Security Directory

V

Valvoline

valvoline.ee

51

Valvoline.ee is the Estonian localized website for Valvoline, a globally recognized lubricant and automotive chemical brand with a history dating back to 1866. The website presents product offerings primarily focused on lubricants, coolants, and maintenance chemicals targeting automotive, industrial, and motorsports sectors. The site demonstrates a moderate level of digital maturity with use of common JavaScript libraries and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The website is accessible without WAF or blocking mechanisms, indicating no access restrictions. Overall, the site is professionally designed with good content relevance but could improve in privacy compliance and security posture.

E

Ekstreemmoto OÜ

klim.ee

42

Klim.ee is an Estonian e-commerce website specializing in quality on-road and off-road motorcycle apparel and accessories. Operated by Ekstreemmoto OÜ, the site targets motorcycle enthusiasts in Estonia, offering a range of products including jackets, pants, helmets, gloves, and protective gear for both men and women. The business appears to be a small-sized retailer founded in 2019, with a clear focus on niche motorcycle apparel markets. The website is professionally designed with good navigation and mobile responsiveness, supporting a positive user experience.

The website vhm.nl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to any substantive content. The domain is long-established, registered since 1999 with a reputable registrar, indicating legitimacy of the domain ownership. However, no business information, contact details, or compliance policies are visible on the landing page, limiting the ability to assess the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but the lack of accessible content prevents a full evaluation of the website's digital maturity or user experience. Security posture is difficult to evaluate fully due to the blocking mechanism, but the presence of Cloudflare indicates some level of protection. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information.

S

Shoei Europe

shoei-europe.com

47

Shoei Europe operates as a premium motorcycle helmet manufacturer and distributor targeting European motorcycle riders and enthusiasts. The website showcases a professional and well-structured digital presence with a focus on product offerings, racing sponsorships, and customer services such as warranty and registration. The business model centers on manufacturing and retail distribution with a strong brand identity in the transportation sector. Technically, the website is built on WordPress with modern plugins for SEO and cookie management, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data is unavailable, which raises minor trust concerns, but the overall website professionalism and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around data protection roles.

A

Allee restoran

alleerestoran.ee

44

Allee restoran is a small hospitality business located in Tallinn, Estonia, offering a diverse and seasonal menu with a focus on fresh, local ingredients catering to omnivores and vegans alike. The restaurant operates at two addresses and provides services including lunch offers, breakfast, drinks, group menus, and event hosting. The website is professionally designed, mobile-optimized, and integrates modern web technologies and analytics tools, reflecting a mature digital presence. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy, content-rich, and well-positioned in its market segment.

U

Ugandi Hotell

ugandihotel.ee

45

Ugandi Hotell is a small luxury boutique hotel located in Otepää, Estonia, offering personalized accommodation and dining experiences. The hotel emphasizes comfort, luxury, and a unique atmosphere, targeting tourists, sports enthusiasts, and business travelers. The website is professionally designed using WordPress with Yoast SEO, providing good content quality and clear navigation. Technical infrastructure includes modern web technologies and Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers and incident response information are absent. Overall, the website is trustworthy and compliant with GDPR, reflecting a legitimate and professional hospitality business.

P

POS Experts

posexperts.cz

52

POS Experts is a Czech Republic-based company specializing in providing point-of-sale (POS) systems tailored for retail, restaurants, and manufacturing businesses. The company offers software and hardware solutions designed to optimize sales operations, with a focus on affordability and local market needs. Their website reflects a professional and consistent brand image, targeting small to medium-sized businesses in the retail sector. The business appears to have been operational since at least 2017, with a clear focus on the Czech market.

B

Bureau Veritas

bureauveritas.com

77

Bureau Veritas is a globally recognized leader in testing, inspection, and certification services, offering a broad portfolio of solutions across multiple industries including energy, transportation, manufacturing, and government sectors. The website reflects a mature digital presence built on Drupal 10, with modern consent management and analytics integration, demonstrating a commitment to privacy and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

U

Udruga Biom

biom.hr

45

Udruga Biom is a Croatian non-profit organization dedicated to nature conservation and environmental education. The website serves as a platform to communicate their projects, publications, events, and opportunities for public involvement. It targets environmentalists, researchers, volunteers, and the general public interested in ecological issues. The organization operates primarily through donations, partnerships, and project funding, positioning itself as a reputable local NGO with active community engagement. Technically, the website is built on WordPress using modern technologies such as Tailwind CSS, Google Tag Manager, and reCAPTCHA for form security. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance tuning. Analytics are implemented via Google Analytics, with moderate user tracking and GDPR-compliant privacy and cookie policies. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with reCAPTCHA, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or vulnerability disclosure page suggests room for maturity in security governance. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It presents low risk from a security and compliance standpoint but would benefit from enhanced transparency in security policies and incident response readiness.

J

Justified Image Grid - Premium WordPress Gallery

justifiedgrid.com

58

JustifiedGrid.com is a specialized WordPress plugin provider offering a premium image gallery solution that enables users to present photos in a justified grid layout without cropping. The website targets WordPress users, photographers, and website owners seeking advanced gallery features integrated with popular sources like Facebook and Flickr. The business appears to be a small, niche player in the WordPress plugin market, founded around 2012, with a consistent and professional online presence. Technically, the site is built on WordPress with WooCommerce for sales, leveraging common plugins such as UberMenu and Slider Revolution, and uses Cloudflare DNS for domain management. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data.

P

Project Jupyter

jupyter.org

57

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

J

Javna ustanova "Priroda"

ju-priroda.hr

42

Javna ustanova "Priroda" is a governmental institution responsible for managing protected natural areas in the Primorsko-goranska County of Croatia. The website serves as an informative portal offering educational content, visitor center information, and publications related to nature conservation. The organization targets the general public, local communities, and stakeholders interested in environmental protection. The business model is non-profit and government-funded, focusing on regional nature preservation and education. Technically, the website is built on WordPress with a modern tech stack including Visual Composer, WPML for multilingual support, and various plugins for galleries and PDF viewing. The site is mobile optimized, accessible, and uses HTTPS with Google Tag Manager for analytics. Performance is moderate with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal incident response information. Privacy and cookie policies are missing, representing compliance gaps. Social media integration is present and professional. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure channel.

A

ATR International AG

dev-atr.de

45

ATR International AG operates as a global trade cooperation platform for leading distributors in the independent automotive aftermarket. Founded in 1967 and headquartered in Denkendorf, Germany, ATR facilitates collaboration among automotive spare parts distributors, manufacturers, suppliers, and independent multi-brand garages. The company focuses on purchasing coordination, digitisation, sustainable aftermarket development, and strategic steering committees, positioning itself as a key player in the automotive aftermarket sector with a strong shareholder base and international presence. The website reflects a professional and consistent brand image with clear communication of business purpose and services.

The website eurosalesleads.com is currently inaccessible, serving a 403 Forbidden error page with no visible content or metadata. The domain is newly registered in May 2023 and uses Cloudflare DNS services but lacks DNSSEC and any visible security headers. No business information, contact details, or compliance policies are present on the site, indicating a very low digital maturity level. The lack of accessible content and security best practices significantly limits the ability to assess the business or technical infrastructure. Security posture is weak due to the absence of visible HTTPS enforcement details and security headers. Overall, the site presents a high risk due to its inaccessibility and lack of transparency.

Z

Zavod za prostorno uređenje Dubrovačko-neretvanske županije

zzpudnz.hr

65

The website zzpudnz.hr is the official online portal for the Zavod za prostorno uređenje Dubrovačko-neretvanske županije, a governmental spatial planning institute serving the Dubrovnik-Neretva County in Croatia. It provides comprehensive spatial planning documentation, project information, and news updates relevant to local government officials, urban planners, and the public. The site is well-structured, professionally designed, and offers extensive archives of news and legal documents related to spatial planning. The target audience includes government entities, municipalities, and citizens interested in regional planning and development. Technically, the website is built on the DotNetNuke (DNN) CMS platform, utilizing modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap for responsive design and user experience. The site is mobile optimized and includes accessibility features. Security best practices are observed with HTTPS enforced, appropriate security headers, and secure form handling. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place to comply with GDPR requirements. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, there is no explicit public security policy or vulnerability disclosure page, and incident response contact information is not provided. The WHOIS data confirms the domain's legitimacy, consistent with the Croatian governmental entity it represents, and the domain age aligns with the institution's operational history. Overall, zzpudnz.hr is a credible, secure, and professionally maintained governmental website that effectively serves its informational and public service role. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear incident response contacts to enhance transparency and trust.

D

Dubrovačko-neretvanska županija

dnz.hr

53

Dubrovačko-neretvanska županija operates as the official regional government authority for the Dubrovnik-Neretva County in Croatia. The website serves as a comprehensive portal for residents and stakeholders, providing news, administrative services, public notices, and access to official documents. It targets local citizens and government officials, positioning itself as a trusted source of regional governance information. Technically, the website is built on WordPress 6.6.1 with a modern theme and plugins such as WPML for multilingual support and Cookie Law Info for GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, employs standard security headers, and implements a cookie consent mechanism aligned with GDPR. However, it lacks explicit privacy policies, security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and compliance. Overall, the website presents a professional and trustworthy digital presence for a government entity, with moderate technical maturity and a solid security posture. Strategic improvements in privacy and security documentation would further strengthen its compliance and user trust.

Lokalna Hrvatska is a Croatian non-profit organization operating a national news service focused on local government and municipal news. The website serves as a platform for disseminating news, event calendars, weather updates, and email newsletters targeted at local authorities and citizens interested in local governance. The organization appears well-established with a domain age consistent with its founding year of 2013 and transparent registrant information matching the website's claims. Technically, the website uses a custom CMS and integrates several legacy and modern technologies including jQuery 1.8.3, Leaflet for mapping, and multiple analytics and advertising platforms such as Google Analytics, Yandex Metrika, Facebook Pixel, and Mailchimp. While the site is functional and moderately optimized for mobile, it lacks some modern security headers and uses outdated JavaScript libraries, which could pose security risks. From a security perspective, HTTPS is enforced, and no sensitive data is exposed in the HTML. However, the absence of active Content-Security-Policy headers and the use of outdated jQuery versions are notable vulnerabilities. Privacy compliance is partially addressed with a GDPR privacy statement, but no cookie consent mechanism is present despite active tracking scripts. Overall, the website is moderately secure and credible, with clear business information and contact details. Strategic improvements in updating libraries, enhancing security headers, and implementing cookie consent would strengthen its security posture and privacy compliance.

S

Splitsko-dalmatinski filmski ured

filmingindalmatia.hr

47

The website filmingindalmatia.hr represents the Splitsko-dalmatinski filmski ured, a regional film office dedicated to supporting film, TV, and commercial productions in the Dalmatia region of Croatia. It offers services such as location scouting, permit facilitation, and production collaboration, targeting filmmakers and production companies interested in shooting in this area. The site is well-structured with good SEO practices and integrates Google Maps for location visualization, enhancing its utility for its audience. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies including Google Fonts and Google Maps API. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security is robust with HTTPS enabled and several security headers present, though explicit security policies and incident response information are absent. From a security and compliance perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Contact information is primarily available via a contact form, with no direct emails or phone numbers found. WHOIS data aligns well with the website's regional and business claims, supporting its legitimacy. Overall, the website is a credible and professional platform serving a niche regional market with good technical and security standards but would benefit from enhanced privacy compliance and explicit security documentation.

D

Dalmatia Storytelling

dalmatiastorytelling.com

43

Dalmatia Storytelling is a niche cultural tourism business founded in 2021, offering storytelling experiences in the Dalmatia region through interpretive guides, theatrical groups, and technology. The website is professionally designed using WordPress and Elementor, with multilingual support and a clear focus on cultural and travel audiences. The technical infrastructure is modern and includes popular libraries and frameworks, hosted by a reputable provider Hetzner Online GmbH. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a comprehensive cookie policy and GDPR consent. Business credibility is supported by consistent branding and structured data.

S

Splitsko-dalmatinska Županija

digitalnadalmacija.hr

56

Digitalna Dalmacija is a regional technology and education initiative led by the Split-Dalmatia County, focused on fostering digital skills, startup ecosystem growth, and a vibrant technology community in Croatia. The website serves as a hub for educational programs, startup acceleration, and community events, targeting students, professionals, retirees, and entrepreneurs. It is well-positioned as a government-backed regional technology hub with strong partnerships and community engagement. The technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and CMS (DNN), providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy and security transparency.

Javna ustanova RERA S.D. za koordinaciju i razvoj Splitsko-dalmatinske županije is a Croatian public institution focused on regional development and coordination within the Split-Dalmatia County. The organization provides technical assistance, project preparation, and manages EU fund utilization to support local government, entrepreneurs, and NGOs. The website reflects its authoritative role with comprehensive content, official documentation, and transparent public procurement information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the institution's identity, indicating legitimacy and trustworthiness.

U

Underwater heritage

underwater-heritage.hr

54

The website 'Underwater heritage' serves as an informational platform dedicated to underwater cultural heritage in Croatia, including catalogues, maps, and detailed information about ancient architecture, shipwrecks, and other underwater archaeological sites. It targets researchers, historians, archaeologists, and tourists interested in maritime heritage. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated UI libraries, with additional integrations such as Sentry for error monitoring and Vidjet for chat support. The technical infrastructure is modern and well-implemented, with HTTPS enforced and moderate performance and mobile optimization. However, the site lacks explicit privacy, cookie, and terms of service policies, and no direct contact information is provided, which impacts privacy compliance and business credibility scores. Security posture is decent with HTTPS and some best practices, but missing security headers and formal policies reduce the overall security maturity. Overall, the site is a good quality, niche cultural heritage resource with moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

G

Grad Ozalj

ozalj.hr

42

Grad Ozalj operates as the official municipal government website for the city of Ozalj in Croatia, providing comprehensive information and services to residents, investors, businesses, and tourists. The site covers a wide range of municipal functions including city governance, budget transparency, procurement, local projects, and community engagement. It serves as a central digital platform for public communication and administrative transparency. Technically, the website is built on WordPress using the Elementor page builder, enhanced with SEO tools like Rank Math and privacy compliance plugins such as Complianz. The infrastructure supports modern web standards including HTTPS and responsive design, ensuring accessibility across devices. Google Analytics is employed for visitor tracking with an explicit cookie consent mechanism, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit advanced security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and consistency with the municipal entity, reinforcing trustworthiness. Overall, Grad Ozalj's website demonstrates a solid balance of content quality, technical implementation, and privacy compliance suitable for a government entity. Strategic improvements in security headers and incident response transparency could further enhance its security posture and public trust.

G

Grad Duga Resa

dugaresa.hr

50

Grad Duga Resa operates an official municipal website serving the city of Duga Resa in Croatia. The site provides public information, news, and municipal services to residents and visitors. It positions itself as the authoritative source for local government communications and community engagement. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, reflecting a moderate level of digital maturity. The technical infrastructure supports responsive design and basic accessibility, ensuring usability across devices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and explicit policies could enhance protection. Overall, the site is legitimate and trustworthy, though WHOIS privacy limits domain ownership transparency. Strategic recommendations include improving security headers, publishing privacy and incident response policies, and enhancing contact information visibility.

J

Javna ustanova Regionalna razvojna agencija Karlovačke županije

ra-kazup.hr

55

Javna ustanova Regionalna razvojna agencija Karlovačke županije (JURRA) is a regional government agency established by Karlovačka županija to coordinate and promote regional development. The agency provides free expert assistance in project preparation and implementation, educational and advisory services primarily targeting public legal entities and institutions within the Karlovačka županija region. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins for SEO, cookie consent, and analytics, ensuring compliance with GDPR and user privacy standards. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain is privacy protected in WHOIS as per GDPR, which is justified for this type of public institution. The website content and structured data strongly support the legitimacy and trustworthiness of the agency.

Muzej Međimurja Čakovec is a well-established regional museum in Croatia, offering a broad range of cultural, historical, and artistic exhibits. The website reflects a mature digital presence with detailed content about museum collections, exhibitions, and educational programs. The institution targets general audiences including tourists, researchers, and local visitors. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a Croatian hosting provider. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

M

Muzej nematerijalne baštine "Riznica Međimurja"

riznica.hr

10

Muzej nematerijalne baštine "Riznica Međimurja" operates as a cultural heritage museum and multimedia portal dedicated to preserving and promoting the intangible cultural heritage of the Međimurje region in Croatia. The website serves as a digital gateway to museum exhibitions, educational content, virtual tours, and cultural events, targeting a general audience including tourists, students, and cultural enthusiasts. The institution holds a regional market position as a key cultural and tourism entity in Northern Croatia. Technically, the website is built on WordPress CMS with modern plugins and frameworks such as Bootstrap and Revolution Slider, ensuring a responsive and visually appealing user experience. The site is hosted by Orbis d.o.o., a Croatian registrar and hosting provider, with a domain age consistent with the museum's recent establishment in 2018. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies could be improved. Privacy compliance is demonstrated through a privacy policy and cookie banner, reflecting GDPR awareness. Overall, the website is professional, trustworthy, and well-structured, supporting the museum's mission effectively.

Ž

Županijska uprava za ceste Međimurske županije

zuc-ck.hr

49

Županijska uprava za ceste Međimurske županije is a Croatian government agency responsible for managing county and local roads within Međimurje County. The website serves as an informational portal providing details on road maintenance, construction projects, legal frameworks, public procurement, and access to official information. The target audience includes local residents, government officials, contractors, and other stakeholders interested in regional road infrastructure. The agency operates under the Croatian national registrar CARNET, with a domain established in 2005, reflecting a mature and stable online presence. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, incorporating modern web technologies such as Bootstrap 5 and jQuery. Hosting is provided by Totohost, a Croatian hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO optimization is basic but functional, and the site uses HTTPS with a good SSL configuration. Security practices include CSRF token implementation and HTTPS enforcement, though explicit security headers are not clearly present. From a security perspective, the site shows a solid posture for a government informational portal, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms. The absence of tracking or advertising technologies indicates a privacy-conscious approach, though formal policies are missing. Overall, the website is professional, trustworthy, and serves its governmental function well. Strategic improvements include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen compliance and security transparency.

C

Centar dr. R. Steinera

centar-rudolf-steiner.com

36

Centar dr. R. Steinera is a small educational/spiritual center based in Donji Kraljevec, Croatia, focused on Rudolf Steiner's teachings. The website is multilingual and built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure includes modern elements such as HTTPS, Google reCAPTCHA, and Cloudflare DNS, but lacks advanced security headers and DNSSEC. The security posture is adequate but could be improved by implementing additional security headers and publishing formal security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is present. Overall, the website is functional and moderately professional but would benefit from enhanced compliance and security documentation.

R

Regionalni Centar za Investicije - Međimurje d.o.o.

rci.hr

60

Regionalni Centar za Investicije - Međimurje d.o.o. is a government-affiliated regional investment center focused on supporting local businesses and stakeholders in the Međimurje region of Croatia. The organization provides services including investment support, dissemination of information on EU and national tenders, and regional development initiatives. The website reflects a professional and consistent brand presence, targeting local entrepreneurs and agricultural producers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

M

Mesap d.o.o.

mesap.hr

46

Mesap d.o.o. operates the Međimurski sajam poduzetništva (MESAP), a business focused on renting various event and business spaces including conference halls, large event halls, and a business club/cafe in Croatia. The company targets businesses and event organizers in the region, providing facilities equipped with modern amenities such as WiFi, projectors, and parking. The website reflects a small-sized, regionally focused business with a professional online presence and clear contact information. Technically, the site is built on Joomla CMS with the Helix Ultimate framework and uses Bootstrap and jQuery for responsive design and interactivity. Hosting is provided by Totohost, a Croatian hosting provider. The website is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, showing a long-established Croatian entity. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

M

MIN – MEĐIMURJE, INVESTICIJE, NEKRETNINE d.o.o.

medjimurje-nekretnine.hr

36

MIN – MEĐIMURJE, INVESTICIJE, NEKRETNINE d.o.o. is a Croatian limited liability company specializing in managing investments and real estate operations within the Međimurje County. The company operates with a clear regional focus, providing investment management, financial planning, and public procurement services. The website reflects a small-sized business with a stable market presence since 2008, targeting local investors and public entities. Technically, the website is built on WordPress 4.9.26 with common JavaScript libraries like jQuery and FancyBox, hosted on Totohost servers. While the site is accessible and functional, it uses outdated software versions that pose security risks. Security posture is moderate with HTTPS enabled but lacking modern security headers and updated components. Privacy compliance is partial, with a GDPR policy page present but no cookie consent mechanism. Overall, the website is trustworthy but would benefit from technical and security improvements to enhance resilience and compliance.

M

Metalska jezgra Čakovec

metalskajezgra.hr

60

Metalska jezgra Čakovec is a development and educational center focused on the metals industry, providing advanced services such as 3D scanning, polymer and metal 3D printing, and IoT solutions. The center collaborates with regional universities and government bodies, positioning itself as a key regional innovation hub. The website demonstrates a solid technical infrastructure built on WordPress with modern plugins and compliance with GDPR regulations. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

T

Tehnološko-inovacijski centar Međimurje d.o.o.

ticm.hr

10

Tehnološko-inovacijski centar Međimurje (TICM) is a well-established regional technology and innovation center based in Croatia, founded in 2012. It supports technology-based entrepreneurship through incubation, coworking, educational courses, and business advisory services. The website reflects a professional and consistent brand with a clear focus on regional development and innovation. The technical infrastructure is modern, leveraging WordPress CMS with Bootstrap and various JavaScript libraries, and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is good with HTTPS enforced and some best practices observed, though there is room for improvement in security headers and formal security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and serves its target audience effectively.

M

Međimurska priroda

medjimurska-priroda.info

47

The website 'Međimurska priroda' appears to be a regional or nature-focused site, likely providing information about the Međimurje region's natural environment or tourism opportunities. The site is built on WordPress using Elementor and several plugins for events, galleries, and forms. It employs Google Analytics for visitor tracking but lacks visible privacy or cookie policies, which is a compliance concern. Technically, the site is moderately optimized with good mobile responsiveness but lacks advanced security headers and detailed WHOIS transparency. The absence of registrant data and domain registration details due to WHOIS query failure limits the ability to fully verify legitimacy. Overall, the site is functional and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

Z

Zavod.hr

zavod.hr

47

Zavod.hr is the official website of the Zavod za prostorno uređenje Međimurske županije, a government spatial planning institute serving the Međimurje County in Croatia. The organization focuses on spatial planning and economic zone development within the region, targeting local government entities, businesses, and citizens. The website is built on WordPress using the Divi theme and incorporates SEO and accessibility plugins, reflecting a moderate level of digital maturity. The technical infrastructure is hosted by a Croatian provider with a domain registered since 2012, consistent with the organization's history. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the site is professional, trustworthy, and serves its government function effectively, but could improve compliance and security transparency.

J

Javna ustanova za razvoj Međimurske županije REDEA

redea.hr

48

Javna ustanova za razvoj Međimurske županije REDEA is a Croatian public institution focused on regional development within Međimurje County. It acts as a regional coordinator supporting social, economic, and strategic planning initiatives, primarily funded by government and European Union sources. The website reflects a professional government agency with clear communication channels, project showcases, and public tenders. Technically, the site is built on WordPress using modern libraries and plugins, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its public institutional role effectively.

T

Turistička zajednica Međimurske županije

visitmedimurje.com

63

Visit Međimurje is the official regional tourism website for the Međimurje County in Croatia, managed by the Turistička zajednica Međimurske županije. The site promotes the region's natural beauty, cultural heritage, gastronomy, and tourism services, targeting tourists and visitors interested in nature, culture, and culinary experiences. The website is well-structured, professionally designed, and provides comprehensive information and planning tools for visitors. Technically, it is built on Drupal 11, uses modern web technologies, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

The website bradatiguru.hr is a small-scale personal or freelance business site focused on web development and blockchain advocacy. It uses a unique retro terminal interface to engage visitors and promote the owner's portfolio and blockchain-related projects. The site targets web developers and blockchain enthusiasts, offering educational content and links to related blockchain resources. Technically, the site is built with basic HTML, CSS, and JavaScript without any CMS or advanced frameworks, resulting in fast loading times but limited SEO and accessibility features. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is safe and trustworthy but would benefit from improved security and privacy practices to enhance credibility and user trust.

K

Konplast d.o.o.

kipos.hr

40

Kipos.hr is a Croatian business website serving as a login portal for KIPOS, a bookkeeping and business information system developed by Konplast d.o.o. The platform targets business users requiring accounting and bookkeeping software solutions. The website is primarily a secure login interface with client-side encryption for credentials, indicating a focus on protecting user data during authentication. The business appears to be a small-sized technology provider with a niche market in Croatia, founded in 2014, and maintains consistent branding with its parent company Konplast d.o.o. The website lacks public-facing content such as privacy or cookie policies and does not provide contact information on the login page, which limits transparency for external users.

I

Invest in ZAGORJE

investinzagorje.hr

45

Invest in ZAGORJE is a regional investment promotion website focused on the Krapinsko-zagorska županija region in Croatia. It promotes the region's strategic advantages, quality of life, entrepreneurial climate, and diverse industrial sectors including tourism, manufacturing, agriculture, and healthcare. The website serves as a portal for investors and businesses seeking information and support for economic development in the region. It features business success stories, news updates, and a contact form for direct inquiries. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security measures include HTTPS and Google reCAPTCHA on forms, but lack visible security headers and published privacy or cookie policies, which are recommended for compliance and trust. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.

The website partnerstvo-razvoj.net serves as the official portal for the Zagorska razvojna agencija, a regional development agency focused on employment, education, and entrepreneurship within the Krapinsko-zagorska županija region in Croatia. It provides job listings, scholarship information, public tenders, and educational resources aimed at residents and stakeholders in the region. The site is primarily in Croatian with an English language option, targeting local citizens and regional partners. The business model is that of a government or non-profit entity facilitating regional development and public information dissemination. Technically, the website employs older JavaScript libraries such as jQuery 1.6, Google Analytics for tracking, and some custom scripts for UI elements like menus and pagination. The site appears to be custom-built without a popular CMS. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but functional. Hosting and domain registration are consistent with a legitimate regional agency, with the domain registered since 2011. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. There is no DNSSEC enabled, and no explicit privacy or security policies are published. The login form is minimal and lacks visible advanced protections. Cookie policy scripts exist but without a clear consent mechanism, indicating partial privacy compliance. Overall, the website is functional and credible for its purpose but has room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in these areas would improve trust and resilience against threats.

C

CESI

cesi.hr

50

CESI is a Croatian non-profit organization dedicated to advancing the social position of women and achieving gender equality through education, consulting, research, and advocacy. The organization has a strong market presence with over 200 successful projects and numerous collaborations, targeting a broad audience interested in social justice and women's rights. Their website reflects a professional and consistent brand image with clear navigation and relevant content in Croatian and English. Technically, the site uses modern web standards, including HTTPS and JavaScript modules, and integrates Google Analytics for visitor insights. Accessibility and mobile optimization are well addressed, contributing to a positive user experience. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some advanced security headers and formal security policies, indicating room for improvement. Privacy compliance is basic with cookie consent implemented, but explicit privacy and security policies could be enhanced. Overall, CESI's digital presence is credible and trustworthy, supporting their mission effectively.

Integrirani promet zagrebačkog područja d.o.o. is a public sector company owned primarily by the City of Zagreb and two surrounding counties. It focuses on integrated passenger transport planning and management in the Zagreb metropolitan area. The website serves as an informational portal presenting the company's mission, master plans, and news related to transportation projects. Technically, the site is built on an older WordPress version with common plugins such as Contact Form 7 and Google Maps integration. While the site is functional and provides relevant content, it uses outdated software versions that pose security risks. The security posture is basic with HTTPS enabled but lacks modern security headers and updated libraries. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and professional but requires technical and compliance improvements to enhance security and user trust.

O

Obrtnička komora Krapinsko-zagorske županije

okkzz.hr

47

Obrtnička komora Krapinsko-zagorske županije is a regional chamber of trades and crafts in Croatia, affiliated with the national Croatian Chamber of Trades and Crafts. The organization supports local craftsmen and entrepreneurs through education, advocacy, and networking. The website provides event announcements, educational content, and contact information primarily targeting the local business community. Technically, the site runs on an outdated Joomla! 1.5 CMS, which poses security risks, though it uses HTTPS and basic email obfuscation. Security posture is moderate but lacks modern security headers and incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and trustworthy but requires modernization and compliance improvements.

Z

Zavod za hitnu medicinu Krapinsko - zagorske županije

hitna-kzz.hr

46

Zavod za hitnu medicinu Krapinsko - zagorske županije is a regional public healthcare institution providing emergency medical services in the Krapinsko-zagorska county of Croatia. The website serves as an official portal offering information about emergency services, first aid education, public health announcements, and EU project participation. The target audience is the general public within the region. The business model is that of a public healthcare service provider with a medium-sized operational scope.

Ž

Županijska uprava za ceste Krapinsko-Zagorske županije

zuc-kzz.hr

56

Županijska uprava za ceste Krapinsko-Zagorske županije is a Croatian government agency responsible for managing county roads within the Krapinsko-Zagorska region. The website serves as an official platform providing information on road maintenance, closures, public procurement, financial plans, and legal documentation. It targets local residents, businesses, and stakeholders involved in regional infrastructure. The business model is that of a public sector entity focused on infrastructure management and transparency. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Contact Form 7, and Slider Revolution. It uses modern web technologies including HTTPS, Google Fonts, and jQuery. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, some improvements can be made in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA for forms, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is indicated by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professional, reflecting its government entity status. Strategic recommendations include implementing cookie consent, enhancing security headers, properly configuring analytics, and publishing security and incident response information to improve compliance and security posture.

J

JURAGAN69

croenergy.eu

57

JURAGAN69 operates as an online slot gambling platform primarily targeting Indonesian users interested in slot games, specifically promoting 'slot koi super gacor' games. The website positions itself as a fast, safe, and accessible gambling site. Technically, the site leverages multiple modern tracking and analytics tools such as Google Tag Manager, Datadog, and Rollbar, hosted on the Envato Market platform. However, the site lacks visible security headers and publicly available privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable and malformed, indicating privacy protection, which is common in gambling domains but reduces transparency. Overall, the site is accessible without WAF or blocking mechanisms, but the security posture and privacy compliance are weak, and the business credibility is moderate due to limited contact and policy information.

The website at regea.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. The domain is registered since 2007 with COREhub, S.R.L. as the registrar and uses SiteGround hosting. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible. The technical infrastructure appears basic with no advanced security headers or DNSSEC enabled. The SSL configuration is minimal but HTTPS is presumably enabled given the domain status. Overall, the website's digital maturity is low, and the security posture is weak due to missing headers and lack of visible security best practices. The domain registration data is consistent and suggests legitimacy, but the blocked content severely limits trust and usability. Strategic recommendations include resolving access restrictions, implementing security headers, and publishing essential compliance policies to improve trust and security posture.