Security Directory

J

Javna ustanova za upravljanje zaštićenim dijelovima prirode Dubrovačko-neretvanske županije

zastita-prirode-dnz.hr

48

The website represents the official public institution responsible for managing protected natural areas in the Dubrovnik-Neretva County of Croatia. It provides information about environmental protection projects, permits, public procurement, and general organizational details. The site targets the general public, environmental stakeholders, and government entities, positioning itself as a regional governmental authority with a focus on nature conservation. Technically, the website is built on WordPress using the Enfold theme and several plugins including Yoast SEO and Event Organiser. It employs Google Analytics and Tag Manager for traffic analysis and has implemented cookie consent mechanisms, indicating GDPR awareness. The security posture is solid with HTTPS enabled and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained, with clear branding and consistent content quality.

R

Regionalna razvojna agencija Dubrovačko-neretvanske županije - DUNEA

dunea.hr

41

Regionalna razvojna agencija Dubrovačko-neretvanske županije (DUNEA) is a government-established regional development agency founded in 2006 in Dubrovnik, Croatia. The agency focuses on promoting sustainable and balanced regional development, coordinating existing development activities, and aligning with national and EU requirements. Their key services include strategic planning, EU project management, and regional economic development initiatives. The website reflects a professional and consistent brand presence targeting regional stakeholders, local government, and businesses involved in development projects. Technically, the site is built on Joomla CMS with modern frontend frameworks and libraries, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and partner links.

D

Dubrovačko-neretvanska županija

edubrovnik.org

53

Dubrovačko-neretvanska županija operates as the official regional government website for the Dubrovnik-Neretva County in Croatia. The site provides comprehensive information about county administration, public notices, events, documents, and contact details, targeting residents and stakeholders within the region. It serves as a key communication channel for government services and public information dissemination. Technically, the website is built on WordPress 6.6.1 with multilingual support via WPML, uses modern web technologies including jQuery and Google Fonts, and implements a cookie consent mechanism to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the website enforces HTTPS and uses updated software versions, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious indicators were detected. Overall, the website is trustworthy and professional, though improvements in privacy policy visibility and security disclosures are recommended.

M

Ministarstvo zaštite okoliša i zelene tranzicije

bioportal.hr

48

Bioportal.hr is the official web portal for the Information System for Nature Protection in Croatia, operated by the Ministry of Environment and Green Transition. It serves as a comprehensive platform providing biodiversity data, observation reporting tools, red list assessments, and other resources aimed at supporting nature conservation efforts. The website targets researchers, environmental professionals, government agencies, and the general public interested in Croatian natural heritage. It holds a strong market position as the authoritative national resource for environmental data and reporting. Technically, the website is built on WordPress with multilingual support via WPML, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive features. The site includes a GDPR-compliant cookie consent mechanism and integrates Google Analytics for visitor insights. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain's legitimacy and alignment with the governmental entity operating the site. Overall, bioportal.hr demonstrates a solid security posture, good privacy compliance, and professional digital presence. It is a trustworthy platform for environmental data dissemination with room for minor security enhancements.

APIS IT d.o.o. operates as an IT service provider specializing in identity federation and authentication services primarily for Croatian government entities such as Grad Zagreb and the Ministry of Culture. The website analyzed is a Home Realm Discovery page facilitating user authentication selection among trusted identity providers. The business targets organizational users within government and affiliated institutions, leveraging Microsoft Active Directory Federation Services (ADFS) technology to provide secure access management. The company holds a moderate market position as a government IT service provider with a medium-sized organizational footprint in Croatia. Technically, the site employs standard web technologies including HTML5, JavaScript, and CSS, integrated with Microsoft ADFS frameworks. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The infrastructure appears stable but could benefit from enhanced security headers and improved user experience elements. From a security perspective, the site uses HTTPS and implements basic input validation on forms. However, it lacks explicit security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended for modern secure web applications. No privacy or cookie policies are present, indicating gaps in compliance and user transparency. No contact or incident response information is provided, limiting user support and security communication channels. Overall, the website is safe and professional for its intended government audience but requires improvements in privacy compliance, security hardening, and user support to enhance trust and regulatory adherence.

E

Edhotels OÜ

edhotels.com

54

ED Hotels (Edhotels OÜ) is a small Estonian company specializing in web design and a proprietary hotel sales and management system called BOUK. The company targets hospitality providers such as hotels, guest apartments, and other accommodation services primarily in Estonia and neighboring countries. Their market position is that of an established regional player with a decade-plus history and a loyal client base. Technically, the website is built on WordPress with modern analytics and marketing integrations including Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the professional website content and client testimonials support business credibility. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

O

OpenHotels

bouk.io

51

Bouk is a technology platform focused on providing next-generation hospitality system solutions. The company behind the domain is OpenHotels, registered in Estonia since 2021, indicating a relatively new but legitimate business entity in the hospitality technology sector. The website presents minimal visible content, primarily a React-based single-page application with integration of Stripe for payments and FullStory for analytics. The technical infrastructure leverages modern web technologies and is hosted on AWS, as inferred from DNS records. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the website is safe with no adult or questionable content detected, but lacks comprehensive transparency and contact information. Strategic improvements in security policies, privacy compliance, and user engagement features are advised to strengthen trust and regulatory adherence.

The website www.peresobralik.ee represents the Estonian non-profit organization Eesti Lasterikaste Perede Liit, which focuses on promoting family-friendly dining establishments through a certification mark. The site targets families with children in Estonia and provides information about the certification, news updates, and regional member organizations. The business model is non-profit and community-oriented, aiming to enhance societal recognition and support for families with children. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Owl Carousel, Font Awesome, and Google Fonts. The site is moderately performant, mobile-optimized, and has a clear navigation structure. However, it lacks advanced SEO and accessibility features. The hosting provider is not explicitly identified from the content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the website is legitimate, safe, and professionally presented but has room for improvement in privacy compliance and security best practices. The WHOIS data aligns well with the website's claims, supporting its trustworthiness.

T

Tallinn Restaurant Week MTÜ

tallinnrestaurantweek.ee

52

Tallinn Restaurant Week MTÜ operates a well-established hospitality event promoting fine dining experiences across over 100 restaurants in Tallinn, Estonia. The website serves as an informational and promotional platform, highlighting event dates, restaurant participation, awards, and green dining initiatives. The business targets general audiences interested in culinary experiences and positions itself as a reputable local event with international quality standards. Technically, the website is built using modern frameworks such as SvelteKit and integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. The site is performant, mobile-optimized, and professionally designed, though it lacks some advanced accessibility features and explicit cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing security policies to strengthen user trust and regulatory adherence.

T

TableOnline.fi

tableonline.fi

65

TableOnline.fi is a professional online restaurant reservation platform targeting consumers in Finland and Tallinn. It offers services such as restaurant bookings, user reviews, and special offers, positioning itself as a leading service in the hospitality sector within its geographic focus. The website demonstrates a modern technical infrastructure leveraging Preact, AWS hosting, and integrations with major analytics and advertising platforms like Google Analytics, Facebook Pixel, and Stripe for payment processing. Security posture is strong with HTTPS enforcement, security headers, and secure payment mechanisms, although explicit security policies and incident response information are not publicly available. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks a clearly accessible privacy policy and terms of service. Overall, the site is well-designed, mobile-optimized, and trustworthy, with no adult or questionable content detected.

S

SHOEI CO., LTD.

shoei.com

59

SHOEI CO., LTD. is a globally recognized premium motorcycle helmet manufacturer with a strong market presence and a network of regional distributors worldwide. The website serves as a hub for worldwide distributor contacts and product information tailored to regional markets. The company targets motorcycle riders and distributors, emphasizing safety, design, and performance in its product offerings. Technically, the website employs modern JavaScript libraries and tracking tools, including Google Analytics, Facebook SDK, and Line Tag, indicating a mature digital infrastructure. The site is mobile-optimized with good navigation and professional design, though it lacks some privacy and security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and legitimacy of the business. Overall, the website is safe, professional, and functional, with recommendations to enhance privacy compliance and security transparency.

S

Stokker AS

stokker.com

64

Stokker AS is a leading sales and service company specializing in professional tools, machinery, and maintenance services primarily serving the Baltic region and Europe. With over 30 years of experience, it operates both physical tool centers and an e-commerce platform, offering a broad range of products and services including a loyalty program and financing solutions. The company positions itself as a reliable partner with extensive expertise and a large maintenance team. Technically, the website is built on modern frameworks such as Next.js and React, integrating Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although some advanced security policies and incident response information are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data introduces some uncertainty about domain registration details.

T

TJ studio d.o.o.

tjstudio.info

50

TJ studio d.o.o. is a Croatian-based technology company specializing in web hosting, web design, and internet application development. Established since 2009, the company positions itself as a reliable and innovative service provider for businesses and individuals seeking professional digital solutions. Their offerings include a variety of hosting packages, domain registration, website maintenance, and custom web development services. The company maintains an active online presence with social media channels and a customer support portal, emphasizing customer service and technical support availability. Technically, the website is built on WordPress using the Betheme theme and integrates modern plugins such as Yoast SEO Premium and Slider Revolution. It employs Google Analytics for traffic analysis and Google reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are not explicitly detected, and there is no dedicated security policy or incident response contact information visible. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is limited due to privacy protection, with no public registrant details, but the website content and contact information appear consistent and professional. Overall, TJ studio d.o.o. presents a trustworthy and professional digital presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further enhance their security posture and customer trust.

H

Hrvatski autoklub

hak.hr

66

Hrvatski autoklub (HAK) is a well-established national automobile club in Croatia, founded in 1997, providing a broad range of services including roadside assistance, travel and traffic information, driver education, and vehicle technical inspections. The website reflects a mature digital presence with comprehensive content tailored to drivers and vehicle owners in Croatia. The technical infrastructure leverages modern web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS, and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and serves its audience effectively.

O

otocniproizvod.hr

otocniproizvod.hr

56

The website otocniproizvod.hr is a Croatian language health and wellness content platform focusing on articles and reviews of health supplements and related products. It targets a general audience interested in health improvement and wellness products. The business model appears to be content publishing with affiliate marketing or product promotion as revenue streams. The site is built on WordPress using common plugins for SEO, ratings, and link management, indicating a moderate level of digital maturity. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with no visible SSL issues, but lacks some security headers and cookie consent mechanisms. Security posture is adequate for a content site, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the site is safe, professional, and trustworthy, though improvements in security headers and privacy compliance are recommended.

Plus Hosting is a Croatian-based hosting service provider offering a range of services including domain registration, web hosting, reseller hosting, dedicated servers, VPS servers, SSL certificates, affiliate programs, and business mail solutions. The website analyzed is a placeholder page indicating that no active website is configured at the domain lun.hr. The business targets individuals and companies seeking hosting and domain services primarily in Croatia. The market position appears regional with a focus on technology infrastructure services. Technically, the website uses modern HTML5 and CSS3 standards with SVG graphics and a web font from a CDN. However, the site is minimalistic with no dynamic content, forms, or tracking scripts. The hosting provider is Plus Hosting itself, and the site performance and mobile optimization are basic but functional. There is no evidence of a CMS or advanced frameworks. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The WHOIS data is unavailable due to GDPR restrictions and query limits, but this is consistent with privacy regulations and does not raise immediate suspicion. Overall, the security score is low due to missing best practices and policies. The overall risk is moderate given the site is a placeholder with no active content or user interaction. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving contact and compliance information to enhance trust and security posture.

D

Dječji vrtić Carić Novalja

vrtic-caric.hr

45

Dječji vrtić Carić Novalja is a small educational institution providing kindergarten and childcare services in Novalja, Croatia. The website serves as an informational portal for parents and guardians seeking early childhood education options. The business appears locally focused with a consistent domain registration and a website built on WordPress using the Avada theme, indicating a moderate level of digital maturity. Technically, the site uses standard web technologies including jQuery and has a cookie consent mechanism, but lacks advanced security headers and explicit privacy or terms of service documentation. Security posture is adequate with HTTPS enabled, but could be improved by implementing additional security headers and clearer compliance documentation. Overall, the site is safe, professional, and trustworthy for its intended audience, but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements.

G

Gradski muzej Novalja

gradskimuzejnovalja.hr

40

Gradski muzej Novalja is a small government/non-profit cultural institution based in Croatia, focused on preserving and presenting the cultural heritage of Novalja and its surroundings. The website serves as an informational and educational platform offering museum exhibitions, lectures, and workshops to the local community and visitors. The digital presence is built on a modern WordPress CMS with Elementor and Astra theme, providing a good user experience with mobile optimization and SEO enhancements. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is limited, with no explicit cookie consent or detailed GDPR policy. Overall, the website is trustworthy and professionally maintained, suitable for its cultural mission.

C

Centar za kulturu Grada Novalje

czknovalja.hr

41

Centar za kulturu Grada Novalje is a Croatian cultural center focused on promoting and organizing cultural and sports events in Novalja and surrounding areas. The website serves as an information hub for upcoming and past events, official documents, and community engagement. It targets local residents and visitors interested in cultural activities. The site is built on WordPress with a modern theme and multilingual support, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers are missing and no explicit security policies are published. Overall, the site is trustworthy and professionally maintained, suitable for its public cultural institution role.

TZ Stara Novalja is a local tourism organization dedicated to promoting the town of Stara Novalja on the island of Pag, Croatia. The website serves as a comprehensive portal offering event calendars, local attractions, outdoor activities, and useful information for tourists and property renters. It targets visitors interested in cultural events, outdoor sports, and local hospitality services. The organization appears well-established with a domain registered since 2001 and consistent WHOIS data. Technically, the website is built on WordPress using the Avada theme, leveraging common web technologies such as jQuery and MediaElement.js. It integrates Google Analytics for visitor tracking and implements cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data. However, it lacks a formal security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy notice present but limited GDPR-specific details. Overall, the website is trustworthy and professional, serving its purpose as a tourism information hub effectively. Strategic improvements in privacy compliance, security transparency, and accessibility could further enhance its posture and user trust.

DVD Novalja is a small, local volunteer firefighting organization based in Novalja, Croatia, serving the community on the island of Pag. The website provides information about their firefighting activities, technical interventions, and community safety efforts. The organization appears to be well-established with a domain age dating back to 2005, consistent with their operational history. The site targets local residents and visitors needing emergency and safety information. Technically, the website uses older web technologies such as jQuery 1.4.2 and lacks modern security features like HTTPS and security headers. The site is basic in design and functionality, with limited mobile optimization and no visible analytics or tracking tools. Contact information is clearly presented, but there are no privacy or cookie policies, which is a compliance gap. From a security perspective, the absence of HTTPS and use of outdated libraries pose risks. No advanced security policies or incident response contacts are provided. The site does not appear to collect user data via forms, reducing exposure but also limiting engagement. Overall, the security posture is weak and requires improvements to protect users and enhance trust. The overall risk is moderate due to the lack of encryption and outdated technology, but the site content is safe and non-malicious. Strategic recommendations include implementing HTTPS, updating libraries, adding privacy and cookie policies, and enhancing security headers to improve compliance and user trust.

V

Vodovod d.o.o. – Podružnica Novalja

aglomeracijanovalja.hr

42

The website represents a public infrastructure project managed by Vodovod d.o.o. – Podružnica Novalja, focused on improving water supply and wastewater treatment infrastructure in the Novalja region of Croatia. The project is co-financed by the European Union through the Cohesion Fund and national funds, emphasizing environmental protection and public utility enhancement. The site provides detailed project descriptions, progress updates, and contact information for stakeholders and the public. Technically, the website is built on WordPress CMS, utilizing common technologies such as jQuery, Yoast SEO for search engine optimization, and Swiper.js for interactive sliders. Hosting is provided by Plus Hosting Grupa d.o.o., a Croatian hosting provider. The site is mobile-optimized with good navigation and moderate performance. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place to comply with GDPR. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and public security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the hosting provider and the domain age aligns with the project timeline, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its purpose as an informational portal for a public utility project. Strategic improvements could include enhanced security headers, public incident response information, and accessibility enhancements to further strengthen security posture and user experience.

I

Institut za Neuromarketing

neuromarketinginstitut.com

55

Institut za Neuromarketing is a specialized Croatian institute providing neuromarketing services including neuroadvertising, neurobranding, scientific and expert research, and advanced technologies such as EEG, eye tracking, biometric methods, and facial coding. The website positions the institute as a market leader in Croatia with a focus on business and scientific clients. The digital infrastructure is built on WordPress with modern plugins and tools, ensuring good performance and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Overall, the website is professional, trustworthy, and well-maintained, supporting the institute's credibility and market presence.

ECOLINE CROATIA offers a specialized IT solution named EKO PRIJAVA designed for efficient reporting and monitoring of field problems such as communal, construction, and road issues. Their solution includes a mobile application for quick problem reporting and a web-based administrative portal for managing reports, analytics, and work orders. The business targets municipalities, communal companies, construction firms, and other organizations requiring precise field issue tracking. The website is built on WordPress using the Enfold theme, employing standard web technologies and cloud hosting for accessibility. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and business-focused. Overall, the site provides a functional and informative platform but would benefit from enhanced security and compliance measures.

D

Dizajn Studio Novalja

ds-novalja.com

33

Dizajn Studio Novalja is a small, locally focused business established in 2003, specializing in web design, digital printing, advertising, and photography services primarily targeting the tourism sector and local companies on the island of Pag, Croatia. The company offers a range of services including website creation for tourist accommodations, graphic design, digital printing, signage, key and stamp making, and photography. Their market position is that of a regional service provider with a solid reputation, supported by positive aggregate ratings and social media presence. Technically, the website employs older JavaScript libraries such as jQuery 1.6.0 and uses Google Tag Manager for analytics. The site lacks HTTPS, which is a significant security concern, and no advanced security headers or policies are detected. The website design and content quality are good, with clear navigation and relevant business information, but mobile optimization and accessibility are basic. SEO is supported by structured data but could be improved. From a security perspective, the absence of HTTPS and security headers, along with outdated libraries, exposes the site to potential vulnerabilities. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. Incident response and security policy information are also missing, which could impact trust and regulatory compliance. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to reduce risk and enhance trustworthiness. Strategic recommendations include implementing HTTPS, updating libraries, adding privacy and cookie policies, and improving security headers and incident response readiness.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

novalja-pag.net

33

Novalja-pag.net is a well-established Croatian hospitality website specializing in private accommodation listings on the island of Pag. Founded in 2002, it offers a comprehensive catalog of apartments, rooms, villas, and hotels with direct booking contact options. The platform targets tourists seeking affordable and diverse lodging options near popular destinations such as Novalja and Zrće beach. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and reCAPTCHA. While the site is mobile-optimized and provides a good user experience, it lacks HTTPS enforcement and advanced security headers, which are critical for protecting user data and enhancing trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and functional but would benefit from security and privacy improvements.

D

Dizajn Studio Novalja

novalja.info

33

Novalja.info is a regional tourism portal dedicated to providing comprehensive information and direct booking options for private accommodation on the island of Pag, Croatia, focusing on the city of Novalja and surrounding destinations. The website offers a variety of services including accommodation listings, live web cameras, weather forecasts, ferry schedules, and local news, targeting tourists and visitors planning their holidays. The business operates as a small-sized entity with a long-standing presence since 2005, managed by Dizajn Studio Novalja. Technically, the website relies on legacy technologies such as an outdated jQuery version and lacks HTTPS, which impacts its security posture and user trust. The site uses Google Analytics and Tag Manager for visitor tracking but does not provide visible privacy or cookie policies, indicating limited privacy compliance. Security-wise, the absence of HTTPS and modern security headers, combined with outdated libraries, exposes the site to potential vulnerabilities. Overall, the website is functional and content-rich but requires significant improvements in security and privacy to meet modern standards.

N

Novalja Tourist Board

tz-novalja.hr

43

The website tz-novalja.hr represents the official Tourist Board of the town of Novalja, Croatia, focusing on promoting local tourism, accommodation, and travel information. It serves as a regional informational portal targeting tourists and visitors interested in Novalja and the island of Pag. The business operates as a local government entity with a small organizational size and a long-established presence since 2003. The site content is primarily in Croatian with some English references, providing basic tourism-related information and contact details. From a technical perspective, the website uses basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site lacks mobile optimization and accessibility features, and performance is moderate. There is no evidence of advanced analytics or tracking technologies, which limits data-driven insights but also reduces privacy concerns. The site redirects visitors to a related tourism site after a short delay. Security posture is weak, with no visible HTTPS enforcement, security headers, or privacy and cookie policies. No forms or user data collection mechanisms are present, reducing attack surface but also limiting user engagement. The WHOIS data is consistent and trustworthy, indicating a legitimate domain with a long history aligned with the business purpose. Overall, the website is functional for basic tourism information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust, user experience, and regulatory adherence.

H

Hrvatski savez za sportski ribolov na moru

hssrm.hr

42

Hrvatski savez za sportski ribolov na moru (HSSRM) is a well-established Croatian non-profit sports federation dedicated to marine sport fishing. Founded in 1953, it serves approximately 25,000 members and provides key services such as fishing permit distribution, organizing competitions, and educational programs. The website reflects a consistent brand and offers relevant content for its target audience of fishing enthusiasts in Croatia. Technically, the site uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Leaflet.js, with integration of Facebook social plugins for community engagement. The site is moderately optimized for mobile and performance, with clear navigation and good content quality. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is lacking as no privacy or cookie policies are present. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

V

VIT - Obrt za informatičke usluge

vitmedia.hr

55

VIT - Obrt za informatičke usluge is a small Croatian IT service business specializing in web site creation and related informatics services. The website serves as a basic informational portal providing contact details and company branding. The business appears to be locally focused with a straightforward service offering and a small market presence. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Technically, the website uses a simple tech stack including jQuery and Bootstrap, hosted under a Croatian registrar and DNS provider. The site is basic in design and mobile optimization, with minimal SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no visible privacy or cookie policies. No forms or user data collection mechanisms are present, reducing attack surface but also limiting functionality. Overall, the site is safe for general audiences but requires improvements in security and compliance to enhance trust and professionalism.

Nikola Tesla Network is a small, non-profit cultural and educational project focused on promoting the legacy of Nikola Tesla through an international cultural and touristic route. The website serves as a hub for information about the network, its partners, events, and educational initiatives such as the Teslina STEM Academy. The project is supported by reputable partners including the Croatian National Tourist Board and is co-financed by the European Union, indicating a solid market position within cultural tourism and education sectors. Technically, the website employs a moderate technology stack including jQuery, Modernizr, and various UI plugins, hosted on infrastructure linked to the NETIM registrar and VIT Web Hosting. The site is mobile optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and a formal security policy. Privacy compliance is partial; a cookie policy and consent mechanism are present, but no explicit privacy policy page was found, representing a compliance gap. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or WAF blocking were detected, and the site content is safe for general audiences. Overall, the website is professionally maintained with good content quality and business credibility but would benefit from enhanced privacy and security policies to improve compliance and trustworthiness.

T

Turistička zajednica Ličko-senjske županije

lika-active.com

55

The website lika-active.com serves as a regional tourism promotion platform for the Lika region in Croatia, focusing on active and adventure tourism activities such as cycling, trekking, climbing, hunting, and fishing. It is operated by the regional tourism board (Turistička zajednica Ličko-senjske županije) and targets tourists seeking outdoor and nature-based experiences. The site provides relevant information, brochures, event details, and transport options to support tourism in the region. Technically, the site uses an older technology stack including Bootstrap 2.x and jQuery 1.10.2, with basic mobile responsiveness and SEO. Security posture is moderate with no visible security headers and outdated libraries posing potential risks. Privacy compliance is lacking as no privacy or cookie policies are found. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires updates in security and compliance to improve trust and protection.

T

Turistička zajednica Ličko-senjske županije

lika-gastro.com

56

The website 'lika-gastro.com' serves as a regional gastronomy and tourism portal for the Lika-Senj region in Croatia, promoting traditional local cuisine and culinary culture. It targets tourists and food enthusiasts interested in authentic regional dishes and local gastronomic events. The business is small-scale, operated likely by the regional tourism board, and focuses on cultural and culinary promotion rather than commercial sales. Technically, the site uses older but functional web technologies including Bootstrap 2.x and jQuery 1.10.2, with basic mobile optimization and SEO. Security posture is moderate with no advanced security headers or DNSSEC, and outdated libraries pose some risk. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible, content-rich, and trustworthy but would benefit from modernization and improved security and privacy practices.

A

Amphora

amphora.ee

9

Amphora is an Estonian-based company specializing in comprehensive information management software solutions, including document management, digital signatures, e-invoicing, contract management, and internal communication tools. Established in 2010, Amphora targets businesses and government entities seeking to digitize and streamline their document workflows and administrative processes. The company offers tiered SaaS subscription plans with transparent pricing and emphasizes integration with popular tools like Outlook and Google Calendar. Technically, the website is built on a custom ASP.NET WebForms platform utilizing Telerik UI components and jQuery 1.8.3. While the infrastructure supports modern web features and includes HTTPS encryption, some technologies are outdated, which may pose security risks. The site uses Google Analytics for visitor tracking and has basic SEO and accessibility features. From a security perspective, the site benefits from HTTPS and secure form handling but lacks visible security headers and uses an outdated JavaScript library version. There is no evidence of privacy or cookie policies, vulnerability disclosure, or incident response information, which are important for compliance and trust. Contact information is clearly presented, enhancing business credibility. Overall, Amphora's website is professional and trustworthy, with good content quality and business information. However, improvements in privacy compliance, security best practices, and technology updates are recommended to enhance security posture and regulatory adherence.

V

Valga Muusikakool

valgamuusikakool.ee

43

Valga Muusikakool is a well-established music school based in Valga, Estonia, with a history spanning approximately 100 years. The institution provides structured music education programs, organizes academic concerts, and participates in projects aimed at enhancing inclusive education and modernizing public services. The website serves as an information hub for students, parents, and the local community, offering event calendars, news updates, and application submission forms. The business model focuses on education and cultural enrichment within the local region, positioning the school as a key regional player in music education. Technically, the website is built on the Greativ CMS platform and incorporates modern web technologies such as Google Analytics, Facebook SDK, and Owl Carousel for interactive content. The site is mobile-optimized with good navigation and content quality, although some SEO and accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes some best practices like secure form handling and analytics integration. However, it lacks explicit security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were found, indicating a generally sound security posture but with room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and serves its educational purpose effectively. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and considering a vulnerability disclosure program to strengthen trust and compliance.

M

Mulgi Elamuskeskus MTÜ

mulgielamuskeskus.ee

40

Mulgi Elamuskeskus MTÜ operates a cultural and experience center in Mulgimaa, Estonia, dedicated to showcasing the region's history, traditions, and cultural heritage. The center functions as a museum, event venue, and local product sales point, targeting tourists, families, and educational groups. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content about visiting hours, ticketing, and events. Social media integration with Facebook and Instagram supports community engagement. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies. Contact information is clearly presented, enhancing business credibility.

J

Javna ustanova za Zaštitu i očuvanje prirode Ličko senjske Županije

zop-lsz.hr

44

The website represents a Croatian public institution dedicated to the protection and preservation of nature in the Ličko-senjska County. It provides comprehensive information about protected areas, educational programs, projects, and public announcements. The institution targets local citizens, environmental professionals, and visitors interested in nature conservation. The business model is that of a government entity focused on environmental stewardship and public service. Technically, the website is built on WordPress using popular plugins such as Elementor, WPBakery, LayerSlider, and Slider Revolution. It employs modern web technologies including HTTPS, jQuery, and Google Fonts. The site is mobile-optimized and includes accessibility features, enhancing user experience for diverse audiences. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies or incident response information. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and serves its public institution role effectively. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

Ž

ŽUPANIJSKA UPRAVA ZA CESTE LIČKO-SENJSKE ŽUPANIJE

zuc-ls.hr

45

ŽUPANIJSKA UPRAVA ZA CESTE LIČKO-SENJSKE ŽUPANIJE is a Croatian regional government agency responsible for the management and maintenance of roads within Ličko-Senjska County. The website serves as an official communication channel providing public notices, procurement information, road maps, and contact details to residents, contractors, and stakeholders. The agency positions itself as a trusted authority in transportation infrastructure within the region. Technically, the website is built on WordPress with Elementor and several plugins, offering a modern, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS and security headers, though it lacks published security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves its public function effectively.

T

Turistička zajednica Ličko-senjske županije

visit-lika.com

58

The website visit-lika.com serves as the official regional tourism portal for Ličko-senjska County in Croatia, providing comprehensive information on travel planning, cultural heritage, activities, and gastronomy. It targets tourists and visitors interested in exploring the region, positioning itself as a key regional tourism authority. The site offers event announcements, travel resources, and promotes local attractions and services. Technically, the website uses a custom CMS with Bootstrap and jQuery, integrates Google Analytics for tracking, and AddToAny for social sharing. The design is professional, mobile-optimized, and offers clear navigation, though accessibility features are basic. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-established with a domain age consistent with its business history.

J

Javna ustanova Razvojna agencija Ličko-senjske županije - LIRA

lsz-lira.hr

55

Javna ustanova Razvojna agencija Ličko-senjske županije - LIRA is a Croatian regional government agency established in 2008, focused on promoting and coordinating regional development activities in Ličko-senjska županija. The agency facilitates investment climate improvement, entrepreneurship, and socio-economic growth through project management, funding administration, and strategic planning. Their website reflects a professional and consistent brand presence, targeting regional stakeholders, investors, and public entities. Technically, the site uses modern frameworks like Bootstrap and jQuery, includes accessibility features, and is mobile optimized, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure forms, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

Z

Zavod za prostorno uređenje Ličko-senjske županije

zzpulsz.hr

47

Zavod za prostorno uređenje Ličko-senjske županije is a Croatian government agency established in 2008, responsible for coordinating, monitoring, and implementing spatial planning within the Ličko-senjska county. The website serves as an official portal providing information about spatial plans, reports, and institutional activities targeting local residents, government officials, and urban planning professionals. The business model is focused on public sector service delivery with a clear mandate and regional authority. Technically, the website employs a modern but straightforward technology stack including jQuery, Modernizr, and Owl Carousel, hosted on a CMS platform developed by VIT. The site is mobile-optimized, accessible with multiple user-friendly features such as font resizing and contrast modes, and implements cookie consent mechanisms. SEO and metadata are well handled, though no structured JSON-LD data was found. From a security perspective, the site uses HTTPS with a good SSL configuration and basic security best practices like form validation and cookie consent. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and serves its government function well. The main risks relate to missing privacy and security policy documentation and absence of explicit incident response information. Addressing these gaps would improve compliance and user trust.

L

Lika ceste d.o.o.

likaceste.hr

45

Lika ceste d.o.o. is a Croatian company specializing in the maintenance, protection, reconstruction, and construction of roads and related infrastructure, primarily serving the Gospić region. The company positions itself as a regional service provider focused on public roadways, offering key services such as road maintenance and winter services. The website reflects a medium-sized enterprise with a clear focus on transportation infrastructure, targeting local government entities and public road users. Technically, the website is built on WordPress using Bootstrap for responsive design, enhanced with several JavaScript libraries including jQuery, Owl Carousel, and Google Maps API. SEO is supported by the Yoast SEO plugin, and user interaction is facilitated through Contact Form 7 with Google reCAPTCHA v3 for spam protection. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. Overall, the website is professional and trustworthy with moderate tracking and analytics usage. It is safe for general audiences and does not contain adult or questionable content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers, incident response policies, and accessibility would enhance the site's security posture and compliance.

Športsko ribolovno društvo LUC Novalja is a well-established Croatian sports fishing society founded in 1973. The organization focuses on promoting fishing sports through competitions and community events, serving a local and regional audience of fishing enthusiasts. Their website reflects a community-oriented non-profit model with clear contact information and active event updates. Technically, the site uses a modern tech stack including AMP for mobile optimization, Bootstrap for responsive design, and JavaScript libraries for enhanced user experience. However, the CMS is custom or unknown, and hosting details are not explicit. Security posture is moderate; HTTPS is used, and cookie consent is implemented, but security headers and vulnerability disclosures are lacking. Privacy compliance is basic with a cookie banner and a linked cookie policy page but no explicit privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in security and compliance areas.

A

Arburoža d.o.o.

arburoza.hr

47

Arburoža d.o.o. is a municipal service company serving the city of Novalja, Croatia, specializing in waste management, public procurement, financial planning, and cemetery services. The website is well-structured, providing clear information and easy navigation for residents and businesses. The company maintains a local government service profile with transparent contact details and public tenders. Technically, the site is built on WordPress with modern plugins and is optimized for mobile devices. Security posture is solid with HTTPS, security headers, and GDPR compliance, though it lacks explicit security and incident response policies. Overall, the site reflects a trustworthy and professional municipal service provider with room for enhanced security transparency.

K

Komunalije d.o.o. Novalja

komunalije-novalja.hr

42

Komunalije d.o.o. Novalja is a municipal utility company serving the Novalja area on the island of Pag, Croatia. The company provides essential services such as water supply, sewage management, and public procurement transparency. The website serves as an information portal for residents and businesses, offering news updates, service pricing, and contact information. The business operates as a local public utility with a focus on community service and compliance with local regulations. Technically, the website uses legacy technologies including an outdated jQuery version, and lacks modern mobile optimization and advanced security headers. While HTTPS is assumed, no explicit security policies or incident response contacts are published. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Overall, the site is functional and trustworthy but would benefit from modernization and enhanced security practices.

T

Turistička zajednica grada Novalje

visitnovalja.hr

52

Visit Novalja is the official tourism website for the city of Novalja and the island of Pag in Croatia, operated by the local tourism board (Turistička zajednica grada Novalje). The site provides comprehensive information for tourists including local attractions, events, gastronomy, accommodation options, and cultural heritage. It targets tourists and visitors seeking detailed and official travel information about the region. The business model is focused on tourism promotion and information dissemination, positioning itself as a trusted local authority in the hospitality sector.

G

Gradska uprava Novalja

novalja.hr

45

The website www.novalja.hr serves as the official digital portal for the city of Novalja, Croatia, providing residents, tourists, and businesses with comprehensive information about municipal services, news, public procurement, and community events. It holds a strong position as the primary communication channel for the local government, offering transparency and accessibility to public data and administrative resources. The site targets a broad audience including local citizens, government officials, and visitors interested in the city. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO practices. Security-wise, the site uses HTTPS and trusted external libraries but lacks several important security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

Lučka uprava Novalja is the official Port Authority for Novalja, Croatia, managing port infrastructure and providing public services related to maritime transport and port operations. The website serves as an information hub for public procurement, tariffs, projects, and user inquiries, targeting residents, businesses, and maritime users in the region. The business operates as a small government entity with a domain age consistent with its establishment in 2011. Technically, the website is built on WordPress with common plugins such as Smart Slider 3 and uses modern web fonts and responsive design, providing a good user experience and accessibility. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap for GDPR compliance. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

E

Ekstreemmoto OÜ

renditsikkel.ee

42

Renditsikkel is a small Estonian business specializing in the rental of KTM motorcycles and related riding equipment. The company operates a professional WordPress-based e-commerce website that showcases a variety of motorcycle categories and rental options. The business targets motorcycle enthusiasts and renters in Estonia, offering convenience and access to premium motorcycle models without ownership burdens. Technically, the website leverages modern WordPress plugins such as WooCommerce and Elementor, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

Asterisk

asterisk.com

61

Asterisk operates a specialized e-commerce website focused on knee protection systems and related accessories, emphasizing products proudly made in the USA. The company targets athletes and consumers seeking high-quality knee protection solutions. The website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Flickity, and Facebook Pixel for marketing and analytics. The site demonstrates good technical maturity with fast performance, mobile optimization, and secure HTTPS connections. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional presentation and active e-commerce functionality mitigate some risk. Security posture is solid with HTTPS and anti-bot measures, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is trustworthy but would benefit from improved transparency and compliance documentation.