Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,181001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
25,651–25,700 of 99,067
Restaurace NOR Jedničkarestauracetrutnov.cz
Hospitality · Czech Republic
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Restaurace NOR Jednička is a small hospitality business located in Trutnov, Czech Republic, offering a blend of international and traditional Czech cuisine. The restaurant emphasizes a vintage style ambiance and hosts various events including weddings, celebrations, and corporate gatherings. Their business model focuses on local dining services and event hosting, supported by daily updated menus and drink offerings. The website reflects a consistent brand image with clear contact information and social media presence, targeting local customers and visitors. Technically, the website is built on an older but functional tech stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and layout management. The site is mobile optimized and provides a cookie consent mechanism, though it lacks modern security headers and visible SSL configuration details. Performance is moderate, and SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site shows basic best practices such as cookie consent but lacks critical security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is moderate but could be improved with enhanced policies and technical controls. The overall risk assessment suggests a generally trustworthy local business website with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, publishing privacy and security policies, verifying domain registration details, and updating technical components to modern standards.
- Josef Šenk
pojizdnydrevnik.cz
Manufacturing · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.pojizdnydrevnik.cz represents a small Czech manufacturing business specializing in mobile wood storage racks designed for transporting firewood to heating appliances. The company, identified as Josef Šenk, offers modular components with customizable axle types and color finishes, targeting homeowners and users of wood heating systems. The site is professionally designed with clear navigation and multimedia content, including images and video demonstrations, enhancing user engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap 3.4, and various gallery and carousel libraries, built on the inPage CMS platform. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is moderate with cookie consent implemented but lacking explicit privacy and terms of service pages and security headers. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the site is functional and credible but would benefit from enhanced transparency and security measures.
- KRAKONOŠ spol. s r.o.
hotel-krakonos.cz
Hospitality · Czech Republic
58Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hotel Krakonoš is a small hospitality business located in the center of Trutnov, Czech Republic, offering accommodation, restaurant services, and associated brewery products. The website provides detailed information about the hotel’s facilities, historical background, and local attractions, targeting tourists and visitors to the Krkonoše region. The business is well-positioned locally with a clear focus on hospitality and regional heritage. Technically, the website uses a moderate technology stack including jQuery and Bootstrap 3.4, with a CMS named inPage. The site is mobile-optimized and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with no detected WAF or blocking, but missing security headers and unknown SSL configuration reduce the security score. WHOIS data is missing, which impacts domain trustworthiness, but the website content and business information appear legitimate and consistent with a small hospitality company. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.
NOR a.s.grillnor.cz
Hospitality · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Grill NOR is a small hospitality business based in the Czech Republic specializing in meal delivery services for individuals and companies in the Trutnov region. Their business model focuses on long-term cooperation with customers, offering diverse menus and regular meal plans similar to school canteen accounts. The website presents clear business information, contact details, and social media presence, supporting a moderate level of trust and professionalism. Technically, the website uses a legacy but stable technology stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and grid layouts. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO is adequately addressed through meta tags and Open Graph data. Cookie consent is implemented with a detailed user interface, reflecting awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and some best practices like disabling right-click on images. However, the absence of security headers and a visible privacy policy or terms of service page limits the overall security maturity. No WHOIS data is available, which reduces domain trustworthiness, but the website content and business details appear consistent and legitimate. Overall, the site is functional and professional for its business scope but would benefit from enhanced security headers, explicit privacy and terms policies, and improved WHOIS transparency to strengthen trust and compliance.
- Richard Reichl
reichl.cz
Retail · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Reichl.cz is a small family-owned Czech business specializing in the handcrafted production and sale of decorative candles, ceramic trays, and blacksmith products. The company emphasizes quality materials, such as health-safe paraffin, and traditional craftsmanship with a focus on long-lasting candles and appealing designs. Their market position is that of a niche local manufacturer with a direct-to-consumer e-commerce model. Technically, the website uses a moderate modern tech stack including jQuery, Bootstrap, and various gallery and carousel libraries, with a CMS named inPage. The site is mobile-optimized and includes standard SEO and accessibility features, though some improvements are possible. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced HTTP security headers and published security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information are consistent and professional. Overall, the site is safe, compliant with GDPR, and suitable for general audiences.
- LYNX.cz
lynx.cz
Technology · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
LYNX.cz is a prominent Czech brand specializing in the retail and manufacturing of gaming and office computers, along with related accessories. The company targets gamers and general technology consumers within the Czech Republic, offering a broad product lineup including gaming PCs, home and office computers, and peripherals. Their market position is strong locally, supported by a professional website and multiple customer support channels. Technically, the website employs modern JavaScript frameworks and analytics tools such as Google Tag Manager, Hotjar, and Microsoft Clarity, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving security header implementation.
- Framasoft
framalab.org
Technology · France
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoft operates Framalab as an experimental platform offering privacy-respecting, open-source alternatives to popular proprietary web services. The organization is a French non-profit established in 2011, focusing on community-driven digital tools such as forms, petitions, shared expense management, diagramming, and PDF handling. The website is well-structured, multilingual, and targets users seeking ethical and privacy-conscious digital services. Technically, the site uses modern frontend technologies like Vue.js and FontAwesome, hosted by OVH sas, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers, and no cookie consent mechanism is present. Privacy compliance is supported by comprehensive privacy and terms pages on the parent site, though explicit cookie policies are missing. Overall, the site is trustworthy and professional, with minimal tracking and strong community engagement via social media and forums.
- MMaintenance
framapetitions.org
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at wip.framasoft.org currently serves as a placeholder maintenance page indicating that the service is not yet available. There is minimal content, limited to a message in French stating the service does not exist yet, and a credit link to an artist for the background image. The site lacks any business or contact information, privacy or cookie policies, and does not provide any interactive elements or forms. The WHOIS query for the domain failed to return any registrar, registrant, or creation data, which raises concerns about the domain's legitimacy and maturity. Technically, the site is built with basic HTML and CSS, with no detected CMS, frameworks, or advanced technologies. No security headers or HTTPS information was found, indicating a weak security posture. Overall, the site is not yet operational and provides no business or security assurances.
Framasoftmobilizon.fr
Non-profit · France
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Mobilizon.fr is a community-driven event and group management platform operated by Framasoft, a French non-profit organization promoting free software and digital freedom. The website serves as an instance of the Mobilizon platform, enabling users to organize, mobilize, and manage events and groups. The platform targets general audiences interested in community engagement and activism. Technically, the site uses modern JavaScript frameworks such as Vue.js and UI libraries like Oruga, with good mobile optimization and accessibility features. The domain is registered with GANDI since 2019, consistent with the platform's operational timeline. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, trustworthy, and professionally presented but would benefit from enhanced privacy and security documentation.
Framasoftsepiasearch.org
Technology
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Sepia Search is a specialized search engine focused on indexing videos, channels, and playlists from the decentralized PeerTube network. Developed and maintained by Framasoft, a recognized non-profit organization in the free software community, the website serves a niche audience interested in decentralized video content. The platform leverages modern web technologies including Vue.js and modular JavaScript to deliver a responsive and user-friendly search experience. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business timeline, enhancing trustworthiness. From a security perspective, the website uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response contacts published. Privacy compliance is partially addressed through a linked legal notice page, but no cookie consent mechanism is present despite the use of a tracking script. No direct contact information such as emails or phone numbers are provided on the main site, which may limit user support options. Overall, the website demonstrates good technical implementation and business credibility within its niche. The content is safe for general audiences, with no adult or explicit material detected. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and implementing a cookie consent mechanism to improve privacy compliance and security posture.
- Framasoft
framagames.org
Technology · France
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Framagames is a small, community-driven platform operated by the non-profit organization Framasoft, offering free and open source games playable online or offline. The website targets a general audience interested in free software and gaming, positioning itself as a niche player within the open source gaming community. The platform provides downloadable games and online play options, supported by community engagement and guides hosted on the parent Framasoft domain. Technically, the site is built using modern web technologies including Vue.js and Font Awesome, hosted by Gandi SAS. The website is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance. The domain is well maintained with HTTPS and clientTransferProhibited status, but lacks DNSSEC and security headers which could enhance security posture. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response information, and cookie consent mechanisms. Tracking is minimal and privacy policies are hosted on the parent domain, indicating reasonable privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, Framagames presents a trustworthy, well-maintained platform with a strong community focus. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its non-profit, open source mission.
Framasoftframagroupes.org
Technology · France
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoft is a French non-profit association founded in 2004, dedicated to popular education on digital challenges and the cultural commons. The Framagroupes service provides a free, ethical platform for creating and managing email discussion groups, emphasizing user privacy, data autonomy, and community moderation. The organization is funded primarily by donations and operates with transparency and a strong ethical stance against surveillance capitalism. Technically, the website uses modern web technologies including Vue.js and the Sympa mailing list software, hosted by Gandi SAS. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, safe, and aligned with its mission of digital emancipation.
- Framasoft
framacarte.org
Non-profit · France
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoft is a French non-profit association dedicated to promoting digital autonomy and popular education through ethical, free/libre software services. Framacarte is one of its flagship projects, offering a free online map customization tool based on OpenStreetMap and the uMap software. The organization is funded primarily by donations and emphasizes privacy, minimal data collection, and transparency. The website is professionally designed, mobile-optimized, and rich in content, targeting a broad audience interested in digital emancipation and open-source tools. Technically, the site uses modern web technologies including Vue.js and Bootstrap, hosted by OVH sas. It employs HTTPS with good SSL configuration but lacks DNSSEC and some security headers, which are recommended for enhanced security. Analytics are handled via Matomo with minimal tracking, aligning with the organization's privacy ethos. Security posture is solid for a non-profit, with domain registration protections and no evident vulnerabilities, though improvements are suggested in DNS security and explicit security policies. Privacy compliance is good, with clear terms and privacy policies, though no cookie consent mechanism was detected. Overall, Framasoft and Framacarte present a trustworthy, well-managed digital service with strong community and ethical foundations. Strategic improvements in security and privacy transparency would further enhance trust and resilience.
Framasoftframadate.org
Technology · France
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framadate is a free, open-source polling and scheduling tool operated by the French non-profit association Framasoft. The website offers collaborative event scheduling and opinion polling services with a strong emphasis on user privacy, data autonomy, and digital emancipation. The platform is donation-funded and positions itself as an ethical alternative to commercial services, targeting individuals and organizations seeking privacy-respecting tools. Technically, the site uses modern web technologies such as Vue.js and Bootstrap 4, is hosted by a reputable registrar (Gandi SAS), and is well-optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and minimal data collection, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is good with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and aligns well with its stated mission and business model.
Framasoftframalistes.org
Non-profit · France
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoft is a French non-profit organization providing ethical digital services, including Framalistes, a free mailing list platform focused on privacy and user autonomy. The organization is well-established with a domain age consistent with its founding and operates transparently with donation-based funding. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, it uses modern frameworks like Vue.js and the Sympa mailing list software, hosted by a reputable registrar, Gandi SAS. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and explicit security policies could be improved. Privacy compliance is strong with minimal tracking and clear terms of use. Overall, the site is trustworthy and serves a niche audience seeking ethical alternatives to commercial mailing list services.
Framasoftframatalk.org
Technology · France
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Framasoft is a French non-profit association dedicated to promoting digital autonomy and popular education through ethical and privacy-respecting online services. Their Framatalk platform offers free, ad-free videoconferencing based on the open-source Jitsi Meet software, targeting individuals and groups seeking secure and easy-to-use communication tools. The organization is funded primarily by donations and emphasizes transparency and community involvement. Technically, the website leverages modern web technologies including Vue.js and Bootstrap 4, hosted by OVH sas, a reputable provider. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. The use of open-source software and self-hosted analytics reflects a strong commitment to privacy and user control. Security-wise, the site enforces HTTPS and uses domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled and no explicit security policy or vulnerability disclosure mechanism is published. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by clear terms and policies, though no cookie consent mechanism was found. Overall, Framatalk presents a trustworthy, professional, and privacy-conscious service with a strong ethical foundation. Strategic recommendations include enabling DNSSEC, publishing a security policy and vulnerability disclosure, and adding cookie consent mechanisms to enhance compliance and user trust.
- FFramaspace
framaspace.org
—
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoftframagit.org
Technology · France
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Framagit.org is a self-hosted GitLab instance operated by Framasoft, a French non-profit organization dedicated to promoting free software and digital commons. The platform provides hosting and collaboration tools for open source projects, targeting developers, contributors, and ethical digital communities. The website demonstrates a solid technical infrastructure leveraging GitLab, modern JavaScript frameworks, and privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforcement, CSRF protection, and domain transfer restrictions, although DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy, professionally maintained, and serves a niche community with a focus on ethical technology.
Collectif CHATONSchatons.org
Technology · France
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.chatons.org represents the Collectif CHATONS, a French non-profit collective initiated by Framasoft in 2016. It focuses on providing ethical, transparent, and decentralized online services as alternatives to major tech companies, targeting users concerned about privacy and digital sovereignty. The site offers resources to find service providers ('chatons') by service type, location, or other criteria, and promotes community collaboration and support. Technically, the site is built on Drupal 8, uses Matomo for privacy-respecting analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics, though explicit security headers and cookie consent mechanisms are absent. WHOIS data is unavailable or malformed, limiting domain trust assessment, but the association with Framasoft and the quality of content support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with its mission.
Framasoftframasoft.org
Non-profit · France
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Framasoft is a well-established French non-profit organization founded in 2004, dedicated to digital emancipation through free software, hosting ethical online services, and popular education. It operates a variety of community-driven projects and platforms such as PeerTube, Mobilizon, and Framablog, supported primarily by donations. The organization targets individuals and groups interested in liberating their digital practices and promoting social justice. Technically, the website uses modern frameworks like Vue.js and Bootstrap, is hosted by OVH, and demonstrates excellent mobile optimization and performance. Security posture is strong with HTTPS and domain protections, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and transparent, with a high legitimacy score based on WHOIS data and content consistency.
- Globenet
globenet.org
Non-profit
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Globenet is a small, non-profit oriented website focused on digital rights, surveillance, and privacy activism. It provides news articles, event information, and resources primarily in French, targeting activists and the general public interested in digital liberties. The website uses the SPIP CMS platform with Bootstrap and jQuery, indicating a moderately modern technical infrastructure. The site is accessible and well-structured but lacks explicit privacy and cookie policies, contact information, and security headers, which are areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which is understandable given the activist nature of the site. Overall, the website is legitimate and serves a niche community but could enhance its security and compliance posture.
- Aquilenet
aquilenet.fr
Telecommunications · France
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Aquilenet is a small, non-profit associative Internet Service Provider based in the Aquitaine region of France. It focuses on providing open, neutral, and privacy-respecting Internet access to its members, leveraging open-source tools and community-driven values. The organization is registered with ARCEP and is a founding member of the Fédération FDN, reinforcing its credibility and commitment to ethical Internet services. The website serves as an information portal and access point to various member services including webmail, cloud storage, VPN, and more. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jCarousel for UI elements. It employs Piwik/Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized with a clear navigation structure, though accessibility features could be improved. No major CMS or hosting provider details are evident from the HTML content. From a security perspective, the site uses HTTPS URLs and does not expose sensitive data or vulnerable scripts. However, it lacks visible security headers and formal policies such as privacy or cookie policies, which are important for compliance and user trust. No forms collecting sensitive data are present on the homepage, reducing immediate risk. WHOIS data is unavailable, likely due to privacy protection or AFNIC policies, but the site content and affiliations suggest legitimacy. Overall, Aquilenet presents a trustworthy and community-focused ISP with a solid technical foundation but could enhance its compliance posture by publishing clear privacy and cookie policies and improving security headers. The risk level is low, but transparency improvements would benefit user trust and regulatory compliance.
Městské muzeum Dvůr Králové nad Labemmuzeumdk.cz
Government · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Městské muzeum Dvůr Králové nad Labem is a municipal cultural institution offering three permanent exhibitions focused on local history, textile printing, and Christmas ornaments. The museum targets general public visitors, including schools, and provides educational programs, workshops, and an online catalog. The website is built on WordPress with modern frontend technologies such as Bootstrap and jQuery, and integrates analytics tools like Matomo and Google Tag Manager. It is well-structured, mobile-optimized, and provides clear navigation and relevant content in Czech with English language support. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professional, and aligned with the museum's public service mission.
Městské trhy, z.s.vychodocesketrhy.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website 'Farmářské trhy' represents a small, local non-profit organization named Městské trhy, z.s., focused on organizing farmers markets in Hradec Králové, Czech Republic. It serves as a community platform connecting local producers with residents and visitors, offering event schedules, vendor information, and community engagement activities. The site is built on the GoDaddy Website Builder platform, leveraging standard web technologies and third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is adequate for a small community site, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professionally presented, though it could benefit from enhanced security practices and more transparent contact information. No blocking or WAF mechanisms interfere with content access.
Lidé a Zeměmojezeme.cz
Media · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Lidé a Země is a Czech travel and geography magazine operated under the Czech News Center publishing group. The website offers travel articles, guides, and digital content aimed at a general audience interested in global travel and cultural exploration. It also supports e-commerce through magazine sales and newsletter subscriptions, positioning itself as a reputable media brand in the Czech Republic. Technically, the site employs modern web technologies including Google Tag Manager, Gemius analytics, and a consent management platform (Didomi) to ensure GDPR compliance. Advertising is managed through established ad networks such as Google Ad Manager and Rubicon Project, with multiple tracking and retargeting services integrated. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be enhanced. The absence of public WHOIS data suggests privacy protection, which is common and justified for media entities. Overall, the site is professional, well-branded, and trustworthy with no signs of malicious activity or content blocking.
- SECTRON s.r.o.
gsmkey.cz
Technology · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SECTRON s.r.o. operates the GSM KEY website offering GSM SMART KEY controllers that enable users to control garage doors, gates, and other devices via mobile phones. The company targets households, small businesses, and larger enterprises such as hotels and parking garages, providing both hardware and cloud-based management services. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools, reflecting a moderate level of digital maturity. However, the absence of WHOIS data and lack of published privacy and security policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS and cookie consent mechanisms in place, but could benefit from enhanced security headers and incident response disclosures. Overall, the site is trustworthy and business-focused, but would gain from improved privacy compliance and domain registration transparency.
SECTRON s.r.o.sectron.pl
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SECTRON s.r.o. is a Czech-based company specializing in wireless technologies, including M2M and IoT solutions, with over 29 years of market presence. The company manufactures antennas, cable adapters, and distributes industrial modems, routers, and modules. Their business model combines manufacturing with authorized distribution and e-commerce sales across multiple countries. The website reflects a professional and consistent brand image targeting industrial and technology sectors, including electromobility and smart city applications. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. SEO and content structure are well implemented, though some accessibility features could be improved. Security practices include HTTPS usage and cookie consent mechanisms, but lack visible security headers and published security policies. The security posture is moderate, with no critical vulnerabilities detected in the provided data. Privacy compliance is evident through GDPR-aligned cookie and privacy policies. However, the absence of WHOIS data reduces transparency and trust slightly, though this is common for domains with privacy protection in the .pl registry. Overall, the website is professional, trustworthy, and business-focused, with recommendations to enhance security headers and publish incident response information to improve security maturity and trustworthiness.
SECTRON s.r.o.sectron.eu
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
SECTRON s.r.o. is a Czech-based manufacturer and authorized distributor specializing in wireless communication components including antennas, cable adapters, and modules for GSM, UMTS, LTE, GPS, and GLONASS technologies. With 29 years of market presence and operations spanning 49 countries, SECTRON holds a strong position in the M2M and IoT sectors, offering products and solutions for smart cities, electromobility, smart energy, and agriculture. Their business model combines manufacturing with a robust e-commerce platform and partnerships with leading technology brands such as Telit, Trimble, and Teltonika. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Google Analytics, with a focus on GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, providing a good user experience.
Tubebdsm.org - Real BDSM Porn Videostubebdsm.org
Media
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Tubebdsm.org is an adult entertainment website specializing in BDSM and fetish video content. It offers streaming and downloadable videos categorized by various adult themes and fetishes. The site targets an adults-only audience interested in niche BDSM content. Technically, the site uses DataLife Engine CMS with common frontend libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS services. While HTTPS is enabled, the site lacks important security headers and privacy compliance documentation, which are critical for user trust and regulatory adherence. No contact or business information is provided, limiting transparency. Overall, the site functions as a niche adult content platform with moderate technical implementation but weak privacy and security posture.
- PPimpAndHost - Free image hosting & image Sharing
pimpandhost.com
Technology
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
PimpAndHost is a niche online platform providing free and premium image hosting and sharing services, primarily focused on adult content including pornographic images and related categories. The website offers users the ability to upload, share, and explore images, albums, and GIFs, with a business model that includes free anonymous usage and premium paid plans. The platform targets an adult audience and maintains a moderate market position within the adult image hosting niche. Technically, the site uses a custom CMS with Bootstrap framework, integrates Google Tag Manager for analytics, and leverages Cloudflare for DNS services. The website is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and enhancing SSL/TLS configurations. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to web forms without direct emails or phone numbers. Overall, the domain is aged and registered consistently, supporting the legitimacy of the business.
- Ffilesor.com | 521: Web server is down
filesor.com
Other
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website filesor.com is currently inaccessible due to a Cloudflare error 521 indicating the web server is down. The domain is registered since 2010 with NameCheap, Inc. and uses Cloudflare DNS services. No business, contact, or policy information is available on the site, and the content is limited to an error page. The technical infrastructure relies on Cloudflare for CDN and security, but the origin server is not responding, causing service disruption. Security posture is weak due to lack of visible security headers and no SSL configuration details. Privacy compliance and business credibility cannot be verified due to lack of content. Overall, the site is currently non-functional and provides no user or business information.
Fastpicfastpic.org
Technology · Russia
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Fastpic.org is a Russian-language free image hosting service established in 2016, offering users the ability to upload and share images, screenshots, and posters primarily for forums and online communities. The service provides multiple upload options including from local computer and via URL, with image resizing and optimization features. The business model relies on advertising revenue, with AdsKeeper ad network integrated and tracking pixels for analytics. The website targets a general audience seeking free and fast image hosting solutions, with a small-scale operation and moderate market presence in the niche image hosting sector. Technically, the site uses a traditional web stack with jQuery and FingerprintJS for user fingerprinting, hosted under a domain registered with Internet Domain Service BS Corp. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or modern frameworks are detected. Security practices are basic, with HTTPS implied but no DNSSEC or security headers observed. The upload form lacks CAPTCHA or bot mitigation, posing potential abuse risks. Security posture is moderate with room for improvement, especially in privacy compliance where no privacy or cookie policies are published, and no consent mechanisms are implemented. Contact information is limited to an email address for abuse and advertising inquiries. The domain WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. No WAF or blocking mechanisms are detected, allowing full content access. Overall, Fastpic.org is a functional but basic free image hosting service with moderate trustworthiness and security posture. Strategic improvements in privacy compliance, security headers, and abuse prevention would enhance its risk profile and user trust.
- Premium HD Porn Videos and Sex Movies | Redtube Premium
redtubepremium.com
Media
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
RedtubePremium.com is a defunct adult entertainment website that previously offered premium HD pornographic videos. The current website content indicates that the domain is no longer available and redirects users to Spicevids, a partner adult content platform. The site uses Google Analytics and Google Tag Manager for tracking but lacks privacy, cookie, or terms of service policies. WHOIS data is missing, suggesting the domain is unregistered or expired, which undermines the legitimacy and trustworthiness of the site. Technically, the site has basic mobile optimization and SEO but lacks security headers and visible HTTPS confirmation in the provided data. Overall, the site is accessible but minimal and primarily serves as a redirect to a partner site.
- VITADIGITAL LTD
moneyplatform.biz
Technology · United Kingdom
60Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Moneyplatform.biz is a digital content monetization platform operated by VITADIGITAL LTD, established since 2012 with a domain registered in 2013. The platform enables content creators to upload files, integrate video players on websites, and earn revenue from user payments, offering up to 75% of sales revenue. The business targets digital content sellers and creators, positioning itself as a reliable service with multiple payment options including PayPal, BitCoin, and others. Technically, the website is built using React.js and leverages Cloudflare for DNS and Google Tag Manager for analytics. The site is mobile optimized with a good user experience and clear navigation. However, privacy and cookie policies are missing, and no explicit security policies or incident response contacts are published. Security posture is moderate with HTTPS enabled but lacking security headers and DNSSEC. Overall, the platform appears legitimate and functional but would benefit from enhanced privacy compliance and security hardening.
Viessmann Clean & Cold Solutionsviessmann-cold.com
Energy
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Viessmann Clean & Cold Solutions operates as a leading European manufacturer specializing in energy efficient and sustainable cold and cleanroom solutions. Their website showcases a broad portfolio including cold and freezer rooms, total energy solutions, cleanroom solutions, and refrigerated cabinets, targeting industries such as food services, healthcare, convenience stores, and other segments requiring specialized refrigeration. The company positions itself strongly within the energy sector with a large-scale business model supported by the Viessmann Group. Technically, the website is built on the Scrivito CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Pardot, and Usercentrics for consent management. The site is mobile optimized with good SEO practices and a professional design, although some accessibility features could be improved. Performance is moderate with no blocking or WAF detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding are consistent with the Viessmann Group. Overall, the security posture is good but could be enhanced by adding security headers and explicit incident response information. The overall risk assessment is moderate with recommendations to verify domain registration status, implement additional security headers, and maintain compliance with privacy regulations. The website is trustworthy and professional, serving its business audience effectively.
schülkeschuelke.com
Healthcare
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
schülke is a long-established company specializing in hygiene and preservation products, with a corporate philosophy focused on combating diseases and contamination. The website presents professional content targeting healthcare professionals and industries requiring hygiene solutions. Technically, the site is built on the Weblication® CMS platform, with a moderate level of performance and good mobile optimization. However, the security posture is weak due to lack of visible security headers and missing SSL configuration details. Privacy compliance is also lacking, with no privacy or cookie policies detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, while the business content is credible and professional, the technical and security aspects require significant improvement to ensure trust and compliance.
Encavisencavis.com
Energy · Germany
75Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Encavis is a large European renewable energy company specializing in solar parks and wind farms, with over 3.8 GW installed capacity. The company targets institutional investors, energy-intensive companies, and partners such as landowners and project developers. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and recent business activities. Technically, the site uses modern web technologies including JavaScript libraries, consent management, and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in the renewable energy sector.
- GENAQ
genaq.com
Energy · Spain
60Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
GENAQ is a medium-sized Spanish company specializing in manufacturing atmospheric water generators that extract potable water from air. The company positions itself as an innovative and sustainable solution provider addressing global water scarcity challenges. Their website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site uses WordPress with modern frameworks and plugins, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some enhancements like DNSSEC and security headers could improve it further. No critical vulnerabilities or suspicious content were detected. Overall, GENAQ demonstrates strong business credibility and trustworthiness with multiple certifications and customer testimonials.
- LLandefeld Druckluft und Hydraulik GmbH
landefeld.de
Manufacturing · Germany
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Landefeld Druckluft und Hydraulik GmbH operates a leading German B2B e-commerce platform specializing in pneumatic, hydraulic, and industrial supply products, prominently featuring Festo components. The company targets industrial and commercial customers, offering fast, flexible shipping and technical consultation services. Their market position is strong within their niche, supported by a comprehensive product catalog and multilingual website presence. Technically, the website employs modern frameworks such as Vue.js and Bootstrap, hosted on AWS infrastructure, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, trustworthy, and well-optimized for its audience.
KPS Global®kpsglobal.com
Manufacturing · United States
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
KPS Global® is a medium-sized manufacturing company specializing in custom solutions for controlled environments, including walk-in coolers, freezers, and replacement parts. The company positions itself as a leading provider with over 75 years of industry experience, targeting businesses in cold storage, foodservice, retail, and scientific sectors. The website is built on WordPress using Elementor and NitroPack, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and business-focused, with strong social media presence and good technical implementation.
PEWOpewo.com
Energy · Germany
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
PEWO is a German company specializing in compact and modular plant technology for the transfer and distribution of building heat, combined with comprehensive network knowledge and service offerings. The website presents a professional and focused business presence targeting B2B customers in the energy and building technology sector. Technically, the site is built using modern frameworks such as Gatsby and Bootstrap, offering a responsive and well-structured user experience. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is minimal due to the lack of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in transparency, security, and compliance to enhance trust and credibility.
ELEKTROTERMEXetx.pl
Energy · Poland
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ELEKTROTERMEX is a Polish company specializing in the production of compact heat nodes and comprehensive heating investments, including industrial installations, gas boiler rooms, and thermal insulation of pipelines. Established in 2006, the company holds a pioneering position in Poland's heating sector with a stable market presence. Their website reflects a professional digital infrastructure built on WordPress with Elementor, optimized for SEO and mobile devices. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Contact mechanisms are robust, including emails, phone numbers, and a GDPR-compliant contact form. Overall, the company demonstrates a credible and trustworthy online presence aligned with its business operations.
aqotec GmbHaqotec.com
Energy · Austria
75Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
aqotec GmbH is an Austrian company operating in the energy sector, likely providing technology or energy-related services. The company has a mature domain registered since 2009, indicating an established presence. The website is built on WordPress with common plugins such as RevSlider and WPRocket, and uses Google Analytics for visitor tracking. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide clear contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Overall, the website is functional but could improve in privacy compliance and security best practices.
Exasolexastaging.com
Technology
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Exasol is a technology company specializing in a high-performance analytics engine designed to modernize data warehouses, accelerate analytics, optimize cloud costs, and enable governed AI/ML workloads. The company targets data professionals including database masters, data scientists, and analytics accelerators, positioning itself as a scalable and cost-effective solution provider in the analytics and AI space. The website reflects a mature digital presence with comprehensive content, customer stories, and industry-specific solutions, indicating a medium-sized enterprise with a strong market position. Technically, the website is built on WordPress hosted on AWS infrastructure, utilizing modern web technologies such as Google Tag Manager, Cookiebot for consent management, and Plyr for video playback. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, with structured data enhancing search visibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and vulnerability disclosure information could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Business credibility is supported by professional content, customer testimonials, and consistent branding. WHOIS data confirms domain legitimacy and appropriate registration history. Overall, Exasol's website demonstrates a strong digital maturity and security posture suitable for its business model. Strategic recommendations include enabling DNSSEC, adding security headers, publishing vulnerability disclosure policies, and providing incident response contacts to further enhance trust and security readiness.
HowdyGohowdygo.com
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HowdyGo is a SaaS company specializing in interactive product demo software designed for go-to-market teams. Their platform enables users to create embedded product demos and live demo environments that are easy to share and edit. The company targets marketing and sales teams seeking to improve product engagement through interactive demos. The website presents a professional and modern interface with clear messaging and customer trust signals such as case studies and testimonials. Technically, the site is built on modern frameworks including Next.js and React, with integrations for analytics and customer chat support. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are not published. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, the site is trustworthy and well-implemented but could improve transparency around privacy and security policies.
- ISSA CZECH s.r.o.
cloverbooks.cz
Education · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Jazyková škola Cloverleaf Ostrava is a well-established language school operating since 1993, offering a broad range of language courses including English, Cambridge exam preparation, e-learning, and corporate training. The school targets a diverse audience including individuals, children, youth, and corporate clients, positioning itself as the largest language school in the Ostrava region. The website is professionally designed, mobile-optimized, and provides comprehensive information about courses, contact details, and policies. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam Retargeting. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and professional presentation.
CNL INVEST s.r.o.zadosti.cz
Telecommunications · Czech Republic
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
CNL INVEST s.r.o. operates the website zadosti.cz, providing an online service for submitting requests to verify the existence of electronic communication networks in the Czech Republic. The company acts as an authorized representative for multiple network owners, issuing official statements regarding network locations. The service targets businesses and individuals requiring official confirmation of network existence for planning or regulatory purposes. The website is professionally designed with clear navigation and relevant content, though it lacks published privacy and cookie policies. Technically, the site uses the Yii PHP framework with jQuery and Blueprint CSS, hosted on Microsoft Azure DNS infrastructure. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS and CSRF protection but lacks important security headers and incident response information. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.
Národní kulturní památka Vyšehradpraha-vysehrad.cz
Government · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Národní kulturní památka Vyšehrad operates as a national cultural monument in Prague, providing visitors with guided tours, cultural events, educational programs, and venue rental services. The website reflects a well-established institution supported by the City of Prague, targeting tourists, local visitors, and educational groups. The business model centers on cultural heritage preservation combined with revenue from ticket sales and merchandise. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and Google Maps API, likely built on a Ruby on Rails framework, hosted by Active24. The site is mobile optimized with good navigation and content quality. Security posture is moderate with CSRF protections and HTTPS usage implied, but lacks explicit security headers and comprehensive security policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.
Other
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.csobam.cz is currently inaccessible due to a security mechanism likely implemented as a Web Application Firewall (WAF) or bot protection challenge. The HTML content is minimal and contains obfuscated JavaScript, preventing access to any meaningful business or contact information. The WHOIS lookup returned no data, indicating either domain privacy protection or a registration issue. Consequently, no metadata, forms, external links, or business details could be extracted. The lack of accessible content and WHOIS data severely limits the ability to assess the company's market position, services, or compliance posture. The security posture is weak from an external perspective due to missing HTTPS and security headers information, but this may be due to the blocking mechanism rather than actual site configuration. Overall, the site appears to be protected by a security layer that restricts automated access, which impacts the ability to perform a full analysis.
- QQuantcom
quantcom.cz
Telecommunications · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Quantcom is a Czech telecommunications company specializing in providing high-quality connectivity solutions for professional clients. Their services include internet, data, voice, security, cloud, and infrastructure leasing. They operate their own international optical backbone network and metropolitan networks, serving a broad range of business customers from SMEs to multinational corporations and state institutions. The company emphasizes reliability, speed, and personalized service with 24/7 support and SLA guarantees. The website reflects a mature digital presence with modern technologies and comprehensive content tailored to business clients. Technically, the website is built using Gatsby, React, and Tailwind CSS, leveraging modern web development frameworks for performance and responsiveness. It integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and Adform for tracking and retargeting, combined with a robust cookie consent mechanism via Cookiebot. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and CAPTCHA on forms, but lacks visible security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are found. The absence of WHOIS data limits domain legitimacy assessment, but the professional site content and contact details support a trustworthy business profile. Overall, Quantcom presents a solid business and technical profile with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.