Medium-risk security reports

Green Planet Energy eG operates as a cooperative energy provider in Germany, focusing on sustainable and green energy products including green electricity, gas, and related services such as autostrom and photovoltaic solutions. The website is professionally built using TYPO3 CMS and incorporates modern web technologies including Usercentrics for GDPR-compliant cookie consent management. The company positions itself as a contributor to the energy transition with a clear focus on environmentally friendly energy solutions. Technically, the website demonstrates good SEO practices and mobile optimization, though some performance and accessibility aspects could be improved. Security posture is moderate; while HTTPS is assumed, no explicit security headers or incident response information are present, and no privacy policy or terms of service were found in the provided content. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

Deutsche Energie-Agentur GmbH (dena) is a prominent German energy agency focused on promoting efficient, intelligent, and sustainable energy production and usage. It collaborates with public and private sector partners to advance the energy transition and climate protection efforts in Germany. The website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. It provides detailed information about its mission, projects, and services, targeting stakeholders in the energy sector and government entities. The site supports multiple languages, enhancing accessibility for international audiences. Technically, the website employs a mature infrastructure with strong privacy and consent management mechanisms, including Cookiebot for cookie consent and Matomo and Hotjar for analytics, ensuring GDPR compliance. The site is well-optimized for mobile devices and accessibility, with a clear navigation structure and professional design. Hosting is managed via secure providers, and HTTPS is enforced with appropriate security headers. From a security perspective, the site demonstrates good practices such as secure cookie handling, consent management, and absence of exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the domain registration and hosting details align with the organization's legitimacy, supporting a high trust level. The overall risk assessment is low, with no indications of malicious content or security vulnerabilities. Strategic recommendations include publishing formal security and incident response policies, adding vulnerability disclosure information, and providing direct security contact channels to enhance transparency and trust.

Chiesi GmbH is a well-established pharmaceutical company operating in Germany as part of the international Chiesi Group. The company focuses on developing and distributing pharmaceutical products in key therapeutic areas such as respiratory diseases, neonatology, rare diseases, and transplantation. The website targets healthcare professionals, patients, partners, and job seekers, providing comprehensive information about products, corporate responsibility, and career opportunities. The company holds a B Corp certification, indicating a commitment to sustainability and ethical business practices. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with GDPR and providing a good user experience. The site is mobile optimized, has clear navigation, and integrates tracking and analytics responsibly. Security measures include HTTPS enforcement and standard security headers, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though the site could benefit from publishing explicit security policies and a vulnerability disclosure framework. Contact information is clearly provided, including phone numbers, physical address, and social media channels, enhancing business credibility. No WAF or blocking mechanisms interfere with content accessibility, and the WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Chiesi GmbH's website reflects a professional, secure, and compliant digital presence aligned with its business objectives and regulatory requirements.

BNW Bundesverband Nachhaltige Wirtschaft e.V. is a well-established German non-profit association founded in 1992, focused on promoting sustainable and socially responsible economic practices. It serves as a network and political voice for progressive companies committed to ecological and social transformation. The website is professionally designed using Drupal 10, optimized for mobile, and includes rich content such as member testimonials, news, and event information. The technical infrastructure is modern and hosted by Hetzner, with good performance and accessibility standards. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are not visible. The domain registration is consistent with the organization's history and location, indicating legitimacy and trustworthiness.

WTSH Wirtschaftsförderung und Technologietransfer Schleswig-Holstein GmbH is a regional governmental agency focused on economic development and technology transfer in Schleswig-Holstein, Germany. The organization provides a broad range of services including innovation consulting, funding programs, foreign trade support, startup promotion, and engagement with future-oriented topics such as digitalization, artificial intelligence, climate-neutral economy, electromobility, and hydrogen economy. Their market position is strong as a key regional economic development entity, targeting businesses, startups, and investors in the region. Technically, the website is built on the gradwerk CMS 6 platform and uses modern web technologies including jQuery, Vimeo and YouTube embeds, and various JavaScript libraries for UI components. The site is mobile optimized, accessible, and SEO friendly with comprehensive metadata and Open Graph tags. Cookie consent and privacy compliance mechanisms are well implemented. From a security perspective, the site enforces HTTPS and uses OIDC for authentication. Cookie management is detailed and transparent. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not visibly configured in the HTML source and no published security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a governmental economic development agency. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further improve trust and security posture.

Bored Ape Yacht Club (BAYC) is a leading NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and MAYC collections, providing member login and information about unique intellectual property rights. The business is positioned as a major player in the NFT and blockchain technology space, targeting digital art collectors and crypto enthusiasts. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The site demonstrates excellent design quality, mobile optimization, and user experience. Security posture is strong with HTTPS and domain registration protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

Faraway is a game studio specializing in the development and publishing of open economy games with blockchain and crypto integration. Their portfolio includes titles such as Dookey Dash: Unclogged, Serum City, Legends of the Mara, and Mini Royale: Nations. The company targets gamers interested in Web3 and blockchain gaming, positioning itself in a niche market focused on innovative game economies. The domain registration dating back to 2003 supports a long-standing presence in the industry, although the website content is currently inaccessible due to a client-side application error. Technically, the website employs modern technologies including Next.js and React, hosted behind Cloudflare with tracking integrations such as Google Tag Manager and Cloudflare Insights. However, the site lacks visible security headers and DNSSEC is not enabled, indicating room for improvement in security hardening. The website's performance and mobile optimization are moderate to basic, with limited accessibility and SEO optimization. From a security perspective, the absence of privacy and cookie policies, lack of contact information, and the presence of a client-side error reduce the site's trustworthiness and compliance posture. The domain registration is consistent and legitimate, but the website itself requires remediation to restore full functionality and improve user trust. Overall, the website scores low to moderate on content quality, technical implementation, security posture, and privacy compliance, resulting in an overall AI score of 48. Strategic improvements in error resolution, policy publication, security headers, and contact transparency are recommended to enhance the site's credibility and security.

Otherside.xyz is a web3-enabled metaverse platform developed by Yuga Labs, blending MMORPG mechanics with blockchain technology and NFT integration. The platform targets NFT holders and gamers interested in immersive, interoperable virtual worlds where players own land and characters. The business model leverages ApeCoin as the in-game currency and offers an SDK for creators to build and monetize content. Technically, the site uses modern web frameworks like Next.js and React, with Cloudflare DNS and wallet integrations for user authentication. However, the current website displays a client-side application error, limiting user experience and content accessibility. Security posture is generally good with HTTPS and domain locking, but lacks DNSSEC and security.txt disclosures. Privacy and cookie policies are absent, impacting compliance. Overall, the site is moderately professional but requires fixes to improve user trust and compliance.

The website https://www.snagged.market/loyalty currently serves a 404 error page indicating the requested content is not found. The site uses modern web technologies such as React and Next.js, and integrates third-party services like Stripe and Google Analytics. However, the lack of accessible content, absence of privacy, cookie, and terms policies, and missing contact information significantly limit the ability to assess the business or security posture. The WHOIS data is malformed and does not provide any registrar or registrant details, further reducing trust and transparency. Overall, the site appears incomplete or under development, with minimal digital maturity and poor user experience.

Uprent is a Croatian company specializing in the rental, sale, servicing, and transport of machinery and work platforms, primarily targeting the construction and industrial sectors. The company has established partnerships with multiple well-known machinery brands and offers additional services such as training and a Click2Rent platform. Their website is professionally designed, mobile-optimized, and provides clear contact information, including a prominently displayed phone number and social media links. The presence of a downloadable catalog and a mobile app enhances their customer engagement and service accessibility. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, hosted on Hetzner servers, ensuring a reliable and performant infrastructure. Security-wise, the site uses HTTPS and shows no signs of vulnerabilities or exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website reflects a medium-sized, legitimate business with a good market position in Croatia, but could improve in compliance and security transparency.

Kufner Grupa d.d. is a Croatian holding company specializing in the exploitation of mineral raw materials and production of stone materials. Established in 2008, it manages five subsidiary companies with strategically located quarries and a workforce of approximately 170 employees. The company positions itself as a leading regional producer with a focus on sustainable growth and modern technologies. The website is professionally designed, primarily in Croatian, targeting regional industrial and construction sectors. Technically, the site uses modern web fonts and JavaScript libraries but lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Privacy and cookie policies exist but lack active consent mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site is safe, business-focused, and well-structured, with room for security and compliance improvements.

Copy Electronic is a well-established Croatian company specializing in the sale, rental, and servicing of IT equipment, including printers, scanners, projectors, and related office technology. With a domain registered since 1997 and a clear focus on business customers, the company positions itself as a reliable provider of comprehensive office IT solutions. Their online presence includes a webshop with a broad product catalog and customer service features such as live chat and clear contact details. Technically, the website employs modern analytics tools like Google Analytics and Microsoft Clarity, and uses Google Tag Manager for marketing and tracking purposes. The site is hosted under a Croatian registrar (CARNET), uses HTTPS, and shows good compliance with GDPR and cookie regulations. However, explicit security policies and incident response contacts are not found, which could be improved to enhance trust and security posture. Overall, the website is professional, user-friendly, and trustworthy, serving a medium-sized business audience in Croatia.

Poliklinika i dnevna bolnica IMED is a specialized healthcare provider based in Croatia, focusing on complex dental cases and combining dental medicine, implantology, orthodontics, aesthetic surgery, and ENT services. The website reflects a professional and modern digital presence, leveraging Nuxt.js and Tailwind CSS frameworks, with integrated analytics and cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides essential contact information, although explicit privacy and terms of service policies are missing. Security posture is good with HTTPS and security headers in place, but lacks published incident response or vulnerability disclosure policies. Overall, the business appears legitimate and trustworthy with a solid technical foundation but could improve compliance documentation and transparency.

Telensa Tech is a small technology company specializing in Telco ICT and cybersecurity services, offering tailored solutions such as cloud services, system integration, telco, colocation, and comprehensive IT support. The website is professionally designed on the Squarespace platform, with clear navigation and a focus on business clients seeking digital infrastructure and security solutions. Technically, the site uses modern web technologies, has good SSL configuration with HTTPS and HSTS, and integrates Google Tag Manager for analytics. However, the absence of privacy and cookie policies and lack of WHOIS registration data present compliance and legitimacy concerns. Security posture is strong in SSL but could be improved with additional security headers and incident response information. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain registration transparency.

Purple Dot operates as a premium pre-order platform designed to empower modern e-commerce brands to optimize sales and inventory management through flexible, AI-driven pre-order solutions. The company positions itself strongly in the e-commerce technology sector, serving a diverse audience including executives, warehouse operations, merchandising, customer experience, and technical teams. Their platform integrates seamlessly with existing tech stacks, offering a smooth pre-order experience backed by FTC-compliant guarantees and trusted by over 100 global brands. Technically, the website is built on Webflow CMS with modern analytics and tracking tools, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and incident response information suggests room for improvement. The missing WHOIS data raises some concerns about domain registration legitimacy, but the professional and comprehensive website content supports the business's credibility. Overall, Purple Dot presents a mature digital presence with strong business and technical foundations, though enhancing privacy compliance and security transparency would further strengthen trust.

Iskon.hr is the official website of Iskon, a Croatian telecommunications provider offering fixed internet, television (Iskon.Play TV), and other telecom services for residential and business customers. The website presents a professional and modern design built with React and Next.js frameworks, utilizing Ant Design components. The content is relevant and targeted primarily at Croatian consumers and businesses seeking telecom solutions. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS likely enabled but missing key security headers and no visible incident response or vulnerability disclosure information. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security transparency.

Agrokor Nagodba website serves as an official communication platform for the Agrokor group’s extraordinary administration and financial restructuring process. It provides detailed information about settlement plans, legal proceedings, and updates for creditors and investors. The site targets stakeholders involved in or affected by Agrokor's complex debt restructuring. Technically, the website is built on WordPress with modern JavaScript libraries and plugins, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers could be enhanced. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and clear privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, reflecting the serious nature of the business restructuring.

Nutricia Norway AS operates a professional website focused on delivering advanced nutritional solutions for adults and children, supporting health through various life stages. The company positions itself as a pioneer in nutrition since 1896 and is a subsidiary of Danone AS. The website targets patients, healthcare professionals, and consumers interested in specialized nutrition products and services. The digital infrastructure is built on WordPress with modern technologies such as Google Tag Manager and OneTrust for cookie consent, reflecting a mature digital presence. Security posture is strong with HTTPS and privacy compliance, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, well-branded, and compliant with relevant regulations.

Danone.lt is the Lithuanian regional website of Danone, a global leader in the food and beverage industry specializing in dairy, plant-based products, water, and specialized nutrition. The site serves as a corporate and consumer information portal tailored to the Lithuanian market. The website is built on WordPress and incorporates modern web technologies including Google Tag Manager, Google reCAPTCHA, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and use of anti-bot mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong, with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the site projects a professional and trustworthy image consistent with a large multinational enterprise.

Nutricia is a healthcare nutrition company operating in Latvia, providing nutrition products and consumer information primarily in Latvian and Russian. The website is built on WordPress and integrates modern web technologies including Google Fonts, Google Maps API, Google Tag Manager, Hotjar, and OneTrust for cookie consent. The site is well-structured with SEO optimizations and mobile responsiveness, targeting consumers and healthcare professionals in Latvia. Security measures include HTTPS enforcement and cookie consent, though explicit security headers and policies are not evident. The absence of direct contact information and privacy policy pages suggests areas for improvement in transparency and compliance. Overall, the website presents a professional and trustworthy digital presence consistent with its business domain.

Danone Magyarország operates as a subsidiary of the global Danone Group, focusing on manufacturing and retailing nutrition and health-related food products in Hungary. The website reflects a mature digital presence with clear branding, comprehensive content about their products, corporate social responsibility, and scientific research initiatives. The company targets consumers interested in healthy nutrition, including specialized segments such as parents of children with cancer and healthcare professionals. Technically, the site is built on WordPress with the Divi theme, leveraging modern SEO and analytics tools, and demonstrates good mobile optimization and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

Volvic Belgium operates a professionally designed website targeting French-speaking consumers in Belgium, offering a range of natural mineral water and flavored water products with a strong emphasis on sustainability and environmental protection. The website is built on TYPO3 CMS and integrates modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The lack of WHOIS transparency is mitigated by the professional presentation and presence of privacy policies, trusted retail partners, and social media channels. Overall, the website demonstrates a credible and trustworthy business presence in the retail beverage sector.

Activia.nl is the official Dutch website for the Activia brand, a well-known consumer packaged goods company specializing in probiotic yogurt products. The site targets general consumers interested in health and wellness, providing product information, engaging content such as podcasts, and brand stories. The website is part of the Danone group, a global leader in dairy and nutrition products, which adds to its market credibility and positioning. Technically, the website is built using modern web technologies including React and Gatsby, ensuring fast performance and good mobile optimization. It integrates standard analytics and marketing tools such as Google Analytics, Google Tag Manager, and TrustCommander for cookie consent management. The site demonstrates good SEO practices and basic accessibility features, although there is room for improvement in accessibility. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies and incident response information, which could be enhanced to improve transparency and trust. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Activia.nl presents a professional, trustworthy, and user-friendly online presence consistent with a large retail brand. Strategic recommendations include publishing dedicated security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to sustain a strong security posture.

LIEPS GmbH is a well-established advertising agency based in Neubrandenburg, Germany, offering a comprehensive suite of marketing, design, web development, print, and video production services. With nearly two decades of experience, the agency serves a diverse clientele including startups and established businesses, positioning itself as a full-service creative partner. The website reflects a professional and consistent brand image, showcasing client references and a broad portfolio of services. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and TYPO3 CMS, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and incorporates standard SEO and accessibility features, although some advanced security headers could be improved. Analytics and marketing tools such as Google Analytics and Metricool are used with appropriate cookie consent mechanisms in place, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and shows no signs of vulnerabilities or exposed sensitive data. However, there is room for enhancement in security headers and incident response transparency. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection that would obscure legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and formal security policies would further strengthen its posture.

Marles Montažne hiše is a Slovenian company specializing in the design and construction of prefabricated low-energy houses, with a long-standing tradition dating back to 1899. The company targets home buyers and construction clients primarily in Slovenia and neighboring countries, offering innovative and energy-efficient housing solutions. Their market position is strong regionally, supported by a professional and multilingual website that reflects their heritage and expertise. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates advanced analytics and marketing tools including HubSpot, Google Tag Manager, and Facebook Pixel. The site demonstrates excellent performance, mobile optimization, and SEO practices, indicating a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a professional and trustworthy front for the business, but the missing domain registration information and limited security disclosures suggest a moderate risk profile. Strategic enhancements in transparency and security governance would strengthen their trustworthiness and compliance posture.

Grad Zagreb is the official governmental entity representing the City of Zagreb, Croatia. The website serves as a comprehensive portal for residents, businesses, and visitors, providing access to city news, administrative information, public services, and digital resources across multiple sectors including education, culture, transportation, social welfare, and urban planning. The site is positioned as the authoritative source for municipal governance and citizen engagement in Zagreb. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. It integrates Google Analytics for traffic analysis and Kraken Optimize for performance enhancements. The site is mobile-optimized and features clear navigation structures, multi-level menus, and accessibility considerations. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure policy was found. The WHOIS data confirms the domain's legitimacy and consistency with the official city government entity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital platform for the City of Zagreb. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen user trust and security posture.

Dekra is a Croatian-based company specializing in human resources outsourcing, event logistics, and market research services. With over 18 years of experience and multiple offices across Croatia, Dekra positions itself as a reliable partner for businesses and job seekers. Their service portfolio includes agency work, HR consulting, recruitment mediation, and innovative solutions like Try & Hire and Mystery Shopping. The website reflects a professional and consistent brand image, targeting Croatian businesses and employees. Technically, the site is built on WordPress with modern libraries and plugins, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, GDPR compliance, and anti-spam measures, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable due to privacy regulations.

Sport 360 is a Croatian sports marketing agency providing specialized marketing services within the sports sector. The company targets sports organizations and businesses in Croatia, positioning itself as a local expert in sports marketing. The website is professionally designed using the Wix platform, featuring good content quality and consistent branding. Technical infrastructure relies on Wix's Thunderbolt framework and standard polyfills, ensuring moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. Overall, the site is functional and credible but would benefit from enhanced privacy and security features.

DataBox is a Croatian technology company specializing in secure data center colocation, cloud computing services, and telecommunication solutions. Established in 2014, the company positions itself as a key provider of secure business infrastructure in Croatia, offering Tier 3 and Tier 4 standard data center facilities, cloud backup, disaster recovery, and advanced IP telephony services. Their market position is supported by over 10 years of experience and a focus on reliability and security for business customers. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for tracking. The site is well-optimized for SEO and mobile devices, with a professional design and clear navigation. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

Groupama osiguranje d.d. is a Croatian insurance company operating as part of the larger French Groupama Group. The company offers a broad range of insurance products including life, motor vehicle, health, and property insurance, targeting both individual and corporate clients in Croatia. The website reflects a professional and consistent brand image aligned with its parent company. Technically, the site uses a combination of established front-end frameworks and libraries such as Bootstrap, jQuery, and Google Analytics for tracking, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data support the legitimacy of the business. The site is safe for general audiences and does not contain any adult or questionable content.

RALU Logistika d.d. is a well-established third-party logistics provider specializing in integrated cold chain services, including international and national transport, warehousing, and distribution across Croatia, Serbia, and Europe. The company has a strong market position supported by over 30 years of experience and a large fleet and infrastructure. Their website reflects a professional digital presence built on WordPress with Elementor, incorporating modern analytics and cookie consent mechanisms. Security posture is solid with HTTPS, domain transfer lock, and no detected vulnerabilities, though some security policies and disclosures could be improved. Overall, the company demonstrates transparency and compliance with GDPR, enhancing trustworthiness.

Castore is a premium sportswear brand focused on delivering precision performance apparel to athletes worldwide. The company operates a professional e-commerce platform built on Shopify, leveraging modern marketing and analytics tools such as Google Tag Manager, Yotpo, Klarna, and Boost Commerce. The website demonstrates a mature technical infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain registration through Cloudflare, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is limited as no explicit privacy or cookie policies were found in the analyzed content. Overall, the site is trustworthy and professionally maintained, serving a global audience with a focus on high-quality sportswear.

Zaklada GNK Dinamo Nema Predaje is a Croatian non-profit foundation officially affiliated with the GNK Dinamo football club. The foundation focuses on promoting equality, social inclusion, and providing humanitarian aid, particularly targeting persons with disabilities, socially vulnerable groups, and young talented athletes. The website serves as a platform to communicate the foundation's mission, programs, and events, and facilitates donations and community engagement. It maintains a strong presence on social media and provides comprehensive contact and legal information.

Promoprint d.o.o. is a Croatian small business specializing in graphic design and printing services, including digital and offset printing, large format printing, and promotional materials such as business cards, brochures, and rollup banners. The company has an established market presence since 2008 and targets businesses and individuals seeking promotional printing solutions. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. It includes e-commerce capabilities and uses popular plugins for SEO and cookie consent management. Security posture is adequate with HTTPS, Google reCAPTCHA, and cookie consent mechanisms, but lacks explicit privacy policy, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional with moderate performance and good mobile optimization.

Willkommen in MV is a regional government and non-profit portal dedicated to providing comprehensive integration support services for migrants and refugees in Mecklenburg-Vorpommern, Germany. The website offers extensive categorized information on social services, language courses, job centers, medical and psychosocial help, and legal advice. It targets migrants, refugees, and residents seeking integration assistance, positioning itself as a key public service resource in the region. The business model is primarily public service funded, focusing on accessibility and community support.

3sat is a well-established public broadcasting media platform serving the German-speaking audience with a focus on cultural, scientific, and societal content. The website offers video streaming, live TV, documentaries, and magazines, positioning itself as a trusted source of quality media content. It operates under the umbrella of ZDF, a major German public broadcaster, ensuring strong market presence and credibility. The platform targets a general audience interested in educational and cultural programming.

Datalab is a regional technology company specializing in business management software, prominently featuring their PANTHEON ERP solution. The website targets businesses seeking efficient and organized business operations, positioning itself as a trusted software provider in Croatia and neighboring countries. The digital infrastructure is built on WordPress with a professional theme and includes modern tracking and consent technologies such as Google Analytics, Facebook Pixel, and Cookiebot. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements are recommended in security headers and explicit privacy documentation. Overall, the site reflects a mature digital presence with good SEO and user experience, but lacks visible direct contact information and comprehensive privacy disclosures.

Ustanova Zoološki vrt Grada Zagreba operates the Zagreb Zoo, a well-established public institution dedicated to animal care, conservation, and education. The website provides comprehensive information about the zoo's exhibits, educational programs, conservation projects, and visitor services. It targets a broad audience including families, schools, and tourists, positioning itself as a key cultural and educational entity in Croatia. The presence of ISO 9001 and ISO 14001 certifications underscores its commitment to quality and environmental management. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. The absence of a public vulnerability disclosure or incident response policy suggests room for improvement in security transparency. Overall, the website is professional, trustworthy, and aligned with the institution's public service mission. The lack of WHOIS data due to GDPR privacy is typical and justified. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing clear security policies to strengthen compliance and trust.

Pučko Otvoreno Učilište Krapina is a Croatian educational and cultural institution established in 1997, providing adult education, cultural programming, and venue rental services primarily serving the local community. The website is professionally designed using WordPress with Elementor and Yoast SEO, offering rich content about educational programs, cultural events, and organizational information. The technical infrastructure is modern and includes standard web technologies and Google Analytics for visitor insights. Security posture is good with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and no explicit security incident response information is provided. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and serves its community effectively.

Pučko otvoreno učilište Sveti Ivan Zelina is a Croatian public educational and cultural institution serving the local community of Sveti Ivan Zelina. The website showcases a variety of cultural events, educational programs, exhibitions, and publications, positioning itself as a regional hub for cultural and educational activities. The institution appears well-established with a domain age since 2008 and consistent WHOIS data. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, and integrates marketing tools such as MailerLite. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the website is professional, trustworthy, and serves its community effectively.

Kulturni centar Travno is a well-established cultural and educational center based in Zagreb, Croatia, founded in 2013. It organizes a variety of cultural events, workshops, exhibitions, and community inclusion projects, particularly focusing on youth and migrant integration through Erasmus+ funded initiatives. The website reflects a professional and community-focused organization with active event promotion and educational content. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS and some security best practices, though explicit security headers and policies could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the domain registration and website content are consistent and trustworthy, supporting the legitimacy of the organization.

DEKOD d.o.o. is a well-established Croatian ticketing organization with over two decades of experience and a leading market position in the region. The company offers a comprehensive suite of ticketing and event management services, including e-ticketing systems, payment solutions, and web shop capabilities. Their clientele includes cultural institutions, event organizers, and public venues, supported by a strong regional presence and trusted partnerships such as with ulaznice.hr. The website reflects a professional business focus with clear contact information and client testimonials, reinforcing their credibility. Technically, the site is built on WordPress with the Enfold theme and uses common web technologies, but it runs outdated software versions that pose security risks. Security posture is moderate with HTTPS enabled but lacks modern security headers and visible privacy or cookie policies, indicating room for compliance improvement. Overall, the website is functional and trustworthy but would benefit from technical and compliance updates to enhance security and user trust.

Bored Ape Yacht Club (BAYC) is a prominent NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and its related collections, providing members with login access and information about unique intellectual property rights and benefits. The brand holds a leading position in the NFT space with a large, engaged audience of crypto enthusiasts and digital art collectors. Technically, the website is built on a modern React and Next.js framework, hosted via Cloudflare with robust DNS and SSL configurations. It integrates multiple analytics and marketing tools such as Google Tag Manager and Plausible Analytics, ensuring good performance and mobile optimization. The site demonstrates excellent design quality, clear navigation, and consistent branding, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and explicit security headers. There is no visible incident response or vulnerability disclosure policy, and cookie consent mechanisms are absent despite tracking scripts. These gaps suggest room for improvement in compliance and security transparency. Overall, the website is trustworthy and professional, with strong business credibility and technical maturity. Strategic enhancements in privacy compliance, security policies, and DNS security would further strengthen its posture and user trust.

The website www.oasys.games appears to be a Wix-hosted site with minimal accessible content and no visible business or contact information. The lack of WHOIS data and absence of privacy, cookie, or terms of service policies indicate low transparency and limited compliance maturity. Technically, the site uses standard Wix technologies and polyfills but lacks advanced SEO, accessibility, and security features. No security headers or HTTPS confirmation were found, which raises concerns about the security posture. Overall, the site presents a low trust profile with limited business credibility and technical sophistication.

SC Networks GmbH operates a marketing automation platform branded as Evalanche, with the analyzed website serving as a secure login portal for existing users. The site is minimalistic, focusing solely on authentication without public-facing content such as privacy policies or contact information. The technical infrastructure leverages AWS DNS services and standard web technologies, but lacks advanced security headers and DNSSEC, indicating moderate digital maturity. Security posture is adequate but could be improved by implementing modern security best practices and visible compliance documentation. Overall, the domain registration is consistent and legitimate, supporting the business's credibility. The absence of public policies and contact details limits transparency and user trust.

Meteodyn is a specialized French company with over 20 years of expertise in wind engineering, climatology, and meteorology, focusing on CFD simulation of wind flows. The company targets professional clients in the energy and environmental sectors, offering specialized engineering services and software solutions. The website reflects a mature business with consistent branding and good content quality. Technically, the site is built on WordPress using modern plugins and frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the domain registration data supports the legitimacy of the business, showing consistent and long-term registration.

Green Planet Energy eG operates as a cooperative green energy provider in Germany, offering a range of sustainable energy products including green electricity, gas, heat electricity, and solutions for electric vehicles and heat pumps. The website is professionally designed using TYPO3 CMS and targets environmentally conscious consumers in the German market. The company positions itself as a key player in the energy transition with a focus on renewable energy sources. Technically, the website employs modern web technologies including Usercentrics for cookie consent management and FontAwesome for iconography. The site is mobile-optimized and SEO-friendly, though some accessibility features appear basic. Security posture is moderate with HTTPS assumed and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy and professional, though improvements in privacy policy visibility and security disclosures are recommended.

Evonik is a leading global specialty chemicals company focused on innovative chemical solutions and sustainability. The website demonstrates a strong corporate presence with detailed information on markets, products, governance, and investor relations. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Alpine.js, and a consent management platform, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS and basic security headers, though additional headers and CSP could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional website content and corporate information. Strategic recommendations include enhancing security headers, verifying WHOIS data, and maintaining privacy compliance.

ee-hub.de is a professional platform focused on the renewable energy sector, providing industry news, event management, and educational content primarily targeting energy professionals in Germany. The website leverages modern web technologies including Laravel and the Statamic CMS, hosted on DigitalOcean infrastructure, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements in security headers and explicit cookie consent mechanisms are recommended. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the site presents a trustworthy and professional digital presence with moderate technical maturity and good user experience.

The website 'Ondervoeding op het Menu' is a Dutch-language health awareness campaign managed by Nutricia, a subsidiary of Danone. It focuses on educating the public about undernutrition, especially related to illness, targeting the general Dutch population including elderly and caregivers. The site offers educational content, downloadable campaign materials, and contact options for further support. Technically, the site is built on Adobe Experience Manager hosted on Adobe AEM Cloud, using modern web technologies and tracking tools such as Adobe Helix RUM and TagCommander. The website is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. The domain registration is consistent with the business and geographic focus, enhancing trustworthiness. Overall, the site is professional, trustworthy, and serves its awareness purpose effectively.