Medium-risk security reports

Municipal d.o.o. operates a website that currently serves as a minimal online presence, displaying only a logo on a plain blue background without any substantive business information or content. The lack of descriptive content, contact details, or service information limits the ability to assess the company's market position or business model. The website appears to be either under development or a placeholder. From a technical perspective, the website is very basic with no detectable scripts, frameworks, or CMS. There is no evidence of modern web technologies or SEO optimization. Mobile optimization and accessibility are minimal due to the lack of content and structure. Security posture is weak as there is no indication of HTTPS usage or security headers, and no privacy or cookie policies are present. The security evaluation highlights critical gaps including absence of HTTPS, lack of privacy and cookie policies, and no contact or incident response information. These factors significantly reduce trustworthiness and compliance with data protection regulations such as GDPR. The domain WHOIS data is privacy protected, which is common for small businesses but further limits transparency. Overall, the website poses a low risk in terms of content safety as it contains no adult or questionable material. However, the minimal content and lack of security and compliance features suggest a need for significant improvements to enhance trust, security, and user experience.

Pučko otvoreno učilište Katarina Zrinska – Ozalj is a small educational institution based in Croatia, founded in 2022. The organization offers a variety of educational and creative programs targeting children, youth, retirees, and adults, focusing on lifelong learning and community engagement. The website reflects a local community-oriented business model with clear contact information and social media presence, positioning itself as a trusted local educational provider. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and visually appealing user experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO optimization. Hosting and domain registration are consistent with the business location, enhancing trustworthiness. From a security perspective, the website implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of terms of service and security policies suggests an opportunity to strengthen compliance and user trust. Overall, the website is functional, professional, and safe for general audiences. The risk level is low, but strategic improvements in security posture and privacy transparency would enhance the institution's digital maturity and trustworthiness.

Gradska knjižnica i čitaonica Ivana Belostenca is a small, non-profit public library and cultural institution located in Ozalj, Croatia. It offers library services, cultural events, and access to significant historical works such as the Gazophylacium bilingual dictionary. The website serves as an informational portal for the local community and cultural enthusiasts. Technically, the site is built on Joomla CMS using common web technologies including jQuery, Bootstrap, and Google Maps API. The hosting is provided by ZoNet, a reputable Croatian hosting provider. The site is accessible, with clear navigation and consistent branding, but shows room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance documentation. No forms or tracking scripts are present, minimizing privacy risks but also limiting interactivity. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security and privacy measures.

Zavičajni Muzej Ozalj is a small cultural heritage museum located in Ozalj, Croatia, dedicated to preserving and showcasing 6000 years of local history through diverse collections including archaeological, ethnographic, and photographic artifacts. The museum also operates an open-air Ethno Park that exhibits traditional architecture and pre-industrial everyday items, targeting general visitors interested in history and culture. The website is professionally designed with good content quality, clear navigation, and accessibility features implemented via the EqualWeb plugin. Technically, it uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the museum's identity, indicating legitimacy and trustworthiness.

Azelija Eko d.o.o. is a Croatian municipal service company specializing in waste management, recycling, cemetery services, public lighting maintenance, and chimney sweeping within the Ozalj region and surrounding municipalities. The company operates fixed and mobile recycling yards and provides essential environmental services to local residents and businesses. The website reflects a local government service provider with clear contact information and service descriptions, targeting the regional community. Technically, the website is built on Joomla CMS with a Bootstrap framework and uses common JavaScript libraries such as jQuery and Font Awesome for UI elements. The site includes image sliders and responsive design elements, indicating moderate digital maturity. Hosting is provided by CARNET, a reputable Croatian academic network, which aligns with the local focus. From a security perspective, the site lacks visible security headers and explicit HTTPS enforcement in the provided data, which lowers its security posture. No privacy or cookie policies were found, indicating potential GDPR compliance gaps. The site does not use tracking or advertising technologies, which reduces privacy risks but also limits marketing insights. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance improvements, and clearer policies to strengthen trust and regulatory adherence.

Komunalno Ozalj d.o.o. is a municipal utility company based in Ozalj, Croatia, providing essential services such as water supply, sewage, and wastewater treatment to local residents and businesses. The website serves as an informational portal offering updates on infrastructure projects, regulatory documents, and contact information. The company appears to be a small-sized government sector entity with a domain registered since 2007, consistent with its operational history. Technically, the website is built on Joomla CMS and uses older JavaScript libraries like jQuery and MooTools. The site demonstrates basic mobile responsiveness and SEO optimization but lacks advanced technical features or modern frameworks. Hosting is inferred to be with zonet.com.hr based on DNS data. Performance is moderate with room for improvement in accessibility and mobile optimization. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which lowers its security posture. There is no evidence of privacy or cookie policies, which indicates compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced security measures, privacy compliance, and modernization to improve user trust and regulatory adherence.

Dubrovačko-neretvanska županija operates as the official regional government website for the Dubrovnik-Neretva County in Croatia. The site provides comprehensive information about county administration, public notices, events, documents, and contact details, targeting residents and stakeholders within the region. It serves as a key communication channel for government services and public information dissemination. Technically, the website is built on WordPress 6.6.1 with multilingual support via WPML, uses modern web technologies including jQuery and Google Fonts, and implements a cookie consent mechanism to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the website enforces HTTPS and uses updated software versions, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious indicators were detected. Overall, the website is trustworthy and professional, though improvements in privacy policy visibility and security disclosures are recommended.

APIS IT d.o.o. operates as an IT service provider specializing in identity federation and authentication services primarily for Croatian government entities such as Grad Zagreb and the Ministry of Culture. The website analyzed is a Home Realm Discovery page facilitating user authentication selection among trusted identity providers. The business targets organizational users within government and affiliated institutions, leveraging Microsoft Active Directory Federation Services (ADFS) technology to provide secure access management. The company holds a moderate market position as a government IT service provider with a medium-sized organizational footprint in Croatia. Technically, the site employs standard web technologies including HTML5, JavaScript, and CSS, integrated with Microsoft ADFS frameworks. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The infrastructure appears stable but could benefit from enhanced security headers and improved user experience elements. From a security perspective, the site uses HTTPS and implements basic input validation on forms. However, it lacks explicit security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended for modern secure web applications. No privacy or cookie policies are present, indicating gaps in compliance and user transparency. No contact or incident response information is provided, limiting user support and security communication channels. Overall, the website is safe and professional for its intended government audience but requires improvements in privacy compliance, security hardening, and user support to enhance trust and regulatory adherence.

ED Hotels (Edhotels OÜ) is a small Estonian company specializing in web design and a proprietary hotel sales and management system called BOUK. The company targets hospitality providers such as hotels, guest apartments, and other accommodation services primarily in Estonia and neighboring countries. Their market position is that of an established regional player with a decade-plus history and a loyal client base. Technically, the website is built on WordPress with modern analytics and marketing integrations including Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the professional website content and client testimonials support business credibility. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

Bouk is a technology platform focused on providing next-generation hospitality system solutions. The company behind the domain is OpenHotels, registered in Estonia since 2021, indicating a relatively new but legitimate business entity in the hospitality technology sector. The website presents minimal visible content, primarily a React-based single-page application with integration of Stripe for payments and FullStory for analytics. The technical infrastructure leverages modern web technologies and is hosted on AWS, as inferred from DNS records. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the website is safe with no adult or questionable content detected, but lacks comprehensive transparency and contact information. Strategic improvements in security policies, privacy compliance, and user engagement features are advised to strengthen trust and regulatory adherence.

The website www.peresobralik.ee represents the Estonian non-profit organization Eesti Lasterikaste Perede Liit, which focuses on promoting family-friendly dining establishments through a certification mark. The site targets families with children in Estonia and provides information about the certification, news updates, and regional member organizations. The business model is non-profit and community-oriented, aiming to enhance societal recognition and support for families with children. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Owl Carousel, Font Awesome, and Google Fonts. The site is moderately performant, mobile-optimized, and has a clear navigation structure. However, it lacks advanced SEO and accessibility features. The hosting provider is not explicitly identified from the content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the website is legitimate, safe, and professionally presented but has room for improvement in privacy compliance and security best practices. The WHOIS data aligns well with the website's claims, supporting its trustworthiness.

Tallinn Restaurant Week MTÜ operates a well-established hospitality event promoting fine dining experiences across over 100 restaurants in Tallinn, Estonia. The website serves as an informational and promotional platform, highlighting event dates, restaurant participation, awards, and green dining initiatives. The business targets general audiences interested in culinary experiences and positions itself as a reputable local event with international quality standards. Technically, the website is built using modern frameworks such as SvelteKit and integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. The site is performant, mobile-optimized, and professionally designed, though it lacks some advanced accessibility features and explicit cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing security policies to strengthen user trust and regulatory adherence.

TableOnline.fi is a professional online restaurant reservation platform targeting consumers in Finland and Tallinn. It offers services such as restaurant bookings, user reviews, and special offers, positioning itself as a leading service in the hospitality sector within its geographic focus. The website demonstrates a modern technical infrastructure leveraging Preact, AWS hosting, and integrations with major analytics and advertising platforms like Google Analytics, Facebook Pixel, and Stripe for payment processing. Security posture is strong with HTTPS enforcement, security headers, and secure payment mechanisms, although explicit security policies and incident response information are not publicly available. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks a clearly accessible privacy policy and terms of service. Overall, the site is well-designed, mobile-optimized, and trustworthy, with no adult or questionable content detected.

SHOEI CO., LTD. is a globally recognized premium motorcycle helmet manufacturer with a strong market presence and a network of regional distributors worldwide. The website serves as a hub for worldwide distributor contacts and product information tailored to regional markets. The company targets motorcycle riders and distributors, emphasizing safety, design, and performance in its product offerings. Technically, the website employs modern JavaScript libraries and tracking tools, including Google Analytics, Facebook SDK, and Line Tag, indicating a mature digital infrastructure. The site is mobile-optimized with good navigation and professional design, though it lacks some privacy and security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and legitimacy of the business. Overall, the website is safe, professional, and functional, with recommendations to enhance privacy compliance and security transparency.

Stokker AS is a leading sales and service company specializing in professional tools, machinery, and maintenance services primarily serving the Baltic region and Europe. With over 30 years of experience, it operates both physical tool centers and an e-commerce platform, offering a broad range of products and services including a loyalty program and financing solutions. The company positions itself as a reliable partner with extensive expertise and a large maintenance team. Technically, the website is built on modern frameworks such as Next.js and React, integrating Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although some advanced security policies and incident response information are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data introduces some uncertainty about domain registration details.

TJ studio d.o.o. is a Croatian-based technology company specializing in web hosting, web design, and internet application development. Established since 2009, the company positions itself as a reliable and innovative service provider for businesses and individuals seeking professional digital solutions. Their offerings include a variety of hosting packages, domain registration, website maintenance, and custom web development services. The company maintains an active online presence with social media channels and a customer support portal, emphasizing customer service and technical support availability. Technically, the website is built on WordPress using the Betheme theme and integrates modern plugins such as Yoast SEO Premium and Slider Revolution. It employs Google Analytics for traffic analysis and Google reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are not explicitly detected, and there is no dedicated security policy or incident response contact information visible. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is limited due to privacy protection, with no public registrant details, but the website content and contact information appear consistent and professional. Overall, TJ studio d.o.o. presents a trustworthy and professional digital presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further enhance their security posture and customer trust.

Hrvatski autoklub (HAK) is a well-established national automobile club in Croatia, founded in 1997, providing a broad range of services including roadside assistance, travel and traffic information, driver education, and vehicle technical inspections. The website reflects a mature digital presence with comprehensive content tailored to drivers and vehicle owners in Croatia. The technical infrastructure leverages modern web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS, and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and serves its audience effectively.

The website otocniproizvod.hr is a Croatian language health and wellness content platform focusing on articles and reviews of health supplements and related products. It targets a general audience interested in health improvement and wellness products. The business model appears to be content publishing with affiliate marketing or product promotion as revenue streams. The site is built on WordPress using common plugins for SEO, ratings, and link management, indicating a moderate level of digital maturity. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with no visible SSL issues, but lacks some security headers and cookie consent mechanisms. Security posture is adequate for a content site, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the site is safe, professional, and trustworthy, though improvements in security headers and privacy compliance are recommended.

ECOLINE CROATIA offers a specialized IT solution named EKO PRIJAVA designed for efficient reporting and monitoring of field problems such as communal, construction, and road issues. Their solution includes a mobile application for quick problem reporting and a web-based administrative portal for managing reports, analytics, and work orders. The business targets municipalities, communal companies, construction firms, and other organizations requiring precise field issue tracking. The website is built on WordPress using the Enfold theme, employing standard web technologies and cloud hosting for accessibility. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and business-focused. Overall, the site provides a functional and informative platform but would benefit from enhanced security and compliance measures.

VIT - Obrt za informatičke usluge is a small Croatian IT service business specializing in web site creation and related informatics services. The website serves as a basic informational portal providing contact details and company branding. The business appears to be locally focused with a straightforward service offering and a small market presence. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Technically, the website uses a simple tech stack including jQuery and Bootstrap, hosted under a Croatian registrar and DNS provider. The site is basic in design and mobile optimization, with minimal SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no visible privacy or cookie policies. No forms or user data collection mechanisms are present, reducing attack surface but also limiting functionality. Overall, the site is safe for general audiences but requires improvements in security and compliance to enhance trust and professionalism.

Nikola Tesla Network is a small, non-profit cultural and educational project focused on promoting the legacy of Nikola Tesla through an international cultural and touristic route. The website serves as a hub for information about the network, its partners, events, and educational initiatives such as the Teslina STEM Academy. The project is supported by reputable partners including the Croatian National Tourist Board and is co-financed by the European Union, indicating a solid market position within cultural tourism and education sectors. Technically, the website employs a moderate technology stack including jQuery, Modernizr, and various UI plugins, hosted on infrastructure linked to the NETIM registrar and VIT Web Hosting. The site is mobile optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and a formal security policy. Privacy compliance is partial; a cookie policy and consent mechanism are present, but no explicit privacy policy page was found, representing a compliance gap. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or WAF blocking were detected, and the site content is safe for general audiences. Overall, the website is professionally maintained with good content quality and business credibility but would benefit from enhanced privacy and security policies to improve compliance and trustworthiness.

The website lika-active.com serves as a regional tourism promotion platform for the Lika region in Croatia, focusing on active and adventure tourism activities such as cycling, trekking, climbing, hunting, and fishing. It is operated by the regional tourism board (Turistička zajednica Ličko-senjske županije) and targets tourists seeking outdoor and nature-based experiences. The site provides relevant information, brochures, event details, and transport options to support tourism in the region. Technically, the site uses an older technology stack including Bootstrap 2.x and jQuery 1.10.2, with basic mobile responsiveness and SEO. Security posture is moderate with no visible security headers and outdated libraries posing potential risks. Privacy compliance is lacking as no privacy or cookie policies are found. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires updates in security and compliance to improve trust and protection.

The website 'lika-gastro.com' serves as a regional gastronomy and tourism portal for the Lika-Senj region in Croatia, promoting traditional local cuisine and culinary culture. It targets tourists and food enthusiasts interested in authentic regional dishes and local gastronomic events. The business is small-scale, operated likely by the regional tourism board, and focuses on cultural and culinary promotion rather than commercial sales. Technically, the site uses older but functional web technologies including Bootstrap 2.x and jQuery 1.10.2, with basic mobile optimization and SEO. Security posture is moderate with no advanced security headers or DNSSEC, and outdated libraries pose some risk. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible, content-rich, and trustworthy but would benefit from modernization and improved security and privacy practices.

The website visit-lika.com serves as the official regional tourism portal for Ličko-senjska County in Croatia, providing comprehensive information on travel planning, cultural heritage, activities, and gastronomy. It targets tourists and visitors interested in exploring the region, positioning itself as a key regional tourism authority. The site offers event announcements, travel resources, and promotes local attractions and services. Technically, the website uses a custom CMS with Bootstrap and jQuery, integrates Google Analytics for tracking, and AddToAny for social sharing. The design is professional, mobile-optimized, and offers clear navigation, though accessibility features are basic. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-established with a domain age consistent with its business history.

Javna ustanova Razvojna agencija Ličko-senjske županije - LIRA is a Croatian regional government agency established in 2008, focused on promoting and coordinating regional development activities in Ličko-senjska županija. The agency facilitates investment climate improvement, entrepreneurship, and socio-economic growth through project management, funding administration, and strategic planning. Their website reflects a professional and consistent brand presence, targeting regional stakeholders, investors, and public entities. Technically, the site uses modern frameworks like Bootstrap and jQuery, includes accessibility features, and is mobile optimized, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure forms, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

Asterisk operates a specialized e-commerce website focused on knee protection systems and related accessories, emphasizing products proudly made in the USA. The company targets athletes and consumers seeking high-quality knee protection solutions. The website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Flickity, and Facebook Pixel for marketing and analytics. The site demonstrates good technical maturity with fast performance, mobile optimization, and secure HTTPS connections. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional presentation and active e-commerce functionality mitigate some risk. Security posture is solid with HTTPS and anti-bot measures, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is trustworthy but would benefit from improved transparency and compliance documentation.

Valvoline.ee is the Estonian localized website for Valvoline, a globally recognized lubricant and automotive chemical brand with a history dating back to 1866. The website presents product offerings primarily focused on lubricants, coolants, and maintenance chemicals targeting automotive, industrial, and motorsports sectors. The site demonstrates a moderate level of digital maturity with use of common JavaScript libraries and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The website is accessible without WAF or blocking mechanisms, indicating no access restrictions. Overall, the site is professionally designed with good content relevance but could improve in privacy compliance and security posture.

The website vhm.nl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to any substantive content. The domain is long-established, registered since 1999 with a reputable registrar, indicating legitimacy of the domain ownership. However, no business information, contact details, or compliance policies are visible on the landing page, limiting the ability to assess the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but the lack of accessible content prevents a full evaluation of the website's digital maturity or user experience. Security posture is difficult to evaluate fully due to the blocking mechanism, but the presence of Cloudflare indicates some level of protection. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information.

POS Experts is a Czech Republic-based company specializing in providing point-of-sale (POS) systems tailored for retail, restaurants, and manufacturing businesses. The company offers software and hardware solutions designed to optimize sales operations, with a focus on affordability and local market needs. Their website reflects a professional and consistent brand image, targeting small to medium-sized businesses in the retail sector. The business appears to have been operational since at least 2017, with a clear focus on the Czech market.

JustifiedGrid.com is a specialized WordPress plugin provider offering a premium image gallery solution that enables users to present photos in a justified grid layout without cropping. The website targets WordPress users, photographers, and website owners seeking advanced gallery features integrated with popular sources like Facebook and Flickr. The business appears to be a small, niche player in the WordPress plugin market, founded around 2012, with a consistent and professional online presence. Technically, the site is built on WordPress with WooCommerce for sales, leveraging common plugins such as UberMenu and Slider Revolution, and uses Cloudflare DNS for domain management. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data.

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

The website eurosalesleads.com is currently inaccessible, serving a 403 Forbidden error page with no visible content or metadata. The domain is newly registered in May 2023 and uses Cloudflare DNS services but lacks DNSSEC and any visible security headers. No business information, contact details, or compliance policies are present on the site, indicating a very low digital maturity level. The lack of accessible content and security best practices significantly limits the ability to assess the business or technical infrastructure. Security posture is weak due to the absence of visible HTTPS enforcement details and security headers. Overall, the site presents a high risk due to its inaccessibility and lack of transparency.

The website zzpudnz.hr is the official online portal for the Zavod za prostorno uređenje Dubrovačko-neretvanske županije, a governmental spatial planning institute serving the Dubrovnik-Neretva County in Croatia. It provides comprehensive spatial planning documentation, project information, and news updates relevant to local government officials, urban planners, and the public. The site is well-structured, professionally designed, and offers extensive archives of news and legal documents related to spatial planning. The target audience includes government entities, municipalities, and citizens interested in regional planning and development. Technically, the website is built on the DotNetNuke (DNN) CMS platform, utilizing modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap for responsive design and user experience. The site is mobile optimized and includes accessibility features. Security best practices are observed with HTTPS enforced, appropriate security headers, and secure form handling. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place to comply with GDPR requirements. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, there is no explicit public security policy or vulnerability disclosure page, and incident response contact information is not provided. The WHOIS data confirms the domain's legitimacy, consistent with the Croatian governmental entity it represents, and the domain age aligns with the institution's operational history. Overall, zzpudnz.hr is a credible, secure, and professionally maintained governmental website that effectively serves its informational and public service role. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear incident response contacts to enhance transparency and trust.

Dubrovačko-neretvanska županija operates as the official regional government authority for the Dubrovnik-Neretva County in Croatia. The website serves as a comprehensive portal for residents and stakeholders, providing news, administrative services, public notices, and access to official documents. It targets local citizens and government officials, positioning itself as a trusted source of regional governance information. Technically, the website is built on WordPress 6.6.1 with a modern theme and plugins such as WPML for multilingual support and Cookie Law Info for GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, employs standard security headers, and implements a cookie consent mechanism aligned with GDPR. However, it lacks explicit privacy policies, security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and compliance. Overall, the website presents a professional and trustworthy digital presence for a government entity, with moderate technical maturity and a solid security posture. Strategic improvements in privacy and security documentation would further strengthen its compliance and user trust.

Lokalna Hrvatska is a Croatian non-profit organization operating a national news service focused on local government and municipal news. The website serves as a platform for disseminating news, event calendars, weather updates, and email newsletters targeted at local authorities and citizens interested in local governance. The organization appears well-established with a domain age consistent with its founding year of 2013 and transparent registrant information matching the website's claims. Technically, the website uses a custom CMS and integrates several legacy and modern technologies including jQuery 1.8.3, Leaflet for mapping, and multiple analytics and advertising platforms such as Google Analytics, Yandex Metrika, Facebook Pixel, and Mailchimp. While the site is functional and moderately optimized for mobile, it lacks some modern security headers and uses outdated JavaScript libraries, which could pose security risks. From a security perspective, HTTPS is enforced, and no sensitive data is exposed in the HTML. However, the absence of active Content-Security-Policy headers and the use of outdated jQuery versions are notable vulnerabilities. Privacy compliance is partially addressed with a GDPR privacy statement, but no cookie consent mechanism is present despite active tracking scripts. Overall, the website is moderately secure and credible, with clear business information and contact details. Strategic improvements in updating libraries, enhancing security headers, and implementing cookie consent would strengthen its security posture and privacy compliance.

Digitalna Dalmacija is a regional technology and education initiative led by the Split-Dalmatia County, focused on fostering digital skills, startup ecosystem growth, and a vibrant technology community in Croatia. The website serves as a hub for educational programs, startup acceleration, and community events, targeting students, professionals, retirees, and entrepreneurs. It is well-positioned as a government-backed regional technology hub with strong partnerships and community engagement. The technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and CMS (DNN), providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy and security transparency.

Javna ustanova RERA S.D. za koordinaciju i razvoj Splitsko-dalmatinske županije is a Croatian public institution focused on regional development and coordination within the Split-Dalmatia County. The organization provides technical assistance, project preparation, and manages EU fund utilization to support local government, entrepreneurs, and NGOs. The website reflects its authoritative role with comprehensive content, official documentation, and transparent public procurement information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the institution's identity, indicating legitimacy and trustworthiness.

The website 'Underwater heritage' serves as an informational platform dedicated to underwater cultural heritage in Croatia, including catalogues, maps, and detailed information about ancient architecture, shipwrecks, and other underwater archaeological sites. It targets researchers, historians, archaeologists, and tourists interested in maritime heritage. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated UI libraries, with additional integrations such as Sentry for error monitoring and Vidjet for chat support. The technical infrastructure is modern and well-implemented, with HTTPS enforced and moderate performance and mobile optimization. However, the site lacks explicit privacy, cookie, and terms of service policies, and no direct contact information is provided, which impacts privacy compliance and business credibility scores. Security posture is decent with HTTPS and some best practices, but missing security headers and formal policies reduce the overall security maturity. Overall, the site is a good quality, niche cultural heritage resource with moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

Grad Duga Resa operates an official municipal website serving the city of Duga Resa in Croatia. The site provides public information, news, and municipal services to residents and visitors. It positions itself as the authoritative source for local government communications and community engagement. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, reflecting a moderate level of digital maturity. The technical infrastructure supports responsive design and basic accessibility, ensuring usability across devices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and explicit policies could enhance protection. Overall, the site is legitimate and trustworthy, though WHOIS privacy limits domain ownership transparency. Strategic recommendations include improving security headers, publishing privacy and incident response policies, and enhancing contact information visibility.

Javna ustanova Regionalna razvojna agencija Karlovačke županije (JURRA) is a regional government agency established by Karlovačka županija to coordinate and promote regional development. The agency provides free expert assistance in project preparation and implementation, educational and advisory services primarily targeting public legal entities and institutions within the Karlovačka županija region. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins for SEO, cookie consent, and analytics, ensuring compliance with GDPR and user privacy standards. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain is privacy protected in WHOIS as per GDPR, which is justified for this type of public institution. The website content and structured data strongly support the legitimacy and trustworthiness of the agency.

Regionalni Centar za Investicije - Međimurje d.o.o. is a government-affiliated regional investment center focused on supporting local businesses and stakeholders in the Međimurje region of Croatia. The organization provides services including investment support, dissemination of information on EU and national tenders, and regional development initiatives. The website reflects a professional and consistent brand presence, targeting local entrepreneurs and agricultural producers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

Metalska jezgra Čakovec is a development and educational center focused on the metals industry, providing advanced services such as 3D scanning, polymer and metal 3D printing, and IoT solutions. The center collaborates with regional universities and government bodies, positioning itself as a key regional innovation hub. The website demonstrates a solid technical infrastructure built on WordPress with modern plugins and compliance with GDPR regulations. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

The website 'Međimurska priroda' appears to be a regional or nature-focused site, likely providing information about the Međimurje region's natural environment or tourism opportunities. The site is built on WordPress using Elementor and several plugins for events, galleries, and forms. It employs Google Analytics for visitor tracking but lacks visible privacy or cookie policies, which is a compliance concern. Technically, the site is moderately optimized with good mobile responsiveness but lacks advanced security headers and detailed WHOIS transparency. The absence of registrant data and domain registration details due to WHOIS query failure limits the ability to fully verify legitimacy. Overall, the site is functional and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

Javna ustanova za razvoj Međimurske županije REDEA is a Croatian public institution focused on regional development within Međimurje County. It acts as a regional coordinator supporting social, economic, and strategic planning initiatives, primarily funded by government and European Union sources. The website reflects a professional government agency with clear communication channels, project showcases, and public tenders. Technically, the site is built on WordPress using modern libraries and plugins, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its public institutional role effectively.

Visit Međimurje is the official regional tourism website for the Međimurje County in Croatia, managed by the Turistička zajednica Međimurske županije. The site promotes the region's natural beauty, cultural heritage, gastronomy, and tourism services, targeting tourists and visitors interested in nature, culture, and culinary experiences. The website is well-structured, professionally designed, and provides comprehensive information and planning tools for visitors. Technically, it is built on Drupal 11, uses modern web technologies, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

The website partnerstvo-razvoj.net serves as the official portal for the Zagorska razvojna agencija, a regional development agency focused on employment, education, and entrepreneurship within the Krapinsko-zagorska županija region in Croatia. It provides job listings, scholarship information, public tenders, and educational resources aimed at residents and stakeholders in the region. The site is primarily in Croatian with an English language option, targeting local citizens and regional partners. The business model is that of a government or non-profit entity facilitating regional development and public information dissemination. Technically, the website employs older JavaScript libraries such as jQuery 1.6, Google Analytics for tracking, and some custom scripts for UI elements like menus and pagination. The site appears to be custom-built without a popular CMS. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but functional. Hosting and domain registration are consistent with a legitimate regional agency, with the domain registered since 2011. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. There is no DNSSEC enabled, and no explicit privacy or security policies are published. The login form is minimal and lacks visible advanced protections. Cookie policy scripts exist but without a clear consent mechanism, indicating partial privacy compliance. Overall, the website is functional and credible for its purpose but has room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in these areas would improve trust and resilience against threats.

CESI is a Croatian non-profit organization dedicated to advancing the social position of women and achieving gender equality through education, consulting, research, and advocacy. The organization has a strong market presence with over 200 successful projects and numerous collaborations, targeting a broad audience interested in social justice and women's rights. Their website reflects a professional and consistent brand image with clear navigation and relevant content in Croatian and English. Technically, the site uses modern web standards, including HTTPS and JavaScript modules, and integrates Google Analytics for visitor insights. Accessibility and mobile optimization are well addressed, contributing to a positive user experience. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some advanced security headers and formal security policies, indicating room for improvement. Privacy compliance is basic with cookie consent implemented, but explicit privacy and security policies could be enhanced. Overall, CESI's digital presence is credible and trustworthy, supporting their mission effectively.

Županijska uprava za ceste Krapinsko-Zagorske županije is a Croatian government agency responsible for managing county roads within the Krapinsko-Zagorska region. The website serves as an official platform providing information on road maintenance, closures, public procurement, financial plans, and legal documentation. It targets local residents, businesses, and stakeholders involved in regional infrastructure. The business model is that of a public sector entity focused on infrastructure management and transparency. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Contact Form 7, and Slider Revolution. It uses modern web technologies including HTTPS, Google Fonts, and jQuery. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, some improvements can be made in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA for forms, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is indicated by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professional, reflecting its government entity status. Strategic recommendations include implementing cookie consent, enhancing security headers, properly configuring analytics, and publishing security and incident response information to improve compliance and security posture.

JURAGAN69 operates as an online slot gambling platform primarily targeting Indonesian users interested in slot games, specifically promoting 'slot koi super gacor' games. The website positions itself as a fast, safe, and accessible gambling site. Technically, the site leverages multiple modern tracking and analytics tools such as Google Tag Manager, Datadog, and Rollbar, hosted on the Envato Market platform. However, the site lacks visible security headers and publicly available privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable and malformed, indicating privacy protection, which is common in gambling domains but reduces transparency. Overall, the site is accessible without WAF or blocking mechanisms, but the security posture and privacy compliance are weak, and the business credibility is moderate due to limited contact and policy information.

Zagorje Priroda is a Croatian public institution dedicated to the protection and management of natural protected areas within the Krapinsko-Zagorska County. The organization focuses on environmental conservation, education, research, and public engagement through events and publications. Their website serves as an informative portal for the public and stakeholders, highlighting their activities, projects, and news. The institution is regionally positioned as a key governmental entity for nature protection with a clear mission and community focus. Technically, the website is built on WordPress CMS with common plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google Tag Manager for traffic and user behavior analysis. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security headers are missing, and the jQuery version is outdated, which could pose minor security risks. From a security and compliance perspective, the website enforces HTTPS and does not expose sensitive data. It provides a comprehensive privacy policy in Croatian, indicating GDPR awareness, though it lacks an explicit cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical address, enhancing trust. No incident response or security policy pages were found, suggesting room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic improvements in security headers, updating libraries, and implementing cookie consent would enhance its security posture and compliance. The domain registration data aligns well with the organization's claims, supporting legitimacy and credibility.