dictionary. The website serves as an informational portal for the local community and cultural enthusiasts. Technically, the site is built on Joomla CMS using common web technologies including jQuery, Bootstrap, and Google Maps API. The hosting is provided by ZoNet, a reputable Croatian hosting provider. The site is accessible, with clear navigation and consistent branding, but shows room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance documentation. No forms or tracking scripts are present, minimizing privacy risks but also limiting interactivity. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security and privacy measures.

Z

Zavičajni Muzej Ozalj

zmo.hr

54

Zavičajni Muzej Ozalj is a small cultural heritage museum located in Ozalj, Croatia, dedicated to preserving and showcasing 6000 years of local history through diverse collections including archaeological, ethnographic, and photographic artifacts. The museum also operates an open-air Ethno Park that exhibits traditional architecture and pre-industrial everyday items, targeting general visitors interested in history and culture. The website is professionally designed with good content quality, clear navigation, and accessibility features implemented via the EqualWeb plugin. Technically, it uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the museum's identity, indicating legitimacy and trustworthiness.

A

Azelija Eko d.o.o.

azelija-eko.hr

47

Azelija Eko d.o.o. is a Croatian municipal service company specializing in waste management, recycling, cemetery services, public lighting maintenance, and chimney sweeping within the Ozalj region and surrounding municipalities. The company operates fixed and mobile recycling yards and provides essential environmental services to local residents and businesses. The website reflects a local government service provider with clear contact information and service descriptions, targeting the regional community. Technically, the website is built on Joomla CMS with a Bootstrap framework and uses common JavaScript libraries such as jQuery and Font Awesome for UI elements. The site includes image sliders and responsive design elements, indicating moderate digital maturity. Hosting is provided by CARNET, a reputable Croatian academic network, which aligns with the local focus. From a security perspective, the site lacks visible security headers and explicit HTTPS enforcement in the provided data, which lowers its security posture. No privacy or cookie policies were found, indicating potential GDPR compliance gaps. The site does not use tracking or advertising technologies, which reduces privacy risks but also limits marketing insights. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance improvements, and clearer policies to strengthen trust and regulatory adherence.

C

Centar za poduzetništvo d.o.o.

czp.hr

43

Centar za poduzetništvo d.o.o. is a regional entrepreneurial support center serving the Dubrovnik-Neretva County in Croatia. The organization focuses on providing a range of services including education, business consulting, credit programs, and assistance with EU funding projects. Their website reflects a government-affiliated entity aimed at fostering entrepreneurship and small business growth in the region. The target audience primarily consists of local entrepreneurs and small business owners seeking support and resources. Technically, the website employs a modern technology stack featuring jQuery, Bootstrap, FontAwesome, and various plugins for enhanced user experience and accessibility. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates Google Analytics and UserWay accessibility tools, indicating a mature digital infrastructure. The website content is well-structured, professionally designed, and includes clear navigation and relevant business information. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security policies and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a consent mechanism in place. The website demonstrates a good security posture but could improve by adding formal security documentation and security headers. Overall, the website is trustworthy, professional, and serves its business purpose effectively. The domain registration data aligns with the website's claims, reinforcing legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

novalja-pag.net

33

Novalja-pag.net is a well-established Croatian hospitality website specializing in private accommodation listings on the island of Pag. Founded in 2002, it offers a comprehensive catalog of apartments, rooms, villas, and hotels with direct booking contact options. The platform targets tourists seeking affordable and diverse lodging options near popular destinations such as Novalja and Zrće beach. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and reCAPTCHA. While the site is mobile-optimized and provides a good user experience, it lacks HTTPS enforcement and advanced security headers, which are critical for protecting user data and enhancing trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and functional but would benefit from security and privacy improvements.

H

Hrvatski savez za sportski ribolov na moru

hssrm.hr

42

Hrvatski savez za sportski ribolov na moru (HSSRM) is a well-established Croatian non-profit sports federation dedicated to marine sport fishing. Founded in 1953, it serves approximately 25,000 members and provides key services such as fishing permit distribution, organizing competitions, and educational programs. The website reflects a consistent brand and offers relevant content for its target audience of fishing enthusiasts in Croatia. Technically, the site uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Leaflet.js, with integration of Facebook social plugins for community engagement. The site is moderately optimized for mobile and performance, with clear navigation and good content quality. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is lacking as no privacy or cookie policies are present. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

T

Turistička zajednica Ličko-senjske županije

visit-lika.com

58

The website visit-lika.com serves as the official regional tourism portal for Ličko-senjska County in Croatia, providing comprehensive information on travel planning, cultural heritage, activities, and gastronomy. It targets tourists and visitors interested in exploring the region, positioning itself as a key regional tourism authority. The site offers event announcements, travel resources, and promotes local attractions and services. Technically, the website uses a custom CMS with Bootstrap and jQuery, integrates Google Analytics for tracking, and AddToAny for social sharing. The design is professional, mobile-optimized, and offers clear navigation, though accessibility features are basic. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-established with a domain age consistent with its business history.

L

Lika ceste d.o.o.

likaceste.hr

45

Lika ceste d.o.o. is a Croatian company specializing in the maintenance, protection, reconstruction, and construction of roads and related infrastructure, primarily serving the Gospić region. The company positions itself as a regional service provider focused on public roadways, offering key services such as road maintenance and winter services. The website reflects a medium-sized enterprise with a clear focus on transportation infrastructure, targeting local government entities and public road users. Technically, the website is built on WordPress using Bootstrap for responsive design, enhanced with several JavaScript libraries including jQuery, Owl Carousel, and Google Maps API. SEO is supported by the Yoast SEO plugin, and user interaction is facilitated through Contact Form 7 with Google reCAPTCHA v3 for spam protection. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. Overall, the website is professional and trustworthy with moderate tracking and analytics usage. It is safe for general audiences and does not contain adult or questionable content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers, incident response policies, and accessibility would enhance the site's security posture and compliance.

A

Allee restoran

alleerestoran.ee

44

Allee restoran is a small hospitality business located in Tallinn, Estonia, offering a diverse and seasonal menu with a focus on fresh, local ingredients catering to omnivores and vegans alike. The restaurant operates at two addresses and provides services including lunch offers, breakfast, drinks, group menus, and event hosting. The website is professionally designed, mobile-optimized, and integrates modern web technologies and analytics tools, reflecting a mature digital presence. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy, content-rich, and well-positioned in its market segment.

Z

Zavod za prostorno uređenje Dubrovačko-neretvanske županije

zzpudnz.hr

65

The website zzpudnz.hr is the official online portal for the Zavod za prostorno uređenje Dubrovačko-neretvanske županije, a governmental spatial planning institute serving the Dubrovnik-Neretva County in Croatia. It provides comprehensive spatial planning documentation, project information, and news updates relevant to local government officials, urban planners, and the public. The site is well-structured, professionally designed, and offers extensive archives of news and legal documents related to spatial planning. The target audience includes government entities, municipalities, and citizens interested in regional planning and development. Technically, the website is built on the DotNetNuke (DNN) CMS platform, utilizing modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap for responsive design and user experience. The site is mobile optimized and includes accessibility features. Security best practices are observed with HTTPS enforced, appropriate security headers, and secure form handling. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place to comply with GDPR requirements. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, there is no explicit public security policy or vulnerability disclosure page, and incident response contact information is not provided. The WHOIS data confirms the domain's legitimacy, consistent with the Croatian governmental entity it represents, and the domain age aligns with the institution's operational history. Overall, zzpudnz.hr is a credible, secure, and professionally maintained governmental website that effectively serves its informational and public service role. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear incident response contacts to enhance transparency and trust.

Javna ustanova RERA S.D. za koordinaciju i razvoj Splitsko-dalmatinske županije is a Croatian public institution focused on regional development and coordination within the Split-Dalmatia County. The organization provides technical assistance, project preparation, and manages EU fund utilization to support local government, entrepreneurs, and NGOs. The website reflects its authoritative role with comprehensive content, official documentation, and transparent public procurement information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the institution's identity, indicating legitimacy and trustworthiness.

M

Muzej nematerijalne baštine "Riznica Međimurja"

riznica.hr

10

Muzej nematerijalne baštine "Riznica Međimurja" operates as a cultural heritage museum and multimedia portal dedicated to preserving and promoting the intangible cultural heritage of the Međimurje region in Croatia. The website serves as a digital gateway to museum exhibitions, educational content, virtual tours, and cultural events, targeting a general audience including tourists, students, and cultural enthusiasts. The institution holds a regional market position as a key cultural and tourism entity in Northern Croatia. Technically, the website is built on WordPress CMS with modern plugins and frameworks such as Bootstrap and Revolution Slider, ensuring a responsive and visually appealing user experience. The site is hosted by Orbis d.o.o., a Croatian registrar and hosting provider, with a domain age consistent with the museum's recent establishment in 2018. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies could be improved. Privacy compliance is demonstrated through a privacy policy and cookie banner, reflecting GDPR awareness. Overall, the website is professional, trustworthy, and well-structured, supporting the museum's mission effectively.

M

Mesap d.o.o.

mesap.hr

46

Mesap d.o.o. operates the Međimurski sajam poduzetništva (MESAP), a business focused on renting various event and business spaces including conference halls, large event halls, and a business club/cafe in Croatia. The company targets businesses and event organizers in the region, providing facilities equipped with modern amenities such as WiFi, projectors, and parking. The website reflects a small-sized, regionally focused business with a professional online presence and clear contact information. Technically, the site is built on Joomla CMS with the Helix Ultimate framework and uses Bootstrap and jQuery for responsive design and interactivity. Hosting is provided by Totohost, a Croatian hosting provider. The website is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, showing a long-established Croatian entity. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

T

Tehnološko-inovacijski centar Međimurje d.o.o.

ticm.hr

10

Tehnološko-inovacijski centar Međimurje (TICM) is a well-established regional technology and innovation center based in Croatia, founded in 2012. It supports technology-based entrepreneurship through incubation, coworking, educational courses, and business advisory services. The website reflects a professional and consistent brand with a clear focus on regional development and innovation. The technical infrastructure is modern, leveraging WordPress CMS with Bootstrap and various JavaScript libraries, and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is good with HTTPS enforced and some best practices observed, though there is room for improvement in security headers and formal security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and serves its target audience effectively.

J

Javna ustanova za razvoj Međimurske županije REDEA

redea.hr

48

Javna ustanova za razvoj Međimurske županije REDEA is a Croatian public institution focused on regional development within Međimurje County. It acts as a regional coordinator supporting social, economic, and strategic planning initiatives, primarily funded by government and European Union sources. The website reflects a professional government agency with clear communication channels, project showcases, and public tenders. Technically, the site is built on WordPress using modern libraries and plugins, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its public institutional role effectively.

K

Konplast d.o.o.

kipos.hr

40

Kipos.hr is a Croatian business website serving as a login portal for KIPOS, a bookkeeping and business information system developed by Konplast d.o.o. The platform targets business users requiring accounting and bookkeeping software solutions. The website is primarily a secure login interface with client-side encryption for credentials, indicating a focus on protecting user data during authentication. The business appears to be a small-sized technology provider with a niche market in Croatia, founded in 2014, and maintains consistent branding with its parent company Konplast d.o.o. The website lacks public-facing content such as privacy or cookie policies and does not provide contact information on the login page, which limits transparency for external users.

The website represents the Zavod za prostorno uređenje Krapinsko-zagorske Županije, a Croatian government institute responsible for spatial planning in the Krapinsko-zagorska County. It provides official news, spatial plans, documents, and public information access, targeting local residents, government officials, and urban planners. The site is well-structured with clear navigation and consistent branding, reflecting its role as a regional government authority. Technically, the site uses Bootstrap and jQuery with Google Analytics for visitor tracking. It is served over HTTPS with a cookie consent mechanism compliant with GDPR, although some security headers are missing. No forms or social media links were detected in the analyzed content. WHOIS data confirms the domain's legitimacy and appropriate registration details consistent with a government entity. Overall, the website is professional, trustworthy, and secure with room for improvement in security headers and incident response transparency.

U

Unicount OÜ

unicount.eu

65

Unicount OÜ operates a professional online platform specializing in company formation, virtual office, and accounting services tailored primarily for Estonian e-residents. The company positions itself as a trusted European agent with a strong market presence, supporting multiple languages and serving founders from various countries. Their business model leverages digital identity and e-residency to streamline company registration and management processes. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and spam protection, though some security headers could be enhanced. Overall, the site demonstrates strong compliance with GDPR and privacy regulations, providing clear policies and consent management. The domain registration details align well with the business claims, reinforcing legitimacy and trustworthiness.

K

Koalicija "Galiu gyventi"

galiugyventi.lt

53

Koalicija "Galiu gyventi" is a Lithuanian non-profit coalition dedicated to advocacy, education, and research related to addiction and associated social issues. The organization provides legislative monitoring, legal advocacy, networking, training, and publishes informational materials targeting policymakers, vulnerable groups, and professionals. The website is built on WordPress with modern technologies such as Bootstrap and Zion Builder, hosted by Hostinger. It features a professional design, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no exposed sensitive data, though security headers and privacy compliance mechanisms are lacking. Contact information is clearly provided, and social media integration is present via Facebook SDK. Overall, the site is trustworthy and serves its non-profit mission effectively.

PUNKS.MY is a Malaysia-based NFT project that offers a unique collection of 1000 iconic Malaysian figures as digital collectibles on the Ethereum blockchain. The project emphasizes on-chain SVG storage for permanence and has historical significance with public billboard exposure during the NFT craze. The website integrates with Metamask for wallet connection and links to reputable platforms such as OpenSea and Etherscan for marketplace and contract transparency. The business targets NFT collectors and crypto enthusiasts within Malaysia and operates as a small niche player in the NFT space. Technically, the website uses a modern JavaScript stack including ethers.js, jQuery, Bootstrap, and various UI plugins. Hosting is supported by Cloudflare DNS and nameservers, ensuring good SSL configuration and moderate performance. However, mobile optimization and accessibility are basic, and SEO practices are minimal. The site lacks a CMS and appears custom-built. From a security perspective, HTTPS is enforced, and the site uses nonce-based Metamask signature challenges for authentication. However, no explicit security headers (CSP, HSTS, etc.) are detected, and there are no published privacy or cookie policies, which are compliance gaps. Google Analytics is used without visible cookie consent mechanisms, indicating moderate user tracking but poor privacy compliance. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professional with moderate trustworthiness but has room for improvement in privacy compliance, security hardening, and user transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and providing clear contact and incident response channels.

Duha is a Czech non-profit organization dedicated to providing leisure, nature, and recreational activities for children and youth. The organization operates through local branches across the country, offering camps, outdoor sports, cultural activities, and volunteer opportunities. Their focus on experiential pedagogy and community engagement positions them as a well-established entity in the youth non-profit sector. The website content is rich with event reports, news, and information about their programs, targeting children, youth, and volunteers. Technically, the website uses standard web technologies such as Bootstrap and jQuery, with a moderate level of mobile optimization and accessibility. However, there is no evidence of advanced CMS or hosting details. The site lacks privacy and cookie policies, and no security headers or HTTPS status information was detected from the provided data, indicating room for improvement in security and compliance. From a security perspective, the absence of WHOIS data reduces transparency, though this is likely due to privacy protection common among non-profits. No forms or sensitive data collection mechanisms were found, reducing immediate risk. The site does not display any signs of WAF or blocking mechanisms, and content is fully accessible. Social media presence and partner logos add to the trustworthiness of the organization. Overall, the website is functional and informative but requires enhancements in security posture, privacy compliance, and transparency to improve trust and protect user data. Strategic improvements in these areas will strengthen the organization's digital maturity and stakeholder confidence.

T

The Local Europe AB

thelocal.se

65

The Local Sweden is a well-established online news media company providing English-language news and practical guides focused on Sweden. Founded in 2004, it targets expatriates and English-speaking residents, offering a broad range of content including politics, travel, jobs, and property. The business model combines advertising revenue with a membership program, supported by a professional and user-friendly website. The company maintains a consistent brand presence and strong trust indicators such as clear contact information and privacy compliance. Technically, the website leverages modern web technologies including Vue.js, Bootstrap, and integrates multiple third-party services for analytics, advertising, and membership management. The site is mobile-optimized and SEO-friendly, delivering a good user experience. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and CSRF protections, though some HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the .se domain is noted but does not detract significantly from the overall legitimacy given the strong business presence and content quality. Overall, The Local Sweden presents a trustworthy and professional digital presence with room for minor security enhancements.

K

Kuratorium Deutsche Altershilfe

berufundpflege-nrw.de

48

The website berufundpflege-nrw.de represents a government-supported non-profit program managed by Kuratorium Deutsche Altershilfe, aimed at improving the compatibility of professional work and caregiving responsibilities for employees in North Rhine-Westphalia, Germany. It offers a comprehensive web portal, qualification programs for workplace care guides, a digital care toolkit, and employer branding tools. The program targets companies seeking to support employees with caregiving duties and secure skilled workforce retention. The site is well-positioned regionally with strong institutional backing and partnerships. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Advanced Custom Fields Pro, and Borlabs Cookie for privacy compliance. It uses Bootstrap for responsive design and integrates Matomo Tag Manager for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. From a security perspective, the site enforces HTTPS and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, berufundpflege-nrw.de is a professional, trustworthy, and well-maintained website serving a clear social and governmental mission. Strategic improvements in security headers and transparency around incident response would further strengthen its posture.

J

Johnson & Johnson Health Care System Inc.

jjcustomerconnect.com

61

Johnson & Johnson Customer Connect is a specialized order management platform designed for Johnson & Johnson's direct customers and distributors. The website serves as a portal to search for markets that have opted into this service, facilitating streamlined order processing within the healthcare sector. The platform is clearly targeted at B2B users within the Johnson & Johnson ecosystem, reflecting an enterprise-grade business model supported by a well-established parent company. Technically, the website employs a traditional web stack including Bootstrap for responsive design, jQuery for interactivity, and several UI enhancement libraries such as DataTables and Swiper. The site demonstrates basic mobile optimization and a moderate performance profile. However, there is no evidence of advanced CMS or analytics integration, suggesting a focused, internal-use application rather than a public-facing marketing site. From a security perspective, the domain is registered with appropriate safeguards such as clientTransferProhibited status and uses DNS servers consistent with Johnson & Johnson's infrastructure. However, the absence of visible HTTPS confirmation, security headers, and privacy or cookie policies indicates room for improvement in security posture and compliance. No contact or incident response information is publicly available, which may limit transparency and user trust. Overall, the website is functional and consistent with its business purpose but lacks several modern security and privacy best practices. Strategic improvements in HTTPS deployment, security headers, and policy disclosures would enhance trust and compliance, supporting the platform's role within a global healthcare enterprise.

I

Integra LifeSciences

balloonsinuplasty.com

67

Integra LifeSciences is a healthcare enterprise specializing in medical devices, particularly in the treatment of sinusitis through innovative solutions like Balloon Sinuplasty. The website serves both patients and healthcare professionals by providing educational content, treatment options, and surgeon locator services. The company positions itself as a trusted provider in the ENT medical device market with a focus on minimally invasive procedures. Technically, the website leverages modern web technologies including Bootstrap, jQuery, GSAP, and is hosted on Oracle Cloud Infrastructure with content delivery via Oracle's CDN. It integrates Google Analytics for user tracking and OneTrust for cookie consent management, reflecting a moderate level of digital maturity and privacy compliance. The site is mobile optimized and offers a good user experience, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers such as CSP or HSTS, which are recommended for improved protection. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or a recent registration, which slightly lowers the trust score. Overall, the website is professional, content-rich, and aligned with healthcare industry standards. Strategic improvements in security headers, accessibility, and WHOIS transparency would enhance trust and compliance. The risk level is moderate with no critical issues detected.

A

Anthromedics

anthromedics.org

46

Anthromedics.org is a specialized healthcare website focused on Anthroposophic Medicine, offering editorially supervised content including practice recommendations, basic concepts, and access to the Der Merkurstab journal. The platform targets healthcare professionals and individuals interested in this niche medical field, providing multilingual content in English, German, and Spanish. The business model revolves around content subscription and educational resources, supported by partnerships with recognized Anthroposophic organizations. Technically, the website employs a Symfony-based framework with JavaScript libraries such as jQuery and Bootstrap, and uses Piwik (Matomo) for analytics. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is solid with HTTPS enforced and CSRF protection on forms, though it lacks some security headers and cookie consent mechanisms. The WHOIS data is unavailable or malformed, limiting domain trust verification, but the website's professional presentation, affiliations, and content quality support its legitimacy. No blocking or WAF challenges were detected, and the site is fully accessible. Overall, the website is well-positioned within its niche, with good content quality and technical implementation. Security and privacy compliance could be improved by adding security headers and cookie consent. The absence of direct contact emails or phone numbers suggests reliance on contact forms for communication.

M

McCoy Mart

mccoymart.com

60

McCoy Mart operates as India's largest online marketplace for building and construction materials, targeting construction professionals such as builders, contractors, architects, and interior designers. The platform offers a wide range of products sourced from over 300 brands, project lead services, and credit financing options, positioning itself as a comprehensive solution for the construction industry in India. The website is professionally designed with good content relevance and clear navigation, optimized for mobile users. Technically, it leverages modern web technologies including Laravel backend, jQuery, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Visual Website Optimizer. Security posture is moderate with HTTPS enabled and CSRF protection, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site is functional and credible but would benefit from improved privacy compliance and enhanced security measures.

D

DECENTA Group s.r.o.

coolberry.sk

50

Coolberry, operated by DECENTA Group s.r.o., is a Slovakian e-commerce retailer specializing in curated design products for home, office, and lifestyle. The company emphasizes unique, functional, and stylish products with emotional value, targeting consumers who appreciate design and quality. Their business model focuses on online retail with fast delivery, gift services, and a loyalty program to enhance customer retention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Slovak language.

V

Vŕtanie studní

studne-vrtanie.sk

44

The website www.studne-vrtanie.sk represents a professional drilling services company specializing in well drilling, geological drilling, heat pump drilling, and related services primarily in Slovakia. The company positions itself as experienced with modern equipment, targeting residential, commercial, and industrial clients. The website is built on WordPress with Elementor and incorporates SEO best practices using Rank Math. It features comprehensive content, clear navigation, and multiple contact methods including phone, email, and contact forms with GDPR-compliant consent mechanisms. Security posture is good with HTTPS enabled and use of Cloudflare Turnstile captcha on forms, though some security headers could be improved. No blocking or WAF challenges were detected, allowing full content access. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

P

Property & Enviroment s.r.o.

energie-portal.sk

59

ENERGIE-PORTAL.SK is a Slovak energy news and information portal operated by Property & Enviroment s.r.o., established in 2009. It provides comprehensive coverage of energy sector news, legislation, events, and company directories targeting professionals and stakeholders in the Slovak energy market. The website demonstrates a solid market position with consistent branding and trusted partnerships with major energy companies. Technically, the site is built on ASP.NET WebForms with modern frontend libraries like Bootstrap and jQuery, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response.

L

Leopold Kostal GmbH & Co. KG

kostal-drives-technology.com

64

KOSTAL Drives Technology is a well-established industrial technology company specializing in frequency converters and motor control solutions. With a heritage spanning over 100 years, the company holds a strong market position as a leader in energy-efficient and sensorless motor control technologies. Their product portfolio targets diverse industrial sectors including machinery, water treatment, renewable energy, logistics, and building technology. The website reflects a professional and comprehensive digital presence, supporting global operations with multiple languages and extensive product information. Technically, the website is built on TYPO3 CMS and incorporates modern web technologies such as Bootstrap, Swiper.js, and Google Tag Manager. It demonstrates good performance, mobile optimization, and accessibility features. Privacy compliance is robust, featuring a consent management platform (Usercentrics) and clear GDPR-aligned policies. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be explicitly improved. The WHOIS data is unavailable or not found, which is unusual but the website's content, branding, and external references to the Kostal group domains support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the site is trustworthy, professional, and well-maintained, with minor recommendations for enhanced security headers and vulnerability disclosure practices.

The website www.sp.gov.br is the official digital portal for the Government of the State of São Paulo, Brazil, managed by the Companhia de Processamento de Dados do Estado de São Paulo (Prodesp). It serves as a comprehensive platform providing institutional information, public services, news updates, and communication channels to residents, government employees, and visitors. The site demonstrates a mature digital presence with consistent branding and a clear focus on accessibility and transparency. Technically, the site leverages modern web technologies including jQuery, Bootstrap, FontAwesome, and Slick Carousel, integrated within an IBM WebSphere Portal framework. It employs Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking. The site is mobile-optimized and includes accessibility features such as VLibras for sign language support, reflecting a commitment to inclusive design. From a security perspective, the website enforces HTTPS and provides clear incident response contacts including a CSIRT email. While explicit security headers were not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy and cookie policies are comprehensive and GDPR-compliant, supporting user data protection and transparency. Overall, the website is trustworthy, professionally maintained, and aligned with the expectations for a government portal. It effectively balances user experience, accessibility, and security, making it a reliable resource for its audience.

K

Kiwis & Brownies

app-helper.com

56

The website www.app-helper.com/.adm/ represents a promotion builder platform named Prombu, developed by Kiwis & Brownies. It targets businesses and marketers seeking tools to create and manage promotional campaigns. The site provides user registration, login, and social login via Facebook integration. The business model appears to be SaaS-based, focusing on promotion creation services. The market position is niche with a small-scale operation and basic branding consistency. Technically, the site uses a standard web technology stack including jQuery, Bootstrap, Facebook SDK, Google Analytics, Google reCAPTCHA, and Klaro for cookie consent management. The site is moderately optimized for performance and mobile devices but lacks advanced SEO optimization and accessibility features. The presence of Google Adsense indicates monetization through advertising. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection. However, it lacks visible security headers such as Content-Security-Policy and HSTS, which are recommended best practices. No explicit security or incident response policies are published, and WHOIS data is unavailable, raising concerns about domain legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, but contact information is missing. Overall, the site is functional and provides basic business and privacy information but has gaps in security posture and domain transparency. The absence of WHOIS data and minimal security headers reduce trustworthiness. Strategic improvements in security headers, domain registration transparency, and enhanced privacy disclosures are recommended to strengthen the site's credibility and compliance.

A

Abion AB

spelpaus.se

10

Spelpaus.se is a Swedish government-backed online service that enables individuals to self-exclude from all licensed gambling operators in Sweden. The service is operated by Abion AB and closely affiliated with Spelinspektionen, the Swedish Gambling Authority. It provides a critical public health function by helping users control gambling addiction through a legally binding exclusion period verified by secure identity methods such as BankID and Freja eID+. The website is professionally designed, mobile-optimized, and offers multilingual support including Swedish, English, and Arabic. It includes educational content about gambling addiction and support for relatives of problem gamblers. Technically, the website uses a modern tech stack including Umbraco CMS, Bootstrap framework, and Matomo analytics for user tracking. The site is served over HTTPS with secure forms implementing anti-forgery tokens, ensuring a strong baseline security posture. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is supported by clear GDPR documentation, although no cookie consent mechanism is present despite analytics usage. From a security perspective, the site demonstrates good practices such as secure identity verification and no visible vulnerabilities or exposed sensitive data. The domain registration is consistent and transparent, registered to Abion AB since 2015, aligning with the service's operational timeline. No WAF or blocking mechanisms interfere with content access. Overall, the site is trustworthy, safe, and serves an essential government function with a high level of professionalism. Strategically, the site would benefit from implementing cookie consent, publishing explicit security and incident response policies, enabling DNSSEC, and adding security headers to further enhance trust and compliance. These improvements would strengthen the security posture and privacy compliance, supporting the site's critical role in responsible gambling in Sweden.

I

ibericode BV

ibericode.com

52

ibericode BV is a small European company specializing in developing open-source software products for the web, primarily focusing on WordPress plugins such as Mailchimp for WordPress and Koko Analytics. The company has a significant market presence with over 73 million downloads and active use on more than 2.1 million websites, positioning it as a reputable niche player in the WordPress ecosystem. Their business model revolves around open-source software with premium plugin offerings, targeting web developers and WordPress site owners. Technically, the website employs modern web technologies including Bootstrap and JavaScript, with a clean and professional design optimized for mobile devices. The site uses self-hosted analytics to respect user privacy and demonstrates good SEO practices. However, some technical aspects such as security headers and cookie consent mechanisms are missing, indicating room for improvement in security and compliance. From a security perspective, the website shows no immediate vulnerabilities or exposed sensitive data, but lacks visible security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear trustworthy. Overall, the security posture is moderate but could be enhanced by implementing recommended best practices. The overall risk assessment suggests a generally trustworthy and professional website with minor security and compliance gaps. Strategic recommendations include improving security headers, adding cookie consent for GDPR compliance, publishing security policies, and clarifying domain registration details to enhance trust and security culture.

D

Digital Poland Foundation

aipoland.org

61

AI Poland is a non-profit initiative under the Digital Poland Foundation focused on promoting and developing the Polish AI ecosystem. The website serves as a hub for information, events, research, and partnerships related to AI in Poland, targeting businesses, researchers, and policymakers. The initiative enjoys strong market positioning supported by reputable partners and ambassadors from leading technology companies. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and Bootstrap, hosted behind Cloudflare for performance and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and published security policies. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the website is trustworthy and professional, with no signs of malicious content or vulnerabilities.

K

Kantmeister

kantmeister.de

52

Kantmeister is a specialized German manufacturer focusing on precision metal profiles such as wall coverings, facades, connection products, and accessories. The company emphasizes quality and customization using advanced CNC technology, targeting construction professionals and related industries. Their digital presence includes a WordPress-based website with WooCommerce and Elementor, offering tools like a sheet metal configurator and a quick inquiry upload feature. The website is professionally designed, mobile-optimized, and includes essential privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and business-focused with clear contact information and social media presence.

I

International Federation of Biomedical Laboratory Science (IFBLS)

ifbls.org

45

The International Federation of Biomedical Laboratory Science (IFBLS) is a well-established non-profit professional federation representing biomedical laboratory scientists globally. Founded in 1954 and with a domain registered since 2002, IFBLS serves over 240,000 professionals across 38 countries. The organization provides membership services, educational webinars, scientific publications, and international congresses to promote the profession and advance healthcare diagnostics. The website reflects a professional and consistent brand image targeted at biomedical laboratory science professionals worldwide. Technically, the website is built on Joomla CMS using standard web technologies including jQuery and Bootstrap. It integrates Google Analytics and Google Tag Manager for user tracking and AddThis for social sharing. The site is mobile optimized with a moderate performance profile. However, it lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and security headers. There is no published privacy or cookie policy despite the use of tracking scripts, which is a compliance gap. The security posture is moderate with no critical vulnerabilities detected but improvements are needed in privacy compliance and security best practices. The site actively warns users about phishing attempts impersonating IFBLS, demonstrating awareness of security risks. Contact information is clearly provided, including email, phone, and physical address in Canada, along with active social media channels. Overall, IFBLS presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure policy to enhance trust and compliance.

R

Radicenter

radicenter.fi

62

Radicenter is a small technology company specializing in web hosting and domain registration services primarily targeting customers in Finland and Estonia. The company offers a range of hosting packages featuring cPanel management, malware scanning, automatic backups, and website acceleration tools. Their market position is regional with a focus on providing reliable and developer-friendly hosting solutions. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and malware scanning, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small hosting provider.

R

Radicenter OÜ

radicenter.ee

62

Radicenter OÜ is a small Estonian technology company specializing in web hosting and domain registration services. The company targets businesses and individuals primarily in Estonia and neighboring regions, offering a range of hosting packages with modern features such as cPanel control panels, SSD storage, and malware scanning. The website is professionally designed using WordPress CMS with a modern tech stack including Bootstrap and jQuery, and it supports multiple languages to cater to regional audiences. The presence of a cookie consent mechanism and comprehensive privacy and terms of service documents indicates good compliance with GDPR regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although the absence of security headers suggests room for improvement. Overall, Radicenter presents a trustworthy and professional online presence with clear contact channels and customer support integration via live chat.

R

Radicenter

radicenter.eu

63

Radicenter is a small Estonian technology company specializing in web hosting and domain registration services. The company offers a range of hosting packages featuring cPanel management, malware scanning, and website optimization tools, targeting individuals and businesses primarily in Estonia and neighboring regions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information including privacy and terms of service documents. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses popular plugins like Contact Form 7 and WPBakery Page Builder. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though security headers could be improved. No WHOIS registrant data is publicly available due to EURid privacy policies, but the website's professionalism and compliance suggest legitimacy. Overall, Radicenter demonstrates a mature digital presence with good privacy compliance and business credibility.

B

Parik24 — офіційні ставки на бокс онлайн з вигідними коефіцієнтами

bepolite.eu

53

The website 'Parik24' is an online platform specializing in boxing betting, targeting boxing fans primarily in Ukraine and internationally. It offers a variety of betting markets including live betting and detailed odds, positioning itself as a niche sports betting media site. The site is built on WordPress with common front-end libraries such as jQuery and Bootstrap, indicating a moderate level of technical maturity. The design is professional and content is relevant and well-structured, though accessibility features are basic. Security posture is limited with no visible security headers or privacy policies, and no contact information is provided, which may impact user trust and compliance with regulations. Overall, the site is functional and content-rich but requires improvements in security and privacy compliance to enhance credibility and user trust.

S

Sociální služby města Přerova p.o.

ssmp.cz

60

Sociální služby města Přerova p.o. is the largest social services provider in the city of Přerov, Czech Republic, offering a range of care services including palliative care, senior homes, day care, and municipal nurseries. The website serves as an informational portal for residents and families seeking social support and community services. The site is built on Joomla CMS and incorporates common web technologies such as jQuery, Mootools, and Bootstrap, with Google Analytics for visitor tracking. While the site is content-rich and regularly updated with news and events, it lacks explicit privacy and terms of service pages, which could be improved for better compliance and transparency. Security posture is moderate with HTTPS usage and cookie consent but lacks advanced security headers and policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and branding align with a legitimate municipal organization.