Security Directory

W

Wagner-Bazin WB

wagner-bazin-wb.com

42

Wagner-Bazin WB is a professional cycling team based in France, providing news, team information, race calendars, and merchandise through their official website. The site targets cycling enthusiasts and supporters, offering a well-structured and visually consistent platform. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Brevo. The site is mobile-optimized and SEO-friendly, with a moderate performance profile. Security-wise, HTTPS is enforced and cookie consent is managed via Axeptio, but there is a lack of visible security headers and no explicit privacy policy or terms of service pages, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and social media presence suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

G

Großmarkt Rostock GmbH

rostocker-weihnachtsmarkt.de

45

The Rostocker Weihnachtsmarkt website represents the largest Christmas market in Northern Germany, organized by Großmarkt Rostock GmbH. It serves a broad audience including visitors, families, vendors, and travel organizers by providing detailed event information, attractions, special actions, and an online shop for exclusive products. The business holds a strong market position as a leading regional event in the hospitality and retail sectors. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, hosted by Alfahosting, and includes a cookie consent mechanism and Google Analytics with privacy features enabled. Security posture is moderate with HTTPS enabled and privacy compliance evident, though improvements in security headers and incident response documentation are recommended. Overall, the site is professional, trustworthy, and well-structured, supporting a positive user experience.

P

pxmedia.PRO

pxmedia.pro

59

pxmedia.PRO is a German B2B service provider specializing in done-for-you marketing and recruitment solutions aimed at medium-sized companies in the DACH region. With over 15 years of experience, the company focuses on helping clients systematically acquire profitable new customers and qualified employees to enable sustainable growth. The website demonstrates a professional and consistent brand presence with strong customer testimonials and a clear value proposition. Technically, the site is built on WordPress with the Divi theme and uses modern tools such as Google Analytics and Borlabs Cookie for tracking and consent management. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy page found, which is a notable gap. Overall, the domain registration is privacy protected but consistent with the business claims, and no suspicious patterns were detected.

The website www.locator-tzzz.com serves as an interactive tourism portal for Zagrebačka županija (Zagreb County) in Croatia. It is operated by the Turistička zajednica Zagrebačke županije, a public non-profit organization focused on promoting tourism within the region. The site offers an interactive map, listings of points of interest, accommodations, events, and cycling routes, targeting tourists and visitors interested in exploring the area. The business model is non-commercial, aiming to support regional tourism development. Technically, the website employs a range of established web technologies including Google Maps API, jQuery, Bootstrap, and various UI libraries to provide a responsive and interactive user experience. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of CSRF tokens in forms is a positive sign, but the absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness despite the professional appearance of the site. Overall, the website provides valuable regional tourism information but suffers from significant security and compliance gaps. The unclear domain registration status is a critical risk factor. Strategic improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance trust and protect users.

D

DMK Vall 042 d.o.o.

okusi.hr

41

Okusi hrvatske tradicije is a Croatian tourism and gastronomy promotion platform operated by DMK Vall 042 d.o.o., focusing on showcasing traditional Croatian cuisine, wines, and local agricultural products. The website targets tourists and gastronomy enthusiasts interested in authentic Croatian culinary experiences. It collaborates with local and county tourist boards to enrich the tourism offer with gastronomic content. Technically, the website is built on Joomla CMS using Bootstrap 3 and FontAwesome, with moderate performance and good mobile optimization. Security posture is moderate with no detected security headers or privacy policies, and SSL status is unknown from the provided data. Contact information is clearly provided, and social media presence includes Facebook and YouTube. Overall, the site is professional and trustworthy but lacks formal privacy and security disclosures.

T

Turistička zajednica Zagrebačke županije

tzzz.hr

44

Visit Zagreb County is the official tourism portal for the Zagreb County region in Croatia, managed by the Turistička zajednica Zagrebačke županije. The website serves as a comprehensive guide for tourists, offering information on cultural events, gastronomy, active holidays, health tourism, and sustainable tourism initiatives. It targets visitors interested in exploring the natural beauty and cultural heritage of the Zagreb County area. The business operates as a regional tourism authority, promoting local attractions and events to enhance tourism in the region. Technically, the website is built on WordPress using the Elementor page builder, with jQuery and several plugins for spam protection and accessibility. The hosting provider is Plus Hosting Grupa d.o.o., a Croatian hosting company. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured content. From a security perspective, the site uses HTTPS and includes spam protection and an accessibility widget. However, it lacks important security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie banner or detailed security policies. Overall, the website is trustworthy and professionally maintained, with a clear focus on tourism promotion. Strategic improvements in security headers, privacy compliance, and contact information visibility would enhance its security posture and user trust.

K

KLISAB

klisab.com

45

KLISAB is a Croatian fashion brand specializing in modern clothing and accessories for men and women, founded in 2020 by designers Tomislav Kliškinić and Marko Šabarić. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting fashion-conscious consumers primarily in Croatia. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technical infrastructure leverages popular WordPress plugins and themes, including GDPR-compliant cookie consent mechanisms and analytics integrations such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled and domain registration transparency, though improvements in DNSSEC and security headers are recommended. Overall, the site is trustworthy and compliant with privacy regulations, supporting a positive user experience.

I

Ipša – Maslinova ulja

ipsa-maslinovaulja.com

45

The website appears to be a Croatian language site focused on olive oil products, likely representing a small business in the energy/agriculture sector. The domain is well established since 2009, indicating a stable presence. The technical infrastructure is based on WordPress with common plugins and libraries, showing a moderate level of digital maturity. However, the site lacks critical privacy and cookie policies, contact information, and security best practices such as security headers and DNSSEC. No advanced analytics or tracking mechanisms were detected, suggesting minimal user tracking. The security posture is basic with room for improvement in SSL enforcement and header implementation. Overall, the site is functional but lacks comprehensive compliance and security features, which could impact user trust and regulatory adherence.

Z

ZKM

zekaem.hr

10

Zagrebačko kazalište mladih (ZKM) is a well-established cultural institution in Croatia focused on theatrical performances and educational programs. The website serves as a portal for event schedules, ticket sales, and news updates, targeting the general public interested in theater and culture. The organization maintains an active digital presence with social media integration and multilingual support via Google Translate. The domain age and WHOIS data confirm legitimacy and consistency with the business profile. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Ultimate VC Addons, and GDPR compliance tools like Complianz. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional and trustworthy cultural institution with good privacy compliance and user experience. However, it lacks explicit security policies and incident response contacts, which could enhance trust and preparedness. The site uses Google Analytics and Facebook Pixel for analytics and marketing, with appropriate consent mechanisms. Strategic recommendations include enhancing security headers, publishing a security policy, and conducting regular security audits to maintain and improve the security posture.

A

Abalone d.o.o.

abalone.hr

10

Abalone d.o.o. operates the Abalone Hotel & Apartments located on the Crikvenica Riviera in Croatia, providing hospitality services including hotel rooms and apartments. The business targets tourists and travelers seeking accommodation in this coastal region. The website is professionally designed using WordPress with modern plugins and themes, hosted on HostGator, and includes multilingual support. It demonstrates a moderate level of digital maturity with SEO and mobile optimization in place. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR cookie requirements but could improve in security transparency and contact information visibility.

A

Alan Hržica

alanhrzica.com

10

Alan Hržica is a recognized Croatian Christian musician with a professional online presence promoting his music albums, concerts, and videos. The website serves as a personal branding platform targeting Croatian-speaking audiences interested in spiritual and religious music. The site is built on WordPress using the Salient theme and WPBakery Page Builder, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is addressed with a cookie consent banner and a basic cookie policy page, though no privacy policy or terms of service are explicitly found. Contact information is limited to social media links without direct emails or phone numbers. Overall, the website is professional and trustworthy but could improve security and compliance documentation.

Portal narodnih knjižnica is a Croatian national library portal established in 2016, providing comprehensive administrative data, digital and regional collections, and library-related news and projects. It serves a broad audience including the general public, researchers, and minority communities in Croatia. The website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. The portal is positioned as an authoritative resource in the Croatian library sector with consistent branding and good content quality. Technically, the site is moderately performant and mobile-optimized but lacks explicit security headers and detailed security policies. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response documentation. Overall, the site is trustworthy, safe, and professionally maintained, with a strong alignment between WHOIS registration data and website content.

V

Virtualna Tvornica

virtualna-tvornica.com

10

Virtualna Tvornica is a Croatian digital agency specializing in web development and online marketing services, established in 2012. The company offers a broad range of services including web shop creation, website and web application development, AI and ERP integration, and various digital marketing solutions such as Google, Meta, and TikTok advertising. Their market position is that of a specialized, small-sized agency with a consistent brand presence and a portfolio of successful projects. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices, and integrates standard marketing and security tools like Google Tag Manager and reCAPTCHA. Security posture is good with HTTPS and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

S

Stena Projects

stena-projects.eu

45

Stena Projects is a Croatian-based company specializing in the design and manufacture of handcrafted interior and exterior decorative elements, including stone and wood wall claddings, 3D decorations, decorative columns, and custom projects. The company targets customers seeking elegant and modern design solutions that blend art and nature. Their market position is that of a niche provider with a focus on quality and craftsmanship. Technically, the website is built on WordPress using modern plugins such as WPBakery and Slider Revolution, with multilingual support via WPML. The site is hosted by a Croatian hosting provider, Plus Hosting Grupa d.o.o., and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in privacy and security documentation.

K

Kazalište Ulysses

ulysses.hr

42

Kazalište Ulysses is a well-established theatre company based in Zagreb, Croatia, with a domain registered since 2001. The company offers theatrical performances, concerts, and cultural events, targeting a general audience interested in arts and culture. Their website is built on WordPress, utilizing common plugins for event management, multilingual support, and newsletter subscriptions. The site is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website reflects a credible and trustworthy cultural institution with active content and community engagement.

T

Teatar uz more

teataruzmore.com

49

Teatar uz more is a cultural theater festival based in Croatia, established in 2021, focusing on organizing theater events and performances primarily in Split and surrounding regions. The website serves as a platform for event scheduling, ticket sales, and festival information targeting theater enthusiasts and the general public interested in cultural events. The business operates on a small scale with a clear regional focus. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Contact Form 7, and Revolution Slider, indicating a mature but standard digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and some advanced security headers, suggesting room for improvement. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in Croatian language, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-positioned within its niche cultural sector.

K

Kerekesh Teatar

kerekesh.hr

46

Kerekesh Teatar is a Croatian theatre company specializing in comedic and cultural performances, with a strong regional presence and active event scheduling. The website serves as a portal for event information, ticket sales, and company background, targeting a general audience interested in theatre arts. Technically, the site is built on WordPress with modern plugins and libraries, including Google Analytics and GDPR compliance tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though improvements could be made in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business.

O

Obiteljski centar

obiteljski.hr

48

Obiteljski centar is a Croatian public institution dedicated to providing counseling services and programs aimed at children, youth, parents, and families. The organization operates with a mission to support personal growth, strengthen family relationships, and foster community engagement. Their services are offered free of charge, emphasizing accessibility and social welfare. The website reflects a well-established entity with a domain age consistent with its founding year of 2013. The content is professionally presented in Croatian, targeting local audiences in need of social and family support services. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. While the hosting provider is not explicitly identified, the site uses HTTPS with a good SSL configuration, contributing to secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of a security policy or incident response page suggests room for enhancement in security transparency. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a clear focus on social services. Recommendations include implementing additional security headers, publishing security policies, and maintaining regular updates to WordPress and plugins to sustain security posture.

S

Scenoteka Zagreb

scenoteka.hr

48

Scenoteka Zagreb is a cultural and theatrical venue located in the heart of Zagreb, Croatia, offering a platform for independent theater productions, stand-up comedy, and other performing arts. The organization focuses on providing accessible cultural experiences and operates through event organization, ticket sales, and venue rental. The website reflects a well-established regional cultural institution with a clear target audience of theater enthusiasts and local community members. Technically, the website is built on WordPress using modern themes and plugins, ensuring a responsive and visually appealing user experience. The presence of structured data and social media integration enhances its digital maturity. Security-wise, the site enforces HTTPS and includes GDPR-compliant cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's cultural mission effectively.

P

Pozitivan ritam

pozitivanritam.hr

44

Pozitivan ritam is a Croatian independent media and event organization specializing in music festivals, club events, and independent music production and distribution. The website showcases a variety of music-related content including festival announcements, club event schedules, and record label news, targeting music enthusiasts primarily in Croatia and the surrounding region. The business operates multiple music venues and organizes notable festivals such as Sea Sound Festival and Martinska Punk, positioning itself as a key player in the regional independent music scene. Technically, the website is built on Drupal CMS with a modern tech stack including jQuery, Font Awesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate, with standard use of third-party scripts and advertising networks. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, but could improve by adding additional security headers and tightening CSP rules. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a GDPR-compliant cookie consent banner and a privacy policy page in Croatian. However, no terms of service or explicit contact information for security or incident response was found. Overall, the website presents a professional and trustworthy front for a small independent music business. The lack of WHOIS data due to privacy protection is typical and justified for this business type. Recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve trust and compliance.

H

Hrvatsko knjižničarsko društvo

hkdrustvo.hr

10

Hrvatsko knjižničarsko društvo is a well-established Croatian non-profit professional association dedicated to the advancement of librarianship since 1940. The organization provides key services including organizing professional events, publishing scholarly journals, and advocating for Croatian libraries. Their website reflects a strong market position within the Croatian educational and cultural sectors, targeting library professionals and researchers. The site is professionally designed with consistent branding and rich content relevant to its audience. Technically, the website is built on a modern WordPress platform with WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Google Analytics for user tracking. The infrastructure is hosted under Croatian academic network CARNET, ensuring regional consistency and reliability. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility. From a security perspective, the website enforces HTTPS and uses standard WordPress security practices but lacks explicit security headers and published security policies. There is no visible cookie consent mechanism, which is a compliance gap under GDPR. No vulnerabilities or malicious content were detected, but the absence of incident response information and vulnerability disclosure reduces the overall security maturity. Overall, the website is trustworthy and professional with a solid business credibility score. Strategic recommendations include implementing GDPR-compliant cookie consent, publishing security and incident response policies, and enhancing security headers to improve the security posture and compliance. These improvements will strengthen user trust and regulatory adherence.

N

Nacionalna i sveučilišna knjižnica u Zagrebu

nsk.hr

10

The website represents the Nacionalna i sveučilišna knjižnica u Zagrebu, the largest Croatian national and university library. It serves as a central resource for academic and public users in Croatia, providing extensive library services and resources. The domain is well-established since 1997 and registered under CARNET, a reputable Croatian academic network, supporting its legitimacy. Technically, the site is built on WordPress with modern SEO and accessibility features, including multilingual support and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be enhanced. User tracking is moderate via Google Analytics and Tag Manager. Overall, the site is professional, trustworthy, and safe for general audiences.

K

Knjižnice grada Zagreba

kgz.hr

10

Knjižnice grada Zagreba operates as the official public library network for the City of Zagreb, Croatia. The website provides comprehensive information about library services, locations, events, and digital resources targeting a broad audience including children, youth, and adults. The organization is positioned as a key cultural and educational institution within the region, with a history dating back to 2000. The site demonstrates consistent branding and a professional online presence with active social media engagement.

G

Getim d.o.o.

getim.hr

10

Getim d.o.o. is a Croatian IT company established in 1998, providing comprehensive IT solutions including sales and servicing of computer equipment, IT system maintenance, remote support, web design, hosting, and marketing services. The company positions itself as a key IT partner for business clients in Croatia, offering tailored solutions to meet diverse client needs. The website reflects a professional and consistent brand image with clear contact information and a modern technical infrastructure based on Joomla CMS and Helix Ultimate framework. Security posture is solid with HTTPS enabled and no exposed sensitive data, though there is room for improvement in privacy compliance and security headers. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

G

Gärtner von Eden e.G.

gaertner-von-eden.de

56

Gärtner von Eden e.G. is a professional garden design and construction company based in Germany, specializing in exclusive garden planning and landscaping services. The company targets private and commercial clients seeking high-quality garden solutions. Their website reflects a mature digital presence with a focus on user experience, SEO, and privacy compliance. Technically, the site is built on WordPress using the Divi theme, incorporating modern tools such as hCaptcha and Cookiebot for security and privacy. Security posture is good with HTTPS and security headers implemented, though the absence of a public security policy and incident response details suggests room for improvement. The domain WHOIS data is missing, which raises concerns about domain legitimacy, but the website content and business information appear consistent and professional. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to enhance trust.

J

JAKO AG

jako.de

69

JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children. The company targets sports teams, clubs, and individual consumers, offering a wide range of customizable sports apparel and accessories. The website demonstrates a mature digital presence with modern search capabilities, multi-language support, and integration of trusted third-party services such as Trusted Shops for customer assurance. Technically, the site employs contemporary JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Security measures include HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall site professionalism and trust signals mitigate this concern. Strategic recommendations include enhancing transparency around security policies and providing clear contact information to improve user trust and compliance posture.

T

Thomastik-Infeld GmbH

thomastik-infeld.com

71

Thomastik-Infeld GmbH is a well-established Austrian company specializing in the development and production of high-quality music strings since 1919. The company targets musicians and music professionals worldwide, offering a broad portfolio including orchestral, guitar, and folk strings. Their website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce and consulting tools. Technically, the site employs modern frameworks such as Bootstrap and jQuery, enhanced with Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy, professional, and compliant with GDPR, serving as a strong digital asset for the company.

P

Plus Hosting Grupa d.o.o.

nacional.hr

59

Nacional.hr is a Croatian political news portal operated by Plus Hosting Grupa d.o.o., established in 2014. It serves as a leading platform for political news and analysis targeting the Croatian-speaking audience. The website leverages WordPress CMS with a variety of plugins for content management, advertising, and user engagement. It employs Cloudflare for DNS and security, ensuring robust protection and performance. The site integrates multiple advertising networks and analytics services, including Google Analytics, Gemius, and Umami, to optimize monetization and user insights. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Croatian, aligned with GDPR requirements. However, direct contact information and explicit security policies are not publicly available, which could be improved to enhance trust and transparency.

D

DIGITALNI SVEMIR, računalalno programiranje

digitalnisvemir.hr

10

DIGITALNI SVEMIR is a Croatian small technology service provider specializing in web design, mobile application development, ecommerce solutions, and IT maintenance. Founded in 2015, the company serves a variety of clients primarily in Croatia, including cultural institutions and businesses. Their website showcases a professional portfolio and clear contact information, reflecting a credible and established presence in the local market. Technically, the website is built on WordPress with Elementor and the Bridge theme, indicating a modern and maintainable infrastructure. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal security policies. Overall, the website is trustworthy and professional, though it would benefit from adding privacy and terms of service pages to improve compliance and user trust.

G

Gradska knjižnica Sveti Ivan Zelina

knjiznica-zelina.hr

10

Gradska knjižnica Sveti Ivan Zelina is a public library serving as a cultural, educational, and social hub for the local community in Sveti Ivan Zelina, Croatia. The website provides information about library services, events, special collections, and access to an online catalog. The target audience includes children, youth, and adults interested in literature and cultural activities. The library operates as a non-profit public institution with a focus on community engagement and education. Technically, the website is built on Joomla CMS and utilizes common frontend technologies such as jQuery, Bootstrap, UIkit, and Smart Slider 3. It integrates Facebook SDK for social media and includes an accessibility widget (UserWay). The site is hosted under a Croatian academic registrar (CARNET), indicating a stable and appropriate hosting environment. The website is moderately performant and well-optimized for mobile devices with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no dedicated privacy policy page found, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, serving its public service mission effectively. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, and publishing incident response contacts to enhance security posture and compliance.

M

Muzej Sveti Ivan Zelina

muzej-zelina.hr

47

Muzej Sveti Ivan Zelina is a small, government-affiliated cultural institution dedicated to preserving and showcasing the heritage of Sveti Ivan Zelina, Croatia. The website provides detailed information about the museum's history, collections, events, and projects, targeting local visitors, tourists, and cultural enthusiasts. The digital presence is supported by a moderate technology stack including jQuery, Bootstrap, and various UI libraries, with Google Analytics for visitor tracking. The site is mobile responsive and includes accessibility features, enhancing user experience. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a formal privacy policy, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and consistency with the museum's identity. Overall, the website is professional and trustworthy but could benefit from enhanced privacy and security practices.

T

Turistička zajednica grada Sv. I. Zeline

visitzelina.hr

41

The website represents the official tourism board of Sveti Ivan Zelina, Croatia, providing comprehensive information about local culture, events, gastronomy, sports, and accommodation. It serves as a key resource for tourists and local visitors, promoting sustainable tourism and regional attractions. The site is well-branded and consistent with its government and non-profit identity. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and offers interactive features like maps and video content. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's purpose and location, indicating legitimacy and trustworthiness.

G

Grad Sveti Ivan Zelina

zelina.hr

49

The website www.zelina.hr/portal serves as the official municipal portal for the city of Sveti Ivan Zelina in Croatia. It provides a broad range of public information including local government structure, public tenders, news, events, and citizen services. The site targets residents and stakeholders of the municipality, offering them access to official announcements and resources. The business model is that of a government public service platform, with a focus on transparency and community engagement. The domain is well-established since 2001, reinforcing its credibility as an official source. Technically, the site is built on Joomla CMS with several common web technologies such as jQuery, MooTools, Bootstrap, and UIkit frameworks. It uses K2 for content management and RokSprocket for interactive features like slideshows. The site is moderately performant, mobile-optimized, and includes accessibility features such as dyslexia-friendly fonts and contrast controls. SEO and metadata are properly implemented, including Open Graph and Twitter cards. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism with opt-in functionality. CSRF tokens are present, and no sensitive data is exposed in the HTML. However, security headers like CSP and HSTS are not detected, and there is no published security policy or incident response contact information. Google Analytics is used for visitor tracking, with moderate user tracking levels and good privacy compliance. Overall, the website demonstrates a solid security posture and good privacy compliance for a government portal. The domain WHOIS data aligns well with the website content and geographic location, indicating high legitimacy. No critical vulnerabilities or suspicious content were found. Strategic recommendations include adding security headers, publishing a security policy, and providing incident response contacts to enhance trust and security maturity.

P

PANTHEON

datalab.bg

56

Datalab.bg is a Bulgarian regional provider of the PANTHEON business information system, offering ERP and business process optimization software solutions. The company targets businesses seeking to improve efficiency and organization through digital transformation. The website demonstrates a mature digital presence with multi-country partner domains, indicating a well-established market position in the Balkan region. Technically, the site is built on WordPress with the Enfold theme, integrating modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Google reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the domain registration data aligns with the business claims, supporting legitimacy. The website is safe, professional, and compliant with privacy regulations.

D

Datalab.MN d.o.o.

datalab.me

53

Datalab.MN d.o.o. operates a professional website promoting the PANTHEON ERP business information system, targeting enterprises in Montenegro and Southeast Europe. The company offers comprehensive ERP software solutions, digitalization tools, cloud hosting, and support services, positioning itself as a regional leader with a strong user base and over 20 years of market presence. The website is well-structured, multilingual, and rich in content, including testimonials, knowledge bases, and webinars, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, employs HTTPS with reCAPTCHA for form security, and demonstrates good SEO and mobile optimization. Security posture is solid but could be enhanced with additional HTTP headers. WHOIS data is privacy protected, which is common for business domains, and no suspicious patterns were detected. Overall, the site presents a trustworthy and professional business front with effective digital infrastructure.

D

Datalab

datalab.al

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, primarily through their flagship product PANTHEON. The company has a strong regional presence with sister sites across multiple Balkan countries, indicating a broad market reach. Their website is built on a modern WordPress CMS with a professional design and good SEO practices, integrating essential marketing and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit security policies. The absence of clear privacy and terms of service pages slightly impacts privacy compliance scores. Overall, the website reflects a mature digital infrastructure suitable for a medium-sized enterprise in the technology sector.

P

PANTHEON - Datalab

datalab.eu

59

Datalab operates the PANTHEON ERP Business Information System, targeting businesses seeking efficient and organized business process management solutions. The company appears to have a strong regional presence across multiple European countries, indicated by multiple localized domains. The website is professionally designed using WordPress with the Enfold theme and incorporates modern SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented, though explicit privacy and terms of service pages are not detected in the provided content. The absence of direct contact information and security.txt file suggests areas for improvement in transparency and incident response readiness. Overall, the domain is privacy protected as per EURid policy, which is typical for European businesses, and the website content and structure indicate a legitimate and established business.

D

Datalab

datalab.si

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, notably the PANTHEON business information system. With a domain age dating back to 1997 and multiple regional partner sites, Datalab demonstrates a mature market presence in the technology sector, targeting businesses seeking comprehensive ERP solutions. The website is built on a modern WordPress platform using the Enfold theme, integrated with standard SEO and analytics tools such as Yoast SEO, Google Analytics, and Cookiebot for GDPR compliance. The technical infrastructure is hosted on Azure DNS, indicating a reliable hosting environment. Security measures include HTTPS encryption and reCAPTCHA integration; however, the absence of security headers suggests room for improvement in security posture. The site implements a robust cookie consent mechanism, reflecting good privacy compliance practices, though explicit privacy policy and terms of service pages were not detected in the provided content. Overall, the website presents a professional and trustworthy digital presence with moderate to good performance and user experience.

M

MAS Blaník, z. s.

masblanik.cz

44

MAS Blaník is a Czech non-profit organization dedicated to regional development, supporting local agriculture, education, and social services in the Blaník region. The website serves as an official portal providing information about projects, events, and community initiatives, with visible EU co-financing support. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, incorporating modern JavaScript libraries and responsive design. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust verification, though the website content and social presence support legitimacy. Overall, the site is well-structured and professional but could improve privacy compliance and security transparency.

E

EDUin, o. p. s.

eduina.cz

38

EDUína is a Czech non-profit organization focused on recognizing and awarding innovative projects in formal and informal education. The organization has been active for over 10 years, celebrating educational achievements and honoring significant contributors to Czech education. The website reflects a well-structured digital presence with clear branding, contact information, and social media integration. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, EDUína presents a credible and professional front for its educational award activities.

L

Landesportal Mecklenburg-Vorpommern

studieren-mit-meerwert.de

47

The website 'Studieren mit Meerwert' serves as a comprehensive regional education portal promoting universities and study programs in Mecklenburg-Vorpommern, Germany. It targets prospective and current students, including international visitors, by providing detailed information about study opportunities, campus life, and career prospects. The platform is operated under the Landesportal Mecklenburg-Vorpommern, reflecting a public sector educational initiative with a strong regional focus. Technically, the site is built on TYPO3 CMS and employs modern web technologies such as jQuery, YouTube iframe API, and Typekit fonts. It features a responsive design with good accessibility and SEO practices. Cookie consent is implemented with an opt-in mechanism, ensuring GDPR compliance. The site integrates social media channels and interactive elements like study program search and multimedia galleries. From a security perspective, the website uses HTTPS and obfuscates email addresses to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or malicious content were detected. The WHOIS data aligns with the website's regional educational purpose, showing consistent domain usage and hosting. Overall, the website demonstrates a high level of professionalism, content quality, and user experience, with minor recommendations to enhance security headers and publish vulnerability disclosure information.

P

Paysan Breton

paysanbretoncharcuterie.com

56

Paysan Breton is a French brand specializing in charcuterie products made from 100% Breton pork, raised by cooperative farmers emphasizing quality, sustainability, and regional economic development. The website presents a professional and consistent brand image, targeting general consumers interested in authentic regional food products. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes GDPR-compliant cookie management. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and parent company linkage to Eureden support its authenticity. Security posture is moderate with cookie consent implemented but lacking visible security headers and explicit contact information on the homepage. Overall, the site is well-designed and functional but would benefit from enhanced security practices and clearer business contact details.

D

Dimedia internet tehnologije d.o.o.

dimedia.hr

43

Dimedia internet tehnologije d.o.o. is a Croatian technology company specializing in custom software development, mobile applications, web design, and internet marketing services. Established in 2010, the company targets businesses seeking comprehensive digital solutions to enhance their online presence and operational efficiency. Their market position is supported by a portfolio of clients across real estate, tourism, and corporate sectors, demonstrating a solid foothold in the regional IT services market. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA, ensuring basic security and user engagement features. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Hosting and domain registration are consistent with the company's Croatian location, enhancing trust. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with presence of privacy and cookie policies, but no explicit GDPR compliance statements or data retention policies were found. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business credibility profile. Strategic improvements in security policy transparency and accessibility would further enhance their posture.

K

Karlsruher Kind

karlsruher-kind.de

64

Karlsruher Kind is a regional magazine targeting parents and children in the Karlsruhe area, providing editorial content, event calendars, and community engagement features. The website is built on WordPress with a modern plugin ecosystem supporting event management and user interaction. The technical infrastructure includes HTTPS, security headers, and structured data for SEO, reflecting a mature digital presence. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though privacy compliance could be improved by publishing explicit privacy and terms policies. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

C

Creatives for Climate

creativesforclimate.co

64

Creatives for Climate is a non-profit global creative ecosystem dedicated to climate justice by uniting over 7,000 professionals across 90+ countries. The organization focuses on reshaping narratives, preserving truth, and driving systemic change through education, business transformation, and creative partnerships. Their market position is that of a leading global network in the climate creative space, leveraging community and campaigns to accelerate a just transition. Technically, the website is built on Squarespace CMS, utilizing modern web technologies including Google Analytics, Tag Manager, reCAPTCHA, and Typekit fonts. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is managed by Squarespace, ensuring reliable uptime and SSL encryption. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with opt-in/out capabilities. However, it lacks some advanced security headers and does not publicly disclose security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve security posture and privacy transparency. Strategic recommendations include enhancing security headers, publishing incident response policies, and providing clearer contact information.

C

Circular City – Zirkuläre Stadt e.V.

circular.berlin

57

Circular Berlin is a small non-profit organization dedicated to accelerating Berlin's transition towards a circular city. Their core activities include knowledge building, community development, education, and practical programs focused on the circular economy. The organization positions itself as a key local actor fostering sustainable urban metabolism through research and community engagement. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting circular economy practitioners and the broader community in Berlin. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by plugins such as Yoast SEO and Matomo for analytics. Hosting and domain registration are transparent and consistent with the organization's profile. The site is moderately performant and well-optimized for mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some recommended security headers are missing. The cookie consent mechanism is GDPR compliant, using CookieYes for user consent management. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt file is found. Overall, the website presents a trustworthy and professional digital presence for a non-profit organization. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy, and enhancing incident response readiness to further strengthen security posture and trust.

A

Aubret

aubret.com

56

Aubret is a well-established French manufacturer specializing in charcuterie products, notably lardons, with a strong market position as the leading European producer. The company operates multiple production units and serves a broad client base including culinary brands and consumers, with a significant presence in mainland France and the Antilles. The website reflects a professional digital presence built on WordPress, incorporating modern tracking and consent management tools. Security posture is good with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the site is accessible, compliant with GDPR, and presents trustworthy business information.

J

Jean Nicolas

jeannicolas1930.fr

54

Jean Nicolas is a cooperative brand specializing in the production and sale of preserved Breton vegetables, with a heritage dating back to 1930. The website targets consumers interested in quality regional food products and recipes, emphasizing local agricultural know-how and community engagement. The brand maintains a consistent and professional online presence with rich content including product showcases, recipes, and community news. Technically, the site is built on WordPress using WPBakery Page Builder and integrates multiple analytics and tracking tools such as Google Analytics, Matomo, and Microsoft Clarity, alongside cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical for commercial sites, but domain age cannot be verified. Overall, the site is well-structured, user-friendly, and trustworthy, with no signs of malicious activity or content blocking.

P

Paysan Breton

paysanbretonsurgeles.com

59

Paysan Breton Les Surgelés is a cooperative brand specializing in frozen vegetables and prepared vegetable mixes cultivated by a network of Breton farmer-cooperators. The brand emphasizes quality, freshness, and sustainable agricultural practices, targeting general consumers primarily in France. The website is built on Drupal 10 and uses modern web technologies with good mobile optimization and user experience. Privacy and cookie compliance are well implemented with a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is unusual and may indicate a registration or data retrieval issue, warranting further verification. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving as a credible digital presence for the cooperative brand.

3

321 MED GmbH

321med.com

50

321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and healthcare centers primarily in Germany. The company offers a comprehensive SaaS solution that includes appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, targeting a broad range of medical specialties. The website demonstrates a mature market position with over 3,500 healthcare providers and 5 million patients served, supported by strong media presence and user testimonials. Technically, the website employs a modern technology stack including jQuery, Usercentrics for consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services involve Cloudflare and Cronon GmbH, with HTTPS enforced and cookie consent mechanisms in place. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and DNSSEC are recommended. From a security perspective, the site shows good practices such as GDPR compliance and encrypted connections but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing legitimacy and stability. Overall, 321 MED presents a professional, trustworthy, and well-structured digital presence aligned with its healthcare software business. Strategic enhancements in security transparency and DNS security would further strengthen its posture.