Security Directory

E

Ecodenta

ecodenta.lt

38

Ecodenta.lt is a Lithuanian-based healthcare e-commerce website specializing in dental care products and services. The company has been established since 2014 and operates primarily in the Lithuanian market. The website is built on WordPress using the WooCommerce plugin and the Divi theme, indicating a standard but effective e-commerce platform. The site is moderately optimized for mobile devices and provides a generally good user experience with clear navigation and professional design. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

Asociacija ,,Padedu augti“ is a Lithuanian non-profit organization dedicated to supporting families with premature and seriously ill newborns. Established in 2011, it provides various services including social support projects, educational initiatives, and direct assistance to hospitals and families. The organization maintains a strong community presence through storytelling, events, and partnerships with healthcare institutions. Their website reflects a well-structured, content-rich platform with clear navigation and engagement tools such as a live chat widget. Technically, the website employs modern web technologies including jQuery, jQuery UI, Fancybox, and Google Fonts, hosted behind Cloudflare DNS and nameservers ensuring reliable performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal security policies. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a notable compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

K

Kökstavlor.se

xn--kkstavlor-07a.se

48

Kökstavlor.se is a Swedish niche affiliate marketing website specializing in kitchen posters and wall art. The site aggregates product information and links to partner retailers such as Designtorget, KitchenTime, Confident Living, and Solhem Inredning, providing users with curated selections and price comparisons. The business model relies on affiliate commissions while maintaining editorial independence and transparency through affiliate disclosures. The website is built on WordPress using Elementor and Yoast SEO, indicating a mature digital infrastructure with good SEO practices and mobile optimization. Security posture is solid with HTTPS enforced and standard security headers, though improvements like DNSSEC and Content-Security-Policy headers are recommended. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-positioned within its retail niche.

YACHT s.r.o. operates the website yacht.cz, a Czech-language media platform dedicated to yachting and boating enthusiasts. The site provides editorial content including articles, news, event information, and an e-commerce section selling magazines and books related to the maritime lifestyle. The company targets boating hobbyists and professionals within the Czech Republic, positioning itself as a niche media leader in this sector. Technically, the website is built on TYPO3 CMS, employs modern JavaScript libraries such as jQuery, and integrates marketing and analytics tools like HubSpot and Google Analytics. Security measures include HTTPS enforcement and RSA encryption for login forms, alongside a cookie consent mechanism compliant with GDPR principles. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data reduce overall trust and compliance scores. The site is accessible without WAF or blocking mechanisms, indicating good availability and user experience.

L

L'Occitane en Provence

loccitane.com

72

L'Occitane en Provence operates a global e-commerce platform specializing in premium beauty and skincare products inspired by the Provence region. The website demonstrates a mature digital infrastructure leveraging Salesforce Commerce Cloud, React, and modern web technologies to deliver a responsive and accessible user experience. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not prominently disclosed. Overall, the website presents a professional and trustworthy front for a large retail brand, with minor gaps in transparency around security and contact information.

W

Weingut Christen

weingutchristen.at

56

Weingut Christen is a small regional wine producer based in Austria, specializing in the production and sale of wines from Niederösterreich. The company operates through direct sales including an Ab-Hof-Verkauf (farm gate sales) and participates in local wine festivals and events, targeting wine enthusiasts and regional customers. The website reflects a professional and consistent brand image with clear business and contact information. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and libraries such as jQuery and FontAwesome. SEO is well implemented with Yoast SEO plugin and the site is mobile optimized. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

J

Jaroslav Buriánek

vinarstviburiankovi.cz

46

The website represents a small family-owned winery and pension business located in the Czech Republic, specializing in wine production, sales via an e-shop, wine tasting events, and accommodation services. The business has a strong regional presence with awards such as the Grand Prix Vinex 2021 and inclusion in the 2024 Salon of Czech Wines, indicating a reputable market position. The website is professionally designed using Joomla CMS and VirtueMart e-commerce platform, incorporating modern web technologies such as Bootstrap, UIkit, and Google reCAPTCHA for form security. The site is mobile optimized and provides clear navigation and relevant content for its target audience of wine enthusiasts and tourists.

M

Modus Medical Devices

modusqa.com

58

Modus Medical Devices, operating under the Modus QA brand, is a medium-sized Canadian company specializing in quality assurance products for medical physics, particularly in radiation therapy and medical imaging. The company is a subsidiary of IBA Dosimetry and offers a range of QA phantoms, software, and dosimetry tools designed to ensure accurate and effective patient treatment. Their market position is strong within the healthcare sector, targeting medical physicists and OEMs with a focus on precision and innovation. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Particles.js, and Slick Carousel. It uses Azure DNS hosting and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized with good SEO practices and a professional design, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected. There is no visible incident response or security policy published on the site. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism despite the use of tracking scripts. Overall, the website is trustworthy and professional, with strong business credibility and good content quality. Strategic improvements in security headers, DNSSEC, and cookie consent would enhance the security posture and privacy compliance, further strengthening user trust and regulatory adherence.

H

Domovská stránka

helago-sk.sk

45

Helago SK operates as a specialized e-commerce platform serving the Slovak market with a focus on educational, healthcare, and laboratory products. The website offers a broad catalog of simulators, anatomical models, laboratory instruments, and technical teaching aids, targeting educational institutions, healthcare providers, and laboratories. The presence of sister sites in Czech and English indicates a regional market approach. Technically, the site employs modern web technologies including jQuery, Bootstrap 5, Google Tag Manager, and reCAPTCHA, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is basic, lacking a visible privacy policy or terms of service on the main page. Overall, the site is professionally designed with good navigation and content relevance but could improve transparency and contact information availability.

H

Homepage

helago-cz.com

48

Helago-cz.com operates as an e-commerce platform specializing in educational, healthcare, and laboratory equipment, targeting institutions and professionals in these sectors. The website offers a broad catalog of products including simulators, training kits, and laboratory instruments, positioning itself as a niche provider in the education and healthcare markets. Technically, the site employs modern web technologies such as jQuery, Bootstrap 5, and Google Tag Manager, indicating a moderate level of digital maturity. The presence of HTTPS and reCAPTCHA enhances security, though the absence of explicit security headers and privacy policies suggests room for improvement in compliance and security posture. The lack of WHOIS data for the domain is a notable anomaly that impacts trust and legitimacy assessments. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

I

Izzy Trading, s.r.o.

foxii.cz

39

FOXii is a specialized cloud-based service software targeting companies with field service operations, primarily in the Czech and Slovak markets. The platform enables digitalization of service workflows including planning, protocol creation, and technician tracking. The company behind FOXii, Izzy Trading, s.r.o., founded in 2019, presents a professional and consistent online presence with clear contact information and GDPR compliance. Technically, the website uses modern JavaScript libraries and cloud hosting on DigitalOcean, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers are missing. The site employs comprehensive cookie consent mechanisms and integrates multiple analytics and marketing tools with user consent.

C

CNC

cnc.cz

51

CNC is a Czech Republic-based company specializing in video communication and collaboration solutions, offering a broad portfolio of videoconferencing and teleconferencing equipment and services. With over 25 years of experience and more than 600 installations, CNC serves small to large companies across various sectors, emphasizing tailored solutions, ergonomic design, and comprehensive support including installation and training. The website is professionally designed, mobile-optimized, and provides clear contact channels and GDPR-compliant privacy and cookie policies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with secure HTTPS and reCAPTCHA protections on forms. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though the site lacks a dedicated security policy or incident response page. Overall, CNC presents a trustworthy and credible business with a solid digital presence.

J

Johnson & Johnson and its affiliates

yourheartyourrhythm.com

58

The website www.yourheartyourrhythm.com is an educational platform focused on atrial fibrillation (AFib) awareness and treatment options, specifically catheter ablation. It is branded as a Johnson & Johnson affiliated site, providing patient surveys, medical references, and testimonial videos to engage and inform individuals affected by AFib. The site targets patients seeking alternatives to medication and aims to educate on minimally invasive procedures. Technically, the site is built on Webflow with embedded third-party services such as Wistia for video hosting and a survey iframe from hydrant.83bar.com. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacks explicit security headers and incident response contact information. Privacy compliance is basic, with a privacy policy hosted externally but no cookie consent mechanism or terms of service page found. WHOIS data is missing, which raises concerns about domain legitimacy despite the professional content and branding. Overall, the site scores moderately well but would benefit from improved transparency and security practices.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

Q

Qcells North America

qcells.com

56

Qcells North America operates a professional website focused on delivering cutting-edge solar technology and sustainable energy solutions. The company targets a broad audience interested in renewable energy products and services, positioning itself as a significant player in the North American solar market. The website is built on WordPress with Elementor and incorporates modern technologies such as React and Google Maps API, indicating a mature digital infrastructure. The presence of cookie consent mechanisms and structured data enhances user experience and SEO. However, the absence of WHOIS domain registration data and lack of visible privacy policy or terms of service pages present compliance and trust challenges. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and explicit incident response contacts. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

Analytica ehf. is a small Icelandic financial advisory firm specializing in financial and risk management services for professional investors. Founded in 1993, the company leverages decades of expertise particularly in risk management and foreign exchange. Their website presents a professional image with clear descriptions of their services and target audience. Technically, the site uses JavaScript and jQuery for dynamic content but lacks modern CMS or advanced frameworks. Performance and mobile optimization are basic but functional. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and no DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is consistent and supports legitimacy with a domain age of over 13 years. Overall, the site is trustworthy but requires improvements in security and privacy compliance to meet modern standards.

E

Ektaco AS

ektaco.ee

53

Ektaco AS is an established Estonian technology company specializing in point-of-sale (POS) systems and workforce management solutions, with over 35 years of market presence. Their flagship products, CompuCash and CompuAccess, cater primarily to retail, hospitality, and manufacturing sectors, offering integrated hardware and software solutions. The company maintains a strong local market position supported by ISO 9001 certification and positive customer testimonials. Technically, the website is built on WordPress with modern integrations such as Google Analytics, Facebook Pixel, and Tawk.to live chat, complemented by a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforcement and reCAPTCHA protection on forms, though some security headers could be enhanced. Overall, the digital infrastructure supports a professional and trustworthy online presence.

K

Kuratorium Deutsche Altershilfe Wilhelmine-Lübke-Stiftung e. V.

kda.de

62

Kuratorium Deutsche Altershilfe Wilhelmine-Lübke-Stiftung e. V. (KDA) is a well-established German non-profit organization founded in 1962, focused on promoting a humane society for aging and self-determined living. It operates under the patronage of the German Federal President and provides research, consultancy, project management, and advocacy services in the fields of aging, care, and social participation. The organization targets older adults, care professionals, public and private institutions, and policymakers primarily in Germany with European outreach. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence.

T

Tschudi Shipping Company AS

eml.ee

69

Tschudi Shipping Company AS is a well-established, family-owned Norwegian shipping and logistics group with a history dating back to 1883. The company offers a broad range of integrated services including shipping, ship management, transshipment, energy advisory, ocean industries support, offshore wind support, logistics, and financial services. With offices in 12 countries and a strong presence in the Nordics, Baltic, and Continental Europe, Tschudi Group positions itself as a reliable partner for maritime and logistics solutions worldwide. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good privacy compliance practices. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IPs in analytics. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact information. The WHOIS data for the domain is incomplete or missing, which raises some concerns about domain registration transparency but does not directly contradict the legitimacy of the business given the strong branding and consistent subsidiary domains. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity. The main risks relate to domain registration transparency and the absence of detailed security policies. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust and compliance.

M

Mar-Com Rijeka

mar-com.hr

45

Mar-Com Rijeka is a small Croatian IT service company specializing in website creation, IT support, and graphic design with over 20 years of experience. The company targets local businesses and private individuals in Rijeka and surrounding areas, offering modern and affordable IT solutions. Their market position is supported by a portfolio of over 200 successful projects and positive client testimonials. Technically, the website employs modern web technologies such as jQuery, Slick Slider, and Google Fonts, with good mobile optimization and accessibility features including a UserWay widget. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small IT service provider.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitnovalja.net

35

visitnovalja.net is an established Croatian hospitality platform specializing in private accommodation listings on the island of Pag. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct contact options for travelers. It targets tourists seeking affordable and diverse lodging options in popular destinations such as Novalja, Stara Novalja, and surrounding areas. The business model focuses on connecting travelers directly with property owners, avoiding intermediaries. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and bot protection. The site is mobile optimized and provides a user-friendly search experience. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but lacks advanced security headers and has minor form input issues. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the domain registration is consistent and supports the legitimacy of the business. Strategic improvements in security and privacy compliance would enhance trust and user safety.

The website www.zrce.info serves as an informational and booking platform focused on the Zrce beach festival and party scene, providing accommodation and event details. It targets general audiences interested in travel and nightlife at Zrce beach. The site uses basic web technologies including jQuery, Bootstrap, and Google Analytics for tracking visitor behavior. However, the technical infrastructure lacks modern security features such as HTTPS and security headers, which exposes visitors to potential risks. The absence of privacy and cookie policies further indicates low compliance with data protection standards. The WHOIS data is unavailable due to a malformed request response, limiting the ability to verify domain registration legitimacy and ownership details, which reduces trustworthiness. Overall, the site is functional but basic in design and content quality, with significant room for improvement in security and compliance.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitpag.net

35

Visitpag.net is an established Croatian online accommodation platform specializing in private rentals on the island of Pag, particularly in Novalja and surrounding areas. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct booking contact forms, targeting tourists seeking affordable and direct accommodation options. The business operates with a mature domain registered since 2014 and maintains a consistent brand presence with a focus on local hospitality services. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, providing a moderately optimized user experience including mobile responsiveness. Security posture is basic with HTTPS implied but lacking advanced security headers and best practices, and privacy compliance is minimal with no cookie consent mechanisms despite GDPR applicability. Overall, the site is functional and credible but would benefit from enhanced security and privacy features to improve trust and compliance.

C

Catalystic

catalystic.cz

43

Catalystic.cz is a small, Czech Republic-based independent platform focused on interdisciplinary research, non-formal education, and public outreach related to exponential changes in technology and society. The website presents a clear business model centered on fostering creativity, criticality, and exponentiality through research initiatives, educational programs, and partnerships. The site uses modern web technologies including Three.js for interactive graphics and is hosted on Forpsi servers with Webflow CMS. While the website is well-designed with good navigation and mobile optimization, it lacks critical compliance documents such as privacy and cookie policies, and does not provide incident response or vulnerability disclosure information. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

P

PagFerry.com

pagferry.com

45

PagFerry.com is a small Croatian website providing up-to-date ferry schedules, real-time ferry status, weather forecasts, and webcam feeds for the Prizna - Žigljen ferry route. It serves a niche audience of travelers and locals seeking reliable maritime transport information. The website is well-branded and consistent, with a clear focus on transportation services in the Croatian region. Technically, the site leverages modern web technologies including AMP for mobile optimization, jQuery, Bootstrap, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and registers a service worker, but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site is functional and useful but would benefit from enhanced security practices and verified domain registration to improve trustworthiness.

E

Eesti E-kaubanduse Liit

e-kaubanduseliit.ee

53

Eesti E-kaubanduse Liit is a well-established non-profit association uniting over 530 reputable e-commerce businesses in Estonia, operating for more than 16 years. The organization focuses on fostering collaboration, trust, and growth within the Estonian e-commerce sector by providing education, events, legal guidance, and a recognized trustmark certification called 'Turvaline ostukoht'. The website reflects a mature market position with strong community engagement and a clear mission to improve the e-commerce ecosystem in Estonia. Technically, the site is built on Webflow, leveraging modern web technologies and Google Tag Manager for analytics and consent management. The site is mobile-optimized, accessible, and professionally designed, providing a positive user experience. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism integrated with Google Consent Mode, although some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website and business demonstrate high credibility and trustworthiness.

R

Regional Development Agency DUNEA LLC.

dubrovnik-neretva.eu

42

The website represents the official Representation Office of the Dubrovnik-Neretva Region in Brussels, serving as a liaison and promotional platform for the region within the European Union. It highlights the Regional Development Agency DUNEA, which coordinates sustainable development and project management for the region. The site targets regional stakeholders, investors, EU institutions, and the general public interested in regional development. Technically, the site is built on Joomla CMS with a modern but moderate tech stack including Bootstrap, jQuery, and Revolution Slider, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but would benefit from enhanced privacy and security measures.

Europe Direct Dubrovačko-neretvanske županije operates as a regional EU information center in Croatia, providing citizens with access to EU-related information, events, and services. The website serves as a communication platform to engage the public in discussions about the European Union's future and policies. It is funded by the European Union and acts as a trusted source for regional EU news and resources. The organization targets local citizens and stakeholders interested in EU affairs, promoting transparency and participation.

T

Tera Tehnopolis d.o.o.

tera.hr

53

Tera Tehnopolis d.o.o. is a Croatian business incubator and technology transfer organization established in 2003, focused on promoting innovation, entrepreneurship, and the connection between science and the economy. The company offers a range of services including business incubation, technology transfer, consulting, education, and 3D laboratory services, targeting entrepreneurs, startups, and SMEs primarily in the Osijek region and beyond. The website demonstrates a professional digital presence with consistent branding and active social media channels. Technically, the site is built on WordPress with modern plugins and SEO tools, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and basic best practices, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Zakon.hr is a well-established Croatian legal information portal operated by cyber_Folks d.o.o., providing comprehensive access to laws, regulations, and legal documents. The website targets legal professionals, businesses, and the general public seeking reliable legal information. It maintains a strong market position as a leading legal resource in Croatia, supported by updated content and a related AI legal assistant service, Zakon.ai. The business model appears to be a combination of subscription and advertising revenue streams.

V

Vodovod i kanalizacija d.o.o.

vik-ka.hr

55

Vodovod i kanalizacija d.o.o. Karlovac is a well-established regional utility company founded in 2002, providing water supply and sewage management services primarily in Karlovac and surrounding areas in Croatia. The company emphasizes quality and environmental responsibility, as evidenced by its ISO 9001 and ISO 14001 certifications. Their website reflects a professional and user-focused approach, offering comprehensive information, customer support, and transparency through detailed policies and contact channels. Technically, the site uses Joomla CMS with modern web technologies and is hosted behind Cloudflare, ensuring good performance and security. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website and business demonstrate high legitimacy and trustworthiness with a solid digital presence.

R

Runa Capital

runacap.com

68

Runa Capital is a well-established global venture capital firm specializing in early-stage investments in software and deep tech startups. With over $600 million in assets under management and a presence in multiple countries, the firm targets deeptech, enterprise software, and fintech infrastructure sectors. The website reflects a professional and consistent brand image, supported by a modern WordPress infrastructure and comprehensive SEO optimization. The firm maintains multiple global offices, reinforcing its international market position. Technically, the website employs a modern tech stack including Google Analytics, HubSpot, and Cloudflare DNS services, ensuring good performance and mobile optimization. The site is secured with HTTPS and domain registration protections, although DNSSEC is not enabled. Privacy compliance is partially addressed with a clear privacy policy, but lacks a cookie consent mechanism and explicit security policies. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers, vulnerability disclosure policies, and incident response contacts. Overall, the website is trustworthy and professional, with moderate user tracking and good advertising transparency. Strategically, Runa Capital should focus on enhancing privacy compliance and security transparency to align with evolving regulatory requirements and improve user trust further.

A

Age-Friendly University Global Network

afugn.org

63

The Age-Friendly University Global Network is a non-profit organization focused on promoting positive and active aging through higher education institutions worldwide. The website serves as a hub for membership, resources, research, and advocacy related to age-friendly university principles. The network is affiliated with Arizona State University, which adds credibility and institutional support. The website is built on the Squarespace platform, featuring a professional design, clear navigation, and mobile optimization. However, the absence of a privacy policy and WHOIS registrant data limits full trust verification. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit security policies or incident response contacts. Overall, the site is suitable for its educational and non-profit mission but could improve compliance and transparency.

Die Schlösserstrasse is a regional development association focused on promoting cultural tourism and heritage sites, specifically castles and fortresses in Southeast Austria and Slovenia. The website serves as an information hub for tourists and cultural enthusiasts, offering event announcements, booking options, and educational content. The organization appears to have a solid market position within its niche, supported by regional tourism partners and a network of castles. Technically, the website uses basic web technologies such as jQuery and JavaScript, with moderate performance and basic mobile optimization. Security posture is average, with no HTTPS or security headers information available from the provided data, and no cookie consent mechanism detected despite EU audience relevance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, although the website content and partner references suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from improved technical and security measures.

The website www.prekmurjevsrcu.si is a small regional cultural site dedicated to the Prekmurje Slovene community, emphasizing cultural unity with the mother nation. The site is modest in content and design, primarily serving informational and community awareness purposes. It does not appear to operate as a commercial business and lacks detailed business information or contact channels. Technically, the site uses common frontend libraries such as jQuery, Bootstrap, Font Awesome, Fancybox, and Owl Carousel, indicating a basic but functional technical infrastructure. The site is mobile responsive and moderately performant but lacks advanced SEO and accessibility features. Security posture is weak due to the absence of HTTPS enforcement information, security headers, and privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe with no adult or questionable content but requires significant improvements in security, privacy compliance, and business transparency to enhance credibility and user trust.

Z

Zavod za kulturo, turizem in šport Murska Sobota

visitmurskasobota.si

50

Visit Murska Sobota is a regional tourism and cultural promotion website managed by the Zavod za kulturo, turizem in šport Murska Sobota. The site provides comprehensive information about local events, sustainable transport options, accommodation, dining, and cultural experiences targeting tourists and local visitors. The business operates as a small regional institute focused on enhancing the visibility and attractiveness of Murska Sobota and the Pomurje region. Technically, the website is built on WordPress with multilingual support and integrates common marketing and analytics tools such as Google Analytics and Tag Manager. The site is hosted by NEOSERV.si, a Slovenian hosting provider, and uses HTTPS with a good SSL configuration. Security posture is adequate with cookie consent and GDPR compliance, though it lacks some security headers and has an expired Instagram API token causing feed errors. Overall, the website is professional, trustworthy, and well-structured, with clear contact information and partner affiliations. Strategic improvements include renewing third-party API tokens, enhancing security headers, and improving accessibility features.

D

e-Documenta Pannonica – Čezmejna baza podatkov o kulturni dediščini izbranih 120 krajev na čezmejnem slovensko-madžarskem območju – Prekmurja v Sloveniji in Železne županije na Madžarskem

documenta-pannonica.si

52

The website www.documenta-pannonica.si serves as a cross-border cultural heritage database focusing on 120 selected locations in the Slovenian-Hungarian border region, specifically Prekmurje in Slovenia and the Železna županija in Hungary. It provides detailed information on archival materials, immovable and intangible cultural heritage, notable personalities, and audio-visual content. The platform targets researchers, historians, and cultural enthusiasts interested in this niche area. The multilingual support (Slovenian, Hungarian, English) enhances accessibility for a broader audience. Technically, the site is built on WordPress with common plugins for multilingual content and GDPR cookie compliance, hosted by a Slovenian provider. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and formal privacy or security policies. Analytics are implemented via Google Analytics with moderate user tracking. Overall, the site is professionally designed with consistent branding and trustworthy content, though it would benefit from enhanced privacy documentation and security hardening.

H

Hrvatski zavod za zdravstveno osiguranje

hzzo.hr

60

Hrvatski zavod za zdravstveno osiguranje (HZZO) is the Croatian Institute for Health Insurance, a government entity responsible for providing mandatory and supplementary health insurance services to Croatian citizens and business entities. The website serves as a comprehensive portal offering information on health insurance, parental support, e-health services, and access to various forms and contact points. It targets both individual citizens and business partners, positioning itself as the national authority in health insurance within Croatia. Technically, the website is built on Drupal 11 CMS, utilizing modern web technologies including jQuery, Hotjar for user behavior analytics, and Google Tag Manager for marketing and analytics integration. The site is mobile optimized, accessible, and well-structured with clear navigation and professional design. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers like Content-Security-Policy are not clearly detected, the site follows good security practices typical for government portals. No vulnerabilities or exposed sensitive data were found in the HTML content. However, incident response and security policy pages are not publicly available, which could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The lack of WHOIS data is due to GDPR restrictions and does not detract from the legitimacy of the domain, which is a Croatian government domain. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and adding a vulnerability disclosure policy to improve transparency and security posture.

Općina Krapinske Toplice operates an official municipal website providing comprehensive information and services to residents and stakeholders of the Krapinske Toplice municipality in Croatia. The site offers detailed administrative content including organizational structure, public notices, procurement, and community engagement resources. The website is positioned as a local government authority portal, serving a small-sized municipality with a focus on transparency and public service. Technically, the site is built on WordPress CMS using Elementor page builder, leveraging modern web technologies such as jQuery and Font Awesome for UI elements. Hosting and domain registration are consistent with a Croatian academic network provider, ensuring local presence and legitimacy. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the website is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation.

The website www.rogatec.si serves as the official digital presence for the Zavod za kulturo, turizem in razvoj Rogatec, a local government entity focused on cultural heritage, tourism, and community development in Rogatec, Slovenia. It provides comprehensive information about local attractions, events, visitor programs, and public procurement, positioning itself as a key resource for tourists and residents alike. The site demonstrates a strong commitment to cultural promotion and community engagement through detailed event calendars, virtual tours, and craft center offerings. Technically, the website is built on a modern WordPress platform with a robust tech stack including Yoast SEO, event calendar plugins, and GDPR compliance tools. It integrates well-known marketing and analytics services such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the presence of security plugins and absence of exposed sensitive data suggest a reasonable security posture. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration history. Overall, www.rogatec.si is a professionally managed, secure, and compliant website that effectively supports its mission of cultural and tourism promotion. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving incident response visibility to further strengthen its security and trustworthiness.

R

Razvojna agencija Sotla

ra-sotla.si

40

Razvojna agencija Sotla is a Slovenian regional development agency established in 2003, focusing on regional development programs, entrepreneurship support, and project management primarily in the Obsotelje and Kozjansko regions. The agency operates as a non-profit entity serving local governments, entrepreneurs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern plugins such as Elementor and Events Manager, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR cookie requirements, and free from suspicious indicators.

M

MAMFORCE

incq-all.com

51

INC.Q, operated by MAMFORCE, is a recently established company (founded in 2023) specializing in Diversity, Equity, and Inclusion (DEI) certifications, consulting, and training services. The company positions itself as a leader in DEI initiatives across Europe, offering a range of services including DEI certification, equal pay certification, ESG data reporting, and employer branding. The website reflects a professional and consistent brand image, targeting businesses seeking to improve their DEI practices and employee engagement. The digital infrastructure is built on WordPress with modern marketing and analytics integrations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some best practices, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained, though the domain is very new, aligning with the company's recent founding.

B

Baltic Human Rights Society

baltichumanrights.org

48

Baltic Human Rights Society (BHRS) is a non-profit organization dedicated to promoting human rights awareness and education in Latvia and the broader Baltic region. The organization focuses on fostering a culture of human rights through educational initiatives, advocacy, and collaborative projects with regional and international partners. The website reflects a well-structured platform aimed at human rights educators, activists, NGOs, and the general public interested in human rights issues. BHRS maintains partnerships with reputable European and Baltic institutions, enhancing its credibility and regional influence. Technically, the website employs standard web technologies including jQuery and SVG4Everybody for compatibility and user experience enhancements. It features a cookie consent mechanism compliant with GDPR principles, although no advanced security headers or analytics services are detected. The site is mobile-optimized with good navigation and content quality, though SEO and accessibility could be improved. The WHOIS data is unavailable or restricted, which limits domain trust verification but does not detract significantly from the site's legitimacy given the content and partner affiliations. From a security perspective, the site uses HTTPS (assumed from canonical URLs and modern standards) and implements cookie consent with opt-in, indicating privacy awareness. However, the absence of visible security headers and incident response contacts suggests room for improvement in security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site presents a moderate security maturity level appropriate for a non-profit educational organization. The overall risk assessment is low, with the primary concern being the lack of WHOIS transparency and limited security policy disclosures. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and providing clear contact information for incident response. These steps would improve trust and compliance, supporting BHRS's mission and stakeholder confidence.

S

SEO.Domains

seo.domains

57

SEO.Domains operates a leading global marketplace specializing in aged and expired domains, boasting ownership of approximately 70% of the global supply with over 150,000 domains. Their services cater primarily to SEO professionals, digital marketers, and agencies seeking domains for PBNs, 301 redirects, or money sites, alongside backlink offerings and managed SEO services. The company has established a strong market position since its founding in 2014, supported by multiple registrar accreditations and a broad international client base.

WBS.LEGAL is a well-established German law firm specializing in media, internet, e-commerce, and related legal fields with over 30 years of experience. The firm operates nationwide with a strong digital presence, offering comprehensive legal services and free initial consultations. Their website reflects a professional and trustworthy brand with extensive content, client testimonials, and active social media engagement. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and consent management, though explicit security headers could be enhanced. Overall, the domain's WHOIS data is privacy-protected, which is typical for professional legal entities, and no suspicious indicators were found.

D

DGD Deutsche Gesellschaft für Datenschutz

dg-datenschutz.de

50

DGD Deutsche Gesellschaft für Datenschutz is a specialized small business providing professional external data protection officer services and consulting for companies, trade businesses, works councils, associations, and internal whistleblower offices under the German Whistleblower Protection Act. Their market position is that of a niche GDPR compliance and data protection consultancy focused on delivering expert advice and risk minimization to clients. The website is built on WordPress using Elementor, reflecting a moderate to good level of digital maturity with a professional design and good mobile optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though lacking explicit security headers and incident response information. Overall, the site is trustworthy, compliant, and well-structured, serving its target audience effectively.

T

Tech Funding News

techfundingnews.com

68

Tech Funding News is a specialized online media platform delivering global technology startup funding news, covering sectors such as AI, fintech, crypto, and venture capital. The website targets technology startup founders, investors, and industry professionals seeking timely funding updates and insights. The platform operates on WordPress with a modern tech stack including Yoast SEO, Mailchimp integration, and Google Analytics for tracking and marketing. Hosting and DNS services involve GoDaddy and Cloudflare respectively, ensuring reliable domain management and performance. Security posture is solid with HTTPS enforced and domain locks in place, though DNSSEC is not enabled and no explicit privacy or security policies are published. The site includes cookie consent mechanisms but lacks a formal privacy policy and terms of service, which are critical for GDPR compliance. Contact is primarily through newsletter subscription forms without direct emails or phone numbers. Overall, the website presents professional content with good design and navigation, but could improve privacy transparency and security disclosures.

T

Tech Nation

technation.io

66

Tech Nation is a prominent UK-based growth platform and industry body dedicated to supporting tech startups and entrepreneurs across the UK. Powered by Founders Forum Group, it offers a comprehensive suite of programmes, events, and policy advocacy initiatives designed to empower startups from seed stage to IPO and beyond. The organization targets ambitious tech founders, providing them with practical knowledge, networking opportunities, and peer communities to scale their ventures effectively. Its market position as a leading UK tech ecosystem enabler is reinforced by partnerships with major entities such as HSBC Innovation Banking and a strong alumni network including notable companies like Revolut and Deliveroo. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, slick.js, flatpickr, and multiple analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and CookieHub. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Hosting is via Amazon AWS, and the domain is secured with HTTPS and domain locking mechanisms, although DNSSEC is not enabled. From a security perspective, the site follows best practices with HTTPS, security headers, and cookie consent mechanisms. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure information. The domain WHOIS data is privacy protected but consistent with a legitimate and mature organization. No critical vulnerabilities or suspicious patterns were detected. Overall, Tech Nation presents a professional, trustworthy, and well-maintained digital presence aligned with its mission to support UK tech entrepreneurship. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and adding a security.txt file to enhance transparency and security posture.

B

Brainz Narrative s.r.o.

brainznarrative.cz

55

Brainz Narrative s.r.o. is a creative PR studio based in the Czech Republic, specializing in bold communication strategies with a focus on innovative projects, fast-growing technology startups, and the cultural industry. The company is part of the Brainz Studios group, which includes related entities such as Brainz Disruptive and Brainz Immersive. Their business model centers on delivering tailor-made PR solutions emphasizing authenticity, insight, and chemistry with clients. The website reflects a professional and modern digital presence, leveraging Webflow CMS and various JavaScript libraries to provide a responsive and engaging user experience. Contact information and social media links are clearly presented, supporting business credibility.