Security Directory

PEENE TRANS GmbH is a German logistics company specializing in bulk material transport for construction sites, including mixing plants, concrete industry, and large-scale projects. The company positions itself as a reliable partner offering just-in-time delivery with a modern fleet of tractor-trailers. Their website is built on TYPO3 CMS and uses a variety of modern front-end libraries to provide a responsive and user-friendly experience. The content is professionally presented in German, targeting construction industry clients and logistics partners. Contact information is comprehensive, including multiple emails and phone numbers for key personnel. The website includes a cookie consent mechanism and a privacy policy, indicating awareness of GDPR compliance. However, no explicit terms of service or security policies are published.

N

NEUWOBA - Neubrandenburger Wohnungsbaugenossenschaft eG

neuwoba.de

48

NEUWOBA - Neubrandenburger Wohnungsbaugenossenschaft eG is a large housing cooperative based in Neubrandenburg, Germany, providing modern, affordable, and community-oriented housing solutions. The organization operates multiple subsidiaries offering social care services, property management, and new construction projects. Their market position is strong within Mecklenburg-Vorpommern, supported by over 9,000 apartments and active community engagement. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content targeting local residents and cooperative members. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and jQuery. It incorporates various UI libraries and ensures mobile responsiveness and good SEO practices. Cookie consent and privacy policies are implemented in compliance with GDPR. Analytics usage is moderate, primarily via Google Analytics, with user tracking controlled by consent mechanisms. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence. Overall, NEUWOBA's website demonstrates a mature digital infrastructure suitable for its business needs, with room for improvement in security policy transparency and accessibility features. The risk profile is low, and the site is safe for general audiences.

N

Nutricia Limited

volvic.co.uk

70

Volvic UK is a consumer retail brand specializing in natural mineral water and flavored water products sourced from volcanic filtration in France. The company operates under Nutricia Limited and targets UK consumers with a focus on sustainability and sports sponsorship, notably the Women’s Rugby World Cup 2025. The website is built on TYPO3 CMS and integrates modern web technologies including Google Tag Manager and TrustCommander for privacy management. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Security posture is strong with HTTPS enforced, though security headers could be improved and incident response contacts are not publicly listed. WHOIS data for the exact domain is unavailable due to domain naming rules, indicating the domain is a subdomain rather than a registered domain, but the website content and branding strongly support legitimacy. Overall, the site demonstrates good digital maturity and business credibility with minor areas for security enhancement.

V

Volvic

volvic.com

10

Volvic operates as a prominent international beverage brand specializing in volcanic natural mineral water and a range of healthy beverages. The company emphasizes sustainability, source protection, and transparency in its product offerings, positioning itself as a responsible and environmentally conscious player in the retail beverage market. The website content reflects a mature brand with a consistent message and a broad target audience of health-conscious consumers. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness, though the overall professionalism and trust signals on the site mitigate this concern. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen credibility and compliance.

C

Colruyt

collectandgo.be

69

Colruyt's Collect&Go website is a well-established online grocery shopping platform serving Belgian consumers. It offers convenient services such as product reservation, collection at over 220 points, and home delivery. The site reflects a strong market position as part of the Colruyt Group, a major retail player in Belgium. The business model focuses on e-commerce retail with a clear target audience of Belgian shoppers seeking efficient grocery solutions. Technically, the website employs modern JavaScript frameworks like Vue.js and jQuery, integrates Font Awesome for icons, and uses Tealium for analytics and marketing. The site is mobile-optimized and includes accessibility features, though these could be enhanced further. Security posture is solid with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is evident with comprehensive privacy and cookie policies and consent mechanisms. WHOIS data is privacy protected, which is typical for commercial retail sites, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and aligns well with business credibility standards.

S

Sustainable Economy gGmbH

sustainable-economy-summit.org

45

The Sustainable Economy Summit is a non-profit organization established in 2022 that organizes biennial conferences in Berlin focused on sustainable economic transformation. It brings together leaders from business, politics, science, and civil society to discuss innovative strategies and solutions aligned with planetary boundaries. The summit serves as a platform for networking, knowledge exchange, and promoting sustainable business practices. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Google Analytics. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is good with HTTPS enabled, though some security headers could be improved. The domain registration is consistent with the organization's founding date and business claims, enhancing trustworthiness. Overall, the site presents a credible and professional image suitable for its target audience.

K

KWS Energy Knowledge eG

kws-eg.com

60

KWS Energy Knowledge eG is a specialized educational cooperative based in Germany, focused on training and certifying professionals in the energy sector, including power plant operation, renewable energy, and related technical fields. The organization offers a range of services including certificate courses, official recognized training, simulator and safety training, and operates a unique wind energy training tower on its campus. The website reflects a mature digital presence with clear branding, comprehensive content, and user-friendly navigation tailored to its professional audience. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and includes essential privacy and cookie consent mechanisms, indicating compliance with GDPR. Security posture is good with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The domain registration is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the site presents a professional, secure, and compliant digital front for the organization.

B

Bundesverband Energiespeicher Systeme e.V.

bves.de

56

The Bundesverband Energiespeicher Systeme e.V. (BVES) is a German industry association representing companies and institutions focused on the development, marketing, and deployment of energy storage systems across electricity, heat, and mobility sectors. The organization acts as a technology-neutral dialogue partner for politics, administration, science, and the public. The website reflects a professional digital presence built on WordPress with the Avada theme, incorporating SEO best practices via Yoast. Social media integration includes official Twitter and LinkedIn accounts, enhancing outreach and engagement. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal security policies on the site. Privacy and cookie policies are not clearly presented, indicating room for compliance improvements. Overall, the site is trustworthy and well-positioned within its niche, serving a medium-sized organization in the energy sector.

B

BEW - Das Bildungszentrum für die Ver- und Entsorgungswirtschaft gGmbH

bew.de

56

BEW - Das Bildungszentrum für die Ver- und Entsorgungswirtschaft gGmbH is a well-established non-profit educational institution based in Germany, specializing in training and continuing education in environmental protection, waste management, energy, and related sectors. The organization offers a broad range of services including seminars, workshops, online live trainings, e-learning, and inhouse training, targeting professionals and organizations within the environmental and utility industries. Their market position is strong regionally, supported by certifications such as ISO 9001 and Ökoprofit, and a consistent brand presence across multiple digital channels. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and jQuery, with integrated analytics via Matomo and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a comprehensive cookie consent mechanism. However, the site lacks explicit security policies and incident response contact information. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but could be enhanced by implementing additional HTTP security headers and publishing a formal security policy. Privacy compliance is strong, with clear privacy and cookie policies in German, and GDPR compliance indicators. The business credibility is high, supported by detailed contact information, certifications, and a professional content presentation. Overall, BEW demonstrates a mature digital presence with a focus on education and sustainability, though improvements in security transparency and incident response readiness are recommended to further strengthen trust and compliance.

A

AGFW e. V.

agfw.de

53

AGFW e. V. is a well-established German industry association focused on promoting energy efficiency, combined heat and power, and district heating and cooling. With over 700 member companies and more than 50 years of experience, it serves as a technical and policy advocate, providing certifications, standards, and industry services. The website reflects a professional and consistent brand presence targeting energy sector stakeholders and professionals. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It integrates Google Tag Manager and Google Maps APIs for analytics and location services. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (assumed from canonical URL), includes CSRF protection in forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its business purpose but could enhance security posture by adding security headers and publishing incident response information.

I

Industrial Quick Search

industrialquicksearch.com

48

Industrial Quick Search is a well-established online industrial manufacturer directory founded in 2000, serving the OEM market and manufacturing industry primarily in the United States. The platform connects buyers and suppliers in plastic and metal commercial businesses, offering patented vendor preview and request for quote tools. It also provides marketing services such as SEO, social media management, PPC, and web design to industrial manufacturers. The website demonstrates consistent branding and a clear business model focused on facilitating industrial supply chain connections. Technically, the website uses a modern tech stack including jQuery, Materialize CSS, FontAwesome, and Google Analytics, hosted by DreamHost. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and the site lacks a CMS indication, suggesting a custom-built platform. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which could be improved. No security or incident response policies are published, and there is no cookie consent mechanism, indicating partial privacy compliance. The domain WHOIS data is consistent with the business claims, showing a long-established presence without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and published policies would enhance trust and compliance.

G

GeoPortal.MV

geodaten-mv.de

64

GeoPortal.MV is the official geospatial data platform for the German state of Mecklenburg-Vorpommern, providing citizens, authorities, and businesses with access to a wide range of geodata services including thematic maps, geodata viewers, and geospatial web services. The portal is well-positioned as a government service platform with a clear focus on geoinformation infrastructure and public sector data dissemination. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though it lacks advanced security headers and a public security policy or incident response contacts. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and serves its public sector mission effectively.

L

LIFE e.V.

life-online.de

53

LIFE e.V. is a German non-profit organization based in Berlin, specializing in education, environmental issues, and equal opportunities. The website offers workshops, further education, and consulting services focused on anti-discrimination, equality, environmental and climate protection, and transformative education. The organization targets individuals and groups interested in these social and environmental topics within the Berlin region. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Real Cookie Banner Pro for GDPR compliance and Matomo for privacy-respecting analytics. Cloudflare services are used for security and performance optimization, including bot protection via Turnstile. The site demonstrates good privacy compliance with comprehensive cookie and privacy policies and uses HTTPS with appropriate security headers. However, there is no explicit security policy or incident response page published, and no vulnerability disclosure mechanism is present. Overall, the website is professionally designed, accessible, and trustworthy, reflecting a mature digital presence for a small non-profit entity.

I

ITAD e.V.

itad.de

45

ITAD e.V. is a well-established German industry association representing thermal waste treatment plants, holding a leading market position with over 90 member plants covering more than 95% of national treatment capacity. The organization focuses on promoting sustainable waste management, climate protection, and circular economy principles. Their website reflects a professional and consistent brand image, targeting industry stakeholders, members, and the press. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for privacy-conscious analytics. Hosting is provided by Hostsharing eG, a reputable provider. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is supported by a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the organization's business goals.

W

Wölfel-Gruppe

woelfel.de

54

Wölfel-Gruppe is a well-established German engineering company specializing in services and products related to vibrations, acoustics, structural mechanics, and environmental protection. With over five decades of experience since its founding in 1971, the company serves diverse industrial sectors including energy, manufacturing, and transportation. Their offerings include consulting, expert reports, and tailored measurement and monitoring systems. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multilingual support. Technically, the site employs modern frameworks and integrates Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS enforced, though some recommended security headers are not explicitly detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Berliner Wasserbetriebe

bwb.de

69

Berliner Wasserbetriebe is the primary water supplier and wastewater disposal service provider in Berlin, Germany. The company offers comprehensive water-related services including water quality information, installation of drinking water connections, and wastewater management. The website targets residents and businesses in Berlin, positioning itself as a trusted utility provider with a strong focus on environmental and social responsibility. The digital presence is supported by a professional and accessible website with good SEO and mobile optimization. Technically, the site uses modern web technologies such as jQuery, Cookiebot for consent management, and integrates third-party media and analytics services responsibly. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed through Cookiebot and a comprehensive privacy policy. Overall, the domain registration data aligns with the business identity, indicating a legitimate and trustworthy operation.

C

Chiesi GmbH

chiesi.de

67

Chiesi GmbH is a well-established pharmaceutical company operating in Germany as part of the international Chiesi Group. The company focuses on developing and distributing pharmaceutical products in key therapeutic areas such as respiratory diseases, neonatology, rare diseases, and transplantation. The website targets healthcare professionals, patients, partners, and job seekers, providing comprehensive information about products, corporate responsibility, and career opportunities. The company holds a B Corp certification, indicating a commitment to sustainability and ethical business practices. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with GDPR and providing a good user experience. The site is mobile optimized, has clear navigation, and integrates tracking and analytics responsibly. Security measures include HTTPS enforcement and standard security headers, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though the site could benefit from publishing explicit security policies and a vulnerability disclosure framework. Contact information is clearly provided, including phone numbers, physical address, and social media channels, enhancing business credibility. No WAF or blocking mechanisms interfere with content accessibility, and the WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Chiesi GmbH's website reflects a professional, secure, and compliant digital presence aligned with its business objectives and regulatory requirements.

B

BWE-Service GmbH

bwe-seminare.de

46

BWE-Service GmbH operates as a subsidiary of the Bundesverband WindEnergie e.V., focusing on providing educational seminars, conferences, and networking events to support the renewable energy sector, particularly wind energy, in Germany. The website serves as a portal for these offerings and directs users to the partner platform ee-hub.de for a broader range of events. The company positions itself as a key facilitator in the energy transition by enabling knowledge sharing and industry collaboration. Technically, the website is built on Drupal 7 with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking, alongside a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced, though some security headers are missing. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, well-structured, and trustworthy.

G

glagolITico d.o.o.

glagolitico.hr

43

glagolITico d.o.o. is a Croatian IT consulting company specializing in CRM and contact center solutions, with a strong focus on SAP Sales and Service Cloud implementations and Sinch Contact Pro products. The company targets large and complex organizations across multiple industries including telecommunications, energy, manufacturing, and finance. Their market position is reinforced by their SAP PartnerEdge membership and multiple certifications from recognized vendors such as Oracle and TMforum. The website presents a professional image with clear business information and a detailed project portfolio. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with some integration of Google APIs. Hosting is managed through CARNET, a Croatian academic and research network, which aligns with the company's location. The site shows basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. From a security perspective, the site does not display visible security headers or privacy and cookie policies, indicating gaps in GDPR compliance and security best practices. No forms or data collection mechanisms are present, reducing immediate risk exposure. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the security posture is moderate but could be improved by implementing HTTPS, security headers, and privacy documentation. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

P

Poljoprivredno gospodarstvo Šember

sember.hr

45

Poljoprivredno gospodarstvo Šember is a small, family-owned winery located in Jastrebarsko, Croatia, specializing in producing award-winning wines such as rajnski rizling, chardonnay, and crni pinot. The business leverages its regional heritage and vineyard location on the Plešivica hills to attract wine enthusiasts and visitors for tasting and tours. The website reflects a well-established presence with consistent branding and clear communication of its offerings. Technically, the site uses common web technologies including Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and terms of service present but no dedicated comprehensive privacy policy. Overall, the site is trustworthy and professional, suitable for its target mature audience interested in wine products and experiences.

G

GAZ Nutrition

gaz-nutrition.com

51

GAZ Nutrition operates a professional e-commerce website specializing in premium dietary supplements targeted at athletes, sports enthusiasts, and recreational users primarily in Croatia. The website offers a broad range of products, including proteins, amino acids, vitamins, and other sports nutrition items, supported by detailed sports guides and brand information. The business is positioned as a premium provider with a clear focus on quality and customer engagement through features like wishlists and customer accounts. Technically, the website is built on a modern WordPress and WooCommerce stack, utilizing popular plugins for enhanced user experience and marketing. The site is well-structured with good SEO practices and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website is trustworthy and professional, with room for enhanced compliance and security policies.

A

Agrokor

agrokor.hr

63

Agrokor Nagodba website serves as an official communication platform for the Agrokor group’s extraordinary administration and financial restructuring process. It provides detailed information about settlement plans, legal proceedings, and updates for creditors and investors. The site targets stakeholders involved in or affected by Agrokor's complex debt restructuring. Technically, the website is built on WordPress with modern JavaScript libraries and plugins, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers could be enhanced. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and clear privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, reflecting the serious nature of the business restructuring.

N

Nutricia Norway AS

nutricia.no

62

Nutricia Norway AS operates a professional website focused on delivering advanced nutritional solutions for adults and children, supporting health through various life stages. The company positions itself as a pioneer in nutrition since 1896 and is a subsidiary of Danone AS. The website targets patients, healthcare professionals, and consumers interested in specialized nutrition products and services. The digital infrastructure is built on WordPress with modern technologies such as Google Tag Manager and OneTrust for cookie consent, reflecting a mature digital presence. Security posture is strong with HTTPS and privacy compliance, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, well-branded, and compliant with relevant regulations.

N

Nutricia

nutricia.it

67

Nutricia is a specialist company in medical nutrition based in Italy, focusing on providing nutrition products as an integral part of patient care. The website reflects a mature digital presence built on WordPress, utilizing modern SEO and cookie consent tools such as Rank Math and Cookiebot. The site is well-structured, mobile-optimized, and secure with HTTPS and standard security practices. However, it lacks explicit privacy policy and terms of service pages, which are critical for full GDPR compliance and legal clarity. Contact information is not directly visible in the provided HTML content, which may affect user trust and support accessibility. Overall, the website demonstrates a good security posture with no detected vulnerabilities or blocking mechanisms.

D

Danone Magyarország

danone.hu

62

Danone Magyarország operates as a subsidiary of the global Danone Group, focusing on manufacturing and retailing nutrition and health-related food products in Hungary. The website reflects a mature digital presence with clear branding, comprehensive content about their products, corporate social responsibility, and scientific research initiatives. The company targets consumers interested in healthy nutrition, including specialized segments such as parents of children with cancer and healthcare professionals. Technically, the site is built on WordPress with the Divi theme, leveraging modern SEO and analytics tools, and demonstrates good mobile optimization and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

D

DANONE

danone.pl

10

Danone Poland operates as part of the global Danone group, focusing on dairy, plant-based products, water, and specialized nutrition. The website reflects a mature enterprise with a strong market position and a commitment to sustainability and health. The digital infrastructure uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, supported by New Relic for performance monitoring. Security posture is solid with HTTPS and no blocking mechanisms, though improvements in DNSSEC and security headers are recommended. Privacy compliance is basic with no explicit privacy or cookie policies detected in the provided content. Overall, the site is professional and trustworthy, targeting general consumers interested in nutrition and health.

V

Volvic

volvic.be

64

Volvic Belgium operates a professionally designed website targeting French-speaking consumers in Belgium, offering a range of natural mineral water and flavored water products with a strong emphasis on sustainability and environmental protection. The website is built on TYPO3 CMS and integrates modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The lack of WHOIS transparency is mitigated by the professional presentation and presence of privacy policies, trusted retail partners, and social media channels. Overall, the website demonstrates a credible and trustworthy business presence in the retail beverage sector.

L

LIEPS GmbH

lieps.de

66

LIEPS GmbH is a well-established advertising agency based in Neubrandenburg, Germany, offering a comprehensive suite of marketing, design, web development, print, and video production services. With nearly two decades of experience, the agency serves a diverse clientele including startups and established businesses, positioning itself as a full-service creative partner. The website reflects a professional and consistent brand image, showcasing client references and a broad portfolio of services. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and TYPO3 CMS, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and incorporates standard SEO and accessibility features, although some advanced security headers could be improved. Analytics and marketing tools such as Google Analytics and Metricool are used with appropriate cookie consent mechanisms in place, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and shows no signs of vulnerabilities or exposed sensitive data. However, there is room for enhancement in security headers and incident response transparency. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection that would obscure legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and formal security policies would further strengthen its posture.

G

Grad Zagreb

zagreb.hr

54

Grad Zagreb is the official governmental entity representing the City of Zagreb, Croatia. The website serves as a comprehensive portal for residents, businesses, and visitors, providing access to city news, administrative information, public services, and digital resources across multiple sectors including education, culture, transportation, social welfare, and urban planning. The site is positioned as the authoritative source for municipal governance and citizen engagement in Zagreb. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. It integrates Google Analytics for traffic analysis and Kraken Optimize for performance enhancements. The site is mobile-optimized and features clear navigation structures, multi-level menus, and accessibility considerations. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure policy was found. The WHOIS data confirms the domain's legitimacy and consistency with the official city government entity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital platform for the City of Zagreb. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen user trust and security posture.

D

Dekra

dekra-arbeit.hr

53

Dekra is a Croatian-based company specializing in human resources outsourcing, event logistics, and market research services. With over 18 years of experience and multiple offices across Croatia, Dekra positions itself as a reliable partner for businesses and job seekers. Their service portfolio includes agency work, HR consulting, recruitment mediation, and innovative solutions like Try & Hire and Mystery Shopping. The website reflects a professional and consistent brand image, targeting Croatian businesses and employees. Technically, the site is built on WordPress with modern libraries and plugins, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, GDPR compliance, and anti-spam measures, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable due to privacy regulations.

G

Groupama osiguranje d.d.

groupama.hr

56

Groupama osiguranje d.d. is a Croatian insurance company operating as part of the larger French Groupama Group. The company offers a broad range of insurance products including life, motor vehicle, health, and property insurance, targeting both individual and corporate clients in Croatia. The website reflects a professional and consistent brand image aligned with its parent company. Technically, the site uses a combination of established front-end frameworks and libraries such as Bootstrap, jQuery, and Google Analytics for tracking, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data support the legitimacy of the business. The site is safe for general audiences and does not contain any adult or questionable content.

B

Ban Tours

bantours.hr

10

Ban Tours is a Croatian travel agency specializing in organizing various types of travel including group, individual, private, and corporate trips, seminars, congresses, incentive travels, and team building events. The company holds a strong market position as a leader in sports travel with over 15 years of experience and owns a fleet of 44 Dufour sailing yachts for Adriatic charters. Their target audience includes sports enthusiasts, corporate clients, and individual travelers. The website is professionally designed using Webflow, with good mobile optimization and clear navigation. Technical infrastructure includes modern web technologies and CDN hosting, providing moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and dedicated security policies. Privacy and cookie policies are present, supporting basic GDPR compliance. Contact information is clearly provided, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with business claims, supporting a high trust score. Overall, the website is a reliable and professional digital presence for Ban Tours.

Promoprint d.o.o. is a Croatian small business specializing in graphic design and printing services, including digital and offset printing, large format printing, and promotional materials such as business cards, brochures, and rollup banners. The company has an established market presence since 2008 and targets businesses and individuals seeking promotional printing solutions. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. It includes e-commerce capabilities and uses popular plugins for SEO and cookie consent management. Security posture is adequate with HTTPS, Google reCAPTCHA, and cookie consent mechanisms, but lacks explicit privacy policy, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional with moderate performance and good mobile optimization.

L

Landesportal Mecklenburg-Vorpommern

mv-tut-gut.de

44

The website www.mv-tut-gut.de is the official Landesportal (state portal) for Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub presenting the state's strengths in economy, education, culture, tourism, and government services. The portal targets a broad audience including residents, visitors, and businesses, providing access to various official partner portals and service platforms. The content is professionally curated with multimedia elements, event calendars, and regional news, reflecting a mature and well-established digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, YouTube APIs, and Typekit fonts. It implements a cookie consent mechanism with opt-in for web analytics, indicating good privacy awareness. The site is mobile optimized and accessible, with clear navigation and consistent branding. Performance is moderate, suitable for a content-rich government portal. From a security perspective, the site uses HTTPS with strong SSL configuration and employs spam-protection techniques for email addresses. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It is a reliable digital asset for the Mecklenburg-Vorpommern government, though enhancing transparency around security policies and incident handling would strengthen its security posture further.

D

Datalab

datalab.hr

58

Datalab is a regional technology company specializing in business management software, prominently featuring their PANTHEON ERP solution. The website targets businesses seeking efficient and organized business operations, positioning itself as a trusted software provider in Croatia and neighboring countries. The digital infrastructure is built on WordPress with a professional theme and includes modern tracking and consent technologies such as Google Analytics, Facebook Pixel, and Cookiebot. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements are recommended in security headers and explicit privacy documentation. Overall, the site reflects a mature digital presence with good SEO and user experience, but lacks visible direct contact information and comprehensive privacy disclosures.

D

Dubrovačka baština

dubrovackabastina.com

47

Dubrovačka baština is a small hospitality and tourism-focused website promoting the cultural heritage of Dubrovnik, Croatia. The site targets tourists and visitors interested in local heritage and events. The business appears to be relatively young, founded in 2019, and operates primarily as a regional tourism promoter. The website is built on WordPress using common plugins such as WooCommerce, WPBakery, and Slider Revolution, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages. Contact information is limited to a contact form, with no direct emails or phone numbers published. Overall, the website is functional but could benefit from enhanced security practices and clearer privacy disclosures.

N

NK Slaven Belupo

nk-slaven-belupo.hr

46

NK Slaven Belupo is a Croatian football club with a professional online presence providing comprehensive information about the club, its teams, matches, and football academy. The website is built on Joomla CMS with modern frameworks and includes accessibility features and GDPR-compliant cookie consent. The site uses Google Analytics and Tag Manager for user tracking with consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacks explicit security headers. WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

U

Ustanova Zoološki vrt Grada Zagreba

zoo.hr

51

Ustanova Zoološki vrt Grada Zagreba operates the Zagreb Zoo, a well-established public institution dedicated to animal care, conservation, and education. The website provides comprehensive information about the zoo's exhibits, educational programs, conservation projects, and visitor services. It targets a broad audience including families, schools, and tourists, positioning itself as a key cultural and educational entity in Croatia. The presence of ISO 9001 and ISO 14001 certifications underscores its commitment to quality and environmental management. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. The absence of a public vulnerability disclosure or incident response policy suggests room for improvement in security transparency. Overall, the website is professional, trustworthy, and aligned with the institution's public service mission. The lack of WHOIS data due to GDPR privacy is typical and justified. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing clear security policies to strengthen compliance and trust.

P

Pučko Otvoreno Učilište Krapina

krapina.net

50

Pučko Otvoreno Učilište Krapina is a Croatian educational and cultural institution established in 1997, providing adult education, cultural programming, and venue rental services primarily serving the local community. The website is professionally designed using WordPress with Elementor and Yoast SEO, offering rich content about educational programs, cultural events, and organizational information. The technical infrastructure is modern and includes standard web technologies and Google Analytics for visitor insights. Security posture is good with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and no explicit security incident response information is provided. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and serves its community effectively.

P

Pučko otvoreno učilište Sveti Ivan Zelina

pou-zelina.hr

54

Pučko otvoreno učilište Sveti Ivan Zelina is a Croatian public educational and cultural institution serving the local community of Sveti Ivan Zelina. The website showcases a variety of cultural events, educational programs, exhibitions, and publications, positioning itself as a regional hub for cultural and educational activities. The institution appears well-established with a domain age since 2008 and consistent WHOIS data. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, and integrates marketing tools such as MailerLite. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the website is professional, trustworthy, and serves its community effectively.

K

Kazalište Trešnja

kazaliste-tresnja.hr

43

Kazalište Trešnja is a well-established theatre company based in Zagreb, Croatia, with a domain registered since 1999. The website serves as a comprehensive platform for theatrical performances, ticket sales, schedules, and ensemble information, targeting the general public interested in cultural events. The business operates as a small cultural institution with a consistent brand presence and clear contact information. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Font Awesome, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies, although security headers are lacking. Overall, the site is professional, trustworthy, and safe for general audiences.

K

Kulturni centar Travno

kuctravno.hr

50

Kulturni centar Travno is a well-established cultural and educational center based in Zagreb, Croatia, founded in 2013. It organizes a variety of cultural events, workshops, exhibitions, and community inclusion projects, particularly focusing on youth and migrant integration through Erasmus+ funded initiatives. The website reflects a professional and community-focused organization with active event promotion and educational content. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS and some security best practices, though explicit security headers and policies could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the domain registration and website content are consistent and trustworthy, supporting the legitimacy of the organization.

Z

Zagrebačko gradsko Kazališta Komedija

komedija.hr

10

Zagrebačko gradsko Kazalište Komedija is a well-established cultural institution based in Croatia, specializing in theatrical performances including operettas, musicals, rock operas, and ballets. The website serves as a comprehensive platform for showcasing their repertoire, news, ticket sales, and organizational information. The theater targets a broad audience interested in performing arts and cultural events. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO and various plugins, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

Z

Zagrebačka filharmonija

zgf.hr

48

Zagrebačka filharmonija is a well-established Croatian cultural institution specializing in classical music performances and orchestral concerts. With a domain age dating back to 2003 and registration through a reputable Croatian registrar (CARNET), the organization demonstrates a stable and credible presence in the cultural sector. The website serves as a comprehensive portal for concert schedules, ticket sales, news, and educational projects, targeting classical music enthusiasts and the general public in Croatia. The institution maintains active social media channels and partnerships with media outlets and ticketing platforms, enhancing its outreach and engagement.

E

Evonik

evonik.com

68

Evonik is a leading global specialty chemicals company focused on innovative chemical solutions and sustainability. The website demonstrates a strong corporate presence with detailed information on markets, products, governance, and investor relations. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Alpine.js, and a consent management platform, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS and basic security headers, though additional headers and CSP could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional website content and corporate information. Strategic recommendations include enhancing security headers, verifying WHOIS data, and maintaining privacy compliance.

T

Team Wloka

team-wloka.de

10

Team Wloka is a specialized environmental planning consultancy focused on renewable energy projects such as wind energy and photovoltaic installations, as well as waste management. Their website presents a professional image with clear service offerings and a focus on rapid and pragmatic project implementation. The company targets businesses and project developers in Germany requiring environmental permits and expert reports. Technically, the website is built on WordPress using modern plugins and themes, with SEO and cookie consent mechanisms in place. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and detailed security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is trustworthy and professional, with moderate technical maturity and good business credibility.

R

Rosendahl Windtechnik GmbH

rfw-gmbh.de

10

Rosendahl Windtechnik GmbH is a specialized consulting firm focused on wind energy expertise, serving businesses and stakeholders in the renewable energy sector primarily in Germany. The company offers technical consulting and project assessment services related to wind energy. The website reflects a professional and consistent brand image with clear business focus and relevant content for its target audience. Technically, the site is built on WordPress CMS, leveraging standard plugins such as Real Cookie Banner for GDPR compliance, and is hosted on rzone.de infrastructure. The site demonstrates good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and consistency. No critical vulnerabilities or suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

N

noxt! GmbH

noxt.de

41

noxt! GmbH is a family-run venture capital holding company investing in innovative enterprises within the agriculture, automation, renewable energy, and real estate sectors. The company positions itself as a sustainable and forward-looking investor aiming to develop solutions for current and future challenges. The website presents a professional image with clear branding and subsidiary company information, targeting investors and industry professionals. The technical infrastructure is based on WordPress with the Divi theme and includes modern JavaScript libraries such as GSAP for animations, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of privacy and cookie policies and incident response information suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

N

neowa GmbH

neowa.de

10

neowa GmbH is a specialized service provider focused on the dismantling and maintenance of wind energy installations. The company offers comprehensive project planning, coordination, and execution services including HSE/QHSE compliance, component reuse, and secondary market logistics. As part of the Wind Service Gruppe since 2024, neowa leverages partnerships to provide an extended service portfolio. The website is built on Joomla CMS with modern UIkit framework, delivering a responsive and professional user experience. Security posture is solid with HTTPS and cookie consent implemented, though improvements can be made by adding security headers and formal security policies. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.