Medium-risk security reports

Jutarnji list is a leading Croatian daily news portal operated by Hanza Media, providing comprehensive news coverage in politics, sports, culture, and economy. The website targets a general audience with a business model based on advertising and premium content subscriptions. It holds a strong market position as a primary news source in Croatia. Technically, the site is built on Joomla CMS with Bootstrap framework, leveraging modern advertising and analytics technologies such as Google Tag Manager, Prebid.js, and Microsoft Clarity. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is strong with HTTPS, reCAPTCHA, and consent management via Didomi, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a mature digital infrastructure and trustworthy business presence, with room for improvement in privacy transparency and incident response disclosures.

The website cchbcshop.com serves as the customer portal for Coca-Cola Hellenic Bottling Company (Coca-Cola HBC), a major beverage bottler operating across multiple countries. The portal enables customers to place orders, track shipments, access invoices, and benefit from exclusive discounts, supporting a B2B e-commerce business model focused on beverage distribution. The site branding and content align well with Coca-Cola HBC's corporate identity, reflecting a large, established enterprise with a professional online presence. Technically, the site leverages modern web technologies including React and Microsoft Bot Framework Web Chat, integrated with third-party services such as Gigya for customer identity management and WordLift for content enhancement. The site is mobile optimized and demonstrates moderate performance, though some SEO and accessibility features could be improved. Hosting and domain registration are managed through reputable providers, with HTTPS enforced and domain status protections in place. From a security perspective, the site benefits from HTTPS and domain registration safeguards but lacks visible security headers and explicit privacy or cookie policies on the prelogin page. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. No suspicious or vulnerable libraries were detected, and no adult or questionable content is present, indicating a safe environment for users. Overall, the website presents a trustworthy and professional portal for Coca-Cola HBC customers, though improvements in privacy compliance, security headers, and transparency around incident response would strengthen its security posture and regulatory adherence.

SEMPL is a well-established media trends conference organizer based in Slovenia, targeting marketing, media, and communication professionals across Central and Southeastern Europe. The website showcases a professional event with a strong regional presence, offering networking opportunities, media awards, and industry insights. The technical infrastructure is modern, leveraging Next.js and React frameworks, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response details are not publicly available. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy. Overall, SEMPL presents a credible and trustworthy digital presence aligned with its business objectives.

Snaga Komunikacije is a professionally organized communication conference event powered by Woman.Comm Club, targeting communication, media, marketing, and creative industry professionals in the Adria region. The website presents a comprehensive agenda, speaker profiles, ticketing options, and partnership information, reflecting a strong market position as a regional leader in communication industry events. Technically, the site is built on WordPress with modern technologies and hosted via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is partially met with a clear privacy policy hosted on a related domain, but cookie consent mechanisms are missing. Overall, the site is trustworthy, well-branded, and professionally maintained, suitable for its business purpose.

Telegraf.tv is a Serbian online media platform specializing in video content including news, entertainment, sports, business, and lifestyle. It targets a broad Serbian-speaking audience seeking the latest video clips and topical coverage. The website demonstrates a professional design with consistent branding and good content quality, supported by active social media channels and mobile app availability. Technically, the site employs modern web technologies such as lazy loading, responsive images, and consent management tools, ensuring a good user experience and GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site appears legitimate and trustworthy, though the absence of WHOIS data limits full domain trust assessment.

The website 'Održivost' is an informational platform dedicated to promoting awareness and education about sustainable development, primarily targeting a Serbian-speaking audience. It provides articles, news, and interesting facts related to sustainability, aiming to harmonize economic, social, and environmental aspects. The site is relatively new, founded in 2022, and operates on a WordPress CMS hosted by Loopia d.o.o. The technical infrastructure includes modern web technologies such as jQuery, Bootstrap, and SEO optimization via Yoast, with moderate performance and good mobile responsiveness. From a security perspective, the site benefits from HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to enhance domain and web security. No privacy or cookie policies are present, and no contact information is provided, which impacts compliance and trustworthiness. Google Analytics is used for user tracking without visible consent mechanisms, indicating potential GDPR compliance gaps. Overall, the website is safe, professional, and well-structured for its informational purpose but would benefit from improved privacy compliance, enhanced security configurations, and clearer contact channels to increase trust and regulatory adherence.

Blic.rs is a leading Serbian news portal operated by Ringier Serbia DOO, a subsidiary of Ringier AG. The website offers comprehensive news coverage across politics, economy, culture, sports, and entertainment, targeting a broad general audience in Serbia and the region. It maintains a strong market position as a trusted media brand with a large user base and multiple digital platforms including mobile applications. The business model is primarily advertising-driven, supported by partnerships and digital marketing tools. Technically, the website employs a modern tech stack with extensive use of JavaScript libraries, analytics, and advertising frameworks, hosted by a reputable cloud services provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. Security posture is solid with HTTPS and consent management implemented, but lacks visible security headers and formal security policies. Privacy compliance is partially addressed via a consent mechanism, but explicit privacy and terms of service pages are not detected in the provided content. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy transparency and security policies would further strengthen trust and compliance.

Aklamator is a digital PR and advertising platform founded in 2014, offering services that enable publishers and advertisers to buy and sell PR announcements, cross-promote websites via widgets, and utilize digital advertising tools such as popup and video float widgets. The platform targets digital marketers, website owners, and agencies seeking to boost web traffic and monetize content through innovative widget-based solutions. The website demonstrates a consistent brand presence with a professional design and clear navigation, supporting its niche market position in the technology and media sectors. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates with Google Analytics and Tag Manager for tracking. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site is mobile-optimized and uses WordPress plugins to extend functionality, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks explicit security headers and cookie consent mechanisms, which are important for compliance and security best practices. No direct contact emails or phone numbers are provided, limiting immediate communication channels. There is no published security policy or incident response information, which could be improved to enhance trust. Overall, the website is safe, professional, and functional with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy compliance, and contact transparency would strengthen its risk profile and user trust.

Net.hr is a leading Croatian online news portal operated by RTL Hrvatska d.o.o., established in 2011. The website offers comprehensive news coverage including politics, sports, entertainment, lifestyle, and business, targeting a broad Croatian-speaking audience. It maintains a strong market position as a primary news source in Croatia. Technically, the site leverages modern web technologies including Cloudflare for DNS and CDN, Google Tag Manager, and advanced consent management via Didomi, ensuring GDPR compliance. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is robust with clear cookie and privacy policies and active consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

Dotmetrics is a technology company specializing in big data audience measurement and analytics. The company collects and analyzes billions of device events daily to provide detailed audience insights for businesses. Their market presence includes customers across several European countries and the UK, positioning them as a regional player in the big data analytics space. The website reflects a professional business model focused on data measurement services with a clear emphasis on privacy and data quality. Technically, the site uses modern JavaScript libraries such as D3.js, Handlebars.js, and jQuery, hosted likely on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks DNSSEC and security headers, indicating room for improvement. Privacy compliance is basic with a privacy center and cookie consent banner but no explicit GDPR compliance statements or terms of service. Overall, the website is professional and trustworthy with moderate risk, suitable for its business purpose.

Projekt Management Austria (pma) is a well-established non-profit organization based in Austria, specializing in project management certifications, networking, and education. The organization offers internationally recognized certifications aligned with IPMA standards, targeting project management professionals and young professionals under 30. Their services include certification programs, events, workshops, and membership benefits, positioning them as a key player in the Austrian and international project management community. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery. It is mobile-optimized and includes standard analytics via Google Analytics with IP anonymization. The site demonstrates moderate performance and good SEO practices but lacks some advanced accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks visible security headers and a published security policy or incident response contacts. The absence of WHOIS data limits domain trust verification, but the professional content and partner affiliations support legitimacy. Overall, the website is professional and trustworthy with minor gaps in privacy policy visibility and security best practices. Strategic improvements in these areas would enhance compliance and security posture.

CSF Computer Solutions Facility AG is a Swiss-based IT service provider specializing in comprehensive IT outsourcing, client management, cloud services, and IT security solutions. With over 30 years of experience and ISO 27001 certification, the company targets small and medium enterprises, medical practices, and freelancers, offering tailored IT packages and professional support. Their market position is solid within the Swiss IT services sector, supported by customer testimonials and quality seals. Technically, the website is built on the concrete5 CMS platform using Bootstrap and jQuery, delivering a responsive and modern user experience. The site integrates multiple marketing and analytics tools such as Google Analytics, LinkedIn Insight, Hotjar, and Poptin, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the company demonstrates strong commitment through ISO 27001 certification and HTTPS enforcement. However, the absence of explicit privacy and cookie policies, security headers, and incident response contact details suggests room for improvement in compliance and transparency. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-positioned in its market niche. Strategic enhancements in privacy compliance, security headers, and incident response disclosures would further strengthen its security posture and user trust.

NorthC Datacenters is a leading provider of sustainable and reliable regional datacenter and colocation solutions serving businesses, IT service providers, institutions, and governments primarily in the Netherlands, Germany, and Switzerland. The company emphasizes personal connections and digital business, offering a broad portfolio of services including colocatie, connectivity, cloud connect, migration, and regional interconnectivity. Their market position is strong as a regional leader with a focus on sustainability and innovation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses advanced SEO and performance optimization techniques. The site is mobile-optimized, accessible, and integrates analytics and marketing tools responsibly with user consent mechanisms. Security posture is solid with HTTPS, security headers, and secure form handling, though explicit security policies and incident response details are not publicly disclosed. Overall, the website and business demonstrate a mature digital presence with good security hygiene and privacy compliance. The lack of WHOIS data limits full trust assessment, but the professional presentation and certifications like ISO 27001 support legitimacy. Strategic recommendations include publishing detailed security and incident response policies and adding vulnerability disclosure information to enhance trust and transparency. This positions NorthC as a credible and professional datacenter provider with a strong regional footprint and commitment to sustainability and customer service.

Fachhochschule Nordwestschweiz (FHNW) is a prominent Swiss higher education institution offering a broad spectrum of academic programs, research, continuing education, and services. The website reflects a well-established educational entity with a strong market position in the Swiss education sector, targeting students, researchers, and professional partners. The digital infrastructure is modern, leveraging Plone CMS and React, with good mobile optimization and accessibility. Privacy and cookie compliance are well implemented with region-specific consent mechanisms. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and aligns well with the institution's reputation.

Universität Basel is the oldest university in Switzerland, established in 1460, with a strong research focus and a comprehensive educational offering. The website reflects its academic stature with professional design, clear navigation, and multilingual support. The institution targets students, researchers, alumni, and academic staff, positioning itself as a leading educational entity in Switzerland. Technically, the site employs modern web technologies including Magnolia CMS, jQuery, and Cookiebot for consent management, hosted likely on Swiss infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS, session management, and cookie consent mechanisms, though explicit security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-compliant cookie consent. Overall, the domain registration aligns perfectly with the university's identity, reinforcing trust and legitimacy.

Basellandschaftliche Kantonalbank (BLKB) is a well-established regional cantonal bank in Switzerland, providing a comprehensive range of banking services including accounts, mortgages, investments, pension planning, tax services, and digital banking solutions. The website reflects a professional and customer-focused approach targeting both private and corporate clients within the Basel-Landschaft region. The bank maintains a strong digital presence with active social media channels and modern web technologies. Technically, the site uses a secure HTTPS connection, implements a strict Content-Security-Policy, and integrates multiple analytics and marketing tools such as Matomo, Google Analytics, and Facebook Connect. However, explicit privacy and cookie policies are not found in the provided content, which is a compliance gap. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Overall, the website is trustworthy, well-branded, and professionally maintained.

Blackdot AG is a professional consulting firm specializing in strategy, security, and leadership services to help organizations navigate the complexities of digital transformation and organizational change. With offices in Basel, Hamburg, and Vienna, the company targets business clients seeking integrated consulting solutions. The website is well-designed, mobile-optimized, and provides clear contact information and social media presence, supporting a strong market position in the consulting sector. Technically, the site uses Cmsbox CMS with modern JavaScript enhancements and lazy loading for performance. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published security policies. WHOIS data is privacy protected, which is reasonable for this business type. Overall, the site is trustworthy and professional.

Jobly.fi is a well-established Finnish job search platform operated under Alma Media, the largest digital recruitment operator in Finland. The site offers a broad range of job listings across multiple sectors and locations, targeting a diverse audience from students to professionals. The platform integrates modern tracking and marketing technologies while maintaining GDPR compliance through consent management. Technically, the site is built on Drupal CMS with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Overall, Jobly.fi presents a professional, trustworthy, and user-friendly service with strong market positioning in the Finnish recruitment industry.

Pulser.hr is a Croatian-based technology platform specializing in employee satisfaction and engagement measurement. The platform offers services such as eNPS, ESI scoring, and motivation factor analysis, targeting businesses and HR professionals seeking reliable and fast insights into employee sentiment. The website is built using modern JavaScript frameworks (Nuxt.js and Vue.js) and integrates Google Analytics and Tag Manager for tracking. Hosting and DNS are managed via Cloudflare and a Croatian registrar, indicating a professional infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of a published privacy policy and terms of service pages represents a compliance gap. No direct contact information or security policies are published, which could affect user trust. Overall, the site is well-designed, mobile-optimized, and content-rich, serving a niche business audience effectively.

Virtual Valley, operated by Alma Career Croatia d.o.o., is a technology company specializing in virtual fair platforms that enable businesses to conduct online fairs with features such as user-friendly backend, multilingual support, gamification, and live chat. The company targets event organizers and businesses seeking to transition physical fairs to virtual environments, offering flexible pricing models including fixed price, shared revenue partnerships, and custom solutions. The website presents a professional and consistent brand image with clear business information and contact details, positioning itself as an established player with over 100 companies served and significant visitor reach. Technically, the website leverages modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Fonts, with analytics and tag management via Google Analytics and Google Tag Manager. Hosting and DNS services are provided through Cloudflare and PublicDomainRegistry.com. The site is mobile optimized and offers a good user experience, though accessibility and SEO optimizations are basic. No CMS was detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The contact form collects personal data but lacks visible privacy disclosures. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional but would benefit from enhanced security configurations and privacy compliance measures to improve trust and regulatory adherence.

Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and Central Europe. The company offers a comprehensive suite of products including job portals, online education platforms, recruitment management systems, employee engagement tools, salary benchmarking services, and career fairs. Their market position is strong, supported by a broad portfolio of subsidiary brands and a long-standing presence in the labor market since 1996. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the website is built using modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. The use of Google Tag Manager indicates a mature approach to analytics and marketing. Security posture is robust with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, which should be further investigated. However, the overall business credibility is supported by consistent branding, comprehensive privacy and cookie policies, and active social media presence. Strategically, Alma Career is well positioned in the HR technology sector with a diversified service offering and strong market penetration. Continued focus on transparency in security and compliance documentation would enhance trust and regulatory alignment.

Zone.ee is a well-established Estonian technology company specializing in domain registration, web hosting, and cloud server services. The company targets both individual and business customers, offering a comprehensive suite of internet infrastructure solutions. Their market position is strong within Estonia, supported by professional branding and a user-friendly website. The technical infrastructure is modern, leveraging WordPress CMS with SEO optimizations and integrations such as Google Tag Manager and Trustpilot for reputation management. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence.

Zone.eu is a European-focused domain registration and hosting provider offering a broad portfolio of services including domain registration, domain transfer, web hosting, cloud VPS, managed servers, and WordPress hosting. The company targets businesses and professionals in Europe seeking reliable online presence solutions. The website demonstrates a mature digital infrastructure with modern technologies such as WordPress CMS, jQuery, Google Tag Manager, and Trustpilot integration, ensuring good performance, SEO, and user experience. Security posture is solid with HTTPS enforced and standard security headers, although explicit security policies and incident response information are not published. Overall, the domain registration is privacy protected as per EURid policies, which is typical for .eu domains and justified for GDPR compliance. The website is professional, trustworthy, and well-optimized for its target audience.

Seznam.cz is the leading Czech internet portal offering a wide range of services including search engine, email, news, weather, maps, video streaming, and shopping comparison. It holds a dominant market position in the Czech Republic and serves a broad audience with diverse content and utility services. The website is professionally designed with excellent content quality and consistent branding across its multiple affiliated services. Technically, the site employs modern JavaScript frameworks, asynchronous loading, and CDN hosting to ensure fast performance and good mobile optimization. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security headers and published security policies are lacking. Privacy compliance is basic, with cookie consent mechanisms present but no clear privacy or terms of service links detected in the analyzed content. WHOIS data is unavailable, likely due to registry policies, which slightly reduces trust but does not detract significantly from the site's legitimacy given its prominence. Overall, Seznam.cz is a mature, professional, and trustworthy media portal with extensive content and services tailored to Czech users.

Boiler is a creative agency specializing in delivering integrated marketing, branding, content creation, and digital marketing services. Positioned as a professional and award-winning agency, Boiler targets businesses seeking impactful and honest creative work. The website reflects a mature digital presence with modern technologies such as Google Tag Manager, GSAP, and WordPress CMS, indicating a solid technical infrastructure. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms implemented, though some security headers could be improved. Overall, the site presents a trustworthy and professional image with clear contact channels and social media integration.

Enstring agency is a recently founded (2023) HR-first branding agency focused on employer branding, employee and candidate experience, and education for HR professionals. The company positions itself as a strategic partner helping organizations build better workplaces and attract top talent globally. The website is built on WordPress, uses modern JavaScript libraries such as GSAP and jQuery, and is hosted with DNS services via Cloudflare. The technical infrastructure is modern and supports good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Contact is primarily via a contact form with no direct emails or phone numbers publicly listed. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Tidio is a technology company specializing in AI-driven customer service chatbots and live chat software designed to help businesses convert leads, provide support, and increase revenue. Their product suite includes AI agents, chatbot automation, help desk software, live chat, and ticketing systems, positioning them as a competitive SaaS provider in the customer support technology market. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js, integrates analytics and marketing tools like Amplitude and Google Tag Manager, and employs robust security headers and HTTPS encryption, indicating a strong technical foundation. Security posture is solid with best practices observed, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's visible market presence and trust signals. Overall, Tidio presents a low-risk profile with recommendations to enhance transparency around security and incident response.

The website at cookiehub.net currently presents an extremely minimal presence with only a single word 'CookieHub' in its HTML content. The domain is registered since 2018 with a reputable registrar and hosted on AWS infrastructure, indicating a legitimate business intent. However, the lack of substantive content, metadata, policies, or contact information suggests the site is either under construction or a placeholder. Technically, the site lacks modern SEO, accessibility, and security best practices, with no visible security headers or privacy compliance mechanisms. The security posture is weak due to missing policies and headers, though no active vulnerabilities or WAF blocks were detected. Overall, the site scores low on content quality and privacy compliance but shows moderate business credibility based on domain registration data. Strategic improvements are needed to enhance trust, compliance, and user experience.

Ycode is a technology company offering an all-in-one website builder and CMS platform designed for designers, creators, and founders to build professional websites easily and affordably. The platform provides a comprehensive suite of services including design tools, content management, hosting, SEO optimization, localization, and collaboration features. Positioned as a competitive alternative to platforms like Webflow, Ycode enjoys positive user feedback and a strong presence on review platforms such as G2. Technically, the website leverages modern analytics and marketing tools, employs HTTPS with good security practices, and is optimized for performance and mobile responsiveness. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be addressed to enhance trust. Privacy and cookie policies are present and GDPR compliant, but explicit security policies and incident response information are not visible. Overall, Ycode presents a professional and trustworthy digital presence with room for improvement in transparency and domain legitimacy verification.

Vivocha operates as a technology company specializing in customer engagement software, offering a comprehensive platform that integrates live chat, video chat, click-to-call, co-browsing, and callback functionalities. The company targets businesses seeking to enhance real-time communication and collaboration with their customers, positioning itself as a modern and versatile B2B SaaS provider. The website reflects a mature digital presence with consistent branding and a professional design, supported by structured data and social media integration. Technically, the site is built on WordPress with the Divi theme, leveraging common web technologies such as jQuery and Google Tag Manager, and includes privacy compliance mechanisms like a cookie consent banner. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers and detailed privacy policies suggests room for improvement. The lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the overall content and digital footprint support a credible business identity.

E.ON Drive Germany GmbH is a leading enterprise in the energy and transportation sectors, specializing in electric mobility solutions for businesses. The company leverages the extensive infrastructure and expertise of its parent company, E.ON SE, to provide comprehensive charging solutions, smart logistics, and green energy tariffs. Their market position is strong in Europe, supported by a professional and well-structured website that targets commercial customers seeking sustainable mobility options. Technically, the website is built on Adobe Experience Manager, uses modern JavaScript modules, and integrates advanced consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs reputable third-party services, and manages user privacy effectively, though some security headers could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, with no signs of blocking or malicious activity.

Lever operates as a flexible recruiting software platform designed to help hiring teams find, nurture, and hire talent efficiently. The company positions itself as a significant player in the recruiting technology sector, offering SaaS solutions tailored to modern hiring needs. The website reflects a professional and business-oriented approach, targeting HR professionals and recruitment teams. Technically, the site is built on WordPress with modern integrations including New Relic for monitoring, OneTrust for cookie consent, and marketing tools such as Marketo and Mouseflow. The site demonstrates good SEO practices and mobile optimization, though accessibility features appear basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partially addressed with cookie consent but no visible privacy or terms of service pages in the provided content. Overall, the domain registration data aligns well with the business identity, supporting legitimacy. Recommendations include enhancing security headers, publishing privacy and security policies, and adding vulnerability disclosure mechanisms to improve trust and compliance.

Digital Ad Expert is an online education platform operated by Aleph, focusing on digital marketing and advertising training. The platform offers various certificates and courses, including a Digital Ad Certificate and a Digital Marketing & AI Certificate, targeting individuals and professionals seeking to enhance their digital advertising skills. The website demonstrates a strong market position with partnerships from major digital platforms such as LinkedIn, Spotify, TikTok, and Microsoft. Technically, the site uses modern web technologies including Google Tag Manager and Google reCAPTCHA, ensuring a secure and interactive user experience. The site is well-designed, mobile-optimized, and provides multilingual support, enhancing accessibility and user engagement. Security posture is good with HTTPS and spam protection on forms, though it lacks some advanced security headers and published security policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the overall business credibility is supported by consistent branding, partner endorsements, and active social media presence. Strategic recommendations include improving security header implementation, publishing security and incident response policies, and verifying domain registration details to enhance trust.

KIProtect GmbH is a German technology company specializing in software solutions and consulting services focused on data protection, data security, and privacy engineering. Founded in 2018, the company offers open source products such as Klaro! for cookie consent management and Kodex for privacy and security engineering. Their target audience includes businesses seeking to implement compliant and privacy-friendly data processing workflows. The website reflects a professional and consistent brand image with clear navigation and modern design. Technically, the website employs a modern frontend stack including React, Bootstrap, and jQuery, hosted on Hetzner Online GmbH with Cloudflare DNS services. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security-wise, HTTPS is enforced and a cookie consent mechanism is implemented, but additional security headers and explicit security policies are absent. The security posture is solid but could be enhanced by enabling DNSSEC, publishing privacy and security policies, and implementing a vulnerability disclosure program. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance documentation and security best practices. Strategic recommendations include adding comprehensive privacy and terms of service pages, enhancing security headers, enabling DNSSEC, and establishing an incident response and vulnerability disclosure policy to strengthen trust and compliance.

Hercul.hr is a Croatian recruitment software platform operated by Alma Career Croatia d.o.o., founded in 2013. The platform offers a comprehensive online tool for candidate preselection and recruitment process management, targeting HR professionals and employers in Croatia. The website is built as a modern single-page application, likely using Vue.js, and is hosted behind Cloudflare services. It integrates Google Tag Manager for analytics and tracking purposes. The site design is professional and mobile-optimized, though SEO is limited by a noindex meta tag. Privacy and terms of service pages are present, indicating basic compliance with GDPR, but no cookie consent mechanism is implemented. Security posture is moderate with HTTPS enforced but lacking explicit security headers and visible incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

MojPosao.ba is a leading online employment portal in Bosnia and Herzegovina, serving over 240,000 users and hosting a database of 70,000 employers. The platform facilitates job search and recruitment, targeting job seekers and employers within the country. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, it leverages modern web technologies including Google Tag Manager, Google Analytics, Facebook SDK, and GWT for dynamic content delivery. The site is mobile optimized and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some recommended security headers and explicit privacy policies. Overall, the domain registration is privacy protected but consistent with legitimate business practices. The site integrates advertising and tracking tools typical for commercial portals, with moderate user tracking levels. No adult or questionable content is present, making it safe for general audiences.

Recruitment.lv is a well-established recruitment agency operating in Latvia and the Baltic region, specializing in personnel selection and talent acquisition for various business sectors. The company is part of Alma Career Latvia SIA group and boasts over 23 years of industry experience, positioning itself as a market leader. Their website reflects a professional and comprehensive service offering, targeting Latvian businesses seeking recruitment solutions. Technically, the website is built on WordPress with modern technologies such as jQuery, Elementor, and uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site implements GDPR-compliant cookie consent and privacy policies, indicating a mature approach to privacy and compliance. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

Otsintööd.ee is Estonia's largest job portal aggregating job offers from multiple Estonian job boards and channels. It serves both job seekers and employers by providing a platform to search for jobs, post job offers, and manage applications. The website supports multiple languages including Estonian, Russian, and English, enhancing accessibility for a diverse audience. The business operates under Alma Career Estonia OÜ, a registered company in Estonia, and is part of the Alma Career family, indicating a strong market presence in the Baltic region. Key services include job listings aggregation, employer job posting, user registration with social media login options, and email job alerts.

VisiDarbi.lv is a prominent Latvian job portal operated by Alma Career Latvia SIA, offering a comprehensive platform for job seekers and employers. The site aggregates thousands of job listings from multiple sources, providing services such as job alerts, vacancy publishing, and user registration. It targets both local and international job markets, with listings in Latvia and abroad. The portal is part of the Alma Career family, indicating a strong backing and market presence. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and reCAPTCHA to enhance user experience, security, and marketing effectiveness. The site is mobile-optimized and uses responsive design principles, although some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and manages user consent for analytics and advertising cookies. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, VisiDarbi.lv presents a trustworthy and professional online presence with strong business credibility and technical maturity. The risk profile is low, with recommendations to enhance security headers and accessibility for further improvement.

Dirbam.lt is a Lithuanian online job portal operated by UAB "Alma Career Lithuania", part of the Alma Career group. The platform aggregates thousands of job listings from multiple sources, targeting job seekers and employers primarily in Lithuania but also offering international opportunities. The website provides services such as job search, job posting for employers, email alerts, and user account management. It maintains a professional market position within the Baltic region's recruitment industry. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, Facebook Pixel, Hotjar, and Segment for analytics and marketing. The site uses Bootstrap for responsive design and offers good mobile optimization and SEO practices. The infrastructure supports secure HTTPS connections and integrates consent management for privacy compliance. From a security perspective, Dirbam.lt demonstrates good practices such as HTTPS enforcement, use of CAPTCHA on forms, and consent-based analytics tracking. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly confirmed and could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the website presents a low-risk profile with a solid business model and technical foundation. The main limitation is the absence of WHOIS data, which restricts domain registration trust verification. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contacts, and maintaining regular audits of third-party scripts.

CV.ee is a leading Estonian job portal operated by Zone Media OÜ, established in 2010. The platform offers a comprehensive range of job listings, CV database access, and employer services, targeting job seekers and employers primarily in Estonia. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security is well addressed with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, CV.ee presents a trustworthy and professional online service with a high level of business credibility and technical maturity.

CV-Online is a leading online job portal serving the Baltic states, primarily Latvia. The platform offers job listings, CV databases, and recruitment services targeting job seekers and employers. It holds a strong market position with multiple employer partnerships and a professional online presence. The website employs modern web technologies such as React and Next.js, integrated with analytics and marketing tools like Google Tag Manager, Hotjar, Facebook Pixel, and Intercom, indicating a mature digital infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic with cookie consent mechanisms present but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

CV-Online Recruitment Lithuania operates a well-established online job portal primarily serving the Lithuanian market. Founded in 1999, the platform offers extensive job listings across various sectors including energy, transportation, and banking. The website targets job seekers and employers, providing search functionalities by location, category, and employer, along with subscription-based job alerts. The company maintains a strong market position as a leading recruitment platform in Lithuania, supported by partnerships with major employers and a consistent brand presence. Technically, the website leverages modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. Integration with analytics and marketing tools like Google Tag Manager, Hotjar, and Intercom indicates a mature digital infrastructure focused on user engagement and performance monitoring. Hosting and domain registration through Zone Media OÜ further support a stable technical foundation. From a security perspective, the site enforces HTTPS and employs standard security headers, reflecting good security hygiene. However, the absence of explicit privacy policies, terms of service, and incident response information suggests areas for compliance and transparency improvement. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a safe content rating suitable for general audiences. Overall, CV-Online demonstrates a solid business and technical profile with room to enhance privacy compliance and user trust through clearer policy disclosures and contact information. Strategic improvements in these areas will strengthen the platform's security posture and regulatory alignment.

Platy.sk is a Slovak online platform operated by Alma Career Slovakia, s.r.o., part of the Alma Media group, specializing in salary data, payroll calculations, and salary comparisons. It serves both employees and employers in Slovakia, providing the largest salary survey database in the country. The website offers tools such as salary calculators, salary comparison surveys, and salary data for companies to assist in payroll decisions. Technically, the site uses modern web technologies including Google Tag Manager, Sentry for error tracking, Bootstrap for UI, and a cookie consent manager, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced, CSRF tokens in forms, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

Platy.cz is a well-established salary survey and comparison platform focused on the Czech Republic market, operated by Alma Career Czechia, s.r.o., a subsidiary of Alma Media. The website offers comprehensive salary data, net salary calculators, and employer services, positioning itself as a leading resource for salary benchmarking in the region. The platform targets both employees seeking career advancement and employers needing salary data for compensation planning. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, and Sentry for error tracking, ensuring a responsive and performant user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting good data protection practices. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security transparency and verifying domain registration details to improve business credibility.

Seduo.sk is a leading online educational platform focused on corporate and individual professional development in the Czech and Slovak markets. Owned by Alma Career Czechia s.r.o., it offers a broad range of video courses, webinars, podcasts, and academies featuring top Czech and Slovak experts. The platform supports flexible learning with mobile apps and a comprehensive corporate administration backend. Technically, the site uses modern frameworks such as Next.js and Apollo GraphQL, with secure video streaming and integration of marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and compliance are well addressed with clear policies and consent mechanisms. Overall, Seduo.sk presents a professional, trustworthy, and mature digital presence in the e-learning sector.

Seduo.cz is a leading Czech online educational platform specializing in professional and personal development through video courses, webinars, podcasts, and academies. It targets both corporate clients and individual learners primarily in the Czech and Slovak markets. The platform is part of the Alma Career group, a reputable parent company with a strong presence in Central Europe. Seduo.cz offers a comprehensive learning experience with over 400 video courses and 150+ expert lecturers, supported by a mobile app and corporate administration tools. Technically, the website is built on modern frameworks such as Next.js and React, with secure video streaming and integration of popular analytics and marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear GDPR policies and cookie consent mechanisms. Overall, Seduo.cz presents a professional, trustworthy, and technically mature online education service.

Teamio is a leading Czech recruitment and talent management SaaS platform serving over 1000 companies. It offers a modern ATS system that streamlines recruitment processes, automates communication, and helps build talent databases. The website is professionally designed, mobile-optimized, and provides comprehensive information about the product, client testimonials, and company background. Technically, it is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and analytics for performance and marketing insights. Security posture is strong with HTTPS, security headers, and GDPR compliance, although no explicit vulnerability disclosure or incident response contacts are published. The WHOIS data for the subdomain cz.teamio.com is unavailable, likely because it is a subdomain of the main teamio.com domain owned by Alma Career, a reputable HR services provider. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Arnold Robot is a technology company offering a chatbot platform designed to enhance employee engagement and feedback collection through conversational surveys. The website presents a professional and well-structured digital presence, leveraging WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The platform targets companies and HR teams aiming to improve workplace communication and employee satisfaction. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the association with the established parent company Alma Career. Strategic recommendations include enhancing security headers, publishing incident response information, and providing clearer direct contact details to improve trust and compliance.

Nelisa s.r.o. operates a SaaS platform specializing in recruitment campaign automation, leveraging programmatic job advertising to connect companies with the right candidates efficiently. Positioned as a leading solution with over 700 satisfied companies, Nelisa offers multi-channel job ad distribution, copywriting services, and detailed reporting to optimize recruitment efforts. The company is part of the Alma Career family, indicating a strong market presence in Central Europe. Technically, the website employs modern frameworks such as Vue.js and Tailwind CSS, hosted on DigitalOcean, with extensive use of analytics and marketing tools including Google Tag Manager, TikTok Analytics, and Piwik PRO. Security posture is solid with HTTPS enforced and secure script handling, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Nelisa presents a professional, trustworthy, and technically mature digital presence.