Security Directory

The website at yfdpco2.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, which severely limits the ability to assess the business or its offerings. The domain WHOIS data is suspicious due to a future creation date (March 2025), which is inconsistent with the current timeline and raises concerns about the legitimacy or accuracy of the registration data. The site lacks fundamental privacy and cookie policies, security headers, and DNSSEC, indicating a low maturity level in security and compliance. Overall, the site appears to be a placeholder or ad-serving page rather than a fully developed business website.

C

Centrum realitního vzdělávání - JUDr. Tomáš Philippi

realitni.info

63

Centrum realitního vzdělávání, operated by JUDr. Tomáš Philippi, is a specialized Czech Republic-based education and legal consultancy business focused on real estate brokerage training and certification. The website offers preparatory courses, exams, online testing, and legal documentation services, positioning itself as an authoritative niche provider with strong legal expertise backing. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is average with no visible advanced security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy for its target audience but would benefit from enhanced security and compliance measures.

T

Tangible design festival

tangible-festival.org

44

The Tangible design festival website represents a cultural event based in Marseille, France, dedicated to various forms of design expression. The festival is scheduled for October 2025 and features exhibitions, workshops, and meetings across multiple local venues. The business model centers on event organization and cultural promotion within the local design community, targeting a general audience interested in contemporary design and art. Technically, the website is built with modern web standards including HTML, CSS, and JavaScript, and uses HTTPS with hosting provided by OVH sas. The site includes minimal external dependencies, notably the Umami analytics platform for visitor tracking. The site is mobile optimized and accessible with good SEO practices, but lacks advanced frameworks or CMS platforms. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating gaps in compliance and user trust features. The WHOIS data shows a suspicious future domain creation date, which undermines domain legitimacy and trustworthiness. Overall, the website is functional and professionally designed for its purpose but requires improvements in privacy compliance, security hardening, and transparency to enhance trust and regulatory adherence.

ACTON s.r.o. is a Czech-based company established in 1993, providing a broad range of services primarily in real estate management, engineering, construction, and hospitality sectors. The company has evolved from property law consulting to a diversified service provider with local market presence in Prague and surrounding regions. The website reflects a small business with a focus on local clients including private individuals and municipal entities. Technically, the website is basic with standard HTML, CSS, and JavaScript usage, including Google Analytics for visitor tracking. However, it lacks modern CMS features and advanced technical frameworks. Security posture is moderate with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is limited to email and physical address without phone numbers or social media presence. Overall, the website is functional but would benefit from enhanced security, privacy compliance, and technical modernization.

M

Midnight Carnival, LLC

midnightcarnival.com

54

Midnight Carnival, LLC operates a niche adult affiliate program specializing in fetish and erotica content. The website serves as a platform to recruit and support affiliate webmasters with a 50/50 payout model, focusing on high-quality adult promotional content. The business has been established since 2004, with a consistent domain registration and a clear market position within adult affiliate marketing. The website content is primarily static with some outdated technologies such as Flash, and it lacks modern web features like mobile optimization and advanced SEO. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or modern frameworks. Hosting is provided by MojoHost, as indicated by the nameservers. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There is no visible cookie consent mechanism or GDPR compliance indicators, which may expose the business to regulatory risks. From a security perspective, the site shows minimal security best practices, with no DNSSEC enabled and use of deprecated Flash content. The login form uses POST but no further security controls are evident. The WHOIS data is consistent and supports the legitimacy of the business, with no privacy protection masking registrant details. Overall, the security posture is weak and requires significant improvements. The website is clearly adult-oriented with explicit keywords and content targeting adults-only audiences. No social media or modern analytics tools are detected, indicating a low level of digital maturity. Strategic recommendations include enabling HTTPS, implementing security headers, removing Flash content, adding privacy and cookie policies, and improving mobile and accessibility features to enhance user experience and compliance.

The website represents a small German software provider specializing in solutions for Studentenwerke, offering products such as inventory management, dormitory management, accounting, and cash register systems. The business positions itself as the leading provider in its niche within Germany. The technical infrastructure is basic, relying on legacy HTML standards and a CMS named 'web to date 8.0'. There is no evidence of modern SEO, accessibility, or mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no visible privacy or cookie consent mechanisms. Contact information and incident response details are absent, limiting trust and compliance. Overall, the site is functional but outdated and lacking in security and privacy best practices.

The website fitandmuscular.com operates as a niche adult video content platform specializing in videos featuring fit and muscular women wearing skimpy outfits such as thongs and thong bikinis. The business model appears to be subscription or membership-based access to video content with regular updates and preview videos. The site targets an adult audience interested in this specific content genre. Technically, the site is built with basic HTML and CSS, hosted by DreamHost, and lacks modern web frameworks or CMS. There is no evidence of analytics, tracking, or advertising technologies in use. Security posture is weak, with no HTTPS or security headers detected and no privacy or cookie policies present. WHOIS data is suspicious due to a domain creation date set in the future and lack of registrant details, which undermines trust. Overall, the site is functional but basic, with significant gaps in security and compliance.

C

This website is for ADULTS ONLY

cruel-mistresses.com

45

The website cruel-mistresses.com is an adult content portal requiring users to affirm they are at least 18 years old before entering. It hosts sexually explicit material with fetish and bondage themes, targeting an adult-only audience. The site references Mood-Universe.com as the copyright holder but provides minimal business or contact information. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Mobile responsiveness is present but basic. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided data. The domain is aged since 2011 and registered with a reputable registrar, Rebel Ltd, but lacks detailed registrant information. Overall, the site lacks privacy, cookie, and terms of service policies, which impacts compliance and trustworthiness.

HumiliationPOV.com is a niche adult entertainment website specializing in fetish content such as small penis humiliation, femdom POV, financial domination, and related adult themes. The site operates primarily on a subscription and affiliate marketing business model, targeting an adults-only audience interested in specific fetish content. The website content is accessible without any WAF or security challenges, but it uses outdated technologies such as Flash and lacks modern security practices like HTTPS and security headers. Privacy compliance is minimal, with no visible cookie consent mechanisms despite handling user subscriptions. WHOIS data is unavailable, indicating possible privacy protection or recent domain registration, which reduces transparency and trustworthiness. Overall, the site serves a specialized adult market but has significant technical and security shortcomings.

The website artisanlogiciel.net/yunohost/sso/login appears to be a login portal for a Single Sign-On (SSO) system, likely related to Yunohost services. The content is minimal, primarily consisting of technical assets and scripts with no visible business or contact information. The domain is registered with Gandi SAS since 2009, indicating a mature and legitimate registration. The technical infrastructure uses modern JavaScript frameworks such as Nuxt.js, but lacks visible security headers and privacy compliance documentation. The site does not present any advertising or analytics scripts, suggesting a focus on internal or limited user access rather than public marketing. Overall, the website's security posture is basic, with room for improvement in security headers and privacy policies. The lack of business information and policies limits trust and compliance assessment.

R

RightCapital

rightcapital.com

53

RightCapital is a financial planning software company offering an easy-to-use SaaS platform designed to simplify financial planning, enhance client engagement, and help financial advisors scale their practices efficiently. The company targets financial advisors and planners, providing advanced planning features, risk assessment tools, and workflow automation. The website is professionally designed, mobile-optimized, and demonstrates strong branding consistency. The technical infrastructure leverages modern web technologies including React and Gatsby, ensuring fast performance and good SEO. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the overall digital presence and content quality indicate a legitimate and professional business. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance trust and compliance.

J

JUDr. Tomáš Philippi

t-p.cz

57

JUDr. Tomáš Philippi operates a specialized legal practice in the Czech Republic focusing on real estate, civil, commercial, family, and copyright law. The firm is well-established since 2006 and holds a reputable position in the market, notably through contributions to real estate legislation and education. The website serves as a professional portal presenting the firm's services, contact information, and related real estate educational resources. Technically, the website is basic but functional, with minimal modern enhancements and limited mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and there are no published privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

TeamIn is a Czech Republic-based software solution focused on providing a team information system tailored for small businesses. The platform facilitates project management, workflow control, and performance tracking, aiming to simplify communication and task management within small firms. The website presents a clear business focus with professional content and consistent branding, targeting small companies needing efficient project and workflow management tools. Technically, the website is built using standard web technologies including HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks advanced frameworks or CMS detection. Security measures appear minimal, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies published, indicating gaps in compliance and security best practices. From a security perspective, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The lack of privacy and cookie policies further impacts GDPR compliance. While the site content is safe and business-appropriate, the security posture is weak, and improvements are needed to enhance trust and protect user data. Overall, the site is functional and informative but requires significant enhancements in security, privacy compliance, and domain legitimacy to improve its risk profile and business credibility.

The website webusager.fr is currently a placeholder page indicating it is under construction, hosted by OVH. There is no active business content, no contact information, and no privacy or cookie policies present. The domain is registered since 2012 with OVH, consistent with the hosting provider, but the lack of content suggests the site is not yet operational or is abandoned. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. There is no evidence of HTTPS or security headers, which presents a security risk. No analytics or tracking technologies are in use, and no advertising or marketing tools are present. Overall, the site has very limited digital maturity and poor content quality.

Compel s.r.o. is a small Czech IT company based in Trutnov, specializing in computer hardware sales, IT services, web development, and hosting. The company has a long-standing presence since 2000, supported by consistent WHOIS data and a domain age that aligns with its business claims. The website provides detailed information about their product offerings including gaming computers, software, and specialized systems like point of sale and hotel management. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking. The site is functional but lacks modern mobile optimization and accessibility features. Security posture is moderate with HTTPS implied but no advanced security headers or policies published. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is safe, professional, and trustworthy but would benefit from improvements in privacy, security, and technical modernization.

The website capline.org is a French digital platform dedicated to the registration of nautical races. It centralizes race registrations and allows participants to upload and reuse necessary documents for their participation. The platform targets participants and organizers of nautical races, positioning itself as a niche service within the transportation sector. The domain was registered in April 2023, consistent with the business's recent establishment. Technically, the website uses modern web technologies including JavaScript and Bootstrap for responsive design. It is hosted by Gandi SAS and served over HTTPS, ensuring basic security. However, the site lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. The website is moderately optimized for mobile devices and performance is average. From a security perspective, the site has a basic security posture with HTTPS enabled but missing important security headers and no DNSSEC. There are no privacy or cookie policies present, which is a compliance gap especially under GDPR. No contact information or incident response details are provided, limiting transparency and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is functional and serves its business purpose but requires improvements in privacy compliance, security best practices, and contact transparency to increase trustworthiness and regulatory compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response information.

V

Výrobní a opravárenský podnik Dolní Bousov, spol. s.r.o.

vop-db.cz

53

Výrobní a opravárenský podnik Dolní Bousov, spol. s.r.o. is a small Czech manufacturing company specializing in the production of mobile flood barriers, barricade spikes, locksmith services, metalworking, machining, and repair and servicing of power generators. The website presents basic business information primarily in Czech, targeting local or regional customers in need of manufacturing and repair services. The site content is relevant but basic and somewhat outdated, with the last update noted in 2012. The company appears to have a stable domain registration dating back to 2004, consistent with its business history. Technically, the website is built with simple HTML, CSS, and minimal JavaScript, using Google Fonts for typography. There is no evidence of modern CMS platforms or frameworks, and no analytics or tracking tools are detected. The site lacks mobile optimization and accessibility features, and SEO practices are basic. Hosting is managed via the registrar REG-INTERNET-CZ with name servers at forpsi.net and forpsi.it. From a security perspective, the website lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring secure communications. No privacy, cookie, or terms of service policies are published, indicating poor privacy compliance. There is no visible incident response or vulnerability disclosure information, and no contact details such as emails or phone numbers are explicitly provided on the analyzed page. These factors reduce the overall security posture and trustworthiness of the site. Overall, the website scores moderately due to its basic content and business credibility but is penalized for lacking essential security and privacy features. Strategic improvements in HTTPS implementation, security headers, privacy policies, and contact information publication are recommended to enhance trust and compliance.

The domain tranquilveil.com currently serves a 404 Not Found error page with content describing the hosting service provided by Admiral, a company specializing in copyright access control and privacy compliance solutions for digital publishers. The site lacks active business content, contact information, or marketing materials, indicating it is either under development or inactive. The technical infrastructure is based on Google Cloud Platform with AWS DNS servers, and the domain is very recently registered (January 2024), consistent with its current inactive status. Security posture is reasonable with HTTPS enforced and no executable content hosted, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with a privacy statement present but no cookie consent mechanism. Overall, the site is not operational and scores low on content quality and business credibility.

J

Jonas Jongejan

halfdanj.dk

54

The website halfdanj.dk is a personal professional portfolio for Jonas Jongejan, a Creative Technologist and Fullstack Software Engineer with a history of working at Google Creative Lab and Danish Broadcasting Corporation. The site showcases a broad range of creative and technical projects, targeting technology enthusiasts and professionals in creative technology fields. The business model is primarily personal branding and portfolio presentation, with a niche market position focused on innovative technology and media projects. Technically, the website is built using modern web technologies including SvelteKit and JavaScript, with good mobile optimization and fast performance. It uses Google Analytics for visitor tracking but lacks cookie consent mechanisms and privacy policies, which impacts privacy compliance. The site is well-structured, visually professional, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain consistent with the professional history presented. However, the absence of privacy and cookie policies and security headers are notable compliance and security gaps. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security configurations to align with best practices and regulatory requirements.

The website robertforster.net serves as a straightforward promotional platform for the artist Robert Forster, featuring sections such as news, recordings, performances, writing, biography, videos, and links. The site highlights the album 'Strawberries' released in 2025, targeting fans and music enthusiasts. The business model is informational and promotional, with a niche market position focused on the artist's audience. The website is small in scale and has been online since 2006, consistent with the domain registration data. Technically, the site is built with basic HTML and CSS without advanced frameworks or CMS detected. Hosting is likely through the registrar 123-Reg Limited with DNS services from ui-dns providers. The site shows moderate performance and basic mobile optimization but lacks modern SEO and accessibility features. No analytics or marketing tools are present, indicating minimal digital maturity. From a security perspective, the site lacks HTTPS and security headers information is unavailable, suggesting potential gaps in security best practices. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, the security posture is basic with room for improvement. The overall risk is low given the non-sensitive nature of the content, but the site would benefit from implementing HTTPS, security headers, privacy policies, and contact information to enhance trust and compliance. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, improving security headers, and providing clear contact channels for incident response.

A

A - AGENT s.r.o.

freeradio.cz

48

Free Rádio 107 FM is a small local radio station based in Brno, Czech Republic, providing music hits, local news, and community-oriented content. The station operates on the 107 FM frequency and offers online streaming services. The website reflects a community-focused business model with event promotion, job announcements, and contests. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Analytics for tracking. The cookie consent mechanism is implemented via a third-party service, indicating attention to privacy compliance. However, the site lacks visible advanced security headers and detailed WHOIS data is unavailable, likely due to privacy protection. Overall, the website is functional but basic in design and technical sophistication.

I

ICODIA

as44297.net

54

Icodia is a French Internet Service Provider and network operator founded in 2000, operating primarily in France with its own datacenter and network infrastructure. The company targets ISPs and network operators for peering relationships and offers hosting and datacenter services. The website content focuses on their peering policy and company information, presenting a professional and consistent brand image. The technical infrastructure appears basic but functional, with no advanced frameworks or CMS detected. The website is accessible, with moderate performance and basic mobile optimization. Security posture is average, with no visible security headers or advanced protections, and no DNSSEC enabled. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and safe for general audiences.

S

SupportsCSS / Stephanie Eckles

supportscss.dev

59

SupportsCSS is a specialized open-source JavaScript library focused on detecting modern CSS feature support in browsers, enabling developers to apply progressive enhancement strategies effectively. The website serves as documentation, demo, and installation guide for the library, targeting front-end developers and web professionals. The site is authored by Stephanie Eckles, a recognized figure in the front-end development community, enhancing its credibility. Technically, the website is built using the Eleventy static site generator and employs modern web standards including asynchronous JavaScript loading and font preloading for performance. It integrates Plausible analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. From a security perspective, the site does not expose forms or sensitive data, reducing attack surface. However, it lacks explicit security headers and formal privacy or cookie policies, which are recommended for compliance and trust. No WAF or blocking mechanisms are detected, and no suspicious content is present. Overall, the security posture is adequate but could be improved with standard best practices. The overall risk is low given the nature of the site as an informational and open-source project resource. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing contact channels for security incidents to enhance trust and compliance.

Jiří Janoščín operates as an insurance broker offering tailored insurance services for vehicles, property, individuals, and entrepreneurs primarily in the Czech Republic. The website presents a professional and consistent brand image with clear service offerings and partnerships with reputable insurance companies. Technically, the website is built on basic HTML and CSS without advanced frameworks or CMS, providing moderate performance and basic mobile optimization. Security posture is average with no visible security headers or advanced protections, and WHOIS data is unavailable, indicating privacy protection which is common for small businesses. Overall, the site is functional and trustworthy but could improve transparency and security features.

The website moravy.eu serves as a basic informational portal focused on Moravia, a historical and cultural region in the Czech Republic. It provides links and minimal content related to Moravian history, symbols, and geography. The site is small in scale and targets a general audience interested in regional information. Technically, the site is simple, built with basic HTML and CSS, hosted by a reputable Czech registrar, but lacks modern web technologies and optimization. Security posture is minimal with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are present. The absence of contact information and security policies limits trust and compliance. Overall, the site is safe but basic, with significant room for improvement in security, privacy, and content richness.

The website www.orsr.sk serves as the official online business register for the Slovak Republic, operated under the Ministry of Justice. It provides authoritative access to company registration data, including search capabilities by company name, identification number, address, and other criteria. The site targets Slovak businesses, legal entities, and the general public seeking official business information. Its market position is that of a government-operated essential public service with no direct commercial competition. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. It shows moderate performance but poor mobile optimization and accessibility. There is no evidence of advanced analytics, tracking, or advertising technologies. The site lacks HTTPS confirmation in the provided data and does not display privacy or cookie policies, which are critical for compliance. From a security perspective, the site does not show security headers or incident response contacts, and no vulnerability disclosures or data protection officer information is present. The WHOIS data confirms the domain is legitimately registered to the Slovak Ministry of Justice, reinforcing trustworthiness. However, the absence of HTTPS and privacy policies are notable gaps. Overall, the site is a trustworthy government resource with basic technical implementation and limited security and privacy features. Strategic improvements in HTTPS deployment, privacy compliance, and mobile usability would enhance its security posture and user experience.

Burn IT, s.r.o. is a small Czech technology company specializing in web development, custom internet systems, Flash components, and internet marketing services. Their offerings include bespoke web presentations, internet system development, streaming applications, and packaged products such as Burn IT CMS and Burn IT E-shop. The website targets businesses seeking tailored online solutions and marketing support within the Czech Republic. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and references to Adobe Flash and Adobe Air platforms, indicating some legacy technology usage. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or privacy policies, and no visible contact or incident response information. The WHOIS data is missing, which raises concerns about domain registration transparency and reduces trust. Overall, the website is functional and provides relevant business information but requires improvements in security, privacy compliance, and transparency to enhance trust and professionalism.

O

Orest Bida

orestbida.com

71

Orest Bida is a freelance web designer and developer offering bespoke high-performance and secure web solutions. The website serves as a professional portfolio showcasing the individual's skills and projects, targeting clients seeking freelance web design and development services. The business operates independently with a small scale and has been active since 2018. Technically, the site is built using the Eleventy static site generator, hosted with Cloudflare DNS and registrar services, and optimized for mobile and SEO. The site employs HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and contact is provided solely via a contact form without direct email or phone numbers. Social media presence is established on GitHub, Codepen, and Twitter, supporting professional credibility. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve privacy compliance and security posture by adding relevant policies and headers.

The website at ww1.lesazahrada.com appears to be a parked or placeholder domain with minimal content primarily consisting of an iframe loading an external ad and tracking service. There is no identifiable business information, contact details, or privacy policies present. The WHOIS query returned no registration data, indicating the domain is either unregistered or inactive. Technically, the site lacks HTTPS and security headers, and the content quality is poor with heavy reliance on third-party ad domains. Security posture is weak with potential privacy and tracking concerns. Overall, the site does not represent a legitimate business presence and poses risks related to trust and security.

W

WebLinks - internetové odkazy filmy, inzerce, sběratelství, hobby

weblinks.cz

57

WebLinks.cz is a Czech language online catalog specializing in internet links related to films, classifieds, collecting, hobbies, and related topics. The website targets Czech users interested in these niche areas and monetizes primarily through Google AdSense advertising. The site structure includes multiple thematic subdomains focusing on specific interests such as model railways, women's inspiration, and job listings. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare DNS services but lacks modern CMS or frameworks. The design and user experience are basic with limited mobile optimization and accessibility features. Security posture is weak due to lack of HTTPS information, absence of security headers, and no visible privacy or cookie policies. WHOIS data is inconsistent, showing a domain creation date in the future, which undermines trust in domain legitimacy. Overall, the site is safe for general audiences but requires significant improvements in security, privacy compliance, and technical modernization.

B

BONEGA, spol. s r.o.

bonega.cz

51

BONEGA, spol. s r.o. is a Czech company specializing in the development, manufacturing, and distribution of high-quality electrical installation materials and water meters. The company emphasizes innovation with patented products and serves a B2B audience primarily in the Czech Republic and Central Europe. The website reflects a medium-sized enterprise with a history dating back to 2000, consistent with the domain registration data. The business model focuses on technical product development and distribution with additional services such as public customs warehousing. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking, hosted behind Cloudflare DNS. However, the site lacks modern CMS, mobile optimization, and accessibility features, indicating room for digital maturity improvement. Security posture is moderate; while Cloudflare DNS is used, no HTTPS enforcement or security headers are visible, and no privacy or cookie policies are present, which impacts compliance and trust. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization to improve user experience and regulatory adherence.

R

REGISMASTER Consult, s.r.o.

regismaster.cz

52

REGISMASTER Consult, s.r.o. operates a Czech-language website offering ready-made companies for sale, primarily limited liability companies (s.r.o.) and joint-stock companies. The business targets entrepreneurs seeking fast company formation and related corporate services such as registered office provision and nominee services. The company has been established since 2010, with domain registration consistent with this timeline. The website is professionally designed with clear navigation and multilingual support, though mobile optimization is basic. Technical infrastructure includes standard HTML, CSS, JavaScript, and Google Analytics for visitor tracking. Hosting is provided via websupport.cz as indicated by nameservers. Security posture is moderate; HTTPS is implied but no advanced security headers or privacy policies are present, representing compliance and security gaps. Contact options include a web form and Skype link but lack explicit phone numbers or emails. Overall, the website is trustworthy and legitimate but would benefit from enhanced privacy compliance and security hardening.

Š

Šafra & partneři s.r.o., advokátní kancelář

safra-advokati.cz

45

Šafra & partneři s.r.o. is a small, established law firm based in Prague, Czech Republic, providing a range of legal services including company formation, contract drafting, and legal representation. The firm has been operating since 2008 with a domain registered in 2007, indicating a stable market presence. The website is primarily in Czech with an option for Italian, targeting local and possibly Italian-speaking clients. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking. Hosting appears to be with Active24, a known provider. Security posture is moderate but lacks HTTPS enforcement and security headers, which are critical for protecting client data and trust. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trust and professionalism.

W

WANET s.r.o.

wanet.cz

55

WANET s.r.o. is a Czech Republic-based IT company specializing in external network management, website creation, SEO optimization, and smart home technology development. The company offers tailored IT services with a focus on individual client needs and provides 24/7 monitoring and security for managed networks. Their product portfolio includes smart IP weather stations and home automation systems, positioning them as a niche technology provider in their regional market. Technically, the website uses a basic but functional stack including jQuery and custom JavaScript, with a cookie consent mechanism implemented for compliance. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS domain registration data, reduces overall trust and compliance posture. Security practices include CAPTCHA on contact forms but lack visible security headers and confirmed HTTPS status. Overall, the website is accessible, professionally presented, and content-rich, but improvements in security and compliance documentation are recommended.

I

Internetové obchody - iObchody.com

iobchody.com

40

iObchody.com is an online Czech and Slovak e-commerce catalog platform listing over 5,300 internet shops across multiple categories such as electronics, home goods, fashion, and more. The site serves as a directory and referral service for online shoppers in the region. Technically, the website is basic, using legacy HTML and JavaScript with no modern CMS or frameworks detected. It lacks HTTPS encryption and security headers, which exposes users to potential risks. The site includes a cookie consent banner but lacks privacy and terms of service pages, indicating limited compliance with modern privacy standards. Security posture is weak due to missing SSL and security best practices. Overall, the site is functional but outdated and requires modernization and security improvements to enhance trust and user safety.

The Académie royale de langue et de littérature françaises de Belgique (ARLLFB) is a prestigious cultural and literary institution founded in 1920, dedicated to promoting French language and literature in Belgium. The website serves as an informational portal highlighting its history, members, literary prizes, publications, and events. It targets academics, writers, philologists, and the francophone literary community. The institution holds a respected position in the cultural sector with a small organizational size and a focus on non-commercial activities. Technically, the website is built using basic HTML, CSS, and JavaScript without modern CMS or frameworks. It lacks mobile optimization and uses an outdated character encoding (iso-8859-1). The site performance is moderate, with basic SEO and accessibility features. There is no evidence of advanced analytics or tracking services. From a security perspective, the site does not enforce HTTPS in the provided data, lacks security headers, and does not publish privacy or cookie policies, indicating compliance and security gaps. No incident response or vulnerability disclosure mechanisms are evident. The WHOIS data aligns well with the institution's identity, supporting legitimacy. Overall, the website is functional and informative but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

蓝蕾（厦门）软件科技有限公司是一家成立于2011年的中国厦门港资软件研发企业，专注于餐饮行业的电子菜单软件和产品展示工具的开发与销售。公司拥有自主研发的核心产品如“简单点点”和“简单秀秀”，并通过官方在线商城进行软件销售，定位为区域性专业软件开发商，客户信赖度较高。网站内容丰富，设计专业，导航清晰，适合目标企业客户和餐饮行业用户。

The website frantisekbartos.cz serves as a cultural and educational platform dedicated to the historical figure František Bartoš, a Czech pedagogue, linguist, and ethnographer. It is affiliated with reputable Czech cultural institutions, providing biographical data, bibliographies, galleries, and related literature. The site targets researchers, historians, and the general public interested in Moravian heritage. The business model is non-commercial, focusing on heritage dissemination. Technically, the website is built with basic HTML and CSS, hosted on websupport.cz, and uses Google Analytics for visitor tracking. The site lacks modern CMS or frameworks and shows limited mobile optimization and accessibility features. SEO is basic but includes structured metadata using Dublin Core standards. From a security standpoint, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which impacts compliance with GDPR and other regulations. No forms or contact information are provided, limiting user interaction and incident response capabilities. The domain registration is consistent and legitimate, with a long history supporting trustworthiness. Overall, the website is a modest but legitimate cultural resource with room for improvement in privacy compliance, security hardening, and technical modernization to enhance user experience and trust.

SPORTOVNÍ ZPRÁVY is a Czech sports news aggregation website focusing on football, hockey, tennis, and auto-moto news. It aggregates and links to external sports articles from various reputable Czech sports news sources. The website has been operational since 2007, indicating a stable presence in the Czech sports media niche. The business model appears to be content aggregation supported by advertising revenue through embedded iframes and tracking pixels. Technically, the website uses basic HTML and CSS with iframes for advertising and external content. The site lacks modern web technologies, mobile optimization, and accessibility features. Notably, the website does not use HTTPS, which is a significant security and trust concern. The absence of privacy, cookie, and terms of service policies further indicates limited compliance with modern web standards and regulations. From a security perspective, the site shows minimal security best practices. There are no security headers, no visible incident response or vulnerability disclosure policies, and no secure form handling. The use of HTTP for embedded content increases the risk of mixed content issues. The WHOIS data is consistent and supports the legitimacy of the domain, but the lack of HTTPS and privacy policies reduces overall trust. Overall, the website is functional for basic sports news aggregation but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards and user expectations.

The website perf1.com is a parked domain page managed via Nameshield, a company specializing in brand protection, cybersecurity, and domain name management. The site itself contains minimal content, primarily linking to Nameshield's main services and offering a domain availability search form. There is no active business content or product offering on this domain. The WHOIS data query returned no match, indicating the domain may be unregistered, privacy protected, or in a transitional state, which limits the ability to verify registrant details or domain age. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The page is simple and moderately optimized for mobile but lacks modern SEO and accessibility features. No HTTPS or security headers were detected, which is a significant security shortfall. No analytics or tracking scripts are present, indicating minimal data collection or user tracking. From a security perspective, the absence of HTTPS and security policies, combined with no contact or incident response information, suggests a low security posture. The domain's parked status and lack of WHOIS data reduce trust and legitimacy. No vulnerabilities or malicious indicators were found, but the site does not follow best practices for security or privacy compliance. Overall, the domain appears to be a placeholder with no active business operations. Strategic recommendations include securing the domain with HTTPS, adding privacy and cookie policies, providing contact and security incident response information, and improving technical SEO and accessibility to enhance trust and compliance.

M

maxdorf

slovniky.cz

52

Slovníky.cz is a Czech online dictionary and lexicon platform operated by the company Maxdorf, established in 1998. The website offers specialized lexicons, including medical dictionaries, and links to related services such as a bookstore and an encyclopedic club. The business targets general users seeking reference materials in Czech language, operating a niche content service with a small-scale business model. Technically, the site is built with basic HTML, CSS, and JavaScript, incorporating Google Analytics for visitor tracking. The infrastructure is hosted by REG-ZONER, a Czech hosting provider, and the domain is long-established, supporting business credibility. Security posture is moderate with HTTPS enabled but lacks modern security headers and privacy compliance mechanisms. No privacy or cookie policies are present, and no contact information is provided, which limits trust and compliance. Overall, the site is functional but could benefit from modernization and enhanced security and privacy practices.

S

SEKK

sekk.cz

54

SEKK.cz is a website dedicated to providing external quality assessment and proficiency testing services primarily for clinical laboratories in the Czech Republic. The business focuses on various laboratory disciplines including biochemistry, hematology, immunology, transfusiology, allergology, and pathology. Established since 1997, the domain age supports the legitimacy and longstanding presence of the organization in the healthcare quality assessment sector. The website content is bilingual (Czech and English) and targets clinical laboratories and healthcare professionals seeking quality assurance services. Technically, the website uses legacy HTML framesets and PHP, indicating an outdated infrastructure with limited modern web technologies or mobile optimization. Security posture is weak due to lack of HTTPS, security headers, and absence of privacy or cookie policies, which also impacts GDPR compliance. No contact information or forms are present in the analyzed content, limiting user engagement and trust signals. Overall, the site is functional but requires modernization and improved security and privacy practices to meet current standards.

AKCmed is a specialized company focused on the design and manufacture of modular operating rooms for healthcare facilities. Their business model centers on providing high-quality, factory-made modular components that enable faster construction and adaptability to modern medical technologies. The website content is professional and targeted at medical professionals and hospital planners, positioning AKCmed as a niche player in the healthcare construction sector. Technically, the website uses legacy JavaScript libraries and basic SEO and accessibility features, with moderate performance and mobile optimization. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy and cookie policies. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain registration transparency.

The website delena-strava.cz is a small-scale informational platform focused on the Czech audience interested in the food combining diet method. It provides extensive textual content and a large recipe database, supplemented by affiliate links to sports nutrition and dietary supplement e-shops. The business model relies on content-driven affiliate marketing rather than direct sales or services. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in a basic user experience with poor mobile optimization and accessibility. Security posture is weak due to the absence of HTTPS and security headers, and there are no privacy or cookie policies, indicating compliance gaps with GDPR. The domain is legitimate and consistent with the business claims, registered since 2007 with a Czech registrar. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.

The website strecink.cz is a Czech language informational platform dedicated to stretching exercises, providing detailed guidance on muscle stretching techniques for both sports and general health. It targets a general audience interested in fitness and wellness, offering categorized exercises and links to related fitness and nutrition resources. The site has been operational since 2006, indicating a stable presence in its niche. Technically, the site is built on an older CMS (phpRS) with legacy encoding and lacks modern web standards such as HTTPS and mobile responsiveness. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. No forms or sensitive data collection mechanisms are present, reducing immediate risk but also limiting interactivity. Overall, the site serves as a basic informational resource with moderate trustworthiness but requires significant improvements in security and privacy compliance to meet modern standards.

ACTIVE 24, s.r.o. operates as a Czech-based hosting provider offering virtual server services, domain management, email hosting, and webmail solutions. The website serves as an informational portal for customers to configure FTP access, email accounts, and manage hosting services. The company has been established since 2012, indicating a stable presence in the hosting market. The content is primarily in Czech and targets customers seeking virtual server hosting and related services. Technically, the website is simple, built with basic HTML, CSS, and JavaScript, without advanced frameworks or CMS detected. Hosting is provided by ACTIVE 24 itself, consistent with the registrar information. Security posture is limited; no HTTPS or security headers were detected in the provided data, and no privacy or cookie policies are present, which may impact compliance and trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but basic, with room for technical and security improvements.

M

Michal Bubílek

bubileg.cz

8

The website www.bubileg.cz serves as a personal professional portfolio for Michal Bubílek, highlighting his curriculum vitae, work experience, projects, education, and favored technologies. It targets potential employers, collaborators, and professional contacts interested in his skills and services such as teaching, programming, graphic design, photography, and web development. The site is modest in scale, representing an individual professional rather than a corporate entity. Technically, the website employs a custom CMS and uses a technology stack including HTML, CSS (SASS), JavaScript, Python, PHP, and other web technologies. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, no modern frameworks or third-party CMS platforms are detected. From a security perspective, the site lacks visible security headers and there is no evidence of HTTPS status from the provided data. Privacy and cookie policies are absent, and no incident response or security contact information is provided. The WHOIS data is missing, which reduces trustworthiness and raises questions about domain registration transparency. Overall, the website is functional and professional as a personal portfolio but requires improvements in security posture, privacy compliance, and domain transparency to enhance trust and reduce risk.

C

Clyde s.r.o.

clyde.cz

57

Clyde s.r.o. is a Czech Republic-based small technology company specializing in custom website creation, SEO optimization, and internet marketing services. Established in 2013, the company positions itself as a local expert in building effective web presences for businesses seeking to increase online sales and visibility. Their offerings include web design, programming, domain registration, hosting, and campaign management. The website is professionally designed with clear navigation and relevant content targeting Czech-speaking business clients. Technically, the site uses basic web technologies with Google Analytics integration but lacks modern frameworks or CMS identification. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Contact information is limited to a single company email address without phone or physical address details. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and business references.

The website ediweb.eu/edi/ serves as an Electronic Data Interchange (EDI) platform, primarily targeting business users who require secure document exchange services. The site features a login form for authenticated access and a news iframe for updates, indicating a B2B service model. The business appears to be small-scale with a focus on technology services related to EDI, though detailed company information and market positioning are not publicly disclosed. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. No analytics or advertising technologies are detected, suggesting a minimalistic approach to tracking and marketing. Security posture shows some basic best practices such as password input masking and hidden form fields, but lacks visible security headers and explicit HTTPS confirmation in the provided data. No privacy, cookie, or terms of service policies are found, indicating compliance gaps. No contact or incident response information is publicly available, which may impact trust and user support. Overall, the site is accessible without WAF or blocking mechanisms and contains safe, business-oriented content. However, improvements in security, privacy compliance, and transparency are recommended to enhance trust and operational security.

Virgin Media operates a dedicated abuse reporting portal at netreport.virginmedia.com, providing a structured form for reporting internet security issues related to their IP addresses and accounts. The site is clearly branded and targets users needing to report abuse, phishing, or security threats. The business is a major UK telecommunications provider with a large customer base. The portal supports reporting various abuse types and provides guidance on child abuse image reporting via the Internet Watch Foundation. The site content is professional but basic, focusing on functionality over design. Technically, the site uses standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The performance and mobile optimization are basic, with no visible analytics or tracking scripts. Security posture is moderate but could be improved; no HTTPS enforcement or security headers were detected in the provided content, and no privacy or cookie policies are linked. The form includes client-side validation and warnings about phishing and abuse reporting. Security-wise, the portal facilitates incident response by providing a contact email for phishing reports and options to report various abuse types. However, the absence of a published security policy or vulnerability disclosure document limits transparency. WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the branding and content align with Virgin Media's official services, supporting legitimacy. Overall, the site is functional for its purpose but would benefit from enhanced security and privacy compliance measures.