Energy security reports

N

Nadácia SPP

nadaciaspp.sk

70

Nadácia SPP is a Slovak non-profit foundation established in 2002, focused on supporting activities and projects in health protection, culture, education, volunteering, and regional development. It operates various grant programs and partnership projects aimed at improving community welfare across Slovakia. The foundation is affiliated with SPP, a major energy company, enhancing its credibility and market position. The website reflects a mature digital presence with clear branding, comprehensive content, and a user-friendly interface targeting non-profit organizations, communities, and institutions in Slovakia. Technically, the website is built on WordPress using Oxygen Builder, with modern JavaScript libraries like jQuery and integration of Google Tag Manager for analytics. It employs GDPR-compliant cookie management and contact forms for newsletter subscriptions, indicating a good level of digital maturity and privacy awareness. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with strong SSL configuration and cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted. Overall, Nadácia SPP's website is professional, trustworthy, and compliant with privacy regulations, supporting its mission as a reputable non-profit foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

S

SPP Storage, s.r.o.

sppstorage.cz

56

SPP Storage, s.r.o. is a specialized energy sector company operating a significant underground natural gas storage facility in the Czech Republic. The company offers cross-border gas storage services with a capacity of 6.94 TWh, positioning itself as a reliable partner in the energy storage market. The website reflects a professional and consistent brand image, targeting business clients in the energy industry. Technically, the site is built on Drupal 10 with modern frontend technologies, providing good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie compliance, though some improvements in security headers and incident response transparency are recommended. Overall, the domain registration and website content align well, indicating a legitimate and established business presence.

Speciální stavby Most spol. s r.o. is a Czech company specializing in large-scale demolition, construction of industrial complexes, and steel structure assembly, with a market presence dating back to 1991. The company serves industrial and energy sectors, offering services such as demolition of reinforced concrete and steel structures, bridge constructions, and dismantling of power plant boilers. It operates continuous shift work and holds ISO certifications for quality, environmental, and occupational health and safety management, indicating a mature operational framework. Technically, the website is built on WordPress with common plugins for sliders, lightbox, and GDPR compliance. The site is moderately performant, mobile-optimized, and includes a cookie consent mechanism, reflecting a reasonable level of digital maturity. However, no advanced security headers were detected, and WHOIS data is unavailable, which slightly impacts trustworthiness. From a security perspective, the site enforces HTTPS and GDPR compliance, but lacks visible incident response contacts and security.txt files. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data and security headers suggests areas for improvement in domain transparency and security hardening. Overall, the website presents a professional and trustworthy business front with good compliance and content quality. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving domain registration transparency to strengthen trust and security posture.

SPP CZ, a.s. is a major energy supplier operating primarily in the Czech Republic and Slovakia, serving approximately 1.5 million customers including households, small businesses, and large enterprises. The company offers gas and electricity supply services with an emphasis on competitive pricing, transparency, and customer convenience through online tools such as savings calculators and contract management. The website reflects a well-structured digital presence with clear navigation and professional branding consistent with a large energy sector player. Technically, the website employs modern tracking and analytics tools including Google Tag Manager, Google Analytics, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is generally good with HTTPS enforced and form validation implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data is a notable gap, reducing trustworthiness from a domain legitimacy perspective. However, the website content and business information strongly suggest a legitimate and established company. No signs of malicious content or security vulnerabilities were detected in the provided data. Overall, the site demonstrates a solid business and technical foundation with room for enhanced transparency and security documentation.

S

Strombuch s.r.o.

strombuch.cz

41

Strombuch s.r.o. is a Czech Republic based company specializing in comprehensive forestry services including forest renewal, wood harvesting, sales, and maintenance activities. Established in 2004, the company serves private owners, municipal properties, and state organizations primarily in the Podkrkonoší region. The website reflects a professional business with clear service offerings and contact information, positioning itself as a trusted local forestry service provider. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, with integration of Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Security-wise, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact details suggest a legitimate business. No forms or data collection beyond analytics scripts are present, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection. The domain's WHOIS opacity slightly reduces trust but does not outweigh the positive business indicators.

R

RIGHT POWER

rightpower.cz

62

RIGHT POWER is a medium-sized energy company operating primarily in the Czech Republic and Europe, specializing in the supply of green electricity sourced exclusively from renewable energy. The company positions itself as a market leader with a strong emphasis on customer service, competitive pricing, and environmental responsibility. Their business model focuses on providing certified green energy, supported by guarantees of origin and ISO 27001 certification, enhancing trust and compliance. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and GDPR-compliant cookie management, reflecting a mature digital presence. Security posture is strong with HTTPS, reCAPTCHA integration, and privacy policies, although some HTTP security headers could be improved. Overall, the site is professional, well-structured, and trustworthy, though the absence of WHOIS data for the domain registration introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security headers, maintaining plugin updates, and conducting regular security audits to sustain compliance and trust.

R

Right Solar

rightsolar.sk

58

Right Solar is a Slovak-based company specializing in the sale and installation of photovoltaic solar panels for electricity production, targeting both residential and commercial customers. The company positions itself as a provider of professional, affordable, and turnkey solar energy solutions, emphasizing environmental benefits and cost savings. Their website reflects a regional presence with partner links to related companies in the Czech Republic and Poland. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Materialize, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers and policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, content-rich, and trustworthy, supporting the company's business credibility.

V

Viessmann Climate Solutions

zelenadomacnostiam.net

65

The website zelenadomacnostiam.net represents Viessmann Climate Solutions, a medium-sized company operating in Slovakia's renewable energy sector. The business focuses on providing state-subsidized ecological heating solutions including photovoltaic panels, solar collectors, heat pumps, and biomass boilers. The site is well-branded, consistent with Viessmann and its parent company Carrier, and targets Slovak homeowners interested in energy efficiency and subsidies. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent and trustworthy. Overall, the site demonstrates a professional digital presence aligned with its business goals.

R

Ridera Slovakia s.r.o.

ridera.sk

53

Ridera Slovakia s.r.o. is a medium-sized energy sector company specializing in the import and sale of solid fuels such as coal and coke within Slovakia. The company is part of the larger Ridera group and has a well-established market position as one of the largest importers and sellers of solid fuels in the country. Their website reflects a professional business presence with clear descriptions of their services targeting both large industrial clients and domestic consumers. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with Google Analytics integrated for visitor tracking. The site is served over HTTPS with a cookie consent mechanism compliant with GDPR, although no explicit privacy or security policies beyond cookie usage are published. Security posture is adequate but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, well-branded, and provides a good user experience with moderate technical sophistication.

R

Ridera Bohemia a.s.

ridera.cz

57

Ridera Bohemia a.s. is a well-established Czech company specializing in the supply of coal, coke, aggregates, and recycled materials, alongside construction services such as earthworks, demolition, and machinery rental. Operating since 1991 and part of the larger Ridera Group, the company serves both domestic households and industrial clients, positioning itself as a reliable regional supplier with a broad portfolio of services. The website reflects a professional digital presence built on WordPress with modern SEO and GDPR compliance tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's market position and business credibility.

A

AERS s.r.o.

aers.cz

53

AERS s.r.o. is a Czech-based company specializing in the development and manufacture of energy storage technologies, focusing on battery systems for residential and industrial applications. Their offerings include home battery systems, industrial battery storage, and energy optimization services, targeting customers seeking energy self-sufficiency and efficiency. The company positions itself as a niche player in the energy sector within the Czech Republic, with a professional online presence and clear contact information. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and presents content in a structured and navigable manner. However, it lacks advanced SEO and accessibility features and does not implement visible security headers, which could be improved. From a security perspective, the site uses HTTPS but does not display security policies, privacy notices, or cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces trustworthiness and transparency. No forms or sensitive data collection points were detected, minimizing immediate risk exposure. Overall, the security posture is moderate but could benefit from enhanced compliance and security best practices. The overall risk assessment indicates a legitimate small business with a professional web presence but with gaps in transparency and privacy compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving accessibility, and clarifying domain registration details to enhance trust and compliance.

F

Fenix Group

fenixgroup.cz

55

Fenix Group is a Czech-based manufacturer specializing in electric heating systems including radiant panels, heating cables, films, convectors, and control systems. The company targets residential, commercial, industrial, and agricultural sectors with a comprehensive product range and technical support services. Their market position is supported by certifications such as EUHA and a lifetime warranty program, indicating a strong commitment to quality and customer assurance. The website is professionally designed using Drupal 7, incorporating modern analytics and marketing tools with clear privacy compliance mechanisms including GDPR-aligned cookie consent. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy. The site is fully accessible with no blocking or WAF challenges detected.

R

Rittal Czech, s.r.o.

rittal.cz

66

Rittal Czech, s.r.o. operates a professional corporate website focused on modular system solutions for industrial and IT applications, including enclosures, power distribution, climate control, IT infrastructure, software, and automation. The company is positioned as a global leader with a strong modular system offering and is part of the Friedhelm Loh Group. The website is well-structured, content-rich, and targets industrial and IT professionals seeking advanced system solutions. Technically, the site uses modern web technologies such as Vue.js and JavaScript, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policy pages were found. WHOIS data is unavailable, which is unusual but likely due to privacy protection, and does not detract from the site's legitimacy given the strong corporate branding and parent company association. Overall, the site presents a trustworthy and professional digital presence.

K

KNX národní skupina České Republiky, z.s.

knxcz.cz

45

KNX národní skupina České Republiky, z.s. is a Czech non-profit association dedicated to promoting and supporting KNX technology for intelligent building installations. The website serves as an information hub offering training courses, community activities, and documentation for professionals and companies involved in KNX systems. The organization is well-established since 2015 and holds a national position within the Czech Republic. Technically, the website uses a mix of legacy and modern technologies including jQuery 1.4, CKEditor 5, and Google Analytics for tracking. While the site is functional and content-rich, some technical debt is evident, particularly the use of outdated JavaScript libraries which pose security risks. Security posture is moderate with no visible security headers and no explicit security policies published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

B

BONEGA, spol. s r.o.

bonega.cz

51

BONEGA, spol. s r.o. is a Czech company specializing in the development, manufacturing, and distribution of high-quality electrical installation materials and water meters. The company emphasizes innovation with patented products and serves a B2B audience primarily in the Czech Republic and Central Europe. The website reflects a medium-sized enterprise with a history dating back to 2000, consistent with the domain registration data. The business model focuses on technical product development and distribution with additional services such as public customs warehousing. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking, hosted behind Cloudflare DNS. However, the site lacks modern CMS, mobile optimization, and accessibility features, indicating room for digital maturity improvement. Security posture is moderate; while Cloudflare DNS is used, no HTTPS enforcement or security headers are visible, and no privacy or cookie policies are present, which impacts compliance and trust. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization to improve user experience and regulatory adherence.

B

Blue Panther s.r.o.

blue-panther.cz

43

Blue Panther s.r.o. is a Czech-based company specializing in measurement equipment, calibration services, audits, and professional training primarily targeting industrial maintenance, metrology laboratories, healthcare technology, and energy sectors. The company maintains a solid market position supported by partnerships with reputable brands such as Fluke and Kyoritsu and holds ISO 9001 certification, indicating a commitment to quality management. Their business model focuses on B2B sales and services, offering a comprehensive portfolio including equipment supply, calibration, audits, and educational seminars. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.10.2, Klaro for cookie consent, Algolia for search, and multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Smartsupp chat. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, some technical debt is noted with the use of an outdated jQuery version and absence of explicit security headers. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts, reflecting good privacy practices. No critical vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business information appear professional and trustworthy. No explicit security policy or incident response contacts were found, suggesting room for improvement in transparency and preparedness. Overall, Blue Panther s.r.o. presents a professional and trustworthy online presence with good compliance and security posture, albeit with some technical and domain registration concerns. Strategic improvements in security headers, updating legacy libraries, and clarifying domain registration details would enhance trust and resilience.

G

GIVERSDON s.r.o.

azcasopis.cz

42

The website azcasopis.cz represents a specialized professional magazine named A-Z ELEKTRO, focusing on electrical engineering, automation, energy, software, lighting, and related technologies. It targets professionals and companies within these technical sectors primarily in the Czech Republic. The business operates as a small-sized publishing entity with a history dating back to 2009, offering industry news, magazine publications, advertising, and subscription services. The site demonstrates consistent branding and good content quality with regular updates and industry partnerships.

E

Explosia a.s.

explosia.cz

54

Explosia a.s. is a well-established Czech manufacturer specializing in explosives, smokeless powders, and specialized products with over a century of tradition. The company serves industrial and military sectors, offering a broad portfolio including ammunition, explosives, large-caliber munitions, and related services such as accredited testing and consulting. Their market position is strong and supported by a long operational history and consistent branding. Technically, the website is built on WordPress with modern libraries like jQuery and Flickity, hosted behind Cloudflare DNS, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and obfuscated contact details, though lacking advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Mobildrive.cz

mbenzin.cz

39

mBenzin.cz is a Czech Republic-based online platform providing up-to-date fuel prices for gasoline, diesel, LPG, and CNG across local fuel stations. It targets motorists seeking to find the nearest and cheapest fuel options, offering additional services such as price trend analysis, technical inspection station information, and articles related to motorist advice. The website leverages user-generated content for price updates and monetizes through advertising and affiliate marketing partnerships. Technically, the site is built on ASP.NET WebForms with jQuery and Bootstrap for responsive design, integrating Google Analytics and Adsense for tracking and monetization. While the site is functional and well-structured with good content quality and mobile optimization, it lacks explicit privacy and cookie policies, which may affect GDPR compliance. Security posture is moderate, with HTTPS implied but no visible security headers, and no WHOIS data is available, which limits trust assessment. Overall, the site is professional and relevant for its audience but could improve in privacy compliance and security best practices.

R

Ridera Group

ridera.eu

56

Ridera Group is a well-established European company specializing in construction, energy, and mineral raw materials with over 30 years of market presence. The group operates multiple subsidiaries focused on supplying solid fuels, building materials, construction projects, real estate management, and leisure activities. Their website demonstrates a professional and comprehensive digital presence with clear business information and multiple linked subsidiary sites. Technically, the site is built on WordPress with Elementor, using modern plugins and scripts, and is optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this business type. Overall, the website is trustworthy and well-maintained.

Alumina Limited is an energy sector company specializing in alumina production. The website content is minimal and primarily serves to inform visitors that Alumina Limited was acquired by Alcoa Corporation as of August 1, 2024, directing users to Alcoa.com for further information. The digital presence is limited, with no detailed corporate information, contact details, or policies available on the homepage. Technically, the website uses basic HTML and CSS with no detected advanced frameworks or analytics. Security posture is weak due to lack of visible security headers, privacy policies, and WHOIS data. The domain WHOIS information is missing, which raises concerns about domain legitimacy and registration status. Overall, the website is accessible but lacks depth and comprehensive corporate digital infrastructure.

M

MND

mnd.cz

78

MND is a Czech energy supplier offering gas and electricity services primarily to households (B2C). The website provides an online price calculator and facilitates switching to MND as a supplier, positioning itself as a stable and fair energy provider in the Czech market. The digital infrastructure is built on Kentico CMS with integrated Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and uses modern web technologies, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, standard security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive cookie policy. However, WHOIS data is unavailable, likely due to privacy protection, which is common for commercial entities. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations, though it lacks explicit contact information and some policy pages such as terms of service and security policy. Strategic recommendations include publishing incident response contacts, adding a security policy page, and improving accessibility features.

SIGMA GROUP a.s. is a well-established Czech industrial company specializing in the research, development, and manufacturing of industrial pumps and pumping units. With a history dating back to 1868, it holds a leading market position in the Czech Republic and serves clients globally across multiple industrial sectors including energy, agriculture, and metallurgy. The company offers a broad product portfolio with over 70 product lines and maintains a strong international presence with installations in 76 countries. The website reflects a professional corporate identity with detailed company history, certifications, and contact information. Technically, the site uses modern JavaScript libraries and Google Analytics, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit cookie consent mechanisms. WHOIS data is missing, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy indicated by the website content and certifications. Strategic recommendations include improving security headers, adding cookie consent, and publishing vulnerability disclosure policies to enhance trust and compliance.

V

VHS Olomouc, a.s.

vhs-ol.cz

45

VHS Olomouc, a.s. is a regional utility company specializing in water management services within the Olomouc district of the Czech Republic. The company manages a significant portion of the water infrastructure including water supply networks, reservoirs, springs, water treatment plants, and some sewage systems. Their services target municipalities, customers, developers, and shareholders, positioning them as a key regional player in the energy and water utility sector. The website reflects a professional and comprehensive presentation of their business, services, and customer engagement portals. Technically, the website is built on WordPress and leverages modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Maps API for interactive features. SEO is enhanced using the Yoast SEO plugin, and the site is hosted by cesky-hosting.eu. The site demonstrates good mobile optimization and moderate performance, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and explicit published security policies or incident response information. There is no cookie consent mechanism detected, which is a minor GDPR compliance gap. No vulnerabilities or suspicious activities were identified in the analysis. Overall, VHS Olomouc, a.s. maintains a secure, professional, and user-friendly online presence that aligns well with its business operations and regional market position. Strategic improvements in security headers, privacy compliance mechanisms, and incident response transparency would further enhance their security posture and trustworthiness.

C

Cleopa GmbH

cleopa.de

52

Cleopa GmbH is a German consulting and research company specializing in sustainable innovation, energy efficiency, and resource optimization. The company supports businesses in leading green and digital transformations through hands-on consulting and participation in European research projects. Their market position is that of an active partner in EU-funded innovation consortia, providing expertise in technology, engineering, and sustainability. The website is built on WordPress with Elementor and uses modern plugins like Revolution Slider, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, but lacks a cookie consent mechanism and explicit security policies.

U

UCED

uced.cz

70

UCED is a regional energy company operating primarily in the Czech Republic and Slovakia, providing electricity and gas sales, as well as heat and electricity production. The company maintains a broad network of offices and production sites, indicating a medium-sized enterprise with a solid market presence in the energy sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and branch locations. Technically, the site uses modern JavaScript technologies and Google Tag Manager for analytics and marketing, with good security practices such as HTTPS and security headers in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the business presence and content suggest a legitimate operation. Privacy and cookie policies are present and appear GDPR compliant, but no explicit security policy or incident response contact is published. Overall, the site scores well on content quality and security posture but should improve transparency on domain registration and security governance.

T

Teplárna Otrokovice a.s.

tot.cz

52

Teplárna Otrokovice a.s. is a medium-sized Czech energy company specializing in the production and supply of heat and electricity, primarily through cogeneration using brown coal, natural gas, and biomass. The company emphasizes reliability, environmental responsibility, and customer service, targeting residential and commercial consumers in the Czech Republic. Their website reflects a professional and consistent brand image with comprehensive service information and customer portals. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR compliance tools. It uses HTTPS with Google reCAPTCHA for form security and integrates Google Analytics for user tracking. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. From a security perspective, the site follows good practices including HTTPS, cookie consent management, and form protection. However, some security headers are not explicitly detected, and no formal security policy or incident response information is published. The absence of WHOIS registration data is a notable gap, limiting full trust verification of the domain. Overall, the website is trustworthy and professional, with strong privacy compliance and user engagement features. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain legitimacy and ownership consistency.

The website amendisclient.ma is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered to ITISSALAT AL-MAGHRIB, a Moroccan company likely operating in the energy sector, with a domain age of approximately 7-8 years, indicating a stable registration history. Due to the lack of accessible content, no metadata, forms, or contact information could be extracted, limiting the ability to assess the website's business model, services, or compliance posture. Technically, the site does not reveal any information about its technology stack, security headers, or performance characteristics. The security posture cannot be fully evaluated, but the absence of accessible content and security policies suggests a low maturity level. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.

I

ILUNION Economía Circular

ilunioneconomiacircular.com

54

ILUNION Economía Circular is a large Spanish company specializing in integrated waste management services with a strong commitment to sustainability and social impact. The company offers a range of services including treatment plants, waste management, transportation, and equipment rental. It is part of the Grupo Social ONCE, which enhances its market credibility. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and corporate values. Technically, the site uses Drupal CMS with modern libraries and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is missing or unavailable, which slightly reduces trust but the overall digital presence and association with a known parent company support legitimacy.

Ó

ÓB Bensín / Olís

ob.is

63

ÓB Bensín operates a network of fuel stations across Iceland, providing fuel sales and customer engagement through a dedicated mobile app. The company is positioned as a key player in the Icelandic energy retail sector, leveraging digital tools to enhance customer experience. The website is built on modern web technologies including React and Next.js, integrated with Prismic CMS for content management. Tracking and marketing tools such as Google Analytics and Facebook Pixel are employed to monitor user engagement and support marketing efforts. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not published. Overall, the site is professional, accessible, and trustworthy, serving a general audience with safe content.

Hisense HVAC France operates as a localized branch of Qingdao Hisense HVAC equipment Co., Ltd., focusing on commercial and residential HVAC solutions including VRF systems, air-to-water heat pumps, and chillers. The website presents a professional and consistent brand image targeting HVAC customers in France and globally, offering product information, technical documentation, and showroom support. The digital infrastructure is built on a custom ASP.NET CMS with modern JavaScript libraries such as jQuery and Swiper, providing a good user experience with mobile optimization and clear navigation. However, the website lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are exposed, which limits user trust and compliance transparency. Security posture is moderate with HTTPS implied but no advanced security headers or vulnerability disclosures present. The domain registration is consistent and legitimate, supporting the business claims.

Hisense Comfort operates as a specialized HVAC solutions provider focusing on commercial and residential air conditioning and climate control technologies. The company emphasizes innovation and user comfort through products such as VRF systems, air-to-water solutions, and chillers. The website targets homeowners and HVAC professionals, positioning itself as a technology leader in the energy sector. Technically, the website uses basic web technologies including jQuery and CSS, hosted by Alibaba Cloud. The site is accessible without WAF or blocking mechanisms but lacks advanced SEO, accessibility, and security features. Security posture is moderate with no DNSSEC and missing security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, reducing compliance confidence. Overall, the domain registration is consistent with a new business launch, enhancing legitimacy. The site content is safe and professional, but improvements in security and compliance are recommended.

F

Fouad Alghanim & Sons Group of Companies Holding W.L.L.

falghanimgroup.com

63

Fouad Alghanim & Sons Group of Companies Holding W.L.L. is a large multinational conglomerate based in Kuwait with diversified interests spanning engineering, construction, power, oil and gas, automotive, investment, trading, shipping, aviation, telecom, hospitality, and real estate. The company has a strong presence in the MENA region and operates in 12 countries with over 20,000 employees. The website reflects a professional corporate image with a focus on business clients and partners. Technically, the site is built on WordPress using common plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding suggest a credible business entity. Privacy and cookie policies are missing, indicating gaps in compliance. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

A

Amendis

amendis.ma

57

Amendis is a Moroccan utility company specializing in water and electricity distribution, wastewater treatment, and customer services. It operates under the Veolia group umbrella, indicating a strong market position in the energy sector. The website provides comprehensive information about its services, news, and career opportunities, targeting both residential and commercial customers. The digital infrastructure is built on Drupal CMS with modern privacy and cookie consent mechanisms, reflecting a mature digital presence. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS registration data is a concern but does not negate the legitimacy suggested by the website content and corporate affiliation. Overall, the site is professional, secure, and compliant with GDPR, serving as a reliable digital front for Amendis.

Nadácia Veolia Slovensko is a Slovak non-profit foundation affiliated with the global Veolia group, focusing on community grants and social projects to support local initiatives. The website serves as an information portal for their programs, news, and supported projects, targeting Slovak community members and NGOs. The foundation operates with a medium-sized presence and emphasizes social responsibility within the energy sector. Technically, the website is built on the Vizus CMS platform, uses Matomo for analytics, and implements a cookie consent mechanism that aligns with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and basic privacy protections but lacks advanced security headers and explicit incident response policies. No contact emails or phone numbers are directly available on the homepage, which could be improved for better user engagement and trust. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though there is room for enhancement in security and transparency.

V

Veolia EKOZEC Sp. z o.o.

ekozec.pl

62

Veolia EKOZEC Sp. z o.o. is a medium-sized Polish company specializing in industrial and energy sector waste management and recycling services since 1995. The company operates under the Veolia Group umbrella, offering a broad portfolio of products and services including recycling of construction debris, demolition, land reclamation, and waste logistics. The website is professionally designed with clear navigation and is available in Polish and English, targeting industrial clients and energy companies. Technically, the site is built on Drupal 10, hosted by home.pl S.A., and employs modern cookie consent management, reflecting a moderate level of digital maturity. Security posture is adequate with cookie consent and session management in place, but lacks advanced security headers and explicit incident response information. Privacy compliance is strong with comprehensive cookie and privacy policies aligned with GDPR. Overall, the website is trustworthy, professional, and safe for general audiences.

N

NEOTA CZ s.r.o.

neotashop.cz

51

NEOTA CZ s.r.o. is a Czech Republic-based manufacturer and wholesaler specializing in air-to-water heat pumps and ceiling heating and cooling systems. The company targets wholesale partners and end customers seeking efficient heating solutions. Their website offers a comprehensive product catalog, detailed business information, and a blog with relevant industry content, positioning them as a reputable player in the energy sector within their region. Technically, the website is built on the Eshop-rychle.cz platform, utilizing modern web technologies including Google Tag Manager and Plausible Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses secure forms, and implements cookie consent mechanisms with CAPTCHA for newsletter subscriptions. However, it lacks explicit security policies and incident response contacts, and no WHOIS data is available for the domain, which slightly reduces trust. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in security and domain registration details.

G

GE Vernova

gevernova.com

72

GE Vernova is a leading energy technology company focused on electrification and decarbonization solutions. The website presents a professional and comprehensive digital presence, showcasing a broad portfolio of energy services including power generation, wind, nuclear, and advanced research. The technical infrastructure is modern, leveraging Drupal 10 CMS, Google Analytics, and reCAPTCHA for security. Privacy and cookie policies are well implemented with user consent mechanisms. Security posture is strong with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. The WHOIS data is missing or inconsistent, which raises some legitimacy concerns despite the professional branding and content. Overall, the website is well designed, accessible, and trustworthy from a content and technical perspective but would benefit from improved transparency on domain registration and security policies.

O

Olís ehf

olis.is

50

Olís ehf is a well-established Icelandic company founded in 1927, operating primarily in the energy, transportation, and retail sectors. The company provides fuel distribution, vehicle services, and convenience retail across Iceland, positioning itself as a market leader with a strong brand presence. The website reflects this maturity with professional design, clear navigation, and comprehensive content tailored to both individual consumers and corporate clients. The promotion of a mobile app indicates a focus on digital engagement and customer convenience. Technically, the website is built on modern frameworks such as Next.js and uses Prismic CMS, ensuring a scalable and maintainable infrastructure. Integration with Google Tag Manager and CookieHub shows attention to analytics and privacy compliance. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes key security headers, demonstrating good baseline security hygiene. However, the absence of a public security policy, incident response information, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, supporting a large, credible business. The lack of WHOIS data for the domain reduces trust slightly but does not outweigh the positive indicators. Strategic recommendations include publishing security policies, enhancing accessibility, and formalizing incident response disclosures to strengthen security posture and compliance.

S

Sinclair Corporation Ltd.

sinclair-world.com

62

Sinclair Corporation Ltd. is a medium-sized company specializing in air conditioning, heat pumps, and LED lighting products, with a presence in 28 countries. The company emphasizes quality, environmental protection, and customer comfort. Their website demonstrates a professional digital presence with modern technologies such as Bootstrap, jQuery, and Google Maps integration. The site is mobile-optimized and includes comprehensive GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers and WHOIS data gaps suggest areas for improvement. Overall, the website reflects a credible business with solid technical infrastructure but would benefit from enhanced transparency in domain registration and security policies.

S

SINCLAIR Global Group s.r.o.

sinclair-lighting.cz

55

SINCLAIR Global Group s.r.o. operates the Sinclair Lighting website, specializing in manufacturing and designing advanced LED lighting fixtures and systems. Their offerings target a professional audience including architects, project designers, investors, and installation firms, focusing on energy-efficient, photobiologically safe LED lighting solutions for various sectors such as education, healthcare, industrial, and public lighting. The company emphasizes quality, innovation, and compliance with modern standards including healthy lighting concepts aligned with human biorhythms. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google services such as Tag Manager and Analytics. The site is built on Pagio CMS and demonstrates good mobile responsiveness and user experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy in Czech. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. The site shows no signs of malicious content or adult material, maintaining a professional and safe environment. Overall, the website presents a credible and professional business front with good privacy practices but would benefit from enhanced security policies, transparency in domain registration, and improved technical security controls to strengthen trust and compliance.

G

GreMi KLIMA, s.r.o.

gremi.sk

60

GreMi KLIMA, s.r.o. is a Slovakian company specializing in customized technical building equipment solutions, including HVAC, heating, cooling, clean rooms, and energy services. Established in 2004, it serves investors, developers, and building operators with comprehensive design, delivery, and maintenance services. The company positions itself as a reliable regional partner with a professional online presence and clear service offerings. The website is built on WordPress using the Divi theme and Revolution Slider, incorporating modern analytics and tracking tools with GDPR-compliant cookie consent. Security posture is strong with HTTPS, security headers, and reCAPTCHA, though no explicit security policy or incident response information is published. Overall, the digital infrastructure supports a medium-sized enterprise with good technical maturity and compliance.

I

IPESOFT

ipesoft.com

61

IPESOFT is a Slovak-based company specializing in reliable, powerful, and flexible IT systems for the energy and industrial sectors. With approximately 30 years of market presence, they offer comprehensive solutions including SCADA and MES systems, real-time platforms, and energy production and trading management. Their target audience includes energy producers, distributors, traders, and industrial companies seeking optimization and automation solutions. The website reflects a mature digital presence with professional design, multilingual support, and clear business messaging. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries and third-party services such as Google Analytics, Google Tag Manager, Weglot for translations, and Finsweet for cookie consent management. The site is performant, mobile-optimized, and SEO-friendly. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and incomplete WHOIS data are notable gaps. From a security perspective, the site shows good practices in data protection and user consent but lacks explicit incident response or vulnerability disclosure information. The missing WHOIS data raises concerns about domain registration transparency, which impacts trustworthiness despite the professional business presentation. Overall, IPESOFT presents a credible and professional business front with solid technical infrastructure but should address domain registration transparency and enhance security headers and policies to improve trust and compliance.

V

Veolia Canada

veolia.ca

70

Veolia Canada is a subsidiary of the global Veolia Group, specializing in environmental solutions including water, waste, and energy management. The company serves cities, industries, and communities with a focus on sustainability and resource protection. The website reflects a mature enterprise with a comprehensive digital presence, including multi-language support and regional site links. Technically, the site is built on Drupal CMS, uses modern web technologies, and implements strong privacy and consent management tools such as Didomi and Google Tag Manager. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

The website veolia.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires human verification via Turnstile captcha. This prevents access to the actual website content, including business descriptions, policies, and contact information. The domain is well-established, registered since 2003, and is consistent with the Veolia brand, a large enterprise operating in the energy and transportation sectors in the United Kingdom. The technical infrastructure leverages Cloudflare services for security and performance, indicating a mature digital presence. However, due to the blocking, a full security and compliance assessment cannot be completed. The security posture is partially observable through the use of Cloudflare's security mechanisms, but no detailed security headers or policies are visible. Overall, the site is legitimate but currently inaccessible for detailed analysis.

V

Veolia Ukraine

veolia.ua

60

Veolia Ukraine operates as a key player in the environmental services sector, focusing on waste management and sustainable solutions. As a subsidiary of the global Veolia Group, it leverages international expertise to serve industrial, commercial, and municipal clients in Ukraine. The website reflects a mature digital presence with comprehensive service descriptions, multi-language support, and strong branding consistency. Technically, the site is built on Drupal CMS with modern integrations such as Google Tag Manager and Didomi for privacy compliance, ensuring a good user experience and regulatory adherence. Security posture is solid with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its business domain and audience.

V

Veolia España

veolia.es

66

Veolia España is the Spanish branch of Veolia Group, a global leader in optimized resource management including water, energy, and waste. The website presents a professional corporate image with clear navigation and detailed service offerings targeting industries, cities, and public administrations. The technical infrastructure is based on Drupal CMS with integration of modern marketing and analytics tools such as Google Tag Manager and HubSpot, complemented by a robust cookie consent mechanism via Didomi. Security posture is good with HTTPS and standard security headers, though explicit privacy and terms of service pages are not found in the provided content. Overall, the site reflects a mature digital presence consistent with a large enterprise.

V

Veolia

veolia.sk

62

Veolia Slovakia is a large, established service provider specializing in water management, energy, and environmental services. As part of the global Veolia Group, it serves municipalities, industrial clients, and consumers with a broad portfolio of utility and environmental solutions. The website reflects a professional corporate presence with good content quality and consistent branding. Technically, the site is built on Drupal CMS, employs modern consent management tools like Didomi, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is strong, with clear cookie consent and GDPR adherence. However, some areas such as explicit incident response contacts and terms of service are missing, which could be improved. Overall, the site is trustworthy and well-maintained, supporting Veolia's market position in Slovakia.

V

Veolia Romania

veolia.ro

65

Veolia Romania operates as a key subsidiary of the global Veolia Group, providing integrated environmental services focused on water and energy management with a strong emphasis on sustainability and renewable energy solutions. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large enterprise. Technically, the site uses Drupal CMS, integrates modern consent management tools, and employs Google Tag Manager for analytics, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, featuring GDPR-aligned cookie consent mechanisms. Overall, the domain is privacy protected in WHOIS, which is typical for corporate entities, and the website content aligns well with the business identity, supporting legitimacy and trustworthiness.

V

Veolia Portugal

veolia.pt

64

Veolia Portugal is a leading enterprise in environmental management services, specializing in sustainable water, energy, and waste management solutions. As a subsidiary of the global Veolia Group, it serves industries, municipalities, and large buildings in Portugal, focusing on ecological transformation and resource efficiency. The website reflects a professional corporate presence with consistent branding and comprehensive service descriptions. Technically, the site is built on Drupal CMS, integrates modern analytics and consent management tools, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust, featuring GDPR-aligned cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting Veolia's market position as a major environmental services provider in Portugal.