Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
37,251–37,300 of 99,067
Hrvatski Telekom d.d.regica.net
Telecommunications · Croatia
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
REGica.NET is an online domain registration and SSL certificate service operated under the brand of Hrvatski Telekom d.d., a major telecommunications company in Croatia. The website offers domain availability checks, domain registration, SSL certificate purchases, and web administration tools targeting ISPs, intellectual property providers, web designers, and end users. The platform is positioned as a regional service with a focus on Croatian and EU markets, providing fast and simple domain registration with bulk discounts. Technically, the website employs modern front-end technologies including Foundation CSS, jQuery, and integrates Google Tag Manager and SnapEngage chat for analytics and customer support. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and detailed security policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional presentation and clear corporate affiliation. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is functional, professional, and trustworthy but would benefit from improved transparency in domain registration and enhanced security headers.
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website krakenoptimize.com currently serves only a standard HTTP 404 Not Found error page, indicating that no accessible content or business information is available. The domain is registered with GoDaddy.com, LLC since 2019 and uses Cloudflare nameservers, but DNSSEC is not enabled. There are no privacy policies, cookie policies, terms of service, contact information, or security policies published on the site. The lack of content and metadata prevents a thorough assessment of the company's business model, services, or market position. Technically, the site is minimal with no detectable scripts, forms, or external links, and no security headers are present. The SSL configuration is basic, and no advanced security practices are observed. Overall, the website is non-functional from a user and security perspective, resulting in a low AI score and poor trustworthiness.
- W
Other
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website cloud-hub.eu is currently under construction and hosted by Plus Hosting Grupa d.o.o. It lacks any substantive content, business description, or user engagement features. The site only displays a placeholder page indicating hosting by Plus Hosting, with links to the hosting provider's control panel and webmail. There is no visible privacy policy, cookie policy, terms of service, or contact information, which severely limits its business credibility and user trust. From a technical perspective, the site uses minimal HTML with no detectable CMS, frameworks, or modern technologies. There is no evidence of HTTPS or security headers, and no analytics or tracking tools are present. The hosting provider is clearly identified, but the site itself does not demonstrate digital maturity or readiness for public use. Security posture is weak due to the absence of HTTPS, security headers, and any security or incident response policies. The lack of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. No vulnerabilities or malicious content were detected, but the site is not yet operational or secure. Overall, the site poses low risk due to its minimal content and lack of user interaction but also offers no business value or trust signals. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding business contact information, and developing meaningful content to improve credibility and compliance.
234 d.o.o.234doo.com
Technology · Croatia
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
234 d.o.o. is a Croatian company specializing in programmatic advertising services aimed at helping web publishers increase their ad revenue through efficient ad inventory management and advanced machine learning technologies. The company serves over 80 web publishers and connects them with leading programmatic advertising platforms such as Google Ad Exchange, IndexExchange, and OpenX. Their business model is performance-based, charging a percentage of the profit increase they generate for their clients. The website presents a professional image with clear business information, client logos, and detailed service descriptions targeting both publishers and advertisers in the Adriatic region and broader EU market. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Font Awesome, and Animate.css, along with Google Analytics for visitor tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized with good navigation and content structure, though some accessibility features are basic. No CMS or hosting provider details are explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site employs HTTPS (assumed from external scripts and Google Analytics usage), but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The cookie consent mechanism is robust and GDPR-compliant, offering users detailed control over cookie categories. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to GDPR privacy restrictions, but the business information on the site supports legitimacy. Overall, 234.hr is a credible and professional website representing a niche technology service provider with a solid market position in programmatic advertising. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is strong, and business credibility is high. The site is safe for general audiences with no adult or questionable content.
Finance · Croatia
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Raiffeisen Mirovinski fond operates as a pension fund management entity in Croatia, offering mandatory and voluntary pension fund services. The website reflects a mature digital presence with comprehensive content about pension fund categories, member information, calculators, and financial literacy initiatives. The site is well-structured, mobile-optimized, and integrates cookie consent mechanisms aligned with GDPR requirements. Technically, the site is built on IBM WebSphere Portal technology, with standard web technologies and moderate performance. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. WHOIS data is privacy-protected due to GDPR, but the domain and website content are consistent and trustworthy. Overall, the site serves its target audience effectively with a professional and compliant digital platform.
- Papaki LTD
papaki.gr
Technology · Greece
73Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Papaki LTD is a leading Greek domain registrar and web hosting provider, offering a wide range of services including domain registration, web hosting, managed WordPress hosting, SSL certificates, website builder tools, and eShop solutions. The company targets individuals and businesses primarily in Greece but also serves customers internationally, boasting over 72,000 clients in more than 100 countries. Papaki is part of the Team.Blue group, indicating a strong backing and market presence. Technically, the website is built on Drupal 7 with a modern tech stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager, Hotjar, and New Relic. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, Papaki employs HTTPS with good SSL configuration and security best practices, including secure login forms and privacy policies compliant with GDPR. However, there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits domain registration verification, but the overall business credibility and trust signals are strong. Overall, Papaki presents a professional, trustworthy, and well-structured online presence with comprehensive service offerings and solid technical and security foundations.
- 深深圳素马设计品牌科技有限公司
sumaarts.com
Technology · China
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
深圳素马设计品牌科技有限公司 is a Chinese internet brand design company specializing in high-end website design, development, and digital branding services. With over 13 years of experience, the company targets corporate and group enterprise clients across China and internationally. Their key offerings include website construction, UI/UX design, VI design, and app interface design, positioning themselves as a premium service provider in the technology sector. The website reflects a professional and consistent brand image with multiple industry certifications and memberships, enhancing trust and credibility. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, p5.js, and jQuery, with responsive design optimized for mobile devices. Hosting is provided by a Chinese registrar, and the domain is well-maintained with clientTransferProhibited status. However, some security best practices like DNSSEC and security headers are missing, and privacy compliance is weak due to the absence of privacy and cookie policies. Security posture is moderate with HTTPS enabled but lacking advanced protections. No incident response or vulnerability disclosure information is provided. Analytics usage via Baidu is present without explicit cookie consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and safe for general audiences but would benefit from enhanced security and privacy practices. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing incident response contacts to improve compliance and trustworthiness.
六度人和 (EC CRM)staticec.com
Technology · China
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
六度人和 (EC CRM) is a Chinese technology company specializing in AI-driven CRM systems designed to enhance marketing, sales, and customer service processes for enterprise clients. Their platform integrates marketing cloud, sales cloud, customer service cloud, and application platforms to provide comprehensive digital customer relationship management solutions. The website is professionally designed using WordPress and Elementor, indicating a mature digital infrastructure. The presence of a cookie consent banner shows awareness of privacy compliance, although explicit privacy and terms of service pages are not found. Security posture is moderate with HTTPS enabled but lacking visible security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation.
Dorner Conveyorsdornerconveyors.com
Manufacturing · United States
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dorner Conveyors is a well-established company specializing in industrial, precision, and sanitary conveyor automation solutions designed to optimize production efficiency. The company positions itself as a leader in precision conveying systems with a broad product portfolio and a global distributor network. Their website reflects a mature digital presence with multilingual support, professional branding, and comprehensive product information targeting manufacturing and industrial automation sectors. Technically, the website is built on WordPress using modern tools such as Elementor, Yoast SEO, and Cookiebot for privacy compliance. It employs security best practices including HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, although accessibility features could be improved. Analytics and marketing tools like Google Tag Manager and Hotjar are used responsibly with privacy considerations. From a security perspective, the site demonstrates good posture with appropriate headers and secure form handling. However, the absence of a publicly accessible security policy, incident response contacts, and vulnerability disclosure reduces transparency. The WHOIS data for the domain is unavailable, which is unusual and slightly reduces trust, but the website content and social media presence strongly indicate legitimacy. Overall, Dorner Conveyors presents a professional and trustworthy online presence suitable for its B2B industrial audience. Strategic improvements in security transparency and WHOIS data visibility would further enhance trust and compliance.
Garvey Corporationgarvey.com
Manufacturing
60Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
Garvey Corporation is a well-established manufacturing company specializing in patented accumulation systems and conveyors primarily serving the food, beverage, and pharmaceutical industries. The company leverages its patented technology to improve throughput by up to 30%, positioning itself as a key player in industrial equipment solutions. The website reflects a mature digital presence built on WordPress with the Divi theme, integrating multiple marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel to support business growth and customer engagement. While the technical infrastructure is solid with HTTPS and modern scripts, there is room for improvement in security best practices, including enabling DNSSEC and implementing security headers. The absence of explicit privacy, cookie, and terms of service policies indicates a gap in compliance and transparency that should be addressed to meet GDPR and other regulatory requirements. Overall, the domain's long history and consistent WHOIS data support the legitimacy and credibility of the business.
Sentrysentry.dev
Technology
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Sentry.dev is a technology-focused website providing application monitoring and error tracking services primarily targeted at software developers and development teams. The platform offers SaaS-based solutions to help organizations identify and resolve software issues efficiently. The website uses a modern technology stack including React and various JavaScript libraries, indicating a contemporary digital infrastructure. However, the provided HTML snapshot shows minimal static content, suggesting the site relies heavily on client-side rendering and JavaScript for content delivery. Security posture evaluation reveals a lack of visible security headers and no explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of contact information and terms of service in the snapshot limits transparency. Overall, the site appears legitimate and professional but would benefit from enhanced security practices and clearer privacy compliance documentation.
- KKIProtect
heykodex.com
Technology · Germany
66Medium
NIS2 47 · GDPR 48
NIS2 47 · GDPR 48
Kodex is a privacy and security engineering platform developed by KIProtect, a Berlin-based startup focused on open-source privacy and security solutions. The platform offers advanced pseudonymization and anonymization techniques embedded in a data engineering layer to help organizations securely process sensitive data. Kodex targets organizations involved in data engineering and data science that require compliance with privacy laws and robust data protection. The company has received multiple awards and maintains research partnerships with universities, positioning it as a credible player in the privacy technology niche. Technically, the website employs modern web technologies including Preact and Bulma CSS, hosted by Hetzner Online GmbH. The site is mobile-optimized with good navigation and content quality, though some improvements in accessibility and SEO could be made. No major performance issues were detected, and the site is fully accessible without WAF or security challenges. From a security perspective, the site lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. No direct contact emails or phone numbers are provided, with contact primarily via a form. The platform demonstrates a good security posture but could enhance transparency and compliance features. Overall, Kodex presents a professional and trustworthy online presence with a solid foundation in privacy and security engineering. Strategic enhancements in security headers, privacy compliance, and contact transparency would further strengthen its market position and user trust.
- KIProtect
heyklaro.com
Technology
64Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Klaro.org is the official website for Klaro!, a privacy and data protection tool developed by KIProtect. The company offers an open source consent management platform designed to help website owners comply with GDPR by managing user consent for third-party services and tracking scripts. Klaro is positioned as a niche leader in privacy compliance tools, serving hundreds of organizations with both self-hosted and hosted service options. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and responsive design optimized for both desktop and mobile devices. Technically, the site uses modern JavaScript frameworks including React and Bootstrap, and employs privacy-respecting analytics via plausible.io. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security best practices like DNSSEC and security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism implemented. Business credibility is supported by transparent domain registration and open source licensing. Overall, Klaro.org presents a trustworthy and technically sound platform for privacy management.
SelectHubselecthub.com
Technology
74Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
SelectHub operates a professional software selection platform designed to assist businesses in evaluating and selecting software solutions through collaborative tools, analyst research, and unbiased reviews. The company targets organizations seeking to streamline their software procurement process and offers services including research, price negotiation support, and comprehensive software category coverage. The platform is positioned as a trusted resource in the technology sector with a medium-sized business profile and a founding date around 2021. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager. Hosting appears to be on AWS infrastructure. The site demonstrates good SEO practices, mobile optimization, and structured data usage, contributing to a positive digital maturity level. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses some best practices but lacks several important security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No critical security issues were detected, but improvements are recommended to enhance the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, SelectHub presents a trustworthy and professional online presence with a solid business model and technical foundation. The absence of WHOIS data slightly impacts trust but does not outweigh the positive indicators from the website content and security measures. Strategic recommendations include enhancing security headers, updating libraries, and improving transparency around domain registration.
Ablestar LLCappnavigator.io
E-commerce · United States
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AppNavigator is a niche online platform launched in 2023 by Ablestar LLC, providing detailed analytics and review data for the Shopify App Store. It targets Shopify store owners and app developers seeking insights into app rankings, reviews, and usage trends. The website is professionally designed with a clear focus on e-commerce analytics, leveraging modern web technologies and cloud hosting for fast performance. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like DNSSEC and security headers could enhance it further. Privacy compliance is basic with a privacy policy linked on the parent company site but lacks cookie consent mechanisms and direct contact information. Overall, the platform presents a trustworthy and useful resource within its market niche.
Tekpontekpon.com
Technology
68Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Tekpon is a specialized software review and comparison platform founded in 2020, focusing on helping businesses discover, compare, and purchase software solutions with confidence. The platform emphasizes vendor negotiation to provide cost savings, positioning itself as a trusted intermediary between software vendors and buyers. Tekpon targets business users and software buyers seeking reliable reviews and deals, supported by partnerships with major industry players such as Google Cloud and Hubspot. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OAuth authentication via Google and LinkedIn, hosted behind Cloudflare DNS services. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. Security-wise, Tekpon enforces HTTPS, uses secure authentication mechanisms, and implements cookie consent, though it lacks explicit security headers and a public security policy or vulnerability disclosure page. The domain registration is transparent and consistent with the business age and claims, enhancing trustworthiness. Overall, Tekpon presents a professional, secure, and privacy-conscious platform with room for improvement in explicit security disclosures and DNS security enhancements.
Other
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website topbusinesssoftware.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to any actual content. As a result, no business information, contact details, or policies can be extracted or analyzed. The domain is registered since 2008 with GoDaddy and shows standard domain status flags indicating a legitimate registration. However, the lack of accessible content prevents a full assessment of the business, technical infrastructure, or security posture beyond the presence of Cloudflare protection. The site does not expose any privacy or cookie policies, contact information, or security frameworks publicly. This limits the ability to evaluate compliance or trustworthiness comprehensively.
- SSourceForge
sourceforge.net
Technology
73Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SourceForge is a well-established technology platform founded in 1999, specializing in hosting open source software projects and providing collaboration tools for developers. The platform serves a global audience of software developers and technology users. The website is currently protected by Cloudflare's Turnstile CAPTCHA, which blocks direct access to content, limiting the ability to analyze the full site. The technical infrastructure includes Cloudflare CDN and security services, indicating a mature approach to performance and security. However, the visible content is minimal due to the security challenge, and no privacy or contact information is accessible on the landing page. The WHOIS data confirms the domain's legitimacy and long history, with appropriate registrar protections but no DNSSEC enabled. Overall, the security posture is strong in terms of access control but lacks visible security headers or policies on the challenge page. The site content is safe and appropriate for a general audience, focusing on software development and open source projects.
Info-Tech Research Groupinfotech.com
Technology · United States
62Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Info-Tech Research Group is a professional IT research and advisory company serving IT professionals and enterprise organizations with research reports, advisory services, and IT tools. The company positions itself as a practical and trusted resource in the IT advisory market. The website demonstrates a mature digital infrastructure with modern analytics and marketing technologies integrated, including Google Tag Manager, Hotjar, and Visual Website Optimizer. Security posture is strong with HTTPS enforced and CSRF protections in place, though some advanced security headers could be added. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain transparency. Overall, the site is professional, secure, and business-focused, suitable for its target audience.
- Tidio
tidiochat.com
Technology
73Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Tidio is a technology company specializing in AI-driven customer service and support software solutions. Their offerings include AI chatbots, live chat, help desk, and ticketing systems designed to enhance customer engagement and streamline support workflows. Positioned as a competitive SaaS provider, Tidio targets businesses seeking to improve customer interactions and sales conversions through automation and AI. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as Next.js, Google Tag Manager, and Amplitude analytics, ensuring fast performance and excellent user experience across devices. Security posture is strong with HTTPS enforcement and modern security headers, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent management. The absence of WHOIS data limits domain registration transparency but does not detract from the overall professional presentation and trustworthiness of the site.
- Cmsbox GmbH
cmsbox.com
Technology · Switzerland
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Cmsbox GmbH is a Swiss-based technology company specializing in a proprietary Content Management System designed to simplify website editing and custom web design implementation. Their market position is focused on providing tailored CMS solutions with rapid turnaround times, supported by Swiss hosting and domain registration services. The website demonstrates a mature technical infrastructure with integration of modern analytics and security tools such as Google Analytics, Google Tag Manager, and reCAPTCHA. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but present, with cookie consent and privacy policy available. Overall, Cmsbox presents a trustworthy and professional digital presence aligned with its business claims.
Ekoeko.com
Technology
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Eko is a technology company specializing in AI-powered interactive video solutions for ecommerce businesses. Their platform offers a visual commerce suite that enables brands to create engaging, conversion-driven video content using AI Studio technology. The website positions Eko as an innovative player in the ecommerce technology space, targeting businesses seeking to enhance product engagement and brand elevation through interactive video experiences. Technically, the website is built using Framer CMS, hosted on AWS infrastructure, and integrates advanced analytics tools such as Google Analytics, Snowplow, and HubSpot for marketing and user behavior tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enabled and domain-level protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain is well-established since 2000, indicating business legitimacy. Strategic improvements in privacy disclosures and security configurations would enhance trust and compliance.
- DDokument nicht gefunden
computercheck24.com
Other · Germany
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The analyzed URL leads to a standard 404 error page indicating the requested document is not found on the server. The page content is minimal, multilingual, and provides no business or security-related information. The domain computercheck24.com is registered with IONOS SE since 2007, indicating a legitimate and established domain, but the specific URL analyzed is inactive or removed. No metadata, structured data, or contact information is present on the page, limiting the ability to assess business operations or security posture. The absence of HTTPS and security headers information further restricts security evaluation. Overall, the website content at this URL is inaccessible for meaningful analysis, resulting in a very low AI score and no detected privacy or compliance policies.
BLKB Fund Management AGblkb-fm.ch
Finance · Switzerland
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
BLKB Fund Management AG is a Swiss financial services company specializing in fund management and real estate investment advisory. It operates as a fully regulated entity under FINMA supervision and is a wholly owned subsidiary of the Basellandschaftliche Kantonalbank. The company targets qualified and institutional investors in Switzerland, offering sustainable property funds and comprehensive real estate advisory services. The website reflects a professional and consistent brand image with clear business information and a focus on transparency and compliance. Technically, the site uses modern web technologies, including a strict Content-Security-Policy, multiple analytics tools, and is optimized for mobile devices. Security posture is strong with HTTPS and CSP headers, though explicit security policies and incident response disclosures are absent. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the website and business demonstrate high credibility and trustworthiness within the Swiss financial sector.
- newhome.ch Ltd
newhome.ch
Real Estate · Switzerland
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
newhome.ch Ltd operates a regional real estate platform in Switzerland, providing services for renting, buying, and advertising properties. The website targets individuals and businesses interested in the Swiss real estate market, offering a user-friendly interface with multilingual support. The platform leverages modern web technologies including Angular and integrates analytics and consent management tools such as Google Tag Manager and Usercentrics CMP. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit privacy and terms of service documents are not found in the provided content. Overall, the website presents a professional and trustworthy front for its business operations.
Lasten ja nuorten saatiotet.fi
Non-profit · Finland
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
TET.fi is a Finnish non-profit organization focused on connecting young people with employers to facilitate work experience opportunities. Established in 2013, it operates under the organization Lasten ja nuorten saatio, serving primarily youth and employers in Finland. The website is multilingual, supporting Finnish, Swedish, and English, enhancing accessibility for diverse users. The platform provides resources and services aimed at preparing youth for future working life, positioning itself as a trusted intermediary in the Finnish youth employment ecosystem. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Tag Manager for analytics. Hosting appears to be managed by Cloudpit, inferred from nameservers. The site demonstrates good mobile optimization and SEO practices, with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not implemented and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the domain registration data aligns well with the website's claims, showing transparency and legitimacy. The site is free from adult or questionable content, targeting a general audience focused on youth employment. Strategic recommendations include implementing DNSSEC, publishing security policies, and establishing a vulnerability disclosure process to further enhance trust and security.
- AAlma Media
almamedia.fi
Media · Finland
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Alma Media is a leading Finnish media company focused on sustainable growth by providing content and services that benefit users in everyday life, work, and leisure. The company operates a diversified media and digital services business model, including advertising, recruitment, real estate, and automotive services. The website reflects a mature digital presence with comprehensive investor relations, corporate information, and a strong brand identity. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, optimized for mobile and SEO. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. Overall, Alma Media demonstrates high business credibility and digital maturity.
Other
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website alma-amr.net presents minimal content, primarily a header with the domain name and two JavaScript scripts, including Google Tag Manager. There is no visible business description, contact information, or legal policies, indicating the site may be a placeholder or under development. The domain is registered since 2016 with Amazon Registrar, Inc., and uses AWS DNS servers, suggesting a stable hosting environment but lacking advanced DNS security features like DNSSEC. Technically, the site uses Google Tag Manager for analytics but lacks modern SEO, accessibility, and security best practices such as security headers and privacy policies. The performance and mobile optimization are basic due to minimal content. No CMS or frameworks are detected. From a security perspective, the site does not present critical vulnerabilities but lacks essential security headers and DNSSEC, which are recommended for improved security posture. No privacy or cookie policies are present, which is a compliance gap. No contact or incident response information is available, reducing transparency and trust. Overall, the website scores low on content quality, security posture, privacy compliance, and business credibility. It is safe in terms of content but provides little value or trust signals to visitors. Strategic improvements in content, security, and compliance are recommended to enhance the site's professionalism and trustworthiness.
- EEntrio
entrio.com
Media
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Entrio is a professional event management platform offering a comprehensive hybrid event solution that integrates functionalities of multiple online tools. The platform targets event organizers and attendees primarily in the entertainment and corporate sectors, providing services such as ticketing, event hosting, and industry-specific event solutions. The website is built on WordPress with modern plugins for SEO and multilingual support, indicating a mature digital infrastructure. The technical setup includes HTTPS, cookie consent mechanisms, and image optimization, contributing to a good user experience and privacy compliance. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Security posture is solid with HTTPS and no visible vulnerabilities, but the lack of explicit security headers and public security policies suggests room for improvement. Overall, Entrio presents a professional and trustworthy platform with minor gaps in transparency and security documentation.
- Claypaky
claypaky.it
Other · Italy
55Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Claypaky is a well-established Italian company specializing in professional lighting systems for the entertainment and architectural sectors. The website reflects a mature digital presence with comprehensive product information, support resources, and a clear focus on innovation and customer engagement. The company targets professionals such as lighting designers, technical directors, and architects, offering a broad portfolio of lighting products and services. Technically, the site is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager and reCAPTCHA for analytics and security. Privacy compliance is robust, leveraging Iubenda for cookie consent and privacy policy management. Security posture is strong with HTTPS, secure forms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.
- Shenzhen Gloshine Technology Co., Ltd
gloshine.com
Technology · China
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Shenzhen Gloshine Technology Co., Ltd is a well-established manufacturer specializing in LED display screens and video walls, serving a global market since 2006. The company operates a large production facility and holds numerous patents, positioning itself as a leading player in the LED display industry. Their product portfolio includes indoor and outdoor LED screens, rental solutions, fixed installations, and virtual production LED walls, catering to diverse customer needs worldwide. The website reflects a mature business with a strong market presence and comprehensive product information. Technically, the website employs a modern but straightforward tech stack including jQuery, Slick Carousel, and lazy loading techniques, supported by Google Tag Manager and cookie consent scripts to ensure analytics and privacy compliance. Hosting is provided by Alibaba Cloud, consistent with the company's Chinese origin. The site is moderately optimized for performance and mobile use, with good SEO practices and basic accessibility features. From a security perspective, the site uses HTTPS and domain registration protections but lacks visible advanced security headers and explicit public security policies or incident response contacts. Cookie consent mechanisms are implemented, indicating awareness of privacy regulations. No critical vulnerabilities or suspicious elements were detected in the content or WHOIS data, which aligns well with the company's legitimacy and business claims. Overall, the website is professional, trustworthy, and compliant with key privacy standards, though it could improve by publishing explicit security policies and enhancing security headers. The business is credible and well-positioned in the LED display manufacturing sector with a strong global footprint.
Barcobarco.com
Technology
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Barco is a global technology company specializing in advanced projection, visualization, and collaboration solutions primarily serving enterprise, healthcare, and entertainment sectors. The company positions itself as a provider of professional-grade visual and sharing technologies that enhance business operations and experiences. The website reflects a mature digital presence with comprehensive product and solution offerings, targeting professional audiences in multiple industries. Technically, the website leverages modern web technologies including Adobe Experience Manager as its CMS, Adobe Launch for tag management, Google Tag Manager, and Marketo for marketing automation. The site is well-structured, mobile-optimized, and employs security measures such as HTTPS and Cloudflare Turnstile captcha to mitigate automated threats. However, explicit privacy and cookie policies are not evident in the provided content, indicating an area for compliance improvement. From a security perspective, the site demonstrates good practices with HTTPS enforcement and bot mitigation. No obvious vulnerabilities or exposed sensitive data were detected. The absence of detailed WHOIS data is unusual but does not detract significantly from the site's legitimacy given the strong branding and social media presence. Overall, the security posture is solid but could benefit from enhanced transparency in privacy and incident response policies. The overall risk assessment is low, with recommendations focusing on improving privacy compliance, publishing security policies, and clarifying WHOIS information. These steps would enhance trust and regulatory adherence, supporting Barco's position as a reputable enterprise technology provider.
Music Tribemusictribe.com
Technology
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Music Tribe's community website serves as a centralized platform for users and customers of its multiple audio technology brands to engage in product discussions, access support, and participate in brand tribes. The platform is built on a modern Angular framework and integrates third-party services such as Google Tag Manager and Funraise for analytics and donation/payment functionalities. The website demonstrates good design quality, mobile optimization, and user experience, targeting musicians and audio professionals. However, the absence of visible privacy and cookie policies, security headers, and contact information indicates gaps in privacy compliance and security posture. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not detract from the legitimacy of the site given the strong brand presence and consistent branding. Overall, the site is professional and safe but would benefit from enhanced transparency and security best practices.
JOURNAL MEDIA D.O.O.journal.hr
Media · Croatia
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Journal.hr is a Croatian lifestyle magazine operated by JOURNAL MEDIA D.O.O., targeting a general adult audience interested in fashion, beauty, culture, gastronomy, and travel. The website presents professionally curated content with a consistent brand identity and a clear focus on lifestyle topics. It maintains a good market position as a regional media outlet with sister sites in Serbian and Slovenian languages. Technically, the site is built on WordPress 6.8.3, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and CookieYes for consent management. The site is mobile-optimized and offers a good user experience with clear navigation and SEO best practices. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though security headers are not evident and should be implemented to enhance protection. Privacy compliance is strong, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit privacy policy and terms of service pages were not detected in the provided content. Overall, the site is trustworthy, safe, and professionally maintained, with no signs of malicious activity or content safety concerns.
AdTech Labadtechlab.eu
Technology
50Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
AdTech Lab is a small but experienced startup founded in 2023, specializing in advertising technology solutions for digital media publishers and brands in Southeast Europe. Their services include yield management, product development, and strategic analytics, aiming to modernize and educate the regional adtech market. The website is built on WordPress with Elementor and related plugins, showing good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent, though lacking advanced security headers and explicit security policies. Overall, the site is professional and trustworthy with clear business focus but could improve transparency on security and incident response.
Mojnovac.hrmojnovac.hr
Media · Croatia
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Mojnovac.hr is a Croatian media and educational platform focused on personal finance, financial independence, and related lifestyle content. The website offers articles, interviews, event organization, and e-commerce services including book sales and VIP memberships. It targets a general Croatian-speaking audience interested in improving their financial literacy and independence. The platform leverages a modern WordPress infrastructure with Elementor and WooCommerce, integrating marketing and analytics tools such as MailerLite, Google Analytics, Gemius, and DotMetrics. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is privacy protected, which is common and justified for media websites in the EU. Overall, Mojnovac.hr presents as a professional, trustworthy, and well-maintained platform with moderate to good security and privacy compliance.
Novi listnovilist.hr
Media · Croatia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Novi list is a well-established Croatian online news portal focusing on political news and daily news coverage. Founded in 1997, it holds a strong market position as a leading political daily in Croatia. The website leverages a modern WordPress CMS platform integrated with various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, OneSignal for push notifications, and Hotjar for user behavior analysis. Hosting and DNS services are provided by CARNET and Cloudflare respectively, ensuring reliable infrastructure. Security posture is solid with HTTPS enabled and use of reputable third-party services, though explicit security headers and privacy policies are not clearly visible in the provided content. The site extensively uses tracking and advertising scripts, indicating a monetization model based on ads and user engagement. Overall, the website presents a professional and trustworthy front but would benefit from enhanced privacy compliance and clearer contact information.
Motus Media grupamotus-media.hr
Media · Croatia
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Motus Media grupa is a Croatian media company operating multiple successful online portals covering news, geopolitics, history, and regional content across Croatia, Bosnia and Herzegovina, and Serbia. The group boasts a significant monthly user base exceeding 7 million users and extensive page views, positioning itself as a key player in the regional digital media market. The business model centers on content publishing and advertising, leveraging a portfolio of branded portals to maximize reach and advertising potential. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder and Yoast SEO, hosted with DNS services via Cloudflare and registered through CARNET. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation. SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected in the provided content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, representing a compliance gap under GDPR. Contact information is not explicitly provided, which may affect user trust. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.
Lider medialidermedia.hr
Media · Croatia
68Medium
NIS2 30 · GDPR 10
NIS2 30 · GDPR 10
Lider Media is a well-established Croatian business media portal founded in 2014, targeting entrepreneurs, business professionals, and investors. The website offers a broad range of business news, podcasts, conferences, and subscription-based premium content, positioning itself as a leading source of business information in Croatia. The content is professionally curated and covers sectors such as finance, crypto, technology, and sustainability. The business model relies on advertising, subscriptions, and event hosting. Technically, the website employs modern JavaScript libraries, analytics tools, and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response details could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness with consistent branding and quality content.
- VVR MARKET SOLUTIONS LLC
xrpg.us
Technology · Croatia
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
XRPG is a newly established technology-related business under VR MARKET SOLUTIONS LLC, registered in Croatia in June 2024. The website is minimalistic, featuring only a logo and basic contact information, indicating an early-stage or placeholder site. The lack of detailed business descriptions or services limits insight into the company's market position or business model. Technically, the site uses basic HTML and CSS with Google Fonts and is hosted with DNS managed by Cloudflare, but lacks advanced frameworks or CMS platforms. The site is mobile-optimized but has poor SEO and accessibility features. Security posture is weak due to absence of security headers, DNSSEC, and privacy policies, though the domain registration is transparent and consistent with the business information. Overall, the site presents a low-risk profile but requires significant improvements in content, security, and compliance to enhance trust and professionalism.
Other · Croatia
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Agroklub.com is a Croatian-language agricultural information portal offering a range of services including news, classifieds (Oglasnik), an agricultural database (Agrobaza), and a community club (KLUB). The website targets the Croatian agricultural community, providing relevant content and resources to farmers and agribusiness professionals. The site demonstrates a moderate level of digital maturity, utilizing modern web fonts, iconography, and multiple analytics and advertising technologies such as Google Analytics, Facebook Pixel, and Google Adsense. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. Overall, the site is functional and content-rich but requires improvements in transparency, security headers, and privacy compliance to enhance trustworthiness and regulatory adherence.
- Bug.hr
bug.hr
Media · Croatia
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Bug.hr is a leading Croatian technology news portal established in 1995, offering daily ICT news, analyses, video content, comments, and product reviews. The website targets technology enthusiasts and the general public interested in technology and media content. It operates a business model based on online media publishing with advertising and premium subscription services, maintaining a strong market position in the regional technology media sector. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Analytics, hosted on Azure DNS infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses several tracking and advertising scripts but lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and legitimate, with a domain age consistent with its business claims.
- MMidas Network
midas-network.com
Technology
70Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Midas Network is a technology company specializing in content discovery and advertising monetization services. Established in 2016, it targets publishers, advertisers, and content creators seeking to optimize content distribution and revenue generation. The website reflects a niche market position with a focus on digital advertising technologies and content optimization. Technically, the site employs modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a moderate level of digital maturity. Security-wise, the site benefits from HTTPS, Google reCAPTCHA, and cookie consent mechanisms, but lacks advanced DNS security features like DNSSEC and does not publicly disclose incident response or vulnerability disclosure policies. Overall, the website is accessible, professionally designed, and compliant with GDPR cookie consent requirements, but could improve in transparency and security best practices.
- Njuškalo
njuskalo.hr
Real Estate · Croatia
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Njuškalo.hr is a leading Croatian online classifieds platform established in 2008, offering a wide range of services including vehicle sales, real estate listings, job postings, marketplace items, and tourism accommodations. The platform enjoys significant daily traffic and a strong market position in Croatia's e-commerce and classifieds sector. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and advertising technologies, and implements a robust cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced and consent management in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital infrastructure with good user experience and privacy compliance, positioning it as a trustworthy and professional service in its market.
Hrvatski Telekom d.d.tportal.hr
Media · Croatia
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Tportal.hr is a leading Croatian online news portal operated by Hrvatski Telekom d.d., offering a wide range of news and media content including politics, business, sports, technology, lifestyle, and entertainment. The website targets a broad general audience interested in current events and cultural topics. The business model primarily relies on advertising revenue through multiple ad networks and tracking services integrated into the site. Technically, the site employs modern JavaScript libraries, analytics tools, and performance optimizations such as lazy loading images and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and use of privacy SDKs, though explicit security headers and policies could be improved. Privacy compliance is basic with cookie consent mechanisms present but no clearly linked privacy or terms pages on the homepage. WHOIS data is protected under GDPR, which is typical for media companies, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-positioned in the Croatian media market.
Redview Mediaredviewmedia.com
Media
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Redview Media is a small digital advertising company specializing in multi-screen media environments, offering proprietary and standard IAB ad formats distributed through premium publishers. The website presents a professional and consistent brand image with clear navigation and relevant content targeting advertisers and publishers. Technically, the site is built on WordPress using common libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics and marketing. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, and no explicit incident response or vulnerability disclosure information is provided. Privacy policy exists but is basic and does not explicitly confirm GDPR compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.
Telegram.hrtelegram.hr
Media · Croatia
57Medium
NIS2 52 · GDPR 10
NIS2 52 · GDPR 10
Telegram.hr is a Croatian media portal established in 2015, providing news, commentaries, essays, and analyses primarily targeting a general Croatian audience. It operates under the parent company Telegram media grupa and includes subsidiaries such as Super1.hr and Telesport.hr. The website demonstrates a consistent brand presence and a professional content offering, positioning itself as a reputable news source in Croatia. Technically, the site leverages modern web technologies including Nuxt.js for server-side rendering, Cloudflare for DNS and CDN services, and integrates marketing and analytics tools such as Google Tag Manager and OneSignal. The site is mobile-optimized and exhibits good SEO practices. Security-wise, the site uses HTTPS and Cloudflare services but lacks explicit security headers and published security policies. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the site is legitimate and trustworthy but could improve transparency and security posture.
- Plus Hosting Grupa d.o.o.
24sata.hr
Media · Croatia
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
24sata.hr is a leading Croatian news portal providing the latest news from Croatia and around the world. The website offers a broad range of content including politics, sports, entertainment, lifestyle, and business news, targeting a general audience. It operates primarily on an advertising-supported business model and holds a strong market position as the largest news portal in Croatia. The company behind the domain is Plus Hosting Grupa d.o.o., a Croatian hosting provider, which aligns with the website's regional focus and domain registration data. The site was established in 2014, indicating a mature presence in the digital media space. Technically, the website employs a modern technology stack including various JavaScript libraries, analytics tools such as Google Analytics and Facebook Pixel, and a consent management platform (Didomi) for GDPR compliance. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. The content is well-structured and professionally presented, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses multiple third-party scripts for analytics and advertising. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly set, which could be improved. There is no publicly visible security policy or incident response contact information, and no vulnerability disclosure mechanism is found. The privacy policy is not explicitly located in the provided content, though a cookie consent mechanism is active. No critical vulnerabilities or suspicious patterns were detected. Overall, 24sata.hr presents a trustworthy and professional online news platform with a solid technical foundation and good business credibility. To enhance its security posture and compliance, it should publish clear privacy and security policies, implement additional security headers, and provide incident response contacts. These improvements would further strengthen user trust and regulatory compliance.
- Plus Hosting Grupa d.o.o.
dnevnik.hr
Media · Croatia
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Dnevnik.hr is a well-established Croatian news and video portal founded in 2010, operated under Plus Hosting Grupa d.o.o. The website offers a broad range of news content including local and international news, sports, entertainment, lifestyle, technology, and health. It maintains a strong market position as a leading Croatian media outlet with multiple specialized subdomains catering to diverse audience segments. The business model primarily revolves around advertising revenue supported by extensive content offerings and multimedia integration. Technically, the site employs modern JavaScript frameworks, integrates with major analytics and advertising platforms, and uses Cloudflare DNS services. The website is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with a comprehensive privacy and cookie policy and GDPR consent mechanisms. However, explicit contact information and security policies are not prominently available. Overall, the site is professional, trustworthy, and suitable for a general audience.
- IIndex.hr
index.hr
Media · Croatia
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Index.hr is a leading Croatian news portal operated by Tomsoft d.o.o., established in 2012. It offers comprehensive news coverage including politics, health, sports, and entertainment, targeting a general Croatian audience. The website maintains a strong market position as the most read portal in Croatia, supported by a robust advertising-based business model. The site integrates multiple advertising networks and tracking technologies to monetize content effectively while maintaining GDPR compliance through a visible consent management platform.