Security Directory

S. C. FINCLUB Transylvania S.r. l. operates as a Romanian branch of a Czech parent company with over 30 years of experience in the natural supplements and cosmetics market. The company offers a range of natural dietary supplements, 100% natural cosmetics, and biodegradable cleaning products, targeting health-conscious consumers and business partners interested in entrepreneurship opportunities. The website is professionally designed, well-structured, and provides comprehensive information about products, company history, and partnership options. It also integrates social media and analytics tools to enhance user engagement and marketing effectiveness. Technically, the website is built on the Shopsys CMS platform, utilizing modern JavaScript libraries, Google Tag Manager, Google Analytics, Facebook SDK, and reCAPTCHA for security and user interaction. The site is mobile-optimized and demonstrates good SEO and accessibility practices. HTTPS is enforced, and no critical security vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response documentation, which could be improved. From a security perspective, the site benefits from HTTPS encryption and uses Google reCAPTCHA to protect forms. The absence of HTTP security headers is a minor gap. The WHOIS data is privacy protected as per ROTLD policy, which is typical for Romanian domains, and no suspicious patterns were found. Privacy and cookie policies are present and GDPR compliant, supporting user data protection and transparency. Overall, the website presents a low-risk profile with strong business credibility and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security posture and compliance.

FINCLUB POLAND Sp. z o. o. is a medium-sized retail and distribution company specializing in natural dietary supplements, cosmetics, and eco-friendly cleaning products. Operating since 2004 in Poland as a subsidiary of a Czech company with over 30 years of market presence, it serves Central European markets through multiple regional domains. The company emphasizes natural, high-quality products sourced from Finland and partners with a leading Finnish manufacturer. The website reflects a professional and consistent brand image targeting consumers interested in health, beauty, and business partnership opportunities. Technically, the website is built on the Shopsys platform, utilizing modern JavaScript libraries, Google Tag Manager, Google Analytics, Facebook SDK, and Google reCAPTCHA for security and marketing. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and performance could be made. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is solid with HTTPS enforced and anti-bot measures in place, but lacks explicit security headers and documented incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust slightly, though the business legitimacy is supported by detailed company information and external social media presence. Overall, the website presents a trustworthy and professional front with moderate technical sophistication and good privacy compliance. Strategic improvements in security policies and WHOIS transparency would enhance trust and resilience.

FINCLUB Hungary Kft. is a well-established company specializing in natural dietary supplements, cosmetics, and cleaning products, operating primarily in Hungary with a strong regional presence supported by sister sites across Central and Eastern Europe. The company benefits from a 30+ year history through its Czech parent company and holds certifications such as the AAA rating, supported by a medical advisory board, which enhances its market credibility. The website reflects a professional e-commerce platform built on the Shopsys framework, integrating modern tracking and marketing tools like Google Analytics and Facebook SDK, and implements GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and reCAPTCHA protections, though additional security headers and formal security policies could further strengthen defenses. Overall, the site is user-friendly, mobile-optimized, and trustworthy, targeting a general audience interested in health and beauty products.

FINCLUB Group d.o.o. is a medium-sized retail company specializing in natural dietary supplements, cosmetics, and biodegradable cleaning products, primarily sourced from Finland and distributed in Central Europe. The company has over 30 years of experience in the industry and operates an e-commerce platform targeting Croatian and regional customers. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook SDK. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack a formal published security policy or incident response information. Privacy compliance is basic with cookie policy and terms of service present but no explicit GDPR statements. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security transparency and privacy compliance.

FINCLUB POLAND Sp. z o. o. operates a professional e-commerce website specializing in natural food supplements and cosmetics sourced from Finland. The company is part of a larger Central European network with over 30 years of market presence, positioning itself as a leading distributor and partner of the Finnish manufacturer Hankintatukku Oy. The website targets consumers interested in health and beauty products, offering an online shop, interactive product advisor, and business partnership opportunities. The site is well-branded, consistent, and provides clear contact information, enhancing trustworthiness. Technically, the website uses a modern e-commerce platform (Shopsys) with integration of popular analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA for form security. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating GDPR compliance awareness. Security posture is solid with HTTPS and reCAPTCHA, but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which slightly reduces transparency but is common for EU domains. Overall, the website presents a low risk profile with good business credibility. Recommendations include adding security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further enhance security and trust.

FINCLUB plus, a.s. is a Czech-based company specializing in natural health supplements, cosmetics, and biodegradable cleaning products with over 30 years of market presence. The company acts as a strategic partner to the Finnish manufacturer Hankintatukku Oy, known for its AAA rating and global leadership in natural parapharmaceutical products. The business model focuses on direct sales and e-commerce, targeting both end consumers and business partners seeking entrepreneurial opportunities. The website is professionally designed, multilingual, and provides comprehensive product and company information, supporting a strong market position in Central Europe. Technically, the website leverages modern technologies including Shopsys CMS, Google Tag Manager, Google Analytics, Facebook SDK, and reCAPTCHA for security and marketing. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers are recommended. The presence of GDPR-compliant privacy and cookie policies indicates a mature approach to data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data reduces trust slightly but does not detract significantly from the overall legitimacy given the detailed business information and external references. Overall, FINCLUB plus, a.s. presents a credible, professional online presence with a strong business foundation and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

T

Trade Media International

controlengcesko.com

49

Control Engineering Česko is a specialized industrial media portal operated by Trade Media International, focusing on digitalization, automation, and robotization in manufacturing industries. The website serves professionals and companies interested in the latest industrial technologies and trends, offering news, digital magazine issues, conferences, and advertising opportunities. It holds a niche position in the Czech Republic's industrial media landscape with consistent branding and professional content quality. Technically, the website is built on Joomla CMS and leverages modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices. Cookie consent mechanisms are implemented, reflecting basic GDPR compliance. However, explicit privacy and terms of service pages are not found in the provided content. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for its business purpose but would benefit from improved transparency in domain registration, explicit privacy and security policies, and enhanced security headers to strengthen its security posture and compliance.

T

TRADEMEDIA INTERNATIONAL

udrzbapodniku.cz

46

The website 'Řízení a údržba průmyslového podniku' is a Czech industrial media portal operated by TRADEMEDIA INTERNATIONAL, focusing on digitalization, automation, and maintenance in manufacturing industries. It serves a professional audience interested in industrial innovations and provides news, articles, podcasts, and conference information. The business model centers on media publishing and advertising within a niche industrial sector, supported by a parent company with related media properties. Technically, the site is built on Joomla CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices. Cookie consent management is implemented with granular user controls, reflecting a moderate level of privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy or terms of service, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site presents a solid industrial media presence with good content quality and technical implementation but would benefit from enhanced security practices, clearer privacy documentation, and domain registration transparency to improve trust and compliance.

A

Atrakcje, turystyka w Czechach | tlumaczenia-czeskie.pl

tlumaczenia-czeskie.pl

51

The website tlumaczenia-czeskie.pl is a Polish language content portal dedicated to tourism, attractions, and cultural information about the Czech Republic. It targets Polish-speaking tourists and individuals interested in Czech travel. The site operates on WordPress CMS with Yoast SEO plugin, leveraging common web technologies such as jQuery and Slick Carousel for UI components. The content is well structured with good SEO metadata and structured data, indicating a moderate level of digital maturity. However, the site lacks privacy and cookie policies, security headers, and direct contact information such as emails or phone numbers, which limits its privacy compliance and security posture. HTTPS is enabled, ensuring encrypted communication. Overall, the site is a small-scale, niche informational portal with a consistent brand presence and moderate trustworthiness.

O

Online learning s.r.o.

onlinejazyky.cz

62

OnlineJazyky.cz is an established Czech online language education platform operated by Online learning s.r.o. The company offers interactive language courses in six major languages targeting individuals, companies, and schools. Their business model revolves around e-commerce sales of language courses, supplemented by live online lessons and conversational clubs. The website demonstrates a good level of digital maturity with modern JavaScript libraries, tracking tools, and responsive design. However, the absence of WHOIS data and explicit security headers slightly detracts from their security posture. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the platform presents a trustworthy and professional online presence with room for security enhancements.

P

PRESS-PYGMALION

press-pygmalion.cz

55

PRESS-PYGMALION is a Czech informational website focused on providing reviews and information about online casinos targeted at Czech players. The site operates as an affiliate or informational platform promoting legal and licensed Czech online casinos. The business is relatively new, founded in 2022, and targets a niche market within the Czech Republic. The website uses WordPress CMS and is hosted behind Cloudflare, ensuring good performance and security basics. The site includes privacy and cookie policies, though these are basic in scope, and lacks explicit terms of service or security policies. Security posture is adequate with HTTPS enforced but could be improved with additional security headers and incident response documentation. Overall, the site is professional, well-structured, and suitable for its target audience, with moderate trustworthiness and compliance levels.

P

Pygmalion s.r.o.

prekladypygmalion.cz

47

Překlady Pygmalion is a Czech-based translation center with over 25 years of experience, offering translation, interpreting, and proofreading services across multiple language combinations. The company operates from Český Těšín with branches in Třinec and Ostrava, targeting individuals and businesses requiring professional language services. The website reflects a well-established local business with a clear service offering and multiple partner sites enhancing its market presence. Technically, the website employs standard modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring moderate performance and good mobile optimization. However, the absence of WHOIS data limits domain trust verification, and the lack of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. Overall, the site is professional and functional but could benefit from enhanced security practices and clearer privacy controls.

FleetPartner is a Czech Republic-based fleet management service provider operating under the Continental AG BestDrive brand umbrella. The website serves primarily as a login portal for users, with basic contact information and corporate branding. The business targets fleet operators and automotive service customers, positioning itself as a regional player in transportation services. The site content is minimal but professional, focusing on user access and contact facilitation. Technically, the website employs a modern JavaScript stack including jQuery, FontAwesome, and Chart.js, hosted on CSC DNS infrastructure. While the site is functional and moderately optimized for performance, it lacks advanced SEO, accessibility, and mobile optimization features. No CMS or complex frameworks are detected, indicating a custom-built solution. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers such as CSP or HSTS. There is no explicit privacy or cookie consent mechanism, and no public security or incident response policies are found. The login form is basic but uses standard password input types. Overall, the security posture is moderate but could be improved with standard best practices. The domain registration is consistent with the business profile, created in 2015 and registered through a reputable registrar. No suspicious patterns or privacy protections are used, supporting legitimacy. Contact details are clearly provided, but the absence of detailed privacy and cookie policies reduces compliance confidence. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and operational security.

M

Měšec.cz

mesec.cz

51

Měšec.cz is a Czech-language online media platform specializing in personal finance news, product analyses, financial calculators, and bank comparisons. It serves as a financial guide for Czech-speaking individuals seeking practical financial advice and current news. The website is well-established in the Czech market, targeting consumers interested in managing their personal finances effectively. Technically, the site employs a modern tech stack including Google Tag Manager, Google Adsense, Gemius analytics, and advanced advertising technologies such as cpex and R2B2 header bidding. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good digital maturity level. Security posture is strong with no evident vulnerabilities, though the absence of explicit incident response contacts and security.txt files suggests room for improvement in transparency. Privacy compliance is well addressed with comprehensive cookie and privacy policies, including GDPR adherence. Overall, the site presents a professional and trustworthy front, though the lack of WHOIS data and explicit contact details slightly reduce the business credibility score.

E

Ekoterm

ekoterm.pl

72

Ekoterm.pl is a Polish company specializing in heating fuels and heating oils, operating since 2000. The website presents a professional and well-structured platform targeting residential and commercial customers seeking heating solutions. The company offers product sales, heating solutions, and distributor opportunities, positioning itself as a trusted player in the energy sector in Poland. Technically, the website is built on WordPress with common plugins and modern frontend technologies such as jQuery, Bootstrap, and Google Tag Manager. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations. Security posture is moderate with some best practices like CSRF protection cookies and cookie consent, but lacks DNSSEC and explicit security headers. No privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Contact information including phone numbers and a company email are clearly displayed, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

Z

ZoneEdit

zoneedit.com

69

ZoneEdit is a technology company specializing in DNS hosting, dynamic DNS, domain management, and email forwarding services. Established since 2000, it serves a broad audience including individuals and businesses seeking reliable DNS and domain solutions. The company also offers web hosting through its TheWeb.Zone service. The website is professionally designed, well-structured, and provides clear information about its services, testimonials, and legal policies. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, which impacts overall trustworthiness. Technically, the website is built on WordPress using a variety of plugins such as Gravity Forms, Ultimate Member, and Thrive Headline Optimizer. It employs modern web technologies including jQuery and Google Analytics for tracking. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and cookie consent mechanisms. From a security perspective, the site shows good practices such as login alert notifications and use of security plugins, but could improve by publishing security policies and incident response information. The lack of WHOIS data is a notable concern that should be addressed to enhance domain legitimacy and trust. Overall, ZoneEdit presents as a reliable DNS and domain service provider with a mature digital presence but should improve transparency around domain registration and privacy compliance to strengthen trust and security posture.

M

MJ-KrasaZdravi.cz

mj-krasazdravi.cz

56

MJ-KrasaZdravi.cz is a Czech-based e-commerce retailer specializing in cosmetics, natural products, vitamins, teas, and healthy nutrition. The website targets a general audience interested in health and beauty products, offering a broad catalog with clear navigation and localized content in Czech language. The business model is retail-focused, leveraging the Shoptet e-commerce platform with integrations for marketing, analytics, and customer engagement. The site demonstrates a good level of digital maturity with modern technologies and responsive design. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain is a notable gap that impacts trustworthiness but does not detract from the professional presentation and operational status of the website. Strategic recommendations include publishing security policies, enhancing accessibility, and verifying domain registration details to improve overall credibility and compliance.

M

Modern Bakery LLC

modernbakery.com

53

Modern Bakery LLC is a leading bakery in the UAE, established in 1975, with a large workforce and extensive product range including breads, pastries, and healthy bread options. The company serves a broad market including fast food industry clients and retail customers across the UAE, GCC, and Levant. The website reflects a mature business with consistent branding and a professional online presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but could improve in privacy and security transparency.

N

Nakladatelství Paseka, s.r.o.

paseka.cz

49

Nakladatelství Paseka, s.r.o. is a Czech publishing house specializing in a diverse range of literary works including Czech and translated fiction, nonfiction, comics, and children's books. The company operates an e-commerce platform for direct book sales and maintains an active online presence with regular updates on new releases and promotions. The website is professionally designed, mobile-optimized, and incorporates modern web technologies such as WordPress and WooCommerce, supported by analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, reflecting a good security posture. However, the absence of WHOIS registration data reduces transparency and slightly impacts trustworthiness. Overall, the website presents a credible and professional digital front for the publishing business.

N

Nakladatelství Práh

prah.cz

54

Nakladatelství Práh is a traditional family-owned publishing house based in the Czech Republic, specializing in a wide range of literature including fiction, non-fiction, children's books, and specialized categories. The website serves as an e-commerce platform offering direct sales of their published books. The company positions itself as an established and trusted brand with over thirty years of tradition, targeting general readers interested in Czech and world literature. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Facebook SDK, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security and incident response policies are not publicly available. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though GDPR compliance could be enhanced with more detailed disclosures. Overall, the website is professional, trustworthy, and well-structured, supporting the business's retail operations effectively.

N

Nakladatelství Petr Prchal

nakladatelstviprchal.cz

43

Nakladatelství Petr Prchal is a well-established Czech publishing house specializing in educational books for children, particularly focusing on Czech history. Operating since 2003, it offers a variety of products including books, board games, and audiovisual materials, with a notable collaboration with Czech Television. The website is built on WordPress with WooCommerce, featuring a professional design and good user experience. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, serving a niche educational market effectively.

P

Pygmalion, s.r.o.

pygmalion.cz

46

Pygmalion, s.r.o. operates as a regional language school in the Czech Republic, offering a broad range of language courses including English, German, Spanish, French, Italian, Russian, Polish, and Czech for foreigners. The company also provides translation and interpretation services through partner sites. The website is well-structured, professionally designed, and targets a diverse audience including companies, adults, children, and teenagers. The business has a solid market position with certifications from Cambridge Center and Cambridge ESOL, indicating a reputable educational offering. Technically, the website employs common web technologies such as jQuery, Modernizr, and Google Analytics, with asynchronous script loading to optimize performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No WHOIS data was retrievable, which impacts domain trust assessment. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but would benefit from implementing security headers, privacy and cookie policies, and a security.txt file for vulnerability disclosure. The use of Google Ads remarketing and analytics indicates moderate user tracking, but privacy compliance is limited. Overall, the site is safe, professional, and trustworthy but could improve in privacy and security transparency. The overall risk is moderate with recommendations to enhance security headers, privacy compliance, and domain registration transparency to strengthen trust and compliance posture.

S

Svět knihy, s.r.o.

svetknihy.cz

49

Svět knihy, s.r.o. is a well-established Czech company specializing in organizing international book fairs and literary festivals, notably Svět knihy Praha and Svět knihy Plzeň. The company operates under the Association of Czech Booksellers and Publishers and also publishes the industry magazine Knižní novinky. The website targets book industry professionals, exhibitors, visitors, and literary enthusiasts, providing event information, exhibitor lists, and news updates. The business model focuses on event management, publishing, and industry networking platforms, positioning itself as a key player in the Czech literary and publishing market.

B

Business Media CZ

bmczech.cz

50

Business Media CZ is a Czech media and publishing website focused on lifestyle and interior design content, targeting Czech-speaking audiences interested in home decoration and trends. The site is built on WordPress using the Brooklyn theme and incorporates modern JavaScript libraries and Google services such as reCAPTCHA and Analytics. While the website is technically sound with HTTPS enabled and cookie consent implemented, it lacks publicly accessible WHOIS data, privacy policy, terms of service, and explicit contact information, which impacts its transparency and compliance posture. Security headers are not detected, and no vulnerability disclosure or incident response information is provided, indicating room for improvement in security maturity. Overall, the website presents a moderate risk profile with a need for enhanced privacy and security disclosures to build greater trust.

M

MINDOK

mindok.cz

71

MINDOK is a Czech-based retailer specializing in modern social and family board games, operating an e-commerce platform built on WordPress and WooCommerce with the Divi theme. The website targets board game enthusiasts and families in the Czech Republic, offering a professional and well-structured online shopping experience. The technical infrastructure includes modern web technologies, CDN hosting via Amazon Cloudfront, and integration with Google Tag Manager and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and standard security headers present, although the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the website is legitimate and professionally maintained but would benefit from enhanced privacy compliance and clearer contact information for security and incident response.

FINCLUB plus, a.s. is a Czech company with over 30 years of experience specializing in natural dietary supplements sourced from Finland, natural cosmetics, and biodegradable cleaning products. It holds a strong market position as the largest partner and distributor of the Finnish manufacturer Hankintatukku Oy in Central Europe. The company supports both end customers and business partners through product sales and entrepreneurial opportunities. Technically, the website is built on the Shopsys platform, leveraging modern web technologies including Google Analytics, Facebook SDK, and reCAPTCHA for security. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and some security best practices, though additional security headers and published security policies would enhance trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy and professional, though the lack of WHOIS data introduces some uncertainty in domain registration legitimacy.

Moravskoslezský kraj is the official regional government entity for the Moravian-Silesian region in the Czech Republic. The website serves as a comprehensive portal providing information and services related to public administration, social services, healthcare, education, transportation, environment, culture, and economic development. It targets residents, businesses, and public institutions within the region, offering access to various online services and official communications. The site is well-branded and consistent with government standards, featuring multiple ISO certifications and an international rating indicating strong organizational credibility. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive elements. It uses Matomo analytics for user tracking, indicating a preference for privacy-respecting analytics solutions. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the website enforces HTTPS and displays certifications for quality, environmental, and information security management systems (ISO 9001, ISO 27001, ISO 50001, EMAS). No critical vulnerabilities or exposed sensitive data were detected. The absence of a public WHOIS record is noted but likely due to registry policies or privacy protection, not indicating malicious intent. Overall, the site demonstrates a mature security posture but could benefit from enhanced transparency in incident response and vulnerability disclosure. The overall risk assessment is low, with the website appearing trustworthy and professionally maintained. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy to further strengthen trust and security culture.

F

FINIDR, s.r.o.

finidr.cz

58

FINIDR, s.r.o. is a leading book printing company in Central Europe, specializing in hardcover and softcover book manufacturing with a strong emphasis on quality, client service, and sustainability. The company serves a broad international client base with services including pre-press, printing, bookbinding, finishing, and expedition. Their website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though some security headers could be improved. The absence of WHOIS data is a minor concern but is offset by strong business indicators and certifications. Overall, the company demonstrates professionalism, compliance, and a commitment to environmental responsibility.

P

Pražské jaro

festival.cz

58

Pražské jaro is a well-established international classical music festival based in the Czech Republic, with a history dating back to 1997. The website promotes upcoming events including the 80th edition of the festival, a piano festival, and a music competition. The organization operates primarily as a non-profit cultural entity, supported by government and corporate sponsors, and targets classical music enthusiasts and professionals. Technically, the website is built on WordPress with modern JavaScript libraries and is hosted behind Cloudflare DNS, ensuring good performance and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, reflecting the festival's reputable market position.

G

GASK

gask.cz

58

GASK (Galerie Středočeského kraje) is a regional art gallery based in the Central Bohemian Region of the Czech Republic, established in 2009. It offers art exhibitions, educational programs, and cultural events, targeting the general public interested in arts and culture. The website serves as an information portal and ticket sales platform, positioning GASK as a key cultural institution in its region. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and CDNs for performance and scalability. It supports multilingual content via WPML and integrates various marketing and analytics tools such as Google Analytics, Adform, and Ecomail. Security-wise, the site enforces HTTPS, uses security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

A

Artantiques media, s. r. o.

artplus.cz

58

Artplus.cz is a specialized Czech media platform focused on providing comprehensive data and analysis on the Czech art auction market. Established in 2008, it offers the largest database of auction results, detailed market analytics, auction calendars, and news reports. The platform targets art collectors, investors, and market analysts, operating primarily on a subscription business model supported by advertising and publishing partnerships. Technically, the website uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and is hosted behind Cloudflare DNS services, ensuring good performance and security. Privacy and cookie policies are implemented with GDPR compliance in mind, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a good security posture with HTTPS enforcement and standard best practices, but could improve by adding explicit security headers and formal security documentation. The domain registration is consistent with the business profile, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen compliance and user trust.

K

Kodl Contemporary

kodlcontemporary.com

64

Kodl Contemporary is a professional contemporary art gallery based in Prague, Czech Republic, offering a range of exhibitions, projects, and artist showcases. The website reflects a well-established gallery with a clear focus on contemporary art and cultural events, targeting art enthusiasts and collectors. The business model centers on gallery exhibitions, artist representation, and cultural programming. Technically, the website is built on WordPress with modern libraries such as Bootstrap, Swiper.js, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive privacy and cookie policies in place. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though the absence of security headers and missing WHOIS data are notable concerns. Overall, the website presents a trustworthy and professional front, but domain registration inconsistencies warrant further verification.

Mobiliti is a Hungarian company specializing in electric and gas mobility services, positioning itself as the market leader in Hungary. The company offers a range of services including e-mobility charging, gas mobility (CNG), and additional services such as electronic vignettes and parking solutions. The website reflects a professional and consistent brand image aligned with the MVM Group, a major energy sector player in Hungary. The target audience includes Hungarian consumers and businesses interested in sustainable mobility solutions. The business model focuses on providing infrastructure and services for electric and gas-powered vehicles, supporting Hungary's transition to cleaner transportation.

H

Hotel Panoráma Balatongyörök

hotelpanorama.hu

38

Hotel Panoráma Balatongyörök is a well-established hospitality business located in Hungary, offering accommodation, wellness, dining, and event services. The website reflects a mature digital presence with multiple awards and customer testimonials enhancing its market credibility. The business targets leisure travelers including families, seniors, and corporate clients, positioning itself as a trusted regional hotel with direct booking advantages. Technically, the site is built on WordPress using modern plugins and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved and formal security policies published. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site demonstrates a professional and trustworthy online presence suitable for its industry and audience.

Flogiston.hu is a Hungarian company specializing in the manufacturing, servicing, and wholesale distribution of gas consumption meters and related equipment. Established in 2000, it holds a niche position in the Hungarian energy sector, partnering with recognized brands such as Itron and Elster. The website targets industrial and residential customers requiring gas metering solutions and related services. Technically, the site uses a custom CMS with jQuery and common plugins like Nivo Slider and Lightbox, offering moderate performance and basic mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, though a cookie consent mechanism is implemented. Privacy compliance is basic, with a privacy policy present but lacking comprehensive GDPR indicators. Contact information is notably absent from the homepage, reducing user trust and accessibility. Overall, the site is functional but would benefit from enhanced security, privacy, and contact transparency.

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

M

MVM Lumen Kft.

mvmlumen.hu

60

MVM Lumen Kft. is a Hungarian company specializing in public lighting and lighting services, operating as part of the MVM Group. The company focuses on providing public lighting maintenance, lighting technology modernization, and indoor lighting wholesale services primarily to municipalities and public sector clients. The website reflects a professional corporate presence with consistent branding and clear navigation. Technically, the site uses JavaServer Faces with PrimeFaces and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and accessible privacy policy. Overall, the website is trustworthy and aligns well with the company's business profile.

M

MVM Watt Eta Kft.

mvmwatteta.hu

40

MVM Watt Eta Kft. is a Hungarian electrical engineering company specializing in the design, construction, and maintenance of low and medium voltage electrical networks, weak current networks, and solar power plants. As a subsidiary of the national energy group NKM Nemzeti Közművek Zrt., it holds a solid market position in Hungary's energy sector, offering services such as engineering design, electrical measurements, energy consulting, and public lighting development and operation. The website reflects a medium-sized enterprise with a professional and consistent brand presence targeting business clients and municipalities within Hungary. Technically, the site uses common JavaScript libraries like jQuery and Google Fonts but shows some outdated practices such as loading multiple jQuery versions and an HTTP script source, which could pose security risks. Security posture is moderate with no visible security headers and no HTTPS enforcement details available in the HTML content. Privacy compliance is partially met with a privacy policy PDF available, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility.

M

MVM Hálózat

mvmhalozat.hu

59

MVM Hálózat is a major Hungarian energy network operator providing electricity and natural gas distribution services through multiple subsidiaries. The website serves as an information portal for customers and stakeholders, offering news updates, fault reporting, and e-invoice services. The site is well-branded and clearly targeted at Hungarian energy consumers and business clients. Technically, the site is built on a Java EE stack using JSF and PrimeFaces, integrating modern libraries such as jQuery, Swiper.js, and Google reCAPTCHA for security. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS enforced and secure cookies, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional, secure, and compliant with relevant privacy regulations.

M

MAVIR Magyar Villamosenergia-ipari Átviteli Rendszerirányító Zrt.

mavir.hu

60

MAVIR Zrt. is the Hungarian Transmission System Operator responsible for managing the national electricity transmission network and market operations. The company operates critical infrastructure, provides system and market operation services, and supports business development and regulatory compliance. The website reflects MAVIR's role as a key national energy entity with a large operational scope and multiple subsidiaries. The site targets energy sector professionals, partners, and the general public interested in electricity transmission and market data. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The site uses HTTPS with strong SSL configuration and implements several security headers, indicating a solid security posture. Security-wise, the site follows best practices including HTTPS enforcement and secure form handling. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good, with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, MAVIR's website is professional, trustworthy, and well-maintained, reflecting the organization's essential role in Hungary's energy sector. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

MVM Paksi Atomerőmű Zrt. operates Hungary's primary nuclear power plant, providing critical electricity generation services. As a key entity within the MVM Group, it maintains a strong market position in the energy sector, offering not only power production but also public education and environmental stewardship. The website serves as an informative portal for stakeholders, visitors, and the general public, featuring detailed information about the company, its subsidiaries, and related services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. The content is well-structured and professionally presented, though there is room for improvement in accessibility and SEO. The CMS appears to be Sitecore, indicating a robust content management infrastructure. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and public security policies suggests opportunities to enhance the security posture. No vulnerabilities or exposed sensitive data were detected, and the domain registration is consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security headers, incident response transparency, and SEO could further strengthen its position and trustworthiness.

M

MVM energy Romania

mvmenergy.ro

44

MVM energy Romania is an established energy supplier founded in 2015, providing electricity and natural gas supply services across Romania. The company targets both residential and non-residential consumers, offering contract flexibility regardless of consumption volume. Their website reflects a professional digital presence built on WordPress with modern SEO and user experience practices. The technical infrastructure includes popular plugins such as Yoast SEO and WPBakery Page Builder, ensuring content management efficiency and SEO optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting business credibility.

M

MVM

mvmhomeandpro.hu

60

MVM Home & Pro is a Hungarian energy efficiency solutions provider operating under the MVM brand, a leading Central European energy group. The website offers a range of energy-saving products and programs targeted at residential customers, including home renovation programs and energy-efficient devices. The company positions itself as a trusted partner in sustainable energy consumption with a focus on carbon neutrality by 2035. Technically, the website is built on a JavaServer Faces framework with PrimeFaces UI components, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the website is legitimate, well-branded, and compliant with GDPR, reflecting a mature digital presence for a large energy sector entity.

M

MVM Next

mvmnext.hu

59

MVM Next is a prominent Hungarian energy company specializing in electricity and natural gas supply and distribution. The company operates multiple subsidiaries responsible for various aspects of energy delivery, including gas and electricity distribution, public lighting, and district heating. The website serves both residential and business customers, offering online services such as billing, customer support, and energy-related products like solar panels and insurance. The company maintains a strong market position as a major national utility provider in Hungary.

Ú

Ústav zemědělské ekonomiky a informací

nutridatabaze.cz

45

NutriDatabaze.cz is an official Czech Republic food composition database managed by the Center for Food Composition Database within the Institute of Agricultural Economics and Information (ÚZEI). It provides detailed nutritional data for over 1100 food items, supported by the Ministry of Agriculture. The website targets researchers, nutrition professionals, and registered users seeking reliable food composition data. The business model is primarily informational with free registration and controlled data export access. The site holds a strong market position as a government-backed authoritative source for Czech food data. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and Google Analytics for visitor tracking with IP anonymization. Hosting is provided by a Czech hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though improvements are possible. From a security perspective, HTTPS is implied but no explicit security headers were detected. The site includes secure login forms with user experience features like CAPS LOCK warnings. Privacy policies and cookie usage are declared, but no explicit consent mechanism is implemented. No incident response or vulnerability disclosure information is published, indicating room for maturity improvement. Overall, the website is professional, trustworthy, and content-rich, but the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve credibility and compliance.

O

OUR MEDIA SR a. s.

pravda.sk

60

Pravda.sk is a leading Slovak online news media portal operated by OUR MEDIA SR a. s. It provides comprehensive news coverage including politics, sports, culture, health, and entertainment targeted at a general Slovak audience. The website features multimedia content such as videos and podcasts, supported by a robust advertising and analytics infrastructure. Technically, the site employs modern web technologies and multiple analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and consent management, although explicit privacy and terms of service documents are not found in the provided content. Overall, the site is legitimate, professionally maintained, and trusted within its market segment.

O

OnVoard

onvoard.com

63

OnVoard is a specialized ecommerce marketing platform offering a suite of integrated marketing applications designed to help online merchants increase revenue with minimal effort. The platform targets ecommerce businesses and integrates with major platforms such as Shopify, BigCommerce, EasyStore, and Wix. The website presents a professional and consistent brand image with clear descriptions of its key services including email marketing, progress bars to increase average order value, back-in-stock notifications, reviews management, loyalty programs, product recommendations, and popup marketing tools. Technically, the site is built on Webflow CMS, leveraging modern web technologies and Google services for analytics and user interaction tracking. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy and GDPR hosting claims, though cookie consent mechanisms are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and business presence appear credible. Overall, the site scores well in business credibility and technical implementation but could improve in security and privacy compliance.

S

Studio Družba

studiodruzba.cz

44

Studio Družba is a small creative agency based in Vysoké Mýto, Czech Republic, founded in 2015. The company specializes in marketing, branding, graphic design, video production, animation, and photography services. Their website reflects a professional and consistent brand image, targeting businesses seeking creative and visual identity solutions. The company maintains a portfolio of client projects and emphasizes education and content creation for social media. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by Wedos. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit security policies. No incident response or vulnerability disclosure information is publicly available. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

The website egordion.tendersystems.cz is a government-related public procurement platform primarily serving Czech public sector entities such as the City of Prague. It provides listings of public tenders, filtering options, and supplier registration functionalities. The platform is built on legacy JavaServer Faces technology with RichFaces and Ajax4jsf components, indicating a mature but dated technical infrastructure. Google Analytics is used for visitor tracking, but no visible privacy or cookie policies are present, which is a compliance gap. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosures. The absence of WHOIS data reduces domain trustworthiness, though the content and references to official government usage suggest legitimacy. Overall, the site is functional but would benefit from modernization, improved privacy compliance, and enhanced security measures.