Security Directory

The website eupowers.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain was registered in 2020, which is consistent with a relatively new business, but no business details, contact information, or policies are available on the site. The lack of accessible content and absence of privacy, cookie, or terms of service policies indicate a very low level of digital maturity and compliance. Technically, no scripts, frameworks, or CMS are detected, and no security headers or SSL configuration details are available from the provided data. This severely limits the ability to assess the website's security posture or business credibility. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access, resulting in a poor user experience and low trustworthiness.

MVM OVIT Zrt. is a well-established Hungarian energy sector company, operating as a wholly owned subsidiary of MVM Energetika Zrt. With over 70 years of experience, it specializes in manufacturing steel structures, power plant machinery, heavy transportation, and electricity supply system operations across Hungary. The company is positioned as a key player within the MVM Group, serving the national energy infrastructure market. The website reflects a professional corporate presence with clear branding and comprehensive information about its services and group affiliations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is likely powered by the Sitecore CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks a dedicated security policy page and explicit incident response contacts, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

Flogiston.hu is a Hungarian company specializing in the manufacturing, servicing, and wholesale distribution of gas consumption meters and related equipment. Established in 2000, it holds a niche position in the Hungarian energy sector, partnering with recognized brands such as Itron and Elster. The website targets industrial and residential customers requiring gas metering solutions and related services. Technically, the site uses a custom CMS with jQuery and common plugins like Nivo Slider and Lightbox, offering moderate performance and basic mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, though a cookie consent mechanism is implemented. Privacy compliance is basic, with a privacy policy present but lacking comprehensive GDPR indicators. Contact information is notably absent from the homepage, reducing user trust and accessibility. Overall, the site is functional but would benefit from enhanced security, privacy, and contact transparency.

MVM CEEnergy Zrt. is Hungary's largest natural gas trader, serving as a key partner to the national universal gas service provider to ensure reliable gas supply to residential consumers. The company operates as part of the MVM Group, a large energy conglomerate with numerous subsidiaries across production, storage, distribution, retail, and services sectors. The website reflects a professional corporate presence with comprehensive information about the company, its subsidiaries, and services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is built on a Sitecore CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is well-structured, compliant with GDPR, and trustworthy.

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

The website at mvmoptimum.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policy documents are available for analysis. The domain was registered in 2020, which is consistent with a relatively new business, but the lack of accessible content limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers, scripts, or analytics, and no SSL or hosting details are discernible from the provided data. The security posture is weak due to the absence of HTTPS confirmation and security best practices. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.

M

MVM Lumen Kft.

mvmlumen.hu

60

MVM Lumen Kft. is a Hungarian company specializing in public lighting and lighting services, operating as part of the MVM Group. The company focuses on providing public lighting maintenance, lighting technology modernization, and indoor lighting wholesale services primarily to municipalities and public sector clients. The website reflects a professional corporate presence with consistent branding and clear navigation. Technically, the site uses JavaServer Faces with PrimeFaces and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and accessible privacy policy. Overall, the website is trustworthy and aligns well with the company's business profile.

M

MVM Watt Eta Kft.

mvmwatteta.hu

40

MVM Watt Eta Kft. is a Hungarian electrical engineering company specializing in the design, construction, and maintenance of low and medium voltage electrical networks, weak current networks, and solar power plants. As a subsidiary of the national energy group NKM Nemzeti Közművek Zrt., it holds a solid market position in Hungary's energy sector, offering services such as engineering design, electrical measurements, energy consulting, and public lighting development and operation. The website reflects a medium-sized enterprise with a professional and consistent brand presence targeting business clients and municipalities within Hungary. Technically, the site uses common JavaScript libraries like jQuery and Google Fonts but shows some outdated practices such as loading multiple jQuery versions and an HTTP script source, which could pose security risks. Security posture is moderate with no visible security headers and no HTTPS enforcement details available in the HTML content. Privacy compliance is partially met with a privacy policy PDF available, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility.

M

MVM Hálózat

mvmhalozat.hu

59

MVM Hálózat is a major Hungarian energy network operator providing electricity and natural gas distribution services through multiple subsidiaries. The website serves as an information portal for customers and stakeholders, offering news updates, fault reporting, and e-invoice services. The site is well-branded and clearly targeted at Hungarian energy consumers and business clients. Technically, the site is built on a Java EE stack using JSF and PrimeFaces, integrating modern libraries such as jQuery, Swiper.js, and Google reCAPTCHA for security. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS enforced and secure cookies, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional, secure, and compliant with relevant privacy regulations.

Magyar Földgáztároló Zrt. is Hungary's largest commercial underground natural gas storage company, operating four storage facilities with significant capacity. The company plays a critical role in ensuring the country's winter gas supply and aims to strengthen Hungary's position in the Central European energy market. The website reflects a professional corporate presence with clear navigation, regulatory information, and customer engagement features such as newsletter subscription. Technically, the site uses standard web technologies including Bootstrap and jQuery, with Google Analytics for visitor tracking. Security practices include HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

M

MAVIR Magyar Villamosenergia-ipari Átviteli Rendszerirányító Zrt.

mavir.hu

60

MAVIR Zrt. is the Hungarian Transmission System Operator responsible for managing the national electricity transmission network and market operations. The company operates critical infrastructure, provides system and market operation services, and supports business development and regulatory compliance. The website reflects MAVIR's role as a key national energy entity with a large operational scope and multiple subsidiaries. The site targets energy sector professionals, partners, and the general public interested in electricity transmission and market data. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The site uses HTTPS with strong SSL configuration and implements several security headers, indicating a solid security posture. Security-wise, the site follows best practices including HTTPS enforcement and secure form handling. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good, with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, MAVIR's website is professional, trustworthy, and well-maintained, reflecting the organization's essential role in Hungary's energy sector. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

MVM Paksi Atomerőmű Zrt. operates Hungary's primary nuclear power plant, providing critical electricity generation services. As a key entity within the MVM Group, it maintains a strong market position in the energy sector, offering not only power production but also public education and environmental stewardship. The website serves as an informative portal for stakeholders, visitors, and the general public, featuring detailed information about the company, its subsidiaries, and related services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. The content is well-structured and professionally presented, though there is room for improvement in accessibility and SEO. The CMS appears to be Sitecore, indicating a robust content management infrastructure. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and public security policies suggests opportunities to enhance the security posture. No vulnerabilities or exposed sensitive data were detected, and the domain registration is consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security headers, incident response transparency, and SEO could further strengthen its position and trustworthiness.

M

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt.

mvmtavho.hu

61

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt. is a regional energy company specializing in district heating services for the Oroszlány and Szolnok areas in Hungary. The website acts as a portal directing users to localized district heating service sites, reflecting a focused business model in the energy utility sector. The company appears to be a medium-sized entity founded in 2020, likely part of the larger MVM group, a major Hungarian energy provider. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, and uses responsive design techniques to ensure usability across devices. However, the site lacks advanced SEO and accessibility features and does not appear to use a CMS or complex frameworks. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms on the landing page, which is positive. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is functional and consistent with its business purpose but requires enhancements in privacy compliance, security best practices, and user contact information to improve trust and regulatory adherence.

M

MVM energy Romania

mvmenergy.ro

44

MVM energy Romania is an established energy supplier founded in 2015, providing electricity and natural gas supply services across Romania. The company targets both residential and non-residential consumers, offering contract flexibility regardless of consumption volume. Their website reflects a professional digital presence built on WordPress with modern SEO and user experience practices. The technical infrastructure includes popular plugins such as Yoast SEO and WPBakery Page Builder, ensuring content management efficiency and SEO optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting business credibility.

M

MVM

mvmhomeandpro.hu

60

MVM Home & Pro is a Hungarian energy efficiency solutions provider operating under the MVM brand, a leading Central European energy group. The website offers a range of energy-saving products and programs targeted at residential customers, including home renovation programs and energy-efficient devices. The company positions itself as a trusted partner in sustainable energy consumption with a focus on carbon neutrality by 2035. Technically, the website is built on a JavaServer Faces framework with PrimeFaces UI components, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the website is legitimate, well-branded, and compliant with GDPR, reflecting a mature digital presence for a large energy sector entity.

M

MVM Next

mvmnext.hu

59

MVM Next is a prominent Hungarian energy company specializing in electricity and natural gas supply and distribution. The company operates multiple subsidiaries responsible for various aspects of energy delivery, including gas and electricity distribution, public lighting, and district heating. The website serves both residential and business customers, offering online services such as billing, customer support, and energy-related products like solar panels and insurance. The company maintains a strong market position as a major national utility provider in Hungary.

R

REICO

reico.cz

65

REICO is a Czech-based asset management company specializing in real estate investment funds and capital market instruments, with over 15 years of market presence. The company operates under the umbrella of Česká spořitelna a.s., a major Czech financial institution, which enhances its market credibility and trustworthiness. The website reflects a professional and well-structured digital presence, targeting investors interested in real estate and financial products. The content is relevant, well-organized, and supported by comprehensive legal and privacy documentation, indicating a mature compliance posture. Technically, the website leverages modern web technologies including JavaScript, jQuery, and the proprietary GEM framework by Erste Group, hosted on Erste Group's CDN infrastructure. The site is responsive and optimized for mobile devices, with good SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. No critical vulnerabilities or suspicious content were detected, and the domain's WHOIS data is privacy protected, which is typical for financial services. Overall, REICO's website demonstrates a solid business and technical foundation with good security hygiene, suitable for its industry and audience. Strategic improvements in security transparency and performance optimization would further strengthen its posture.

Ú

Ústav zemědělské ekonomiky a informací

nutridatabaze.cz

45

NutriDatabaze.cz is an official Czech Republic food composition database managed by the Center for Food Composition Database within the Institute of Agricultural Economics and Information (ÚZEI). It provides detailed nutritional data for over 1100 food items, supported by the Ministry of Agriculture. The website targets researchers, nutrition professionals, and registered users seeking reliable food composition data. The business model is primarily informational with free registration and controlled data export access. The site holds a strong market position as a government-backed authoritative source for Czech food data. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and Google Analytics for visitor tracking with IP anonymization. Hosting is provided by a Czech hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though improvements are possible. From a security perspective, HTTPS is implied but no explicit security headers were detected. The site includes secure login forms with user experience features like CAPS LOCK warnings. Privacy policies and cookie usage are declared, but no explicit consent mechanism is implemented. No incident response or vulnerability disclosure information is published, indicating room for maturity improvement. Overall, the website is professional, trustworthy, and content-rich, but the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve credibility and compliance.

O

OUR MEDIA SR a. s.

pravda.sk

60

Pravda.sk is a leading Slovak online news media portal operated by OUR MEDIA SR a. s. It provides comprehensive news coverage including politics, sports, culture, health, and entertainment targeted at a general Slovak audience. The website features multimedia content such as videos and podcasts, supported by a robust advertising and analytics infrastructure. Technically, the site employs modern web technologies and multiple analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and consent management, although explicit privacy and terms of service documents are not found in the provided content. Overall, the site is legitimate, professionally maintained, and trusted within its market segment.

L

La Vanguardia

lavanguardia.com

68

La Vanguardia is a prominent Spanish news media company providing up-to-date news and information focused on Catalunya, Spain, and global events. The website serves a broad general audience with a comprehensive digital news platform supported primarily by advertising revenue. The company maintains a strong market position as a leading regional and national news outlet in Spain. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, multiple ad networks, and a consent management platform to ensure GDPR compliance. The infrastructure is optimized for performance and mobile responsiveness, delivering an excellent user experience. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of news content.

MSN Finland (https://www.msn.com/fi-fi) is a localized version of the global MSN portal operated by Microsoft Corporation. The site offers a comprehensive aggregation of news, weather, sports, finance, entertainment, and video content tailored for Finnish users. It leverages Microsoft's extensive content partnerships and advertising infrastructure to deliver personalized and up-to-date information. The website is well-branded, professionally designed, and optimized for desktop and mobile platforms, reflecting a mature digital presence within the media sector. Technically, the site employs modern web technologies including JavaScript frameworks, service workers, and CDN delivery via Akamai. It integrates Microsoft’s ad SDK and OneTrust for cookie consent management, indicating compliance with privacy regulations. The site demonstrates good performance, accessibility, and SEO practices, with a clear focus on user experience and content relevance. From a security perspective, MSN Finland enforces HTTPS with strong SSL configurations and uses security best practices such as nonce-based script loading and cookie consent mechanisms. However, explicit security policies, incident response contacts, and privacy policy links are not directly visible in the provided HTML snapshot, suggesting areas for improvement in transparency and compliance communication. Overall, MSN Finland presents a high level of trustworthiness and professionalism consistent with its parent company Microsoft. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the domain’s legitimacy. Strategic recommendations include enhancing visible privacy and security policy disclosures and providing clear contact channels for security incidents to further strengthen user trust and compliance posture.

Selzee is an AI-powered virtual sales representative platform designed specifically for Shopify ecommerce stores. It offers automated customer support, smart product recommendations, and adaptive store intelligence to help online sellers increase average order value and conversion rates. The website presents a professional and modern interface with clear messaging targeting ecommerce businesses seeking AI-driven sales and support solutions. Technically, the site leverages modern JavaScript libraries, Tailwind CSS, and PostHog analytics, hosted on Cloudflare infrastructure, indicating a mature digital presence. However, the security posture is moderate with room for improvement, notably the absence of DNSSEC, security headers, and explicit privacy and cookie policies. The WHOIS data raises concerns due to an inconsistent future domain creation date, which impacts trustworthiness. Overall, the site is functional and safe for general audiences but would benefit from enhanced transparency and security practices.

The website retentionup-doplnek.cz appears to be a minimal landing page for a product or service named RetentionUp, likely a plugin or add-on for the Shoptet e-commerce platform. The site contains very limited content, primarily a title and basic styling with no visible business or contact information. The technical infrastructure relies on common frontend libraries such as Bootstrap and jQuery loaded from reputable CDNs, but lacks advanced features or metadata. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site presents a low trust profile with minimal digital maturity and poor compliance indicators.

O

OnVoard

onvoard.com

63

OnVoard is a specialized ecommerce marketing platform offering a suite of integrated marketing applications designed to help online merchants increase revenue with minimal effort. The platform targets ecommerce businesses and integrates with major platforms such as Shopify, BigCommerce, EasyStore, and Wix. The website presents a professional and consistent brand image with clear descriptions of its key services including email marketing, progress bars to increase average order value, back-in-stock notifications, reviews management, loyalty programs, product recommendations, and popup marketing tools. Technically, the site is built on Webflow CMS, leveraging modern web technologies and Google services for analytics and user interaction tracking. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy and GDPR hosting claims, though cookie consent mechanisms are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and business presence appear credible. Overall, the site scores well in business credibility and technical implementation but could improve in security and privacy compliance.

B

Bold Commerce

shappify.com

66

Bold Commerce is a Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms such as Magento, Adobe Commerce, OpenCart, and Shopify. The company targets payment companies and merchants seeking advanced checkout experiences including Apple Pay, Google Pay, and PayPal Fastlane. Bold Commerce holds a strong market position as an established provider with a medium-sized business footprint founded in 2014. Technically, the website is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, and integrates multiple marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and OneTrust for cookie consent. The site is well optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and a bug bounty program in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, with extensive user tracking balanced by privacy controls.

S

Studio Družba

studiodruzba.cz

44

Studio Družba is a small creative agency based in Vysoké Mýto, Czech Republic, founded in 2015. The company specializes in marketing, branding, graphic design, video production, animation, and photography services. Their website reflects a professional and consistent brand image, targeting businesses seeking creative and visual identity solutions. The company maintains a portfolio of client projects and emphasizes education and content creation for social media. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by Wedos. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit security policies. No incident response or vulnerability disclosure information is publicly available. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

M

Media Heroes s.r.o.

mediaheroes.cz

55

Media Heroes s.r.o. is a Czech-based digital agency specializing in web development and internet marketing services. The company positions itself as a provider that saves clients time and helps them navigate the complexities of internet marketing. The website is professionally designed, targeting businesses and individuals in the Czech Republic seeking digital marketing and web creation services. The content is primarily in Czech and reflects a small to medium-sized agency with a local market focus. Technically, the website employs a modern technology stack including jQuery, Google Fonts, Google Analytics, Facebook Pixel, Smartlook, Leady tracking, and Cookiebot for cookie consent management. The site is mobile optimized and includes SEO best practices such as meta tags and Open Graph data. However, no CMS or hosting provider information is explicitly detected. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, indicating some attention to privacy. Cookie consent is implemented comprehensively via Cookiebot, categorizing cookies by purpose and provider. However, no WHOIS data is available, which reduces transparency and trustworthiness. No explicit privacy policy or terms of service pages were found in the provided content, and no security or incident response policies are visible. The site uses multiple third-party marketing and analytics tools, which increases tracking but is managed with user consent. Overall, the website presents a legitimate and professional digital agency with good privacy compliance and marketing transparency. The lack of WHOIS data and explicit privacy/security policies are areas for improvement. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing contact information for incident response to increase trust and compliance.

T

Téma 21

tema21.cz

61

Téma 21 is a newly established (2024) Czech media platform specializing in journalism, interviews, podcasts, and articles. It targets Czech and Slovak audiences interested in in-depth media analysis and current affairs. The website demonstrates a professional and modern design, leveraging technologies such as Tailwind CSS and Font Awesome, hosted via Websupport. GDPR compliance is well implemented with a clear cookie consent mechanism and privacy policy. However, explicit contact information and terms of service are not prominently available, which could be improved for better transparency. Security posture is good with HTTPS and some security best practices, though additional security headers and incident response details are recommended. Overall, the platform presents high-quality content with excellent user experience and trustworthy branding.

P

Podnik podporující zdraví

podnikpodporujicizdravi.cz

62

The website 'Podnik podporující zdraví' represents a Czech government-recognized program focused on promoting health in workplaces through an annual competition and certification system. Established since 2005, it targets Czech legal entities and organizations committed to employee health and well-being. The site provides information about the competition, criteria, awarded companies, and related conferences. Technically, the website uses modern JavaScript libraries such as Google Analytics, Google Tag Manager, Flickity for carousels, and lazy loading for images, indicating a moderate level of digital maturity. The site is mobile optimized with good navigation and professional design. Security posture is adequate with HTTPS usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the official nature of the content and references to government bodies support its legitimacy. Overall, the website is a credible resource for workplace health promotion in the Czech Republic, with recommendations to enhance privacy compliance and security transparency.

M

ÚVOD | Máme to na talíří a není nám to jedno

mametonataliri.cz

52

The website www.mametonataliri.cz is a Czech language site focused on providing information about school catering systems. It appears to be a small-scale business or informational site hosted on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site content is accessible and does not present any WAF or security challenge barriers. However, the absence of WHOIS data and registrant information raises concerns about domain registration transparency. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks advanced security headers and analytics integrations. Overall, the security posture is basic, with room for improvement in privacy compliance and business credibility.

D

Důvěřuj svému lékaři

antibiotickarezistence.cz

46

The website 'Důvěřuj svému lékaři' is an educational campaign focused on raising awareness about antibiotic resistance in the Czech Republic. It targets both the general public and healthcare professionals, providing information on the risks of antibiotic misuse and the global threat posed by resistant bacteria. The site is supported by the State Health Institute, indicating a government or public health affiliation. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for tracking. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by adding explicit security policies and headers. WHOIS data is unavailable, which slightly reduces trust but the official branding and content quality support legitimacy. Overall, the site is a credible, informative resource with room for enhanced privacy and security compliance.

T

TENDERMARKET

tendermarket.cz

48

TenderMarket.cz is a Czech language website focused on providing information and guidance related to tendering and procurement processes, targeting suppliers and contracting authorities. The platform appears to serve as an informational resource rather than a transactional or e-commerce site. The website uses modern web technologies such as Angular and Material Design components, hosted on Czech hosting infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and explicit security policies are not evident, indicating room for improvement in security posture. The domain is well aged and registered with a reputable Czech registrar, supporting the legitimacy of the business. Overall, the site is functional but basic in content and compliance features.

The website egordion.tendersystems.cz is a government-related public procurement platform primarily serving Czech public sector entities such as the City of Prague. It provides listings of public tenders, filtering options, and supplier registration functionalities. The platform is built on legacy JavaServer Faces technology with RichFaces and Ajax4jsf components, indicating a mature but dated technical infrastructure. Google Analytics is used for visitor tracking, but no visible privacy or cookie policies are present, which is a compliance gap. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosures. The absence of WHOIS data reduces domain trustworthiness, though the content and references to official government usage suggest legitimacy. Overall, the site is functional but would benefit from modernization, improved privacy compliance, and enhanced security measures.

The website uzitecnyweb.cz is currently inaccessible, returning a 403 Forbidden error page which blocks all content and metadata. The domain is registered since 2009 with REG-ZONER, indicating a long-standing registration, but no accessible business or contact information is available on the site. Due to the blocked content, no technical infrastructure details, security policies, or business descriptions can be extracted. The lack of HTTPS and security headers further reduces the security posture. Overall, the site appears inactive or restricted, limiting its digital maturity and trustworthiness.

B

Blueboard.cz Webhosting s.r.o.

blueboard.cz

61

Blueboard.cz Webhosting s.r.o. is a Czech Republic-based technology company specializing in domain registration, web hosting, server rental, and bulk email marketing services. With over 20 years of experience and a solid customer base including notable clients like Seznam.cz and Ford, the company positions itself as a reliable and comprehensible service provider for individuals and businesses seeking digital presence solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and Plausible Analytics for tracking, and uses Crisp Chat for customer support. The site is mobile-optimized and performs moderately well, although accessibility features could be improved. Security-wise, HTTPS is enforced, and forms include validation, but the absence of security headers and cookie consent mechanisms indicates room for enhancement in security posture and privacy compliance. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data transparency is a concern, as it limits trust verification. The website does not publish explicit security policies or incident response contacts, which could be improved to strengthen security culture and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security disclosures. Strategically, Blueboard should focus on improving transparency by resolving WHOIS data issues, implementing comprehensive cookie consent, publishing security policies, and adopting security headers. These steps will enhance user trust, compliance with GDPR, and overall security resilience.

I

InstaWP

instawp.io

63

InstaWP is a specialized cloud platform focused on rapid WordPress site deployment and hosting, targeting developers, agencies, and freelancers. The platform offers instant site creation, reusable snapshots, migration tools, and a marketplace for templates and WaaS solutions. The business is positioned as a nimble, technology-driven service with a pay-as-you-go hosting model and no long-term commitments. Technically, the website is built on WordPress with Elementor and uses modern caching and SEO plugins, supported by Cloudflare DNS and NameCheap domain registration. The site is well-optimized for performance, mobile responsiveness, and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but could improve transparency on privacy and security policies.

M

Ministerstvo pro místní rozvoj ČR

dotaceeu.cz

60

The website dotaceeu.cz serves as the official Czech government portal dedicated to European Union funds in the Czech Republic. It provides comprehensive information on EU funding programs, project maps, calls for proposals, events, and statistical data. The portal targets a broad audience including citizens, public institutions, and businesses interested in EU funding opportunities. The site is well-established, with a domain registered since 2004, and is operated by the Ministry of Regional Development of the Czech Republic. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and APIs such as jQuery, Bootstrap, Google Maps, and Chart.js. It integrates tracking and analytics tools like Hotjar and Google Tag Manager, alongside a live chat service for user support. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms, though it lacks explicit HTTP security headers and dedicated security policy pages. Overall, the site demonstrates a strong security posture with no visible vulnerabilities or suspicious content. The domain WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and maintaining regular security audits to uphold compliance and user trust.

M

Ministerstvo práce a sociálních věcí

lepsipribeh.cz

65

The website 'Lepší příběh' is a government-backed platform managed by the Czech Ministry of Labour and Social Affairs, funded by the European Social Fund. It focuses on social inclusion, employment support, and education initiatives across the Czech Republic. The site showcases various projects and success stories aimed at improving lives, targeting a broad audience including families, seniors, and marginalized groups. Technically, the site is built on the Liferay CMS platform with modern JavaScript frameworks like React and jQuery, providing a responsive and functional user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. The absence of WHOIS data reduces domain trust verification, but the content and branding strongly suggest legitimacy. Overall, the site is a credible government resource with moderate technical maturity and some compliance gaps.

I

Internet Projekt, a.s.

cng.cz

65

The website www.cng.cz represents a professional platform operated by Internet Projekt, a.s., focused on providing information and services related to compressed natural gas (CNG) refueling stations across the Czech Republic. It serves vehicle owners and fleet operators who utilize CNG as an alternative fuel, offering detailed station locations, pricing, payment options, and route planning tools. The site demonstrates a solid market position within the energy and transportation sectors in the region. Technically, the website employs modern web technologies including Google Maps API for geolocation services, jQuery for DOM manipulation, and Cookiebot for cookie consent management. It integrates Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, which are positive indicators. However, the absence of visible security headers and lack of explicit privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Overall, the website is functional, professional, and serves its business purpose well, but it would benefit from enhanced transparency regarding privacy, security policies, and contact information to strengthen user trust and compliance posture.

The website prepis.innogy.cz serves as an online platform for innogy, a major energy company in the Czech Republic, offering convenient online services for electricity and gas contract transfers. The site targets both households and businesses, providing detailed guides, video tutorials, and customer support channels to facilitate energy contract changes efficiently. The business model focuses on digital customer engagement and streamlined service delivery in the energy sector, positioning innogy as a trusted and accessible energy provider in the Czech market. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets for customer interaction. The site is well-structured with responsive design, good accessibility features, and SEO optimization. However, no CMS or hosting provider details were explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit HTTP security headers and a published vulnerability disclosure policy. No WHOIS registration data was found, which slightly reduces trustworthiness but the strong brand presence and consistent content mitigate concerns. Contact information is clearly provided, including phone numbers and interactive forms, supporting good user engagement. Overall, the website demonstrates a solid digital presence with good content quality and user experience. Security posture is adequate but could be improved by adding security headers and formal incident response information. The absence of WHOIS data is a notable gap. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain a robust security and compliance posture.

I

innogy

ipremium.cz

67

Innogy.cz operates as a major energy provider in the Czech Republic, serving over 1.7 million customers with electricity, natural gas, and related services. The website premium.innogy.cz focuses on the innogy Premium customer loyalty program, offering discounts and monthly contests to enhance customer engagement. The company positions itself as a leading energy supplier with a large workforce and a broad market presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is professional, user-friendly, and trustworthy, but the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

I

innogy Česká republika a.s.

innosvet.cz

67

Innogy Česká republika a.s. operates a professional energy supply and customer management portal branded as 'innosvět'. The website targets Czech energy consumers, offering services such as electricity and gas supply, consumption monitoring, and online account management. The company is positioned as a major energy provider in the Czech Republic with a large customer base. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's branding, structured data, and contact information strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a reliable digital platform for energy customers.

O

ORLEN

orlen.cz

73

ORLEN Česká republika operates the largest network of fuel stations in the Czech Republic, providing quality fuels and convenience services such as Stop Cafe. The company holds a strong market position as a leading energy retailer in the region, supported by its parent company PKN ORLEN S.A. The website reflects a mature digital presence with localized content, professional design, and compliance with privacy regulations including GDPR. Technically, the site uses Kentico CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and enforces HTTPS with appropriate security headers. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of a public security policy and incident response page suggests room for improvement. Overall, the domain's privacy-protected WHOIS data is typical for corporate entities and does not raise suspicion. The site is safe for general audiences and well-optimized for SEO and mobile use.

E

eSports.cz, s.r.o.

hcvl.cz

45

HC VERVA Litvínov is a Czech ice hockey club with an official website providing comprehensive information about the team, including news, match schedules, ticket sales, and multimedia content. The site targets hockey fans and the local community, offering a professional and consistent brand experience supported by official partners and sponsors. The business operates under eSports.cz, s.r.o., indicating a structured media and sports engagement model. Technically, the website uses modern JavaScript libraries such as Swiper.js and BaguetteBox.js, with a custom CMS likely in place. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious WHOIS inconsistencies were found, and the domain registration aligns well with the business identity. Overall, the site is moderately secure and compliant with GDPR, but could improve in security best practices and transparency.

P

Paramo, a.s.

paramo.cz

58

Paramo, a.s. is a Czech-based petrochemical company operating as a subsidiary of the ORLEN Unipetrol group. The company specializes in the production and distribution of process oils, asphalt products, and motor oils, serving primarily industrial and business clients in the Czech Republic and neighboring countries. The website reflects a professional corporate presence with detailed product information, news updates, and comprehensive contact details. It is built on Microsoft SharePoint and integrates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is accessible, GDPR compliant, and includes social media channels for broader engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is likely due to privacy protection policies, but the website's affiliation with the ORLEN group and consistent branding support its legitimacy.

S

Spolana

spolana.cz

67

Spolana is a Czech chemical company operating primarily in the energy and chemical production sector, likely a subsidiary or closely related to Unipetrol and Orlen group companies. The website is built on Microsoft SharePoint and uses modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is primarily in Czech and targets industrial clients and partners. The presence of Google Analytics and Cookiebot indicates a moderate level of user tracking with GDPR compliance mechanisms in place. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable from the CZ NIC registry, which reduces trust slightly but is not uncommon for domains under certain registries or privacy policies. Overall, the website is professional, functional, and compliant with privacy regulations, serving a large industrial business audience.

B

Butadien Kralupy

butadien.cz

64

Butadien Kralupy is a corporate website representing a subsidiary of the ORLEN Group, a major energy and chemical production conglomerate in Central Europe. The site provides information about the company and its operations primarily in Czech language, targeting industry professionals and partners. The website is built on Microsoft SharePoint and uses common web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. It integrates Google Analytics and Google Tag Manager for analytics and tracking purposes. The site implements a comprehensive cookie consent mechanism and a detailed privacy policy, indicating good privacy compliance and GDPR adherence. However, the absence of WHOIS data and lack of visible contact information on the main page reduce overall trustworthiness. Security posture is moderate with no visible security headers and no explicit security or incident response policies published. Overall, the website is professional and functional but could improve transparency and security practices.

Polymer Institute Brno is a corporate entity under the ORLEN Group umbrella, specializing in polymer research and production. The website serves as an information portal for industry professionals and partners, providing detailed insights into their polymer technologies and services. The site is primarily in Czech and targets a regional audience in the energy and chemical sectors. Technically, the site is built on Microsoft SharePoint with integration of modern tools such as Cookiebot for consent management and Google Analytics for user behavior tracking. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a strong commitment to GDPR compliance. Security-wise, while HTTPS is presumably enabled, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy, with no signs of malicious activity or content blocking.

O

ORLEN Unipetrol Doprava

orlenunipetroldoprava.cz

60

ORLEN Unipetrol Doprava operates in the energy and transportation sectors, focusing on logistics and transport services related to petrochemical products. The company is part of the ORLEN group, a significant player in the regional energy market. The website reflects a professional corporate presence with a focus on compliance and user privacy, evidenced by a comprehensive privacy policy and cookie consent mechanism. The technical infrastructure is based on Microsoft SharePoint with modern web technologies such as jQuery and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and mobile optimization. Overall, the website is trustworthy and serves its business audience effectively.

O

ORLEN Unipetrol Hungary

orlenunipetrol.hu

66

ORLEN Unipetrol Hungary operates as a significant entity within the ORLEN Group, focusing on energy and petrochemical products. The website reflects a corporate presence with detailed information about subsidiaries and related companies, targeting a general audience interested in energy sector services. The technical infrastructure is based on Microsoft SharePoint, enhanced with modern JavaScript libraries and cookie consent management via Cookiebot, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent compliance, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates good professionalism and compliance with GDPR, supporting trustworthiness and business credibility.