High-risk security reports

K

Kabinet, obrt za poslovne usluge

kabinet3c.hr

43

Kabinet 3C is a Croatian boutique agency specializing in market research and consumer insights, emphasizing curiosity-driven understanding and humanized insights to support business decisions. The company appears to be newly established in 2023 and targets businesses seeking qualitative market research services. The website is professionally designed using WordPress and Elementor, with a consistent brand presence and active social media channels on LinkedIn, Facebook, and Instagram. Technically, the site uses modern web technologies and is hosted under a Croatian registrar, CARNET, which aligns with the business's geographic focus. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though explicit security headers and privacy compliance mechanisms such as cookie consent are lacking. Overall, the site demonstrates moderate to good digital maturity but could improve privacy compliance and security transparency.

P

Plus Hosting Grupa d.o.o.

portal.hr

43

Portal.hr is a regional news portal serving the Kaštela area and nearby cities such as Solin, Trogir, and Split in Croatia. The website provides daily news, local stories, event coverage, and community information, targeting local residents and visitors interested in regional updates. The business operates on an advertising-supported model, leveraging Google Adsense and other ad networks to monetize content. The domain is relatively new, registered in 2022, and is managed by Plus Hosting Grupa d.o.o., a Croatian hosting and domain registrar. Technically, the site is built on Joomla CMS with a modern frontend stack including Bootstrap 5, jQuery, FontAwesome, and Google Fonts. It uses Cloudflare for DNS and likely some security benefits. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Performance is moderate, with some reliance on third-party advertising and tracking scripts. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and includes accessibility features. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. The presence of multiple third-party scripts increases the attack surface slightly. Privacy compliance is basic, with cookie consent mechanisms but limited GDPR-specific disclosures. Overall, Portal.hr presents a professional and trustworthy local news platform with good technical implementation and moderate security posture. Strategic improvements in privacy transparency, security policy publication, and third-party script management would enhance compliance and trustworthiness.

П

Пивара Скопје АД

polnacasa.mk

43

Pivara Skopje AD operates a digital platform at polnacasa.mk focused on age verification and content delivery related to their alcoholic beverage products. The website is bilingual, supporting Macedonian and English, and includes comprehensive privacy, cookie, and terms of service policies embedded in pop-ups. The platform collects minimal personal data (date of birth and consent) to comply with legal age restrictions for alcohol-related content. Technically, the site is built on WordPress 5.3 with common plugins for forms, sliders, and media embedding, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and input validation, but lacks advanced security headers and explicit incident response or security policies. Overall, the site is trustworthy and professionally maintained, with a clear business focus on brand engagement and regulatory compliance.

C

Coca-Cola Hellenic Kosova

coca-colahellenickosovo.com

47

Coca-Cola Hellenic Kosova operates as a major distributor of Coca-Cola products in Kosovo, serving as a key player in the non-alcoholic beverage industry since 2003. The website reflects a regional branch of the larger Coca-Cola Hellenic Bottling Company, with consistent branding and a focus on beverage distribution. The business targets a general audience including consumers and partners in Kosovo, leveraging a business model centered on product distribution and sales within the retail sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site includes a OneTrust cookie consent mechanism, indicating awareness of privacy compliance requirements, although explicit privacy and terms of service pages are not detected. From a security perspective, the site uses HTTPS with a good SSL configuration and Cloudflare DNS, but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or WAF blocking were detected. The WHOIS data is consistent with the business claims, showing a well-maintained domain with no privacy protection, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence for Coca-Cola Hellenic Kosova, with room for improvement in privacy policy transparency and enhanced security headers to strengthen compliance and security posture.

The website at pressclipping.si is currently inaccessible, returning a 403 Forbidden error page which blocks access to any substantive content. The domain is registered since 2010 with a reputable Slovenian registrar and hosted on SiteGround servers, indicating a legitimate business presence. However, due to the access restriction, no business descriptions, contact information, or policies are available for analysis. The technical infrastructure is minimal with only basic HTML and CSS and Google Fonts loaded. No analytics, scripts, or security headers are detected. The lack of accessible content and policies results in a very low overall assessment score. Security posture cannot be fully evaluated due to the blocked content, but no immediate vulnerabilities are visible from the error page. The domain registration data is consistent and trustworthy, but the website itself currently offers no usable information or services.

N

NO LIMIT

nolimitfestival.ba

45

NO LIMIT is a creative communication festival based in Sarajevo, Bosnia and Herzegovina, targeting advertising agencies, media, and advertisers in the region. The website serves as an event platform providing detailed information about the festival, jury members, program schedule, and award categories. The business model revolves around organizing an annual advertising festival and awards ceremony, fostering networking and recognition within the creative industry. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure with good SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

The analyzed URL corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/), which is not a public website but a local error display. The page content primarily consists of embedded Chromium open-source code for the offline T-Rex runner game and error styling. There is no business-related content, no privacy or cookie policies, no contact information, and no external links. The domain 'chromewebdata' is an internal placeholder and does not represent a registered public domain. Consequently, no WHOIS or business registration data is available. From a technical perspective, the page uses standard web technologies including HTML5, CSS3, and JavaScript, specifically Chromium BSD-licensed code for the offline game. The page is optimized for mobile and desktop with responsive design and accessibility features for the game. However, it lacks SEO metadata, business branding, or any marketing elements. Security-wise, the page is minimal and does not expose any sensitive data or forms. However, it lacks HTTPS (as it is a local error page), security headers, or any security policies. No incident response or vulnerability disclosure information is present. The overall security posture is minimal due to the nature of the page. Overall, this is not a public-facing website but an internal browser error page. The analysis is limited due to the lack of real content and business information. For accurate website analysis, a valid public URL with accessible content is required.

I

Inware AG

inware.ch

49

Inware AG is a Swiss-based technology company specializing in web development, online shops, and web applications tailored for small and medium-sized enterprises (KMU). Established in 2002, the company has served over 2,000 customers, positioning itself as a reliable and experienced service provider in the Swiss market. Their website reflects a professional and modern design, targeting KMU clients with a focus on delivering tailored digital solutions across various budgets. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for form security. The site is mobile-optimized and demonstrates good SEO practices, although it lacks a CMS indication, suggesting a custom-built platform. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements Google reCAPTCHA v3 to protect forms from abuse. However, it lacks several security headers and does not provide a privacy policy or cookie consent mechanism, which are important for GDPR compliance. No vulnerability disclosure or incident response information is available, indicating areas for improvement in security transparency and readiness. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security headers, and establishing clear incident response contacts.

The website survalyzer.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business, contact, or policy information is available for analysis. The domain is registered since 2010 with a reputable registrar and no privacy protection, indicating a legitimate registration. However, the lack of DNSSEC and absence of HTTPS/security headers in the provided data represent security gaps. The website's technical infrastructure and digital maturity cannot be assessed due to blocked content. Security posture is weak as no security policies, incident response contacts, or certifications are visible. Overall, the site is currently non-functional for external users, resulting in a high risk and low trust score.

H

Handelskammer beider Basel

hkbb.ch

49

Handelskammer beider Basel is a prominent bi-cantonal economic chamber serving the Basel region in Switzerland. It acts as a voice and catalyst for regional economic development, supporting over 2,100 members with advocacy, consulting, networking, and educational services. The organization focuses on key sectors such as energy, transport, and government-related economic activities, positioning itself as a leading regional economic association. The website reflects a professional and comprehensive digital presence, offering detailed information on services, cluster initiatives, export/import support, and events.

E

EOTEC AG

eotec.ch

41

EOTEC AG is a Swiss technology service provider specializing in audio and video technology solutions, including video security, media technology, intercom systems, and digital signage. Established in 1984, the company positions itself as a trusted partner for decision makers seeking reliable, long-term technology partnerships. Their business model includes consulting, procurement, installation, and full-service offerings such as Equipment as a Service (EaaS). The company enjoys a strong market position with a high Net Promoter Score, reflecting excellent customer satisfaction. Technically, the website is built on TYPO3 CMS, uses HTTPS with good SSL configuration, and integrates Google reCAPTCHA for form security. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. However, explicit security policies and incident response information are not publicly available. Overall, the website is professional, well-structured, and trustworthy, with clear contact information and no signs of suspicious activity.

The website at ahelon.com is currently inaccessible to the public, presenting a 403 Forbidden error page. This indicates that access is restricted, likely by Cloudflare security mechanisms, as evidenced by the Cloudflare nameservers. The domain is newly registered in July 2024 and lacks any visible business content, contact information, or policy documents. The absence of privacy, cookie, and terms of service policies further limits the ability to assess compliance or business credibility. Technically, the site uses Cloudflare DNS but does not have DNSSEC enabled, and no security headers or analytics scripts are present. Overall, the site appears to be under development or intentionally restricted, resulting in a low digital maturity and security posture score.

A

Aleph Payments

alephpayments.com

45

Aleph Payments is a specialized fintech company providing cross-border payment solutions tailored for the digital advertising industry, particularly focusing on emerging markets. Their platform enables advertisers and ad tech companies to overcome local payment challenges by offering end-to-end services including KYC, credit underwriting, billing, tax compliance, and cross-border remittances. The company positions itself as a key enabler for digital advertising growth in high-potential regions. Technically, the website employs modern JavaScript frameworks and integrates Google Analytics and Tag Manager for tracking, hosted behind Cloudflare DNS services. The site is mobile optimized with good navigation and professional branding. Security-wise, HTTPS is enforced and domain transfer is restricted, but the absence of security headers and DNSSEC reduces the security posture. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and safe, but improvements in security and privacy disclosures are recommended.

C

CV-Online värbamisteenused

varbamisteenused.ee

44

CV-Online värbamisteenused is a professional recruitment and personnel search service provider operating primarily in Estonia. The company leverages a large candidate network and the largest job posting distribution channels in Estonia to offer flexible recruitment solutions tailored to various business needs. Their key services include pre-selection recruitment, targeted search recruitment, and full-cycle recruitment solutions, supported by experienced specialists. The website reflects a strong market position with a focus on delivering comprehensive recruitment services to employers of all sizes and sectors. Technically, the website is built on a modern WordPress platform using Elementor for page building and Yoast SEO for search engine optimization. It integrates Cookiebot for cookie consent management and employs Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good performance and accessibility standards, although some security headers are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the website's business claims, indicating a trustworthy domain registration. Overall, the website presents a professional and credible business front with good technical implementation and moderate privacy compliance. Strategic improvements in security headers, privacy policy publication, and incident response transparency would enhance the security posture and compliance standing.

C

CV-Online

personaloatrankos.lt

43

CV-Online Recruitment is a Lithuanian professional recruitment service specializing in personnel search and selection, serving a broad range of positions from assistants to top-level executives. The company leverages 20 years of experience and serves over 1200 business clients with a high project success rate. The website is built on WordPress, employing modern web technologies and SEO best practices, with good mobile optimization and user experience. Security measures include HTTPS and Google reCAPTCHA on forms, though some improvements are recommended such as implementing a cookie consent mechanism and publishing a security policy. Overall, the site presents a credible and professional digital presence aligned with its business objectives.

I

ICT Cortex

ictcortex.me

47

ICT Cortex is a Montenegro-based ICT cluster organization focused on fostering digital transformation, innovation, and education within the country's technology sector. Established in 2021, it serves as a collaborative platform for IT professionals, educational institutions, government bodies, and businesses to drive sustainable technological development. The website reflects a professional and consistent brand presence, highlighting key services such as digital transformation advocacy, talent development, and partnerships with academia and industry. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for user insights. Security posture is good with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security policy disclosures are recommended. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, ICT Cortex presents a credible and trustworthy digital presence aligned with its mission to lead Montenegro's ICT sector growth.

W

Woman.Comm Club

womancomm.club

49

Woman.Comm Club is a regional platform dedicated to empowering women in the communications industry through education, networking, and events. Founded in 2022, it targets successful business women and young professionals in the communications sector within the region. The platform offers mentorship programs, conferences, awards, podcasts, and webinars to foster professional growth and industry advancement. Technically, the website is built on WordPress with Elementor and WooCommerce, hosted with GoDaddy and using Cloudflare DNS services. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS and some security headers, but DNSSEC is not enabled and no incident response or security policies are published. Overall, the platform is credible and professionally presented but would benefit from enhanced privacy and security disclosures.

The website netokracija.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business information, contact details, or policies are available for analysis. The domain is registered since 2007 with Moniker Online Services LLC, indicating a long-standing registration, but the lack of DNSSEC and absence of visible content reduces trustworthiness. The technical infrastructure and security posture cannot be fully assessed due to the blocked content. No metadata, scripts, or analytics are present on the error page, indicating no active tracking or marketing tools are currently in use. Overall, the site appears to be down or access restricted, limiting any further security or business analysis.

N

NAF-MEDIA

naf-media.hr

40

NAF-MEDIA is a Croatian company specializing in outdoor advertising, offering both digital (DOOH) and traditional (OOH) large format advertising spaces primarily in key urban locations such as Split and Zagreb. The company targets businesses and advertisers seeking to leverage outdoor media for marketing purposes. The website is built on WordPress using common plugins and themes, indicating a standard CMS infrastructure with moderate digital maturity. The site is accessible, mobile-optimized, and presents its advertising locations clearly with visual content and embedded video. Security posture is basic with HTTPS enabled but lacks advanced security headers and public security policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a compliance risk. Overall, the website is professional and functional but could improve in transparency and security practices.

M

Metropolis Media

metropolis-media.me

36

Metropolis Media is a well-established outdoor advertising company based in Montenegro, operating since 2001 with a domain registered since 2010. The company offers a wide range of advertising services including traditional billboards, backlights, city lights, bigboards, megaboards, and modern digital LED displays. Their extensive network covers major cities and transit points in Montenegro, targeting advertisers seeking broad and effective outdoor media exposure. The website demonstrates a solid technical infrastructure with modern web technologies, multimedia integration via YouTube, and standard analytics tools such as Google Analytics and Tag Manager. Mobile optimization and user experience are good, supporting accessibility and navigation. However, the site lacks privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could improve in privacy compliance and security hardening.

L

Led Media

ledmedia.ba

49

Led Media is a leading digital outdoor advertising company operating in Bosnia and Herzegovina, offering digital advertising services primarily targeting local businesses and advertisers. The website is built on WordPress using Elementor, indicating a modern and maintainable technical infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

C

CRNOBELO.com

crnobelo.com

49

CRNOBELO.com is a Macedonian lifestyle and news portal offering a wide range of content including news, horoscopes, entertainment, recipes, and interviews. The site targets Macedonian-speaking audiences interested in lifestyle and cultural topics. It operates on a Joomla CMS platform with modern web technologies and integrates multiple advertising networks for monetization. The website is professionally designed with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security policies and cookie consent mechanisms. WHOIS data is unavailable, which raises concerns about domain legitimacy, although the website content and branding appear consistent and trustworthy. Overall, the site is a functional and relevant media portal with room for improvement in privacy compliance and security transparency.

H

Hrvatska udruga digitalnih izdavača

hudi.hr

36

Hrvatska udruga digitalnih izdavača (HUDI) is a leading professional association in Croatia that unites online media and other industries involved in digital publishing and advertising. The organization focuses on standardizing digital media metrics, advocating for fair regulation of global tech platforms, and supporting the growth and sustainability of the Croatian digital media market. HUDI collaborates with major Croatian media companies and provides research, factchecking, and technological innovation services to its members. Technically, the website is built on WordPress with modern web technologies including Google Fonts and Google Tag Manager. It is mobile-optimized and includes standard privacy and cookie compliance mechanisms. The site uses HTTPS with a valid SSL certificate and anonymizes IP addresses in Google Analytics, reflecting a good security posture. However, some security headers are missing, and there is no public security policy or incident response information. The security posture is solid with no visible vulnerabilities or exposed sensitive data. GDPR compliance is evident through privacy and cookie policies. The WHOIS data is privacy protected due to GDPR, which is common and justified for this type of organization. The website is trustworthy, professionally maintained, and linked to reputable Croatian media entities. Overall, HUDI presents a credible and professional digital presence with a strong focus on the Croatian digital media ecosystem. Strategic improvements could include enhanced security headers, publishing security policies, and adding terms of service for completeness.

E

Eldra d.o.o.

eldra.hr

47

Eldra d.o.o. is a well-established Croatian company specializing in the rental of high-quality audio, video, lighting equipment, and technical production services. Founded in 1991, the company has a strong market presence and serves businesses and event organizers requiring professional event production solutions. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their target audience. The business model focuses on equipment rental and technical support, positioning Eldra as a trusted local leader in their sector. Technically, the website is built on WordPress and utilizes common plugins such as Contact Form 7 for forms, Akismet for spam protection, and Cookiebot for cookie consent management. The site uses HTTPS with Cloudflare DNS, ensuring secure connections. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and documented security policies or incident response plans. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy, consistent with the company's history and location. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no critical issues found. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility. The website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable digital presence for Eldra d.o.o.

The website 3dprintaj.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2015 with DreamHost, LLC and uses SiteGround name servers, indicating a stable registration and hosting setup. However, the lack of accessible content, absence of privacy, cookie, or terms of service policies, and no visible contact information severely limit the ability to assess the business or its services. Technically, the site does not show evidence of modern security headers or DNSSEC, and no analytics or tracking scripts are present. Overall, the site appears to be either misconfigured or intentionally restricted, resulting in a poor user experience and low trustworthiness.

B

Badel 1862

antiquepelinkovac.hr

49

Antique Pelinkovac is a premium Croatian herbal liqueur brand operated under the parent company Badel 1862. The website serves as a brand showcase, providing detailed storytelling about the product's heritage, production process, product range, and enjoyment tips including cocktail recipes. The brand positions itself as a historic and premium offering in the hospitality sector, targeting adult consumers with a focus on quality and tradition. The website is built on WordPress, hosted by a Croatian hosting provider, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent and an age verification overlay to restrict underage access. The site demonstrates good digital maturity with responsive design, SEO optimization, and social media integration. Security posture is solid with HTTPS and basic protections, though lacks explicit security headers and incident response disclosures. Privacy compliance is partially met via cookie consent but lacks a visible privacy policy page. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

U

UNIP

unip.hr

43

UNIP is a Croatian association established in 2022 to promote and protect the rights of publishers of informational publications. It focuses on collective rights management, advocacy, and professional development within the media sector. The website reflects a small but professional organization targeting media publishers and related legal entities in Croatia. Technically, the site is built on WordPress with Elementor, using modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and headers. Overall, the site is trustworthy and well-aligned with its stated business purpose.

The website opads.us is registered to Optimus Prime Informatika, a Croatian company established in 2013. The domain registration is stable and consistent with the registrant's information, indicating legitimacy. However, the website itself is extremely minimal, containing only a brief greeting and a version number, with no metadata, contact information, or business description. This lack of content severely limits the ability to assess the company's market position or services from the site alone. Technically, the site is hosted behind Cloudflare DNS but lacks DNSSEC and security headers, and no CMS or frameworks are detected. The SSL configuration is basic, and no privacy or cookie policies are present, indicating poor privacy compliance. Security posture is weak due to missing headers and lack of incident response information. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility.

The website at clickdimensions.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents extraction of business, security, or compliance information from the site itself. The domain is mature, registered since 2010 with GoDaddy.com, LLC, and is not privacy protected, indicating a legitimate registration. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies on the landing page severely limits the ability to assess the company's digital presence and compliance posture. No contact information or security policies are available, and no analytics or marketing technologies are detected due to the blocked content. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in poor user experience and low trustworthiness from an external perspective.

The website at validator.nu is currently inaccessible due to a 502 Bad Gateway server error, indicating a backend server issue. As a result, no meaningful content, metadata, or business information is available for analysis. The domain is registered with Gandi SAS since 2007, which supports legitimacy and a stable domain history. The technical infrastructure appears minimal with nginx on Ubuntu, but no further details on CMS or frameworks are available. Security posture is weak due to lack of security headers and DNSSEC, and no privacy or cookie policies are present. Overall, the site is non-functional at this time, limiting any comprehensive security or compliance evaluation.

The website cmsimpleforum.com serves as a community forum dedicated to CMSimple_XH, an open source content management system. It provides a platform for users and developers to discuss general topics, security, installation, development, and third-party plugins related to CMSimple_XH. The forum is powered by phpBB software and hosts a significant volume of posts and active members, indicating a well-established community presence since its domain registration in 2008. The site targets CMSimple_XH users and developers globally, offering multilingual support forums and resources. Technically, the site uses standard web technologies including jQuery and Font Awesome, with moderate performance and good mobile optimization. However, there is no evidence of advanced security headers or cookie consent mechanisms, and DNSSEC is not enabled, which suggests room for improvement in security posture. Privacy compliance is basic, with a privacy policy page present but no cookie banner or GDPR explicit indicators. Contact information is limited to a forum contact form, with no direct emails or phone numbers publicly listed. Overall, the site is a niche community resource with moderate technical maturity and security practices.

B

Beacon Fund

beaconfund.com

39

Beacon Fund is a pioneering private debt fund focused on providing tailored financing solutions to SMEs in Vietnam, particularly those led by gender-diverse teams committed to social and environmental impact. The fund fills a financing gap for businesses too large for microfinance but underserved by traditional equity and banking options. Their market position as Southeast Asia’s first private debt fund dedicated to gender equality and social impact underscores their unique value proposition. The website reflects a professional and consistent brand with clear messaging and strong trust indicators such as 2X Fund membership and impact reporting. Technically, the site is built on a modern WordPress stack with Elementor and several plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the website is safe, professional, and credible, though improvements in privacy compliance and security hardening are recommended.

The website www.docurated.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any business or content information. The domain WHOIS data is unavailable, indicating the domain may be unregistered, expired, or privacy-protected with no public data. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are present, and no contact information or business details can be extracted. The technical infrastructure appears minimal, with only Google Fonts loaded externally. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site is effectively blocked from analysis, resulting in a very low trust and credibility score.

The website eventualmillionaire.com is currently inaccessible, presenting a 403 Forbidden error page served behind Cloudflare's infrastructure. This indicates that access to the site is restricted, possibly due to security policies or misconfiguration. The domain is well-established, registered since 2007 with IONOS SE, and shows no privacy protection, suggesting transparency in ownership. However, no business or contact information, privacy policies, or terms of service are accessible on the site. The lack of content and metadata severely limits the ability to assess the business or technical maturity of the site. The technical infrastructure includes Cloudflare DNS and hosting, but no further technologies or analytics are detectable from the provided HTML content.

C

CMSimple_XH

cmsimple-xh.org

49

CMSimple_XH is an open source flat file CMS project that enables users to create and maintain websites without a database, targeting web developers and small website owners. The project is community-driven, offering plugins, templates, and support via forums and a wiki. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, it supports modern PHP versions and uses common web technologies such as jQuery and TinyMCE, ensuring compatibility with major web servers. Security posture is moderate with no HTTPS issues detected but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for open source projects. Overall, the site is trustworthy and well-maintained with room for security and privacy improvements.

P

Proyecto SIMUSOL

simusol.org

47

SimuSol.org is a niche open-source project focused on providing software tools for simulating solar energy systems and thermal circuits. The project is community-driven and offers several related software packages under GPL licenses. The website serves as a hub for downloads, documentation, and community resources primarily targeting researchers and engineers interested in solar energy simulation. Technically, the site is built on the CMSimple_XH platform, hosted on DigitalOcean, and uses Perl-based backend tools with JavaScript and jQuery on the frontend. While the site is functional and contains relevant content, it lacks modern security practices such as DNSSEC, security headers, and privacy policies. The use of Google Analytics indicates moderate user tracking without clear privacy compliance. The domain registration is consistent with the project's timeline and shows no suspicious patterns, supporting the site's legitimacy. Overall, the website is safe, moderately professional, and serves its target audience adequately but would benefit from improved security and privacy compliance.

I

Inxmail GmbH

inxmail.com

46

Inxmail GmbH operates a professional email marketing platform focused on delivering newsletters, automated campaigns, transactional emails, and SMTP mail relay services. The company targets businesses seeking GDPR-compliant, secure, and efficient email marketing solutions. Their platform supports integrations with CRM, CMS, and e-commerce systems, and offers marketing automation with visual workflows. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, consent management, and tracking tools integrated for analytics and compliance. Security posture is strong, supported by ISO 27001 certification and adherence to GDPR standards, with no visible vulnerabilities or exposed sensitive data. Overall, Inxmail presents a trustworthy and professional brand with a solid market position in the technology and e-commerce sectors.

The website www.proxena.com is effectively non-existent in terms of content and business presence. The site contains only a single line of text with the domain name and no metadata, scripts, or interactive elements. The WHOIS lookup failed to find any registration data, indicating the domain is either unregistered or inactive. This lack of registration and content means there is no identifiable business, no contact information, and no security or privacy policies in place. The technical infrastructure appears minimal or non-existent, with no evidence of HTTPS or security best practices. Overall, the site does not present any trust signals or business credibility, and it is not possible to assess any meaningful security posture beyond the absence of data. The risk level is high due to the lack of registration and content, and the site should not be considered a legitimate or operational business presence.

H

Hrvatsko dizajnersko društvo / Croatian Designers Association

dizajn.hr

42

Hrvatsko dizajnersko društvo (Croatian Designers Association) is a non-profit organization dedicated to promoting design culture, education, exhibitions, and discourse in Croatia. The website serves as a portal for design professionals, students, and enthusiasts, providing information on events, workshops, publications, and membership. It holds a reputable position in the Croatian design community, supported by government and cultural sponsors, and is a member of international design associations.

R

ReStyloh

restyloh.hr

47

ReStyloh is a Croatian e-commerce platform focused on the buying and selling of second-hand clothing and footwear. The website targets general consumers interested in sustainable fashion and offers a marketplace model where users can list and purchase used apparel. The platform is positioned as a niche player in the local market, emphasizing unique fashion finds and environmental consciousness. The website features clear navigation with categorized product listings and search capabilities for both products and users. Technically, the site employs common web technologies including jQuery, Bootstrap, Owl Carousel, and Select2 for UI components, along with Google Fonts for typography. Analytics are implemented via Google Analytics and Clicky, indicating a moderate level of digital maturity. The site uses HTTPS, ensuring encrypted communication, but lacks visible advanced security headers and formal privacy or cookie policies. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and no visible exposure of sensitive data. However, the absence of security headers, privacy policies, and incident response information suggests room for improvement in compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, ReStyloh presents a functional and professional e-commerce platform with a focus on second-hand fashion in Croatia. To enhance trust and compliance, the site should implement comprehensive privacy and cookie policies, security headers, and clear contact information. These improvements would strengthen the site's security posture and user confidence.

F

FBL

fbl.ba

47

The website fbl.ba is a WordPress-based site titled 'FBL' with integration of Google advertising and analytics technologies, including Google Tag Manager and Adsense, with consent mode enabled for privacy compliance. The site appears to be targeted at a general audience in Bosnia and Herzegovina, but lacks explicit business descriptions, contact information, or detailed company data. Technically, the site uses modern web fonts and SEO plugins, providing a moderate level of performance and mobile optimization. Security posture is basic, with no visible security headers or published security policies, and no evidence of vulnerability disclosure or incident response readiness. Privacy compliance is limited to a cookie consent mechanism, but no privacy policy or terms of service are found. Overall, the site is accessible without WAF or blocking mechanisms and contains safe content suitable for general audiences.

M

Mainstream Public Cloud Services d.o.o.

bizlife.rs

38

BIZlife.rs is a well-established Serbian business news portal operated by Mainstream Public Cloud Services d.o.o., founded in 2011. The site offers comprehensive business, entrepreneurship, IT/Tech, lifestyle, travel, and health news targeted at Serbian-speaking professionals and entrepreneurs. The platform uses WordPress with Elementor, integrating modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Gemius Prism. The website demonstrates good content quality, professional design, and consistent branding, supported by active social media channels and a newsletter subscription service. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a comprehensive privacy policy but no explicit cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Mediakit

mediakit.hr

47

Mediakit.hr is a Croatian informational platform focused on marketing, PR, media, and the event industry. The website provides news, articles, and newsletters targeting professionals in these sectors. The platform is relatively new, with domain registration in April 2024, and positions itself as a niche media outlet serving the Croatian market. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Modern Events Calendar Lite, and Complianz GDPR for cookie consent, indicating a moderate level of digital maturity. Google Analytics and AdSense are integrated for analytics and monetization purposes. Security-wise, the site enforces HTTPS and shows no signs of WAF or blocking mechanisms. However, explicit security headers are not detected, and there is no visible security policy or incident response information. Privacy compliance is partially addressed through cookie consent, but no privacy policy or terms of service pages were found. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from enhanced privacy and security disclosures.

M

Marketing Magazin

marketingmagazin.si

47

Marketing Magazin is a well-established Slovenian media outlet specializing in marketing, communications, and advertising industry news and insights. The website serves marketing professionals and industry stakeholders with news articles, interviews, event listings, and video content. The business model is primarily media publication supported by advertising and subscriptions. Technically, the site uses Drupal 9 CMS with standard analytics and advertising tools such as Google Analytics, Facebook Pixel, and Gemius. The site is mobile optimized and has good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. No privacy policy or terms of service were found in the provided content, indicating room for compliance improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

LED Mreza Srbije

ledmrezasrbije.rs

46

LED Mreža Srbije operates a comprehensive network of LED and video billboards across Serbia, targeting advertisers seeking high-impact outdoor and indoor marketing solutions. The company holds a strong market position with over 100 locations in more than 40 cities, offering premium advertising spaces in strategic urban and transit locations. Their business model focuses on renting advertising space on LED billboards, complemented by indoor advertising in shopping centers, leveraging modern video marketing techniques to enhance client campaigns. Technically, the website is built on WordPress with WooCommerce and Oxygen Builder, integrating Google Tag Manager for analytics. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially met with privacy and cookie policies present, but lacks an explicit cookie consent mechanism. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

A

Advertiser Serbia

advertiser-serbia.com

43

Advertiser Serbia is a professional online media portal focused on the advertising, media, and marketing sectors in Southeast Europe, primarily Serbia. The website provides news, industry analysis, event announcements, and advertising content targeting media professionals, agencies, brands, and the general public interested in this sector. It positions itself as a leading and influential portal in the regional media and advertising landscape. Technically, the site is built on WordPress CMS with a modern tech stack including Yoast SEO, Google Analytics, and social sharing plugins, offering good mobile optimization and SEO practices. Security posture is decent with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The domain WHOIS data is missing or not found, raising concerns about domain legitimacy despite the professional and active website content. Overall, the site is functional and professional but would benefit from improved privacy compliance and clearer domain registration transparency.

S

Studenac d.o.o.

studenac.hr

46

Studenac d.o.o. is a leading Croatian retail chain specializing in food and household products, operating over 1000 stores nationwide. Founded in 1991 and headquartered in Omiš, Croatia, it is owned by the Polish Enterprise Fund VIII since 2018. The company offers a broad range of services including weekly promotions, mobile app-based coupons, and additional services such as package pickup and delivery via third-party platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript libraries and asynchronous loading techniques, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR regulations.

I

INA, d.d.

ina.hr

48

INA, d.d. is a leading Croatian integrated energy company specializing in oil and gas exploration, production, refining, marketing, and retail. The company maintains a strong market position in Croatia and the region, offering a broad range of petroleum products and customer services. The website reflects a mature digital presence with comprehensive corporate information, targeting customers, investors, and partners. Technically, the site is built on WordPress with modern SEO and analytics tools, providing good performance and mobile optimization. Security posture is strong with HTTPS enforcement, ISO 27001 certification, and cookie consent mechanisms, although public vulnerability disclosure and incident response contacts are not explicitly provided. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR.

Costa Coffee's Croatian website serves as a localized digital presence for the internationally recognized coffeehouse brand. The site primarily focuses on showcasing coffee products and brand information tailored to the Croatian market. The business operates within the retail sector, targeting general consumers and coffee enthusiasts. The website reflects a consistent brand identity aligned with Costa Coffee's global image and is supported by The Coca-Cola Company as its parent entity. Technically, the website leverages modern web technologies including React and Gatsby, supported by Akamai CDN for optimized performance. The site is mobile-optimized and employs standard security best practices such as HTTPS enforcement and security headers. Cookie consent is managed through OneTrust, indicating a basic level of privacy compliance. From a security perspective, the site demonstrates a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of explicit privacy policy, terms of service, and incident response contact details suggests areas for improvement in compliance and transparency. The WHOIS data confirms the domain's legitimacy and consistency with the brand's regional presence. Overall, the website is professional, secure, and trustworthy, but would benefit from enhanced privacy and security disclosures to meet higher compliance standards.