Security Directory

P

PANTHEON

datalab.bg

56

Datalab.bg is a Bulgarian regional provider of the PANTHEON business information system, offering ERP and business process optimization software solutions. The company targets businesses seeking to improve efficiency and organization through digital transformation. The website demonstrates a mature digital presence with multi-country partner domains, indicating a well-established market position in the Balkan region. Technically, the site is built on WordPress with the Enfold theme, integrating modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Google reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the domain registration data aligns with the business claims, supporting legitimacy. The website is safe, professional, and compliant with privacy regulations.

D

Datalab

datalab.al

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, primarily through their flagship product PANTHEON. The company has a strong regional presence with sister sites across multiple Balkan countries, indicating a broad market reach. Their website is built on a modern WordPress CMS with a professional design and good SEO practices, integrating essential marketing and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit security policies. The absence of clear privacy and terms of service pages slightly impacts privacy compliance scores. Overall, the website reflects a mature digital infrastructure suitable for a medium-sized enterprise in the technology sector.

D

DATALAB

datalabks.com

51

DATALAB operates a website focused on providing ERP software solutions, specifically the DATALAB PANTHEON system. The company appears to target businesses seeking ERP systems to optimize their operations. The website is built on WordPress using the Divi theme and integrates common analytics and marketing tools such as Google Analytics and ActiveCampaign. The technical infrastructure is modern but lacks visible advanced security configurations. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional presentation of the website. No privacy, cookie, or security policies are published, which impacts compliance and trust. Overall, the site is functional and business-oriented but requires improvements in transparency and security to enhance credibility.

P

PANTHEON - Datalab

datalab.eu

59

Datalab operates the PANTHEON ERP Business Information System, targeting businesses seeking efficient and organized business process management solutions. The company appears to have a strong regional presence across multiple European countries, indicated by multiple localized domains. The website is professionally designed using WordPress with the Enfold theme and incorporates modern SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented, though explicit privacy and terms of service pages are not detected in the provided content. The absence of direct contact information and security.txt file suggests areas for improvement in transparency and incident response readiness. Overall, the domain is privacy protected as per EURid policy, which is typical for European businesses, and the website content and structure indicate a legitimate and established business.

D

Datalab

datalab.si

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, notably the PANTHEON business information system. With a domain age dating back to 1997 and multiple regional partner sites, Datalab demonstrates a mature market presence in the technology sector, targeting businesses seeking comprehensive ERP solutions. The website is built on a modern WordPress platform using the Enfold theme, integrated with standard SEO and analytics tools such as Yoast SEO, Google Analytics, and Cookiebot for GDPR compliance. The technical infrastructure is hosted on Azure DNS, indicating a reliable hosting environment. Security measures include HTTPS encryption and reCAPTCHA integration; however, the absence of security headers suggests room for improvement in security posture. The site implements a robust cookie consent mechanism, reflecting good privacy compliance practices, though explicit privacy policy and terms of service pages were not detected in the provided content. Overall, the website presents a professional and trustworthy digital presence with moderate to good performance and user experience.

S

SeenThis

seenthis.co

74

SeenThis is a technology-driven digital advertising company specializing in adaptive streaming technology to enhance creative activation and engagement. Positioned as an innovative ad tech provider, it targets advertisers and marketing agencies seeking to boost digital campaign performance. The website is built on modern frameworks such as React and Gatsby, indicating a mature technical infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and bot protection via Google reCAPTCHA, although explicit security policies and incident response details are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website presents a professional and trustworthy digital presence with moderate tracking and analytics integration.

D

Dynamic

dynamicauth.com

74

Dynamic is a fintech and crypto-focused company providing wallet infrastructure solutions including authentication, smart wallets, and secure key management via a flexible SDK. Positioned as an enterprise-grade provider, Dynamic supports multi-chain coverage and third-party wallets, targeting fintech companies, crypto businesses, and stablecoin platforms. The company recently became part of Fireblocks, enhancing its market position. The website demonstrates a mature technical infrastructure with modern web technologies, strong design quality, and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and contact information are lacking. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

P

pxMEDIA.de GmbH

pxmedia.de

45

pxMEDIA.de GmbH is a specialized online marketing agency based in Germany, focusing on systematic personnel recruiting, employer branding, and customer acquisition for ambitious medium-sized enterprises. The company positions itself as a partner for sustainable business success, offering consulting, conception, implementation, and ongoing support services. Their market niche is well-defined, targeting the medium-sized business sector with tailored digital marketing solutions. The website demonstrates a professional and consistent brand image, supported by award recognition and client testimonials. Technically, the site is built on WordPress with modern plugins and integrations such as Wistia for video hosting and Google Maps API for location services. Hosting is provided by Alfahosting, a reputable German hosting provider. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of suspicious or adult content.

W

Whistleblowing Experte

whistleblowing-experte.de

55

Whistleblowing Experte operates a specialized digital whistleblower reporting and compliance management platform targeted primarily at small and medium-sized enterprises (KMU) in Germany. The company offers a comprehensive compliance tool integrated with qualified legal support and an ombudsperson network, positioning itself as a niche provider in the compliance and whistleblowing sector. The website is professionally designed using the Contao CMS, with modern web technologies and responsive design ensuring good user experience across devices. The technical infrastructure is hosted by Timme Hosting and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

C

Creatives for Climate

creativesforclimate.co

64

Creatives for Climate is a non-profit global creative ecosystem dedicated to climate justice by uniting over 7,000 professionals across 90+ countries. The organization focuses on reshaping narratives, preserving truth, and driving systemic change through education, business transformation, and creative partnerships. Their market position is that of a leading global network in the climate creative space, leveraging community and campaigns to accelerate a just transition. Technically, the website is built on Squarespace CMS, utilizing modern web technologies including Google Analytics, Tag Manager, reCAPTCHA, and Typekit fonts. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is managed by Squarespace, ensuring reliable uptime and SSL encryption. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with opt-in/out capabilities. However, it lacks some advanced security headers and does not publicly disclose security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve security posture and privacy transparency. Strategic recommendations include enhancing security headers, publishing incident response policies, and providing clearer contact information.

M

Mon magasin Vert

monmagasinvert.fr

69

Mon magasin Vert is a regional retail and e-commerce company specializing in gardening, pet supplies, and outdoor equipment, primarily serving the Brittany and Pays de la Loire regions in France. The website is built on a modern Magento platform with the Hyvä frontend theme, indicating a mature digital infrastructure. The company is part of the Eureden group, a known entity in the agricultural and retail sector. The site demonstrates good privacy compliance with clear cookie consent mechanisms and privacy policies in French, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

P

Philippe Wagner

philippe-wagner.fr

47

Philippe Wagner is a French artisanal charcuterie producer specializing in 100% natural ingredients and traditional recipes. The company is part of a group including André Bazin and Wagner-Bazin WB, emphasizing quality French meat certified VPF – VBF. The website presents a professional image with good content quality, focusing on product offerings, recipes, and company news. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted by OVH, and uses modern plugins and Google Tag Manager for analytics. Security posture is adequate with HTTPS and domain protections but lacks explicit privacy and cookie policies and some security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements include publishing privacy and cookie policies, enhancing security headers, and adding incident response information.

A

Aubret

aubret.com

56

Aubret is a well-established French manufacturer specializing in charcuterie products, notably lardons, with a strong market position as the leading European producer. The company operates multiple production units and serves a broad client base including culinary brands and consumers, with a significant presence in mainland France and the Antilles. The website reflects a professional digital presence built on WordPress, incorporating modern tracking and consent management tools. Security posture is good with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the site is accessible, compliant with GDPR, and presents trustworthy business information.

G

Globus

globus.hu

55

Globus is a Hungarian company specializing in the manufacturing and retail of canned vegetable products, including peas, corn, beans, lentils, and vegetable mixes. The website serves as a product showcase and customer engagement platform, offering recipes, blog content, and career information. The company appears to hold a solid position in the Hungarian canned vegetable market with a medium-sized business model focused on retail and manufacturing. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Tag Manager and Swiper.js for analytics and user interface enhancements. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

J

Jean Nicolas

jeannicolas1930.fr

54

Jean Nicolas is a cooperative brand specializing in the production and sale of preserved Breton vegetables, with a heritage dating back to 1930. The website targets consumers interested in quality regional food products and recipes, emphasizing local agricultural know-how and community engagement. The brand maintains a consistent and professional online presence with rich content including product showcases, recipes, and community news. Technically, the site is built on WordPress using WPBakery Page Builder and integrates multiple analytics and tracking tools such as Google Analytics, Matomo, and Microsoft Clarity, alongside cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical for commercial sites, but domain age cannot be verified. Overall, the site is well-structured, user-friendly, and trustworthy, with no signs of malicious activity or content blocking.

3

321 MED GmbH

321med.com

50

321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and healthcare centers primarily in Germany. The company offers a comprehensive SaaS solution that includes appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, targeting a broad range of medical specialties. The website demonstrates a mature market position with over 3,500 healthcare providers and 5 million patients served, supported by strong media presence and user testimonials. Technically, the website employs a modern technology stack including jQuery, Usercentrics for consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services involve Cloudflare and Cronon GmbH, with HTTPS enforced and cookie consent mechanisms in place. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and DNSSEC are recommended. From a security perspective, the site shows good practices such as GDPR compliance and encrypted connections but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing legitimacy and stability. Overall, 321 MED presents a professional, trustworthy, and well-structured digital presence aligned with its healthcare software business. Strategic enhancements in security transparency and DNS security would further strengthen its posture.

3

321 MED GmbH

321med4.com

50

321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and related healthcare facilities. The company has established a strong market presence in Germany with over 3,500 healthcare providers and 5 million patients served. Their flagship product, the Online-Rezeption, offers a comprehensive suite of features including appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, tailored specifically for healthcare environments. The website is professionally designed, content-rich, and well-branded, reflecting a mature and credible business.

L

Lemon Chili Games

superfarmingboy.com

56

Super Farming Boy is an indie game developed by Lemon Chili Games, offering a unique blend of action, puzzle, and farming simulation gameplay. The business targets casual and indie gamers across multiple platforms including Steam, Epic Games Store, Xbox, Android, and Nintendo Switch. The website serves as the official promotional and informational hub, providing demos, purchase links, and company contact information. Technically, the website is built on the Readymag platform, leveraging modern web technologies and standard marketing analytics tools. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's indie game market presence.

P

PCforAlla

pcforalla.se

63

PCforAlla is a well-established Swedish media website focused on computers, IT security, and technology news, offering guides, product tests, and subscription services. It operates under the parent company Foundry and targets consumers interested in technology with clear, pedagogical content in Swedish. The website demonstrates a mature digital infrastructure using WordPress CMS, enhanced SEO tools, and multiple advertising and analytics integrations. Security posture is solid with HTTPS enforcement and GDPR-compliant consent mechanisms, though explicit security headers and incident response information are not publicly detailed. The absence of WHOIS data for the queried subdomain reduces domain trust signals but does not detract from the site's professional presentation and content quality. Overall, PCforAlla presents a trustworthy and professional media platform with good technical and privacy compliance standards.

E

Eureden

eureden.com

55

Eureden is a large agro-food cooperative group based in Brittany, France, serving thousands of farmer-cooperators and employees. The group operates multiple branches including agriculture, eggs, meat, frozen foods, long life products, and retail distribution, emphasizing sustainable and innovative practices. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it uses WordPress with modern plugins and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility is supported by consistent branding, social media presence, and detailed corporate information. Recommendations include enhancing security headers, publishing incident response info, and verifying domain registration details.

F

Fonds Le Saint

fondslesaint.org

42

Fonds Le Saint is a small non-profit organization based in Bourg-Blanc near Brest, France, focused on promoting nutrition education and making sports accessible to children with disabilities. Established in 2015, the foundation supports local community initiatives and collaborates with sports clubs and educational programs. The website reflects a clear mission and target audience, emphasizing social impact and community engagement. Technically, the website is built on Joomla CMS with UIkit framework and uses common web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and presents a professional design with good navigation and content relevance. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks important security headers, which could be enhanced to improve protection against common web threats. Privacy and cookie policies are not present, indicating compliance gaps with GDPR and related regulations. WHOIS data is unavailable due to query restrictions, limiting domain trust verification. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved security practices and privacy compliance to strengthen its digital maturity and user trust.

C

Citybikes

citybikes.cz

58

Citybikes.cz is a Czech Republic-based e-commerce retailer specializing in urban bicycles, electric bikes, and related accessories. Established since 2006, the company targets urban cyclists, families, and seniors seeking sustainable and healthy transportation options. The website offers a broad catalog of products including folding bikes, children's bikes, and bike accessories, supported by repair and conversion services. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy trust scores. Overall, the website is professional and trustworthy from a user perspective but would benefit from enhanced transparency on domain registration and security policies.

A

Auto*Mat

auto-mat.cz

46

Auto*Mat is a small, community-focused organization based in the Czech Republic dedicated to urban mobility and sustainable transportation solutions. The website serves as an informational and engagement platform for the local community and stakeholders interested in city transportation projects. The business operates primarily as a non-profit or advocacy group with a niche market position in transportation within the Czech Republic. Technically, the website is built on WordPress, hosted by GreenGeeks, and employs modern web technologies including Google Tag Manager, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is adequate with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing advanced security headers and publishing a security policy. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the domain is legitimate, well-aged, and consistent with the business claims, indicating a trustworthy online presence.

N

Nutricia

pelnaporcjaopieki.pl

66

Pełna Porcja Opieki is a specialized healthcare website dedicated to supporting the nutritional needs of sick children, particularly focusing on enteral and oral nutrition. The site is affiliated with Nutricia, a recognized brand in medical nutrition, and provides educational content, product information, and expert advice targeted primarily at parents and caregivers. The website maintains a professional presence with consistent branding and clear navigation, supporting its niche market position in Poland.

C

Apteka Internetowa Cefarm24: leki, kosmetyki, suplementy diety

cefarm24.pl

55

Cefarm24.pl is a Polish online pharmacy specializing in the sale of over-the-counter medicines, branded cosmetics, dietary supplements, and products for mothers and children. The website positions itself as a legal and trustworthy pharmacy, supported by a registration badge linking to the official Polish medical registry. The business model is e-commerce retail focused on healthcare products with competitive pricing and professional pharmaceutical care. The site targets a broad general audience in Poland seeking convenient online access to health-related products. Technically, the website is built on the AptusShop.pl CMS platform and integrates modern technologies such as Google Tag Manager for analytics and Ceneo for product reviews and tracking. The site is HTTPS secured and includes a cookie consent mechanism, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, with good navigation and content relevance. From a security perspective, the site uses HTTPS but lacks visible security headers, which could be improved to enhance protection against common web attacks. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is partial, with cookie consent present but no explicit privacy policy or terms of service pages found in the provided content. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website presents a legitimate and professional online pharmacy with a good trust level but could benefit from enhanced security headers, explicit privacy and terms documentation, and clearer contact details. These improvements would strengthen compliance and user trust while reducing potential security risks.

N

NUTRICIA Polska Sp. z o.o.

zywieniemedyczne.pl

63

Zywieniemedyczne.pl is a well-established Polish medical nutrition campaign website operated by NUTRICIA Polska Sp. z o.o. The site focuses on educating patients and caregivers about medical nutrition and provides resources, guides, and awareness campaigns. It enjoys a strong market position supported by reputable partners and a consistent brand presence. Technically, the website is built on WordPress with modern web technologies and integrates Google Analytics and Tag Manager with proper consent mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. Privacy compliance is strong with accessible policies and cookie consent. Overall, the site is professional, trustworthy, and serves its target audience effectively.

N

NUTRICIA Polska Sp. z o.o.

posilkiwchorobie.pl

64

Posilkiwchorobie.pl is a professionally developed healthcare nutrition website operated by NUTRICIA Polska Sp. z o.o., focusing on medical nutrition for oncological and neurological diseases. The site provides trusted advice, recipes, and product information, targeting patients and caregivers in Poland. It maintains a consistent brand presence and offers e-commerce links for specialized nutrition products. Technically, the site is built on WordPress with modern frontend technologies and integrates Google Tag Manager and New Relic for analytics and monitoring. The website demonstrates good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting its role as a healthcare information and product platform.

A

Medicare.pl - Kliknij po zdrowie (dawniej allecco.pl)

allecco.pl

62

Medicare.pl is a large Polish online pharmacy platform offering a wide range of approximately 18,000 products including medicines, cosmetics, supplements, and medical devices. The business model combines e-commerce with physical pickup points in over 800 pharmacies across 364 cities, targeting general consumers seeking convenient access to health-related products. The website is built on the AptusShop CMS platform and leverages modern technologies such as Google Tag Manager, Cookiebot for consent management, and various marketing tools like Prefixbox and Edrone. Hosting and content delivery are supported by Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and multiple security headers present, although explicit privacy policies and terms of service are not found in the provided content. WHOIS data is unavailable from the Polish NASK registry, which slightly reduces trust but is common for privacy-protected domains in this sector. Overall, the website demonstrates a professional and trustworthy e-commerce presence in the healthcare industry.

I

iPresso S.A.

ipresso.pl

63

iPresso S.A. operates a sophisticated Marketing Automation platform designed for professional marketers and enterprises across multiple industries including e-commerce, finance, education, media, and travel. The platform offers a wide range of features such as personalized marketing scenarios, multi-channel communication (email, WhatsApp, push notifications), and extensive integrations with popular services like Google Ads, AWS, and Zapier. The company positions itself as a reliable and certified provider with ISO 9001 and ISO 27001 certifications, emphasizing data security and GDPR compliance. The website reflects a mature digital presence with excellent content quality, user experience, and mobile optimization. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and advanced analytics tools like Piwik PRO and Microsoft Clarity. Security posture is strong with HTTPS enforcement and adherence to recognized standards, although explicit security headers could be further confirmed. Overall, the business demonstrates a high level of professionalism and trustworthiness, supported by client testimonials and visible certifications.

H

Hrvatski zavod za zapošljavanje

hzz.hr

50

Hrvatski zavod za zapošljavanje (HZZ) is the Croatian national public employment service, providing a wide range of services including job seeker registration, employer job postings, career development tools, labor market statistics, and specialized programs for retirees and persons with disabilities. The website serves as a comprehensive portal for employment-related information and services targeted at Croatian citizens and employers. It maintains a strong market position as the official government agency responsible for labor market facilitation in Croatia. Technically, the website is built on WordPress with multilingual support via WPML, and uses modern web technologies such as Swiper.js for sliders, Complianz for GDPR cookie consent, and PushAlert for notifications. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Analytics and marketing tools are implemented with privacy compliance in mind. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, security headers are not explicitly detected in the HTML content, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the Croatian government entity, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its public service mission effectively. Strategic improvements could include publishing explicit security policies, enhancing security headers, and adding vulnerability disclosure information to further strengthen trust and security posture.

S

SAFU

safu.hr

56

SAFU is the Central Agency for Financing and Contracting in Croatia, primarily responsible for managing EU and national funds related to various operational programs and projects. The website reflects its role as a government entity, providing information on funding programs, project implementation, and technical assistance. The site targets government bodies, project beneficiaries, and the general public interested in funding opportunities and project updates. Technically, the website is built on WordPress with Elementor, enhanced by SEO and accessibility plugins, and integrates Google Analytics and Tag Manager for performance and user tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not visible. Overall, the site is professional, well-structured, and trustworthy, with no signs of malicious activity or content safety concerns.

H

HŽ Putnički prijevoz

hzpp.hr

50

HŽ Putnički prijevoz is the Croatian national passenger rail transport company providing domestic and international train services. The website serves as an information and ticketing portal for passengers, offering travel schedules, ticket purchase options, and travel advisories. The company targets general public users traveling within Croatia and to European destinations by rail. The business model is that of a public transportation service provider with a large market presence as the national rail operator. Technically, the website employs modern web standards including HTTPS, Google Tag Manager, and reCAPTCHA for security and analytics. Accessibility features such as font size adjustment and dyslexia mode enhance user experience. However, the site lacks visible privacy and terms of service pages, and no direct contact information is found in the provided content. Security posture is good with HTTPS and bot protection but could be improved by adding security headers and explicit security policies. Overall, the domain and website appear legitimate and professionally maintained, consistent with a national transportation entity.

O

Omoguru

omoguru.com

57

Omoguru is a small education-focused company providing accessible reading and learning applications such as Lexie, w3Lexie plugin, and ReadAble widget. Their market position targets pupils, students, and individuals with reading difficulties, including dyslexia. The website is built on WordPress with modern technologies and includes standard marketing and tracking tools like Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy and terms pages. WHOIS data is missing, which raises some concerns about domain registration legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

K

Konfa media d.o.o.

zastita.info

58

Zastita.info is a Croatian media platform specializing in security industry news, events, and company catalogs. Operated by Konfa media d.o.o., it serves security professionals and companies in Croatia and the surrounding region. The website offers news updates, conference information, and advertising opportunities, positioning itself as a key regional security media outlet. Technically, the site uses a combination of legacy and modern web technologies including jQuery 1.8.1, UIkit, and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy compliance is basic with a cookie consent banner but no explicit privacy or terms of service pages. Overall, the domain is legitimate though WHOIS data is privacy protected, which is common for media businesses. The site is safe for general audiences and maintains a professional appearance.

I

Invest in Mecklenburg-Vorpommern GmbH

invest-in-mv.de

55

Invest in Mecklenburg-Vorpommern GmbH operates as a regional investment promotion agency focused on attracting and supporting investments in the German state of Mecklenburg-Vorpommern. The website provides comprehensive information and services including location analysis, funding advice, and business establishment support, targeting investors and companies interested in the region. The site is professionally designed, well-structured, and uses modern technologies such as TYPO3 CMS, Bootstrap, and UIkit, ensuring good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for the investment promotion entity.

W

WERK3 Werbeagentur GmbH & Co. KG

werk3.de

54

WERK3 Werbeagentur GmbH & Co. KG is a small, full-service advertising agency based in Rostock, Germany. The company specializes in marketing strategies, corporate design, campaign conception, and website development, positioning itself as a creative and award-winning agency within the regional media sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking comprehensive marketing solutions. Technically, the website is built on TYPO3 CMS and leverages a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. Analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel are integrated, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, the website enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website's claims, indicating a legitimate and trustworthy online presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish formal security policies, and improve accessibility to further strengthen its security posture and user trust.

N

NielsenIQ

etilize.com

76

NielsenIQ is a global enterprise specializing in technology product content solutions, leveraging Brandbank's extensive product data to enhance product discoverability and sales for business clients. The website demonstrates a mature digital presence built on WordPress with modern SEO and analytics integrations, reflecting a strong technical infrastructure. Security posture is robust with HTTPS and CSP headers, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms policies on the landing page. Overall, the site is professional, trustworthy, and well-positioned in the technology sector.

C

Carrefour

carrefour.eu

65

Carrefour Belgium operates a comprehensive online grocery and general merchandise retail platform targeting Belgian consumers. The website offers over 20,000 products with options for home delivery and in-store pickup, reflecting a mature e-commerce business model supported by the global Carrefour brand. The technical infrastructure leverages Salesforce Commerce Cloud, integrating modern marketing and analytics tools such as Google Tag Manager and CQuotient, indicating a digitally mature platform. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are not evident in the provided content. The absence of WHOIS data is due to registry restrictions common for .be domains and does not detract from the site's legitimacy. Overall, the site presents a professional, trustworthy, and well-branded retail experience.

V

VDI Wissensforum GmbH

vdiconference.com

70

VDI Wissensforum GmbH operates a professional website offering international conferences, congresses, and courses targeted at engineers and technical specialists. The company positions itself as a leading provider in continuing education within the engineering sector, primarily serving the German market. The website content is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for form security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. The absence of publicly available WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website demonstrates strong privacy compliance and business credibility, with clear contact information and social media engagement.

S

Salesforce

salesforce-scrt.com

71

Salesforce is a leading global provider of CRM software and AI-powered customer engagement solutions, operating at enterprise scale. The company offers a unified platform integrating CRM, AI, data, and trust capabilities via its Einstein 1 Platform, targeting businesses seeking advanced customer relationship management and analytics. The website is professionally designed, localized for German users, and reflects Salesforce's market leadership and technological maturity. The technical infrastructure leverages modern JavaScript frameworks, cloud hosting, and advanced analytics tools, ensuring fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, comprehensive security headers, and published certifications including ISO 27001 and FedRAMP. Privacy compliance is robust, featuring GDPR-aligned policies and consent management via OneTrust. WHOIS data is unavailable due to privacy protection but the domain and website content strongly align with Salesforce's brand and legitimacy. Overall, the site demonstrates high professionalism, security, and compliance suitable for an enterprise SaaS leader.

D

DRK Kreisverband Rostock e.V.

drk-rostock.de

56

DRK Kreisverband Rostock e.V. is a regional branch of the German Red Cross, providing humanitarian aid, social services, and community support in Rostock and surrounding areas. The organization focuses on emergency rescue, care for seniors, support for people with disabilities, and volunteer engagement. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR and cookie consent regulations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics via Google Tag Manager. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response information are absent. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

B

Borealis

borealis.agency

45

Borealis is a Croatia-based digital agency specializing in the creation of custom digital products including complex web applications, e-commerce platforms, multimedia applications, and promotional games. The company emphasizes long-term client relationships and serves a global clientele with a comprehensive service offering from concept through post-launch support. Their website reflects a professional and modern digital presence built on WordPress, with integration of Google Tag Manager and reCAPTCHA for analytics and security. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS and form protection, but could be improved by adding security headers and formal incident response disclosures. Overall, Borealis presents as a credible and established digital agency with a solid market position and trustworthy online presence.

C

Captify Technologies

captifytechnologies.com

10

Captify Technologies operates a leading Search Intelligence platform that leverages real-time search data from over 2 billion devices to empower brands with actionable consumer insights. Their platform supports cookieless marketing strategies, enabling advertisers and publishers to optimize targeting and campaign measurement without relying on third-party cookies. The company positions itself as a mature and trusted player in the technology marketing sector, serving over 800 major global brands. Technically, the website is built on WordPress and integrates multiple modern marketing and analytics tools such as Google Analytics, HubSpot, Pardot, and OneTrust for cookie consent management. The site is well-optimized for SEO and mobile devices, with good content quality and clear navigation. Security-wise, HTTPS is enforced, and domain registration is consistent and legitimate, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service were found in the provided content. Overall, the website demonstrates a solid digital presence with room for improvement in formal privacy and security disclosures.

V

Vodoopskrba i odvodnja d.o.o.

vio.hr

56

Vodoopskrba i odvodnja d.o.o. is a Croatian water utility company primarily serving the city of Zagreb and surrounding municipalities. The company provides essential services including water supply, wastewater drainage, and treatment, supported by a strong infrastructure and over 130 years of operational history. It operates under the parent company Zagrebački Holding, reflecting a stable market position in the regional energy and utilities sector. The website offers comprehensive customer service features, including emergency contact, online meter reading submission, and detailed informational resources. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and integrates Google Analytics and Tag Manager for user insights. Accessibility and mobile responsiveness are well addressed, enhancing user experience. Security posture is solid with HTTPS and ISO certifications, though there is room for improvement in HTTP security headers and incident response transparency. Privacy compliance is robust, featuring a detailed cookie consent mechanism and GDPR-aligned privacy policies. Overall, the website reflects a professional and trustworthy digital presence aligned with its business objectives.

Podružnica Tržnice Zagreb, a subsidiary of Zagrebački holding, operates a network of 28 market locations in Zagreb, Croatia, serving approximately 2500 tenants. The organization focuses on providing fresh domestic products including fruits, vegetables, dairy, fish, and meat products, positioning itself as a key retail market operator in the city. The website reflects a professional presence with clear navigation, relevant content, and integration of essential services such as equipment rental and online market information. The target audience includes local residents, business tenants, and visitors seeking fresh produce. Technically, the website employs a mix of legacy and modern JavaScript libraries, Google Analytics, and cookie consent mechanisms, indicating moderate digital maturity. Security posture is adequate but could be improved by updating legacy libraries and implementing security headers. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy. Overall, the website is trustworthy and professionally maintained, supporting the organization's public service role.

Z

Zagrebački električni tramvaj

zet.hr

56

Zagrebački električni tramvaj (ZET) operates as the primary public transportation provider in Zagreb, Croatia, offering tram, bus, funicular, and cable car services. The website serves residents and visitors with comprehensive information on ticketing, routes, service updates, and EU-funded infrastructure projects. The company is positioned as a large, essential transportation entity under Zagrebački Holding, with a strong local presence and public sector backing. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good navigation and SEO practices, though it lacks some accessibility features and a cookie consent mechanism. The CMS appears custom-built, and performance is moderate. From a security perspective, the site uses HTTPS with good SSL configuration and no exposed sensitive data. However, it lacks important security headers and visible security or incident response policies. The absence of a cookie consent banner indicates partial GDPR compliance. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-aligned with the business's public transportation mission. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.

Ż

Żywiec Zdrój

zywiec-zdroj.pl

62

Żywiec Zdrój is a well-established Polish bottled spring water brand, founded in 2000, offering a range of natural mineral water products sourced from the Żywiecki Park Krajobrazowy. The company emphasizes environmental sustainability and responsible business practices, supported by dedicated programs and partnerships. The website reflects a mature digital presence with comprehensive product information, sustainability initiatives, and legal compliance documents. Technically, the site is built on modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a general audience interested in healthy bottled water products.

Ż

Żywiec Zdrój

wolewode.pl

69

The website 'Mamo, tato, wolę wodę!' is an established educational program initiated by Żywiec Zdrój, targeting preschools in Poland to promote healthy hydration habits among children. The program offers educational materials, contests, and certification, positioning itself as a trusted and recognized initiative in the Polish education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, though it lacks advanced security headers and a published security policy. The domain is stable and consistent with the business claims, enhancing trust. Overall, the site is secure, compliant with GDPR, and professionally maintained, suitable for its educational mission.

Ż

Żywiec Zdrój

postronienatury.pl

63

Żywiec Zdrój operates a comprehensive environmental program focused on sustainability, water resource protection, and plastic recycling. The website serves as a platform to communicate their long-term ecological commitments, including tree planting and educational initiatives. Technically, the site is built on a modern React and Next.js stack, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements like DNSSEC and security headers could be added. The domain is well-established and consistent with the brand's history. Overall, the site reflects a professional and trustworthy corporate presence with a strong focus on environmental responsibility.

N

Nutricia

pkuconnect.pl

65

Nutricia Metabolics operates a specialized healthcare portal dedicated to patients and caregivers affected by phenylketonuria (PKU). The website provides comprehensive information on the disease, nutritional therapy, products, and community support, positioning itself as a trusted resource within the Polish healthcare niche. The business is part of the larger Nutricia brand, known globally in medical nutrition. Technically, the website is built on WordPress with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and iPresso. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and monitoring tools in place, although explicit security headers are not confirmed. Privacy compliance is well addressed with detailed privacy and cookie policies and a consent mechanism. WHOIS data is unavailable, which slightly impacts trust but is common for .pl domains. Overall, the site is legitimate, professional, and focused on patient support.