Security Directory

S

Skypark

skypark.lt

43

Skypark.lt is the online presence of Skypark, the largest trampoline park and entertainment center in Lithuania, offering leisure activities for all age groups across multiple physical locations. The website serves as a landing page directing visitors to specific location subdomains. The business is positioned as a family-friendly entertainment provider with a medium-sized footprint in the hospitality sector, founded in 2014. Technically, the site uses a custom CMS (Greativ), Google Fonts, and Google Analytics with consent management scripts that deny ad and analytics storage by default, indicating some privacy awareness. However, the site lacks visible privacy and cookie policies, contact emails, and security headers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences.

J

Jonatan Heyman

heyman.info

53

The website heyman.info is a personal technical blog and project showcase maintained by Jonatan Heyman. It features a wide range of technical articles, open source projects, and websites developed by the author, targeting developers and tech enthusiasts. The site has a consistent and professional design with content dating back to 2010, indicating a mature and established personal brand. The business model is primarily content publishing and personal branding with no direct commercial transactions evident. Technically, the site uses a static site generator (likely Pelican), Google Analytics for visitor tracking, and integrates external fonts and scripts for enhanced user experience. The site is mobile optimized and has good SEO practices but lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policies. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

M

Mar-Com Rijeka

mar-com.hr

45

Mar-Com Rijeka is a small Croatian IT service company specializing in website creation, IT support, and graphic design with over 20 years of experience. The company targets local businesses and private individuals in Rijeka and surrounding areas, offering modern and affordable IT solutions. Their market position is supported by a portfolio of over 200 successful projects and positive client testimonials. Technically, the website employs modern web technologies such as jQuery, Slick Slider, and Google Fonts, with good mobile optimization and accessibility features including a UserWay widget. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small IT service provider.

W

WMD HOSTING

wmd.hr

53

WMD HOSTING is a Croatian-based web hosting and domain registration provider offering a range of services including web development, SEO marketing, SSL certificates, and internet marketing. The company targets businesses and individuals seeking comprehensive web solutions, positioning itself as a regional player with promotional offers such as 'Hosting AKCIJA 1+1'. The website demonstrates a good level of digital maturity with modern technologies like Craft CMS, Bootstrap, jQuery, and integration of analytics and chat services. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, although some security headers and explicit privacy policies are missing. Overall, the site is professional and trustworthy but could improve compliance transparency and contact accessibility.

BitByte, obrt za IT usluge, is a Croatian small IT service provider specializing in computer servicing, network solutions, website development, and fiscal software hosting. The company targets both private and business customers, emphasizing professional diagnostics, OEM parts, and secure fiscal solutions via Remaris Master hosted in their data center. The website reflects a professional and consistent brand image with clear service offerings and distributor partnerships. Technically, the site is built on WordPress using Elementor and Yoast SEO, with HTTPS and Google reCAPTCHA implemented for security. However, the absence of privacy and cookie policies and limited WHOIS transparency due to GDPR reduce the overall privacy compliance and trust slightly. Security headers are not evident, suggesting room for improvement in security posture. Overall, the site is functional, well-structured, and suitable for its business purpose.

H

Human interaction company

burza.hr

55

Human interaction company is a specialized technology service provider focusing on AI and human-computer interaction solutions. The company positions itself as an end-to-end AI partner, offering services from concept through implementation. Their market presence is supported by global awards and a professional online presence, targeting businesses seeking advanced AI integration with human-centric design. Technically, the website is built on modern frameworks such as Next.js and integrates multiple analytics and tracking tools, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and modern analytics scripts but lacks explicit security headers and published security policies, suggesting room for improvement in security posture. The WHOIS data is missing or privacy protected, which slightly reduces trust but is not uncommon for tech companies. Overall, the website is professional, secure, and compliant with privacy regulations, though it could benefit from enhanced transparency in security and terms of service documentation.

E

Eesti E-kaubanduse Liit

e-kaubanduseliit.ee

53

Eesti E-kaubanduse Liit is a well-established non-profit association uniting over 530 reputable e-commerce businesses in Estonia, operating for more than 16 years. The organization focuses on fostering collaboration, trust, and growth within the Estonian e-commerce sector by providing education, events, legal guidance, and a recognized trustmark certification called 'Turvaline ostukoht'. The website reflects a mature market position with strong community engagement and a clear mission to improve the e-commerce ecosystem in Estonia. Technically, the site is built on Webflow, leveraging modern web technologies and Google Tag Manager for analytics and consent management. The site is mobile-optimized, accessible, and professionally designed, providing a positive user experience. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism integrated with Google Consent Mode, although some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website and business demonstrate high credibility and trustworthiness.

R

Regional Development Agency DUNEA LLC.

dubrovnik-neretva.eu

42

The website represents the official Representation Office of the Dubrovnik-Neretva Region in Brussels, serving as a liaison and promotional platform for the region within the European Union. It highlights the Regional Development Agency DUNEA, which coordinates sustainable development and project management for the region. The site targets regional stakeholders, investors, EU institutions, and the general public interested in regional development. Technically, the site is built on Joomla CMS with a modern but moderate tech stack including Bootstrap, jQuery, and Revolution Slider, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but would benefit from enhanced privacy and security measures.

Zakon.hr is a well-established Croatian legal information portal operated by cyber_Folks d.o.o., providing comprehensive access to laws, regulations, and legal documents. The website targets legal professionals, businesses, and the general public seeking reliable legal information. It maintains a strong market position as a leading legal resource in Croatia, supported by updated content and a related AI legal assistant service, Zakon.ai. The business model appears to be a combination of subscription and advertising revenue streams.

V

Vodovod i kanalizacija d.o.o.

vik-ka.hr

55

Vodovod i kanalizacija d.o.o. Karlovac is a well-established regional utility company founded in 2002, providing water supply and sewage management services primarily in Karlovac and surrounding areas in Croatia. The company emphasizes quality and environmental responsibility, as evidenced by its ISO 9001 and ISO 14001 certifications. Their website reflects a professional and user-focused approach, offering comprehensive information, customer support, and transparency through detailed policies and contact channels. Technically, the site uses Joomla CMS with modern web technologies and is hosted behind Cloudflare, ensuring good performance and security. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website and business demonstrate high legitimacy and trustworthiness with a solid digital presence.

Ampere Computing is a technology company specializing in cloud native processors designed for efficient and scalable performance in data centers and edge computing environments. Founded in 2017, the company positions itself as a provider of high-efficiency CPUs that meet the growing demands of cloud computing with minimal resource consumption. The website reflects a modern, professional digital presence built on contemporary web frameworks such as Next.js and Chakra UI, hosted on Microsoft Azure infrastructure. The site is well-optimized for performance and mobile responsiveness, providing a good user experience with clear navigation and relevant content focused on their core business offerings. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms via OneTrust, indicating a baseline commitment to privacy compliance. However, explicit privacy policies, terms of service, and security policies are not found, which represents an area for improvement. The WHOIS data shows a consistent domain registration history aligned with the company's founding date, with standard registrar protections but lacking DNSSEC, which could enhance DNS security. Overall, the security posture is solid but could be strengthened by publishing formal security and privacy documentation, adding vulnerability disclosure mechanisms, and enabling DNSSEC. The absence of direct contact information and social media links on the main page limits immediate user engagement and trust signals. The website content is safe, professional, and targeted at a general audience interested in cloud computing technologies.

A

Age-Friendly University Global Network

afugn.org

63

The Age-Friendly University Global Network is a non-profit organization focused on promoting positive and active aging through higher education institutions worldwide. The website serves as a hub for membership, resources, research, and advocacy related to age-friendly university principles. The network is affiliated with Arizona State University, which adds credibility and institutional support. The website is built on the Squarespace platform, featuring a professional design, clear navigation, and mobile optimization. However, the absence of a privacy policy and WHOIS registrant data limits full trust verification. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit security policies or incident response contacts. Overall, the site is suitable for its educational and non-profit mission but could improve compliance and transparency.

Museums.SI is a Slovenian cultural heritage portal operated by Semantika d.o.o., providing comprehensive information about museums, galleries, exhibitions, collections, educational programs, articles, authors, and virtual exhibitions in Slovenia. The website serves as a national platform to promote Slovenian cultural institutions and their activities to the general public and cultural enthusiasts. Technically, the site is built on the DNN CMS platform, utilizing Bootstrap and jQuery libraries, and integrates Google Analytics for visitor tracking. The site is mobile optimized with a moderate performance profile and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy available in Slovenian and a cookie consent banner. No contact emails or phone numbers are explicitly provided on the homepage, which may affect direct communication. Overall, the website is professional, trustworthy, and safe for general audiences.

P

Pikant

pikant.hr

46

Pikant is a Croatian design and marketing studio providing a broad range of creative and IT services including web design, graphic design, product design, branding, IT support, and marketing consulting. The company positions itself as a regional leader with a focus on quality and client satisfaction, serving businesses primarily in Croatia and the EU. The website is professionally designed, mobile-optimized, and provides clear contact information and client references. Technically, the site uses modern web technologies such as Google Fonts, Revolution Slider, and Cognito Forms for contact management, with Google Analytics for traffic analysis. Security posture is good with HTTPS enabled and secure form handling, though some security headers and cookie consent mechanisms are missing. The WHOIS data is privacy protected due to GDPR, which is justified for this business type. Overall, the website reflects a legitimate, small-sized business with a solid digital presence.

R

Razvojna agencija Sotla

ra-sotla.si

40

Razvojna agencija Sotla is a Slovenian regional development agency established in 2003, focusing on regional development programs, entrepreneurship support, and project management primarily in the Obsotelje and Kozjansko regions. The agency operates as a non-profit entity serving local governments, entrepreneurs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern plugins such as Elementor and Events Manager, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR cookie requirements, and free from suspicious indicators.

T

T1 Tallinn

t1tallinn.com

58

T1 Tallinn operates as a large retail and entertainment shopping center located in Tallinn, Estonia. The website presents a comprehensive overview of the business offerings including retail stores, dining options, entertainment venues, and additional customer services. The site targets a broad audience including families and general shoppers, positioning itself as a key shopping and leisure destination in the region. The business appears well-established with a domain age consistent with its operational history since 2016. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as jQuery, Video.js, and Google Fonts. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with structured data and meta tags implemented effectively. Analytics and marketing tools like Google Analytics and Facebook Pixel are used for user tracking and marketing purposes. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and security headers are not explicitly observed, indicating room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Contact information is transparent and professionally presented. Overall, the website demonstrates a solid security posture and business credibility with no major red flags. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to further enhance trust and security maturity.

R

Regionalni centar kompetentnosti u turizmu i ugostiteljstvu Zabok

rcktu-zabok.hr

34

The website represents the Regional Center of Competence in Tourism and Hospitality located in Zabok, Croatia. It serves as an educational institution offering secondary education, adult courses, workshops, retraining, and consulting services focused on tourism and hospitality sectors. The center aims to develop professional skills, creativity, and social responsibility among students and professionals, supported by EU funding. The site is well-structured, professionally designed, and targets students, adult learners, and regional businesses in the tourism and hospitality industry. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and terms of service pages and a vulnerability disclosure policy. Overall, the domain registration and hosting are consistent with the business profile, indicating legitimacy and trustworthiness.

B

Business Angels Impact Fund

baif.hr

54

Business Angels Impact Fund is a Croatian-based investment fund focused on supporting startups and companies that generate social and environmental impact. The website presents a professional and consistent brand image, targeting investors and social enterprises. The technical infrastructure is built on WordPress using Elementor and Astra theme, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is moderate with HTTPS enabled but lacking advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance measures.

R

Ride & Bike 2

rideandbike.eu

38

Ride & Bike 2 is a regional tourism promotion website focusing on the natural and cultural heritage of several regions in Croatia and Slovenia. It provides information about outdoor activities, cultural sites, and local attractions, targeting tourists and outdoor enthusiasts. The website leverages WordPress CMS with WPBakery Page Builder and integrates Google Tag Manager for analytics. While the site is well-structured and visually consistent, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its compliance and trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the site is functional and serves its tourism promotion purpose but requires improvements in privacy compliance and security best practices.

R

Radnica.org

radnica.org

60

Radnica.org is a Croatian non-profit platform dedicated to supporting individuals facing workplace discrimination, particularly gender-based discrimination. The website offers educational content, guidance on rights, and an anonymous reporting form to help victims. It is affiliated with CESI, a recognized organization, enhancing its credibility. Technically, the site is built on Webflow with modern web fonts and scripts, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site uses HTTPS and Cloudflare Turnstile captcha for form protection, but lacks visible security headers and explicit incident response policies. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page. Overall, the site is trustworthy and serves a niche audience effectively.

C

CESI – Centar za edukaciju, savjetovanje i istraživanje

sezamweb.net

53

SeZaM is a Croatian non-profit educational website focused on sexual education for youth, operated under the auspices of CESI – Centar za edukaciju, savjetovanje i istraživanje. The platform provides comprehensive thematic content on sexuality, gender equality, reproductive health, and related social issues, targeting young people and educators. It includes interactive elements such as a virtual assistant and links to related educational services. The website is well-structured and professionally designed, with clear navigation and relevant content for its audience. Technically, the site uses modern web technologies including Google Fonts, FontAwesome, Turbolinks, and Google Analytics, and is hosted on Linode. The presence of CSRF tokens and HTTPS indicates a baseline security posture, although some security best practices such as DNSSEC and security headers are missing. The website is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the domain is mature and registered with a reputable registrar, with protections against unauthorized transfers. No WAF or blocking mechanisms are detected, and the site is fully accessible. However, the absence of privacy and cookie policies, security headers, and vulnerability disclosure mechanisms represent compliance and security gaps. Overall, the site is trustworthy but could improve its security and privacy posture. Strategically, the site serves an important educational role in Croatia, with a clear mission and target audience. It benefits from partnerships with CESI and related services, enhancing its credibility and reach.

A

ArhivPRO d.o.o.

eindigo.net

56

ArhivPRO d.o.o. is a Croatian technology company specializing in digital archiving and cataloguing solutions, primarily through their INDIGO platform. The platform targets institutions such as libraries, archives, museums, and schools, enabling them to digitize, manage, and publish diverse materials including books, photographs, and multimedia. The company demonstrates a strong market position in the cultural heritage and education sectors, supported by client references and EU project funding. Technically, the website employs modern web technologies and responsive design, providing a professional user experience. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy/cookie policies. The WHOIS data is privacy protected due to GDPR, which is justified given the nature of the business. Overall, the website and business present a trustworthy and professional image with room for improvement in privacy and security transparency.

O

OpenHotels

bouk.io

51

Bouk is a technology platform focused on providing next-generation hospitality system solutions. The company behind the domain is OpenHotels, registered in Estonia since 2021, indicating a relatively new but legitimate business entity in the hospitality technology sector. The website presents minimal visible content, primarily a React-based single-page application with integration of Stripe for payments and FullStory for analytics. The technical infrastructure leverages modern web technologies and is hosted on AWS, as inferred from DNS records. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the website is safe with no adult or questionable content detected, but lacks comprehensive transparency and contact information. Strategic improvements in security policies, privacy compliance, and user engagement features are advised to strengthen trust and regulatory adherence.

The website www.peresobralik.ee represents the Estonian non-profit organization Eesti Lasterikaste Perede Liit, which focuses on promoting family-friendly dining establishments through a certification mark. The site targets families with children in Estonia and provides information about the certification, news updates, and regional member organizations. The business model is non-profit and community-oriented, aiming to enhance societal recognition and support for families with children. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Owl Carousel, Font Awesome, and Google Fonts. The site is moderately performant, mobile-optimized, and has a clear navigation structure. However, it lacks advanced SEO and accessibility features. The hosting provider is not explicitly identified from the content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the website is legitimate, safe, and professionally presented but has room for improvement in privacy compliance and security best practices. The WHOIS data aligns well with the website's claims, supporting its trustworthiness.

T

Tallinn Restaurant Week MTÜ

tallinnrestaurantweek.ee

52

Tallinn Restaurant Week MTÜ operates a well-established hospitality event promoting fine dining experiences across over 100 restaurants in Tallinn, Estonia. The website serves as an informational and promotional platform, highlighting event dates, restaurant participation, awards, and green dining initiatives. The business targets general audiences interested in culinary experiences and positions itself as a reputable local event with international quality standards. Technically, the website is built using modern frameworks such as SvelteKit and integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. The site is performant, mobile-optimized, and professionally designed, though it lacks some advanced accessibility features and explicit cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing security policies to strengthen user trust and regulatory adherence.

I

Institut za Neuromarketing

neuromarketinginstitut.com

55

Institut za Neuromarketing is a specialized Croatian institute providing neuromarketing services including neuroadvertising, neurobranding, scientific and expert research, and advanced technologies such as EEG, eye tracking, biometric methods, and facial coding. The website positions the institute as a market leader in Croatia with a focus on business and scientific clients. The digital infrastructure is built on WordPress with modern plugins and tools, ensuring good performance and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Overall, the website is professional, trustworthy, and well-maintained, supporting the institute's credibility and market presence.

Nikola Tesla Network is a small, non-profit cultural and educational project focused on promoting the legacy of Nikola Tesla through an international cultural and touristic route. The website serves as a hub for information about the network, its partners, events, and educational initiatives such as the Teslina STEM Academy. The project is supported by reputable partners including the Croatian National Tourist Board and is co-financed by the European Union, indicating a solid market position within cultural tourism and education sectors. Technically, the website employs a moderate technology stack including jQuery, Modernizr, and various UI plugins, hosted on infrastructure linked to the NETIM registrar and VIT Web Hosting. The site is mobile optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and a formal security policy. Privacy compliance is partial; a cookie policy and consent mechanism are present, but no explicit privacy policy page was found, representing a compliance gap. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or WAF blocking were detected, and the site content is safe for general audiences. Overall, the website is professionally maintained with good content quality and business credibility but would benefit from enhanced privacy and security policies to improve compliance and trustworthiness.

M

Mulgi Elamuskeskus MTÜ

mulgielamuskeskus.ee

40

Mulgi Elamuskeskus MTÜ operates a cultural and experience center in Mulgimaa, Estonia, dedicated to showcasing the region's history, traditions, and cultural heritage. The center functions as a museum, event venue, and local product sales point, targeting tourists, families, and educational groups. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content about visiting hours, ticketing, and events. Social media integration with Facebook and Instagram supports community engagement. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies. Contact information is clearly presented, enhancing business credibility.

J

Javna ustanova za Zaštitu i očuvanje prirode Ličko senjske Županije

zop-lsz.hr

44

The website represents a Croatian public institution dedicated to the protection and preservation of nature in the Ličko-senjska County. It provides comprehensive information about protected areas, educational programs, projects, and public announcements. The institution targets local citizens, environmental professionals, and visitors interested in nature conservation. The business model is that of a government entity focused on environmental stewardship and public service. Technically, the website is built on WordPress using popular plugins such as Elementor, WPBakery, LayerSlider, and Slider Revolution. It employs modern web technologies including HTTPS, jQuery, and Google Fonts. The site is mobile-optimized and includes accessibility features, enhancing user experience for diverse audiences. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies or incident response information. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and serves its public institution role effectively. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

T

Turistička zajednica grada Novalje

visitnovalja.hr

52

Visit Novalja is the official tourism website for the city of Novalja and the island of Pag in Croatia, operated by the local tourism board (Turistička zajednica grada Novalje). The site provides comprehensive information for tourists including local attractions, events, gastronomy, accommodation options, and cultural heritage. It targets tourists and visitors seeking detailed and official travel information about the region. The business model is focused on tourism promotion and information dissemination, positioning itself as a trusted local authority in the hospitality sector.

G

Gradska uprava Novalja

novalja.hr

45

The website www.novalja.hr serves as the official digital portal for the city of Novalja, Croatia, providing residents, tourists, and businesses with comprehensive information about municipal services, news, public procurement, and community events. It holds a strong position as the primary communication channel for the local government, offering transparency and accessibility to public data and administrative resources. The site targets a broad audience including local citizens, government officials, and visitors interested in the city. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO practices. Security-wise, the site uses HTTPS and trusted external libraries but lacks several important security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

E

Ekstreemmoto OÜ

klim.ee

42

Klim.ee is an Estonian e-commerce website specializing in quality on-road and off-road motorcycle apparel and accessories. Operated by Ekstreemmoto OÜ, the site targets motorcycle enthusiasts in Estonia, offering a range of products including jackets, pants, helmets, gloves, and protective gear for both men and women. The business appears to be a small-sized retailer founded in 2019, with a clear focus on niche motorcycle apparel markets. The website is professionally designed with good navigation and mobile responsiveness, supporting a positive user experience.

U

Ugandi Hotell

ugandihotel.ee

45

Ugandi Hotell is a small luxury boutique hotel located in Otepää, Estonia, offering personalized accommodation and dining experiences. The hotel emphasizes comfort, luxury, and a unique atmosphere, targeting tourists, sports enthusiasts, and business travelers. The website is professionally designed using WordPress with Yoast SEO, providing good content quality and clear navigation. Technical infrastructure includes modern web technologies and Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers and incident response information are absent. Overall, the website is trustworthy and compliant with GDPR, reflecting a legitimate and professional hospitality business.

S

Splitsko-dalmatinski filmski ured

filmingindalmatia.hr

47

The website filmingindalmatia.hr represents the Splitsko-dalmatinski filmski ured, a regional film office dedicated to supporting film, TV, and commercial productions in the Dalmatia region of Croatia. It offers services such as location scouting, permit facilitation, and production collaboration, targeting filmmakers and production companies interested in shooting in this area. The site is well-structured with good SEO practices and integrates Google Maps for location visualization, enhancing its utility for its audience. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies including Google Fonts and Google Maps API. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security is robust with HTTPS enabled and several security headers present, though explicit security policies and incident response information are absent. From a security and compliance perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Contact information is primarily available via a contact form, with no direct emails or phone numbers found. WHOIS data aligns well with the website's regional and business claims, supporting its legitimacy. Overall, the website is a credible and professional platform serving a niche regional market with good technical and security standards but would benefit from enhanced privacy compliance and explicit security documentation.

D

Dalmatia Storytelling

dalmatiastorytelling.com

43

Dalmatia Storytelling is a niche cultural tourism business founded in 2021, offering storytelling experiences in the Dalmatia region through interpretive guides, theatrical groups, and technology. The website is professionally designed using WordPress and Elementor, with multilingual support and a clear focus on cultural and travel audiences. The technical infrastructure is modern and includes popular libraries and frameworks, hosted by a reputable provider Hetzner Online GmbH. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a comprehensive cookie policy and GDPR consent. Business credibility is supported by consistent branding and structured data.

J

Javna ustanova Regionalna razvojna agencija Karlovačke županije

ra-kazup.hr

55

Javna ustanova Regionalna razvojna agencija Karlovačke županije (JURRA) is a regional government agency established by Karlovačka županija to coordinate and promote regional development. The agency provides free expert assistance in project preparation and implementation, educational and advisory services primarily targeting public legal entities and institutions within the Karlovačka županija region. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins for SEO, cookie consent, and analytics, ensuring compliance with GDPR and user privacy standards. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain is privacy protected in WHOIS as per GDPR, which is justified for this type of public institution. The website content and structured data strongly support the legitimacy and trustworthiness of the agency.

Muzej Međimurja Čakovec is a well-established regional museum in Croatia, offering a broad range of cultural, historical, and artistic exhibits. The website reflects a mature digital presence with detailed content about museum collections, exhibitions, and educational programs. The institution targets general audiences including tourists, researchers, and local visitors. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a Croatian hosting provider. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

C

Centar dr. R. Steinera

centar-rudolf-steiner.com

36

Centar dr. R. Steinera is a small educational/spiritual center based in Donji Kraljevec, Croatia, focused on Rudolf Steiner's teachings. The website is multilingual and built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure includes modern elements such as HTTPS, Google reCAPTCHA, and Cloudflare DNS, but lacks advanced security headers and DNSSEC. The security posture is adequate but could be improved by implementing additional security headers and publishing formal security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is present. Overall, the website is functional and moderately professional but would benefit from enhanced compliance and security documentation.

M

Mesap d.o.o.

mesap.hr

46

Mesap d.o.o. operates the Međimurski sajam poduzetništva (MESAP), a business focused on renting various event and business spaces including conference halls, large event halls, and a business club/cafe in Croatia. The company targets businesses and event organizers in the region, providing facilities equipped with modern amenities such as WiFi, projectors, and parking. The website reflects a small-sized, regionally focused business with a professional online presence and clear contact information. Technically, the site is built on Joomla CMS with the Helix Ultimate framework and uses Bootstrap and jQuery for responsive design and interactivity. Hosting is provided by Totohost, a Croatian hosting provider. The website is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, showing a long-established Croatian entity. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

The website bradatiguru.hr is a small-scale personal or freelance business site focused on web development and blockchain advocacy. It uses a unique retro terminal interface to engage visitors and promote the owner's portfolio and blockchain-related projects. The site targets web developers and blockchain enthusiasts, offering educational content and links to related blockchain resources. Technically, the site is built with basic HTML, CSS, and JavaScript without any CMS or advanced frameworks, resulting in fast loading times but limited SEO and accessibility features. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is safe and trustworthy but would benefit from improved security and privacy practices to enhance credibility and user trust.

Ž

Županijska uprava za ceste Krapinsko-Zagorske županije

zuc-kzz.hr

56

Županijska uprava za ceste Krapinsko-Zagorske županije is a Croatian government agency responsible for managing county roads within the Krapinsko-Zagorska region. The website serves as an official platform providing information on road maintenance, closures, public procurement, financial plans, and legal documentation. It targets local residents, businesses, and stakeholders involved in regional infrastructure. The business model is that of a public sector entity focused on infrastructure management and transparency. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Contact Form 7, and Slider Revolution. It uses modern web technologies including HTTPS, Google Fonts, and jQuery. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, some improvements can be made in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA for forms, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is indicated by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professional, reflecting its government entity status. Strategic recommendations include implementing cookie consent, enhancing security headers, properly configuring analytics, and publishing security and incident response information to improve compliance and security posture.

T

Telia Eesti AS

winterplace.ee

45

Otepää Winterplace is Estonia's largest winter park located in the city center of Otepää, offering a variety of winter leisure activities including snowtubing, ice skating, igloo cinema, and play areas for children. The business targets families, youth, and groups such as schools and companies, positioning itself as a premier winter entertainment destination in Estonia. The website reflects a well-structured and visually appealing platform with integration of social media and mapping services to enhance user engagement. Technically, the site employs modern JavaScript libraries and Google services, managed via the Greativ CMS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic consent mechanisms, but lacks explicit privacy policies and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence for the business.

M

Mulgi Kultuuri Instituut

mulgimaa.ee

45

The website mulgimaa.ee serves as a cultural and tourism portal for the Mulgimaa region in Estonia, promoting local traditions, events, and products. It is operated by regional cultural institutions such as Mulgi Kultuuri Instituut and Mulgimaa Arenduskoda, which are small-sized organizations focused on community development and cultural preservation. The site provides comprehensive information on events, local crafts, tourism guides, and news relevant to the Mulgimaa area. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, Facebook SDK, and YouTube iframe API, built on the Greativ CMS platform. It is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider, with a domain age consistent with the business history. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic, lacking a privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-structured, targeting tourists, cultural enthusiasts, and the local community.

Z

Zone Media OÜ

sunset.ee

45

Club Sunset is a well-established hospitality business operating a popular summer nightclub and event venue located in Pärnu, Estonia. The website reflects a professional and modern digital presence with clear branding and a focus on nightlife, events, and cocktail services. The business targets a mature audience interested in entertainment and social gatherings during the summer season. The domain age and WHOIS data confirm a stable and legitimate operation with consistent registration details matching the business location. Technically, the website uses a proprietary CMS (Greativ), modern JavaScript libraries such as Swiper.js for UI components, and integrates Google Fonts and Google Tag Manager for analytics and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features appear basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and does not provide a privacy policy or cookie consent mechanism, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is available, indicating room for improvement in security transparency and user trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is credible and professionally maintained but should prioritize privacy compliance and security best practices to enhance trust and regulatory adherence. Adding privacy and cookie policies, security headers, and vulnerability disclosure would significantly improve the security posture and user confidence.

V

Valga Gümnaasium

valgagym.ee

50

Valga Gümnaasium is a secondary educational institution located in Valga, Estonia, with a domain established in 2012. The website serves students, parents, staff, and alumni by providing information about school activities, news, schedules, and contact details. The institution maintains a solid local presence with partnerships and affiliations to various educational and governmental organizations. Technically, the website uses a modern CMS (Greativ), integrates Google Fonts, Google Analytics, and Facebook SDK for social media and analytics purposes. The site is mobile-optimized and offers clear navigation and relevant content. Security posture is adequate with HTTPS enabled and some consent management for cookies, but lacks explicit privacy and cookie policies and security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

O

OÜ Sahkar TT

sahkar.ee

43

OÜ Sahkar TT is a small Estonian company specializing in external network construction and large-scale earthworks, offering services such as material sales and transport, machine rental with operator, and trailer transport. The company targets businesses and clients requiring construction and logistics services within the region. The website is professionally designed using the Greativ CMS platform and incorporates modern JavaScript libraries for enhanced user experience. It is hosted by Zone Media OÜ and uses HTTPS to secure communications. However, the site lacks privacy and cookie policies, which are critical for GDPR compliance. Security headers are also missing, representing an area for improvement. Overall, the website is functional, safe, and trustworthy but could benefit from enhanced privacy and security measures.

E

Eesti Lihaveisekasvatajate Ühistu

veis.ee

43

Eesti Lihaveisekasvatajate Ühistu operates as a cooperative primarily focused on the purchase, sale, and brokerage of beef cattle in Estonia. Founded in 2015, it serves a significant network of over 200 cattle breeders and is a founding member of a larger association with 400+ members. The cooperative maintains a modern livestock collection center and targets both domestic and international markets. Their business model centers on providing reliable and professional services to cattle breeders, ensuring quality livestock for various purposes including breeding and meat production. Technically, the website is built on the Greativ CMS platform and employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Hosting is provided by Zone Media OÜ, a known Estonian hosting provider, consistent with the domain registration data. From a security perspective, the site uses HTTPS and client-side form validation but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The business provides clear contact information but does not disclose incident response or vulnerability disclosure policies. Overall, the website presents a trustworthy and professional image suitable for its target audience of livestock breeders. Strategic improvements in privacy compliance and security hardening would enhance its risk profile and user trust.

E

Ekotek Eesti OÜ

ekotek.com

45

Ekotek Eesti OÜ operates as the authorized distributor of Victorinox products in the Baltic region, primarily serving Estonia with a retail presence in over 50 stores. The company focuses on offering high-quality Victorinox pocket tools, kitchen knives, and corporate gifting solutions, targeting both consumers and business clients. Founded in 1997, Ekotek has established a reputable market position as a trusted regional distributor. Technically, the website is built on the Greativ CMS platform and leverages modern JavaScript libraries such as Swiper.js and Plyr.js for enhanced user experience. It integrates Google Fonts, Facebook SDK, and YouTube APIs, indicating a mature digital infrastructure. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, DNSSEC is not enabled, and explicit security headers are not detected in the HTML content, suggesting room for improvement in hardening security posture. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and compliance. Overall, Ekotek's website is professional, trustworthy, and compliant with privacy regulations, with a solid business foundation and a clear focus on retail distribution. Strategic improvements in security headers and DNS security would further strengthen its security posture.

The website "Geri norai" represents a Lithuanian entity currently undergoing maintenance, with minimal content available. The site provides a contact email but lacks detailed business descriptions, privacy policies, or interactive features. The domain is registered since 2013 with a Lithuanian registrar, indicating a stable presence but the website itself is in a basic state. Technically, the site uses WordPress CMS with a maintenance plugin and includes Google Fonts. There is no evidence of advanced frameworks or analytics tools. Mobile optimization and accessibility are basic, and no security headers or HTTPS status could be confirmed from the data provided. From a security perspective, the site lacks published privacy and cookie policies, security headers, and incident response information. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement. The WHOIS data is consistent and trustworthy, supporting legitimacy. Overall, the website scores low to moderate on content quality, technical implementation, and privacy compliance, with recommendations to improve security posture, publish compliance policies, and enhance user experience for better trust and professionalism.