Security Directory

F

Framasoft

framagit.org

60

Framagit.org is a self-hosted GitLab instance operated by Framasoft, a French non-profit organization dedicated to promoting free software and digital commons. The platform provides hosting and collaboration tools for open source projects, targeting developers, contributors, and ethical digital communities. The website demonstrates a solid technical infrastructure leveraging GitLab, modern JavaScript frameworks, and privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforcement, CSRF protection, and domain transfer restrictions, although DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy, professionally maintained, and serves a niche community with a focus on ethical technology.

C

Collectif CHATONS

chatons.org

59

The website www.chatons.org represents the Collectif CHATONS, a French non-profit collective initiated by Framasoft in 2016. It focuses on providing ethical, transparent, and decentralized online services as alternatives to major tech companies, targeting users concerned about privacy and digital sovereignty. The site offers resources to find service providers ('chatons') by service type, location, or other criteria, and promotes community collaboration and support. Technically, the site is built on Drupal 8, uses Matomo for privacy-respecting analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics, though explicit security headers and cookie consent mechanisms are absent. WHOIS data is unavailable or malformed, limiting domain trust assessment, but the association with Framasoft and the quality of content support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with its mission.

F

Framasoft

framasoft.org

61

Framasoft is a well-established French non-profit organization founded in 2004, dedicated to digital emancipation through free software, hosting ethical online services, and popular education. It operates a variety of community-driven projects and platforms such as PeerTube, Mobilizon, and Framablog, supported primarily by donations. The organization targets individuals and groups interested in liberating their digital practices and promoting social justice. Technically, the website uses modern frameworks like Vue.js and Bootstrap, is hosted by OVH, and demonstrates excellent mobile optimization and performance. Security posture is strong with HTTPS and domain protections, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and transparent, with a high legitimacy score based on WHOIS data and content consistency.

G

Globenet

globenet.org

62

Globenet is a small, non-profit oriented website focused on digital rights, surveillance, and privacy activism. It provides news articles, event information, and resources primarily in French, targeting activists and the general public interested in digital liberties. The website uses the SPIP CMS platform with Bootstrap and jQuery, indicating a moderately modern technical infrastructure. The site is accessible and well-structured but lacks explicit privacy and cookie policies, contact information, and security headers, which are areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which is understandable given the activist nature of the site. Overall, the website is legitimate and serves a niche community but could enhance its security and compliance posture.

A

Aquilenet

aquilenet.fr

59

Aquilenet is a small, non-profit associative Internet Service Provider based in the Aquitaine region of France. It focuses on providing open, neutral, and privacy-respecting Internet access to its members, leveraging open-source tools and community-driven values. The organization is registered with ARCEP and is a founding member of the Fédération FDN, reinforcing its credibility and commitment to ethical Internet services. The website serves as an information portal and access point to various member services including webmail, cloud storage, VPN, and more. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jCarousel for UI elements. It employs Piwik/Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized with a clear navigation structure, though accessibility features could be improved. No major CMS or hosting provider details are evident from the HTML content. From a security perspective, the site uses HTTPS URLs and does not expose sensitive data or vulnerable scripts. However, it lacks visible security headers and formal policies such as privacy or cookie policies, which are important for compliance and user trust. No forms collecting sensitive data are present on the homepage, reducing immediate risk. WHOIS data is unavailable, likely due to privacy protection or AFNIC policies, but the site content and affiliations suggest legitimacy. Overall, Aquilenet presents a trustworthy and community-focused ISP with a solid technical foundation but could enhance its compliance posture by publishing clear privacy and cookie policies and improving security headers. The risk level is low, but transparency improvements would benefit user trust and regulatory compliance.

M

Městské muzeum Dvůr Králové nad Labem

muzeumdk.cz

52

Městské muzeum Dvůr Králové nad Labem is a municipal cultural institution offering three permanent exhibitions focused on local history, textile printing, and Christmas ornaments. The museum targets general public visitors, including schools, and provides educational programs, workshops, and an online catalog. The website is built on WordPress with modern frontend technologies such as Bootstrap and jQuery, and integrates analytics tools like Matomo and Google Tag Manager. It is well-structured, mobile-optimized, and provides clear navigation and relevant content in Czech with English language support. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professional, and aligned with the museum's public service mission.

M

Městské trhy, z.s.

vychodocesketrhy.cz

57

The website 'Farmářské trhy' represents a small, local non-profit organization named Městské trhy, z.s., focused on organizing farmers markets in Hradec Králové, Czech Republic. It serves as a community platform connecting local producers with residents and visitors, offering event schedules, vendor information, and community engagement activities. The site is built on the GoDaddy Website Builder platform, leveraging standard web technologies and third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is adequate for a small community site, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professionally presented, though it could benefit from enhanced security practices and more transparent contact information. No blocking or WAF mechanisms interfere with content access.

L

Lidé a Země

mojezeme.cz

61

Lidé a Země is a Czech travel and geography magazine operated under the Czech News Center publishing group. The website offers travel articles, guides, and digital content aimed at a general audience interested in global travel and cultural exploration. It also supports e-commerce through magazine sales and newsletter subscriptions, positioning itself as a reputable media brand in the Czech Republic. Technically, the site employs modern web technologies including Google Tag Manager, Gemius analytics, and a consent management platform (Didomi) to ensure GDPR compliance. Advertising is managed through established ad networks such as Google Ad Manager and Rubicon Project, with multiple tracking and retargeting services integrated. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be enhanced. The absence of public WHOIS data suggests privacy protection, which is common and justified for media entities. Overall, the site is professional, well-branded, and trustworthy with no signs of malicious activity or content blocking.

LUDdesign is a small Czech Republic-based business specializing in website creation and graphic design services, primarily serving clients in and around Trutnov. The website is minimalistic and currently under construction, providing basic contact information for two business owners along with their registration and banking details. The business model is service-based, charging hourly rates for design work. The domain has been registered since 2012, consistent with the business's stated history. Technically, the website is simple, built with basic HTML and CSS, hosted likely by Wedos, a Czech hosting provider. There is no evidence of advanced frameworks, CMS, or analytics tools. Mobile optimization and SEO are basic, and no security headers or HTTPS status could be confirmed from the data provided. From a security perspective, the site lacks critical elements such as a privacy policy, cookie consent, security headers, and incident response contacts. No forms or scripts were detected, reducing attack surface but also indicating limited functionality. The domain registration data aligns well with the website content, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is low complexity and low risk but would benefit from implementing HTTPS, security headers, privacy and cookie policies, and improved technical and content quality to enhance trust and compliance.

S

SECTRON s.r.o.

gsmkey.cz

55

SECTRON s.r.o. operates the GSM KEY website offering GSM SMART KEY controllers that enable users to control garage doors, gates, and other devices via mobile phones. The company targets households, small businesses, and larger enterprises such as hotels and parking garages, providing both hardware and cloud-based management services. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools, reflecting a moderate level of digital maturity. However, the absence of WHOIS data and lack of published privacy and security policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS and cookie consent mechanisms in place, but could benefit from enhanced security headers and incident response disclosures. Overall, the site is trustworthy and business-focused, but would gain from improved privacy compliance and domain registration transparency.

The website www.arsy.cz is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, metadata, or contact details are available for analysis. The absence of WHOIS data further complicates verification of domain ownership and legitimacy. Technically, the site lacks visible security headers, privacy policies, or any modern web technologies, indicating a minimal or misconfigured web presence. The security posture is weak, with no evidence of HTTPS or compliance measures. Overall, the site presents a high risk due to lack of transparency and accessibility, and it is not possible to assess its business or security maturity accurately.

S

SECTRON s.r.o.

sectron.pl

47

SECTRON s.r.o. is a Czech-based company specializing in wireless technologies, including M2M and IoT solutions, with over 29 years of market presence. The company manufactures antennas, cable adapters, and distributes industrial modems, routers, and modules. Their business model combines manufacturing with authorized distribution and e-commerce sales across multiple countries. The website reflects a professional and consistent brand image targeting industrial and technology sectors, including electromobility and smart city applications. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. SEO and content structure are well implemented, though some accessibility features could be improved. Security practices include HTTPS usage and cookie consent mechanisms, but lack visible security headers and published security policies. The security posture is moderate, with no critical vulnerabilities detected in the provided data. Privacy compliance is evident through GDPR-aligned cookie and privacy policies. However, the absence of WHOIS data reduces transparency and trust slightly, though this is common for domains with privacy protection in the .pl registry. Overall, the website is professional, trustworthy, and business-focused, with recommendations to enhance security headers and publish incident response information to improve security maturity and trustworthiness.

S

SECTRON s.r.o.

sectron.eu

55

SECTRON s.r.o. is a Czech-based manufacturer and authorized distributor specializing in wireless communication components including antennas, cable adapters, and modules for GSM, UMTS, LTE, GPS, and GLONASS technologies. With 29 years of market presence and operations spanning 49 countries, SECTRON holds a strong position in the M2M and IoT sectors, offering products and solutions for smart cities, electromobility, smart energy, and agriculture. Their business model combines manufacturing with a robust e-commerce platform and partnerships with leading technology brands such as Telit, Trimble, and Teltonika. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Google Analytics, with a focus on GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, providing a good user experience.

T

Tubebdsm.org - Real BDSM Porn Videos

tubebdsm.org

57

Tubebdsm.org is an adult entertainment website specializing in BDSM and fetish video content. It offers streaming and downloadable videos categorized by various adult themes and fetishes. The site targets an adults-only audience interested in niche BDSM content. Technically, the site uses DataLife Engine CMS with common frontend libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS services. While HTTPS is enabled, the site lacks important security headers and privacy compliance documentation, which are critical for user trust and regulatory adherence. No contact or business information is provided, limiting transparency. Overall, the site functions as a niche adult content platform with moderate technical implementation but weak privacy and security posture.

T

Tubxporn.com - Best Porn Videos. Stream or Download Movies

tubxporn.com

39

Tubxporn.com is an adult entertainment website offering pornographic video streaming and free downloads. The site appears to serve a niche adult audience with a basic content offering and minimal on-site content, primarily redirecting users to a partner site. The technical infrastructure is simple, relying on standard web technologies and Google PageSpeed scripts, with moderate performance and basic mobile optimization. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies. The WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site lacks business transparency and compliance features, which increases risk for users and partners.

PimpAndHost is a niche online platform providing free and premium image hosting and sharing services, primarily focused on adult content including pornographic images and related categories. The website offers users the ability to upload, share, and explore images, albums, and GIFs, with a business model that includes free anonymous usage and premium paid plans. The platform targets an adult audience and maintains a moderate market position within the adult image hosting niche. Technically, the site uses a custom CMS with Bootstrap framework, integrates Google Tag Manager for analytics, and leverages Cloudflare for DNS services. The website is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and enhancing SSL/TLS configurations. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to web forms without direct emails or phone numbers. Overall, the domain is aged and registered consistently, supporting the legitimacy of the business.

The website filesor.com is currently inaccessible due to a Cloudflare error 521 indicating the web server is down. The domain is registered since 2010 with NameCheap, Inc. and uses Cloudflare DNS services. No business, contact, or policy information is available on the site, and the content is limited to an error page. The technical infrastructure relies on Cloudflare for CDN and security, but the origin server is not responding, causing service disruption. Security posture is weak due to lack of visible security headers and no SSL configuration details. Privacy compliance and business credibility cannot be verified due to lack of content. Overall, the site is currently non-functional and provides no user or business information.

F

Fastpic

fastpic.org

47

Fastpic.org is a Russian-language free image hosting service established in 2016, offering users the ability to upload and share images, screenshots, and posters primarily for forums and online communities. The service provides multiple upload options including from local computer and via URL, with image resizing and optimization features. The business model relies on advertising revenue, with AdsKeeper ad network integrated and tracking pixels for analytics. The website targets a general audience seeking free and fast image hosting solutions, with a small-scale operation and moderate market presence in the niche image hosting sector. Technically, the site uses a traditional web stack with jQuery and FingerprintJS for user fingerprinting, hosted under a domain registered with Internet Domain Service BS Corp. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or modern frameworks are detected. Security practices are basic, with HTTPS implied but no DNSSEC or security headers observed. The upload form lacks CAPTCHA or bot mitigation, posing potential abuse risks. Security posture is moderate with room for improvement, especially in privacy compliance where no privacy or cookie policies are published, and no consent mechanisms are implemented. Contact information is limited to an email address for abuse and advertising inquiries. The domain WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. No WAF or blocking mechanisms are detected, allowing full content access. Overall, Fastpic.org is a functional but basic free image hosting service with moderate trustworthiness and security posture. Strategic improvements in privacy compliance, security headers, and abuse prevention would enhance its risk profile and user trust.

R

Premium HD Porn Videos and Sex Movies | Redtube Premium

redtubepremium.com

47

RedtubePremium.com is a defunct adult entertainment website that previously offered premium HD pornographic videos. The current website content indicates that the domain is no longer available and redirects users to Spicevids, a partner adult content platform. The site uses Google Analytics and Google Tag Manager for tracking but lacks privacy, cookie, or terms of service policies. WHOIS data is missing, suggesting the domain is unregistered or expired, which undermines the legitimacy and trustworthiness of the site. Technically, the site has basic mobile optimization and SEO but lacks security headers and visible HTTPS confirmation in the provided data. Overall, the site is accessible but minimal and primarily serves as a redirect to a partner site.

V

VITADIGITAL LTD

moneyplatform.biz

57

Moneyplatform.biz is a digital content monetization platform operated by VITADIGITAL LTD, established since 2012 with a domain registered in 2013. The platform enables content creators to upload files, integrate video players on websites, and earn revenue from user payments, offering up to 75% of sales revenue. The business targets digital content sellers and creators, positioning itself as a reliable service with multiple payment options including PayPal, BitCoin, and others. Technically, the website is built using React.js and leverages Cloudflare for DNS and Google Tag Manager for analytics. The site is mobile optimized with a good user experience and clear navigation. However, privacy and cookie policies are missing, and no explicit security policies or incident response contacts are published. Security posture is moderate with HTTPS enabled but lacking security headers and DNSSEC. Overall, the platform appears legitimate and functional but would benefit from enhanced privacy compliance and security hardening.

F

FGTC Investment GmbH

fgtc-investment.com

46

FGTC Investment GmbH is an independent asset management firm based in Germany, specializing in wealth management for affluent private clients, entrepreneurial families, foundations, and conservative institutions. Established in 2011 from the single family office of Silvius Dornier, the company focuses on capital market investments and agrarian/forestry assets, operating independently and free from third-party influences. It is part of the Viessmann Generation Group, emphasizing long-term generational wealth management. The website presents a professional image with clear business descriptions and structured data supporting SEO and accessibility.

V

Viessmann Clean & Cold Solutions

viessmann-cold.com

65

Viessmann Clean & Cold Solutions operates as a leading European manufacturer specializing in energy efficient and sustainable cold and cleanroom solutions. Their website showcases a broad portfolio including cold and freezer rooms, total energy solutions, cleanroom solutions, and refrigerated cabinets, targeting industries such as food services, healthcare, convenience stores, and other segments requiring specialized refrigeration. The company positions itself strongly within the energy sector with a large-scale business model supported by the Viessmann Group. Technically, the website is built on the Scrivito CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Pardot, and Usercentrics for consent management. The site is mobile optimized with good SEO practices and a professional design, although some accessibility features could be improved. Performance is moderate with no blocking or WAF detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding are consistent with the Viessmann Group. Overall, the security posture is good but could be enhanced by adding security headers and explicit incident response information. The overall risk assessment is moderate with recommendations to verify domain registration status, implement additional security headers, and maintain compliance with privacy regulations. The website is trustworthy and professional, serving its business audience effectively.

S

schülke

schuelke.com

51

schülke is a long-established company specializing in hygiene and preservation products, with a corporate philosophy focused on combating diseases and contamination. The website presents professional content targeting healthcare professionals and industries requiring hygiene solutions. Technically, the site is built on the Weblication® CMS platform, with a moderate level of performance and good mobile optimization. However, the security posture is weak due to lack of visible security headers and missing SSL configuration details. Privacy compliance is also lacking, with no privacy or cookie policies detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, while the business content is credible and professional, the technical and security aspects require significant improvement to ensure trust and compliance.

E

Encavis

encavis.com

67

Encavis is a large European renewable energy company specializing in solar parks and wind farms, with over 3.8 GW installed capacity. The company targets institutional investors, energy-intensive companies, and partners such as landowners and project developers. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and recent business activities. Technically, the site uses modern web technologies including JavaScript libraries, consent management, and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in the renewable energy sector.

P

PharOS

pharosgr.gr

48

PharOS is a privately owned pharmaceutical company based in Greece, specializing in the development, manufacturing, and supply of generic and value-added pharmaceutical products. The company boasts a significant global footprint with over 104 products and marketing authorizations in more than 116 countries, positioning itself as a key player in the pharmaceutical industry. The website reflects a professional and consistent brand image, targeting healthcare professionals and global markets. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security measures include HTTPS and reCAPTCHA integration, though additional security headers and explicit privacy policies are lacking. Overall, the site is safe, trustworthy, and well-structured but would benefit from enhanced privacy compliance and security documentation.

G

GENAQ

genaq.com

57

GENAQ is a medium-sized Spanish company specializing in manufacturing atmospheric water generators that extract potable water from air. The company positions itself as an innovative and sustainable solution provider addressing global water scarcity challenges. Their website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site uses WordPress with modern frameworks and plugins, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some enhancements like DNSSEC and security headers could improve it further. No critical vulnerabilities or suspicious content were detected. Overall, GENAQ demonstrates strong business credibility and trustworthiness with multiple certifications and customer testimonials.

Landefeld Druckluft und Hydraulik GmbH operates a leading German B2B e-commerce platform specializing in pneumatic, hydraulic, and industrial supply products, prominently featuring Festo components. The company targets industrial and commercial customers, offering fast, flexible shipping and technical consultation services. Their market position is strong within their niche, supported by a comprehensive product catalog and multilingual website presence. Technically, the website employs modern frameworks such as Vue.js and Bootstrap, hosted on AWS infrastructure, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, trustworthy, and well-optimized for its audience.

Etanomics Service GmbH is a German-based energy consulting company specializing in energy efficiency, energy management, and decarbonization services. Founded in 2012, the company has established itself as a leading service provider with over 1000 projects, focusing on helping businesses reduce energy consumption, lower costs, and minimize their carbon footprint. Their service portfolio includes energy audits, feasibility studies, ISO 50001 energy management systems, and funding advisory, targeting companies seeking sustainable and economically viable energy solutions. Technically, the website employs a moderate technology stack including jQuery, Modernizr, Google Analytics, and LinkedIn Insight tags. The site is well-structured with good SEO and mobile optimization, though it lacks advanced CMS indicators and some modern security headers. Performance is moderate, and the site uses HTTPS with anonymized IP tracking for privacy. From a security perspective, the site shows good baseline practices such as HTTPS and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and DNSSEC. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, enhancing trustworthiness. Overall, Etanomics.com presents a professional and trustworthy digital presence with solid business credibility and compliance with GDPR. Recommendations include enhancing security headers, enabling DNSSEC, updating legacy libraries, and publishing formal security and incident response policies to further strengthen their security posture and trust.

K

KPS Global®

kpsglobal.com

61

KPS Global® is a medium-sized manufacturing company specializing in custom solutions for controlled environments, including walk-in coolers, freezers, and replacement parts. The company positions itself as a leading provider with over 75 years of industry experience, targeting businesses in cold storage, foodservice, retail, and scientific sectors. The website is built on WordPress using Elementor and NitroPack, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and business-focused, with strong social media presence and good technical implementation.

P

PEWO

pewo.com

63

PEWO is a German company specializing in compact and modular plant technology for the transfer and distribution of building heat, combined with comprehensive network knowledge and service offerings. The website presents a professional and focused business presence targeting B2B customers in the energy and building technology sector. Technically, the site is built using modern frameworks such as Gatsby and Bootstrap, offering a responsive and well-structured user experience. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is minimal due to the lack of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in transparency, security, and compliance to enhance trust and credibility.

E

ELEKTROTERMEX

etx.pl

57

ELEKTROTERMEX is a Polish company specializing in the production of compact heat nodes and comprehensive heating investments, including industrial installations, gas boiler rooms, and thermal insulation of pipelines. Established in 2006, the company holds a pioneering position in Poland's heating sector with a stable market presence. Their website reflects a professional digital infrastructure built on WordPress with Elementor, optimized for SEO and mobile devices. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Contact mechanisms are robust, including emails, phone numbers, and a GDPR-compliant contact form. Overall, the company demonstrates a credible and trustworthy online presence aligned with its business operations.

A

aqotec GmbH

aqotec.com

65

aqotec GmbH is an Austrian company operating in the energy sector, likely providing technology or energy-related services. The company has a mature domain registered since 2009, indicating an established presence. The website is built on WordPress with common plugins such as RevSlider and WPRocket, and uses Google Analytics for visitor tracking. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide clear contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Overall, the website is functional but could improve in privacy compliance and security best practices.

ISOPLUS is a European manufacturer specializing in pre-insulated piping systems that support the energy transition across Europe. The company serves sectors including district heating and cooling, bioenergy, agriculture, solar heating, industry, and carbon capture and storage (CCS). With a presence in over 30 countries and multiple production sites, ISOPLUS offers a comprehensive product portfolio and extensive service support, positioning itself as a key player in sustainable energy infrastructure. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager. The site is well-optimized for mobile devices, features clear navigation, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, explicit security headers are not detected in the HTML, and no public security or incident response policies are published. The WHOIS data is unavailable due to privacy protection, which is justified for a business of this scale. No critical vulnerabilities or exposed sensitive data were found in the site content. Overall, ISOPLUS presents a professional and trustworthy online presence with strong business credibility and compliance posture. Strategic improvements in security header implementation and transparency around security policies could further enhance trust and security maturity.

G

GRITEC GmbH

gritec.com

53

GRITEC GmbH is a well-established German company specializing in technical buildings and metal components for infrastructure sectors such as energy, transport, and telecommunications. With over 60 years of experience and a recent brand relaunch from Betonbau to GRITEC, the company positions itself as a full-service provider offering products like walk-in concrete stations, compact substations, and metal components including doors and ventilation systems. Their business model focuses on manufacturing combined with technical services including planning, testing, logistics, and assembly, targeting infrastructure clients requiring customized technical building solutions. The website reflects a mature digital presence with multilingual support and professional design.

E

Exasol

exastaging.com

69

Exasol is a technology company specializing in a high-performance analytics engine designed to modernize data warehouses, accelerate analytics, optimize cloud costs, and enable governed AI/ML workloads. The company targets data professionals including database masters, data scientists, and analytics accelerators, positioning itself as a scalable and cost-effective solution provider in the analytics and AI space. The website reflects a mature digital presence with comprehensive content, customer stories, and industry-specific solutions, indicating a medium-sized enterprise with a strong market position. Technically, the website is built on WordPress hosted on AWS infrastructure, utilizing modern web technologies such as Google Tag Manager, Cookiebot for consent management, and Plyr for video playback. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, with structured data enhancing search visibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and vulnerability disclosure information could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Business credibility is supported by professional content, customer testimonials, and consistent branding. WHOIS data confirms domain legitimacy and appropriate registration history. Overall, Exasol's website demonstrates a strong digital maturity and security posture suitable for its business model. Strategic recommendations include enabling DNSSEC, adding security headers, publishing vulnerability disclosure policies, and providing incident response contacts to further enhance trust and security readiness.

H

HowdyGo

howdygo.com

62

HowdyGo is a SaaS company specializing in interactive product demo software designed for go-to-market teams. Their platform enables users to create embedded product demos and live demo environments that are easy to share and edit. The company targets marketing and sales teams seeking to improve product engagement through interactive demos. The website presents a professional and modern interface with clear messaging and customer trust signals such as case studies and testimonials. Technically, the site is built on modern frameworks including Next.js and React, with integrations for analytics and customer chat support. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are not published. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, the site is trustworthy and well-implemented but could improve transparency around privacy and security policies.

I

ISSA CZECH s.r.o.

cloverbooks.cz

56

Jazyková škola Cloverleaf Ostrava is a well-established language school operating since 1993, offering a broad range of language courses including English, Cambridge exam preparation, e-learning, and corporate training. The school targets a diverse audience including individuals, children, youth, and corporate clients, positioning itself as the largest language school in the Ostrava region. The website is professionally designed, mobile-optimized, and provides comprehensive information about courses, contact details, and policies. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam Retargeting. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and professional presentation.

C

CNL INVEST s.r.o.

zadosti.cz

60

CNL INVEST s.r.o. operates the website zadosti.cz, providing an online service for submitting requests to verify the existence of electronic communication networks in the Czech Republic. The company acts as an authorized representative for multiple network owners, issuing official statements regarding network locations. The service targets businesses and individuals requiring official confirmation of network existence for planning or regulatory purposes. The website is professionally designed with clear navigation and relevant content, though it lacks published privacy and cookie policies. Technically, the site uses the Yii PHP framework with jQuery and Blueprint CSS, hosted on Microsoft Azure DNS infrastructure. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS and CSRF protection but lacks important security headers and incident response information. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

P

PC Lékař.eu

pclekar.eu

39

PC Lékař.eu is a small Czech IT and telecommunications service provider operated by Petr Kubeš since 1992. The website offers a range of services including remote PC repair, helpdesk support, IT administration, and technical infrastructure documentation. The business targets individuals and small businesses in the Czech Republic seeking reliable IT and telco support. The site is built on WordPress with a moderate technical stack including Bootstrap and various plugins for enhanced functionality. The website is well-structured with good content quality and navigation, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS enforced but missing important security headers and vulnerability disclosure mechanisms. WHOIS data is privacy protected, which is common for small businesses, and no suspicious patterns were detected. Overall, the website is professional and trustworthy but could improve compliance and security practices.

B

BlučinaNet s.r.o.

blucinanet.eu

41

BlučinaNet s.r.o. is a small Czech telecommunications company established in 1992, providing internet and television services primarily to residential and small business customers. The website presents a professional and consistent brand image with clear service offerings including internet connectivity, TV packages, and router hardware. The company targets customers in the Czech Republic, emphasizing affordable and reliable service. Technically, the website is built on a modern Nuxt.js and Vue.js stack, offering good mobile optimization and user experience, though SEO and accessibility could be improved. Security posture is solid with HTTPS enforced, but lacks important security headers and published privacy or cookie policies, which reduces compliance and trust. No blocking or WAF mechanisms were detected, and no suspicious content or tracking scripts are present, indicating a safe and straightforward online presence.

N

Národní kulturní památka Vyšehrad

praha-vysehrad.cz

49

Národní kulturní památka Vyšehrad operates as a national cultural monument in Prague, providing visitors with guided tours, cultural events, educational programs, and venue rental services. The website reflects a well-established institution supported by the City of Prague, targeting tourists, local visitors, and educational groups. The business model centers on cultural heritage preservation combined with revenue from ticket sales and merchandise. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and Google Maps API, likely built on a Ruby on Rails framework, hosted by Active24. The site is mobile optimized with good navigation and content quality. Security posture is moderate with CSRF protections and HTTPS usage implied, but lacks explicit security headers and comprehensive security policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.

The website www.csobam.cz is currently inaccessible due to a security mechanism likely implemented as a Web Application Firewall (WAF) or bot protection challenge. The HTML content is minimal and contains obfuscated JavaScript, preventing access to any meaningful business or contact information. The WHOIS lookup returned no data, indicating either domain privacy protection or a registration issue. Consequently, no metadata, forms, external links, or business details could be extracted. The lack of accessible content and WHOIS data severely limits the ability to assess the company's market position, services, or compliance posture. The security posture is weak from an external perspective due to missing HTTPS and security headers information, but this may be due to the blocking mechanism rather than actual site configuration. Overall, the site appears to be protected by a security layer that restricts automated access, which impacts the ability to perform a full analysis.

Quantcom is a Czech telecommunications company specializing in providing high-quality connectivity solutions for professional clients. Their services include internet, data, voice, security, cloud, and infrastructure leasing. They operate their own international optical backbone network and metropolitan networks, serving a broad range of business customers from SMEs to multinational corporations and state institutions. The company emphasizes reliability, speed, and personalized service with 24/7 support and SLA guarantees. The website reflects a mature digital presence with modern technologies and comprehensive content tailored to business clients. Technically, the website is built using Gatsby, React, and Tailwind CSS, leveraging modern web development frameworks for performance and responsiveness. It integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and Adform for tracking and retargeting, combined with a robust cookie consent mechanism via Cookiebot. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and CAPTCHA on forms, but lacks visible security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are found. The absence of WHOIS data limits domain legitimacy assessment, but the professional site content and contact details support a trustworthy business profile. Overall, Quantcom presents a solid business and technical profile with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

M

Mevia.cz

mevia.cz

50

Mevia.cz is a Czech digital agency founded in 2014, offering creative and smart solutions for internet and offline presence. Their core services include web development, e-commerce, online marketing, and graphic design. The company targets businesses seeking comprehensive digital marketing and web solutions, positioning itself as an experienced and reliable partner with over 10 years of successful projects. Technically, the website is built on WordPress with modern technologies such as Bootstrap 5, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS, reCAPTCHA, and consent management, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, though it could improve compliance by adding privacy and terms pages.

K

Kongresové centrum Praha, a.s.

praguecc.cz

51

Kongresové centrum Praha, a.s. is a well-established event and congress center located in Prague, Czech Republic, offering a wide range of services including venue rental for congresses, conferences, exhibitions, and cultural events. The company targets event organizers, visitors, and hotel guests, positioning itself as a key player in the hospitality and event hosting sector in the region. The website reflects a professional and modern digital presence with comprehensive content and clear navigation. Technically, the site employs modern frameworks such as Bootstrap and integrates multiple analytics and tracking tools with user consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong, with clear cookie consent and a detailed GDPR policy. Overall, the site is trustworthy, professional, and aligned with the business's market positioning.

N

Nadace Jedličkova ústavu

kolobezkaden.cz

43

Koloběžka DEN is a Czech family-oriented sports event organized by the non-profit Nadace Jedličkova ústavu. The website serves as an informational and promotional platform for the annual event held in Prague, featuring race details, schedules, galleries, and partner information. The event targets families and sports enthusiasts, emphasizing community engagement and local participation. The site is well-branded and supported by multiple reputable partners, enhancing its credibility. Technically, the website is built on WordPress with a modern but somewhat dated tech stack including Bootstrap 3 and jQuery. It uses common plugins for mobile navigation, image lightboxes, and slideshows. The site is hosted likely by WEDOS, a Czech hosting provider, and uses HTTPS with a good SSL configuration. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. From a security perspective, the site has HTTPS enabled but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. Google Analytics and Tag Manager are used for tracking without visible consent mechanisms, indicating privacy compliance gaps. No forms are present on the homepage, reducing attack surface but also limiting direct data collection. Overall, the website is functional and trustworthy for its purpose but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

N

Nadace Jedličkova ústavu

kolickovyden.cz

51

Kolíčkový den is a charitable fundraising campaign organized by Nadace Jedličkova ústavu, focused on supporting children and young people with disabilities in the Czech Republic. The campaign engages schools and organizations nationwide to raise funds and awareness for better communication and support for people with handicaps. The website is professionally designed using WordPress CMS with SEO optimization and includes multimedia content such as embedded videos and testimonials to enhance engagement. Technically, the site uses modern tools like Google Tag Manager and CookieScript for analytics and privacy compliance, hosted by a reputable Czech provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could improve defenses. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, serving as an effective platform for its non-profit mission.