Security Directory

S

Sparkys

sparkys.cz

58

Sparkys.cz is a prominent Czech Republic-based e-commerce retailer specializing in toys and children's products. The website positions itself as the largest online toy store in the country, offering a wide range of products including popular brands such as LEGO, Barbie, and Fisher Price. The business model focuses on online sales complemented by fast delivery and personal pickup options at physical stores. The target audience primarily includes parents and children seeking quality toys. The website demonstrates consistent branding and good content quality, supporting its market position effectively. From a technical perspective, the website employs a modern JavaScript-based infrastructure with multiple third-party integrations for analytics, advertising, and user experience enhancements. Technologies such as Google Tag Manager, Facebook Pixel, TikTok Pixel, Hotjar, and Adform are used for tracking and marketing purposes. The site is mobile-optimized and shows good SEO practices, although accessibility features could be improved. Performance is moderate, with room for optimization. Security-wise, the site enforces HTTPS with good SSL configuration and includes standard security headers. Forms use secure POST methods, and no sensitive data is exposed in the HTML. However, there is no explicit security policy or incident response information available on the site, which could be improved to enhance trust and compliance. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for e-commerce businesses. Overall, Sparkys.cz presents a trustworthy and professional online retail platform with a solid security posture and compliance with privacy regulations. Strategic improvements in security transparency, accessibility, and performance could further strengthen its market standing and user trust.

A

ARMED STORE s.r.o.

armed.cz

63

ARMED STORE s.r.o. operates the largest army shop in the Czech Republic, offering a broad range of military, tactical, hunting, and survival products both online and through physical stores located in major cities such as Prague, Brno, Tábor, and Vyškov. The company targets military enthusiasts, law enforcement personnel, hunters, and survivalists, providing a comprehensive product catalog including firearms, ammunition, clothing, and accessories. The business model is primarily e-commerce supported by physical retail locations, positioning itself as a market leader in its niche within the Czech Republic. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Persoo for personalization. The site is well-structured with JSON-LD structured data for SEO and social media integration. Performance and mobile optimization are good, though accessibility features are basic. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML content. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malware indicators were detected in the provided content. The absence of WHOIS data due to privacy protection is noted but considered justified given the nature of the business. Overall, the website presents a professional and trustworthy front with good business credibility and technical implementation. Privacy compliance could be improved by publishing a clear privacy policy and terms of service. Security posture would benefit from enhanced headers and transparency around incident response. The domain's WHOIS privacy protection is typical for this sector and does not significantly detract from legitimacy.

G

Úvodní stránka | GrandOptical

grandoptical.cz

70

GrandOptical.cz is a Czech Republic-based retail business specializing in optical products including prescription glasses, sunglasses, and contact lenses. The website offers a broad product catalog from global and exclusive brands, supported by professional optometrist services and physical store locations across the country. The business model combines e-commerce with brick-and-mortar retail, targeting general consumers seeking quality eyewear and eye care services. The site is well-branded and professionally designed, providing a good user experience with clear navigation and mobile optimization. Technically, the website employs modern technologies such as Google Tag Manager for analytics and Algolia for search functionality, indicating a mature digital infrastructure. The site uses HTTPS with security features like CSRF tokens and reCAPTCHA, enhancing security posture. However, the absence of visible security headers and formal privacy or cookie policies suggests room for improvement in compliance and security best practices. Security-wise, the site shows a moderate security posture with encrypted connections and anti-CSRF measures but lacks explicit privacy and cookie policies, security.txt, or vulnerability disclosure information. No WHOIS data is publicly available, likely due to privacy protection, which slightly reduces transparency but is common for retail businesses. No suspicious or malicious indicators were found in the website content or external links. Overall, GrandOptical.cz presents a legitimate, professional retail website with good content and technical implementation but would benefit from enhanced privacy compliance and security transparency to improve trust and regulatory adherence.

M

M&K Home Textile

mkluzkoviny.cz

66

M&K Home Textile operates the website MKLuzkoviny.cz, an established e-commerce platform specializing in home textiles such as bedding, sheets, blankets, and related products primarily targeting consumers in the Czech Republic. The website offers a broad catalog of over 1,200 products and positions itself as a trusted regional retailer with a professional online presence. The business model focuses on direct online sales with additional offerings for hotel supplies, indicating a diversified retail approach within the home textile sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Exponea analytics for marketing and user behavior tracking. The site is SSL secured and shows good mobile optimization and SEO practices, although the CMS and hosting provider remain unidentified. Performance is moderate with room for improvement in accessibility and security header implementation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside cookie consent mechanisms aligned with GDPR principles. However, the absence of explicit privacy policy and terms of service pages, as well as no visible incident response or vulnerability disclosure information, indicates gaps in compliance and transparency. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear credible. Overall, the website presents a solid retail platform with good user experience and marketing integration but requires enhancements in privacy compliance, security transparency, and domain registration verification to strengthen trust and regulatory adherence.

T

Homepage - Travel FREE – Europe's No. 1 Bordershop

travel-free.cz

58

Travel FREE is a retail business operating Europe's No. 1 Bordershop, targeting general consumers interested in cross-border shopping. The website presents a professional appearance with a clear business focus on retail and travel-related shopping services. The company promotes a mobile app available on both Apple App Store and Google Play, indicating a digital engagement strategy. The technical infrastructure includes modern web technologies such as Google Tag Manager and Usercentrics for consent management, ensuring compliance with cookie regulations. The website is accessible without any blocking or WAF challenges, and it uses HTTPS to secure communications. However, the absence of publicly available WHOIS data and lack of explicit privacy policy or contact information reduces transparency and trustworthiness to some extent. Security posture is moderate with room for improvement in security headers and published policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

G

GE Aviation Czech s.r.o.

geturboprops.com

66

GE Aviation Czech s.r.o. operates as the turboprop division of GE Aviation, specializing in the design, development, manufacturing, and servicing of GE H-Series and Catalyst™ turboprop engines. The website targets aerospace industry professionals, customers, and potential employees, providing detailed product information, customer support options, and career opportunities. The company is positioned as a medium-sized entity within the transportation and technology sectors, backed by the global GE Aviation brand. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, and reCAPTCHA for bot protection. It features a responsive design optimized for mobile devices and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish a dedicated security policy or incident response contacts. The absence of WHOIS registration data is a notable transparency gap, though the website's professional branding and external links to official GE resources support its legitimacy. Overall, the website presents a professional and trustworthy front for GE Aviation Czech's turboprop business, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS data visibility to strengthen trust and compliance.

G

Generali penzijní společnost, a.s.

pfcp.cz

52

Generali penzijní společnost, a.s. is a leading Czech pension company offering state-supported pension savings and investment products. The website targets adults, children, and pensioners, providing comprehensive pension plans, investment funds, and employer contribution options. It holds a strong market position with nearly one million clients and is part of the larger Generali Group. The site is professionally designed with clear navigation and rich content focused on pension savings benefits and state support. Technically, the website employs modern JavaScript libraries, tracking tools, and cookie consent mechanisms, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, compliant, and well-positioned in the finance sector.

T

Terezia.eu | Doplňky stravy z léčivých hub a rostlin | Úvodní strana

terezia.eu

65

Terezia.eu is an e-commerce website specializing in dietary supplements derived from medicinal mushrooms and plants. The site targets a general audience interested in health and natural supplements, offering products primarily in the Czech market with alternate language support for English and Slovak. The business appears to be small-sized with a focused product offering. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, Hotjar, and Meta Platforms. The site is accessible over HTTPS and implements a comprehensive cookie consent mechanism, reflecting a good level of privacy compliance. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible company contact information, limits full transparency and business credibility. Security posture is moderate with no visible security headers and no exposed vulnerabilities detected in the provided data. Overall, the website is professionally designed with good user experience and moderate SEO and accessibility features.

K

Konsepti

konsepti.com

60

Konsepti is a Czech Republic-based luxury design furniture retailer and interior design service provider, offering premium products from renowned international brands such as B&B Italia, Knoll, and Vitra. The company targets both residential and commercial clients, including B2B projects, positioning itself as a premium player in the retail furniture and interior design market. The website reflects a professional digital presence with good content quality, clear navigation, and modern design elements. Technically, the site uses popular analytics and tracking tools like Google Analytics, Google Tag Manager, and Hotjar, and is served over HTTPS ensuring secure communication. However, the absence of publicly available WHOIS data for the domain raises transparency concerns, and the lack of a dedicated privacy policy page and security headers indicates room for improvement in compliance and security posture. Overall, the site is accessible and functional with moderate security maturity but would benefit from enhanced transparency and formalized privacy and security documentation.

E

ELNINO.CZ

parfemy-elnino.cz

57

ELNINO.CZ is a well-established Czech e-commerce retailer specializing in perfumes and cosmetics, boasting over 21 years of market presence and a large inventory exceeding one million items. The website targets a general audience seeking quality fragrance and cosmetic products with fast delivery services. Technically, the site employs modern web technologies including progressive web app features, Google Analytics, and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Security-wise, the site enforces HTTPS and uses service workers but lacks visible security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not clearly presented, which impacts compliance and user trust. The absence of WHOIS data due to privacy protection slightly reduces trustworthiness but is common for e-commerce businesses. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

F

FotoŠkoda

fotoskoda.cz

61

FotoŠkoda is a leading Czech Republic-based retailer specializing in digital photography and videography equipment, including cameras, lenses, tripods, memory cards, and video cameras. The company operates both an e-commerce platform and a physical store located in Prague, offering a comprehensive range of products and services such as photographic courses, photo development, and printing. Their market position is strong as the largest photo and video equipment store in the country, targeting photography enthusiasts, professionals, and institutional clients. The website is well-structured, professionally designed, and provides extensive product categorization and service information, enhancing user experience and trust. Technically, the website employs modern web technologies including asynchronous JavaScript loading, Google Tag Manager, Google Analytics, and Persoo personalization tools, all integrated with a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Performance is moderate with optimizations such as PageSpeed CSS and script management. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a dedicated security policy or incident response contact limits transparency in security governance. Privacy compliance is robust with clear privacy and cookie policies and active consent management. Overall, FotoŠkoda presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic recommendations include publishing a formal security policy, establishing incident response contacts, enhancing accessibility, and maintaining vigilance on third-party script security to further strengthen their security posture and compliance.

A

Asociace.BIZ

asociace.biz

54

Asociace.BIZ is a Czech Republic-based association that unites leading digital and development agencies, providing networking opportunities, knowledge sharing, and organizing the Internet Effectiveness Awards (IEA). The website is professionally designed, mobile-optimized, and offers clear navigation with relevant content targeting digital agencies and internet solution providers. The technical infrastructure includes modern web technologies such as Google Tag Manager and Google Analytics, with lazy loading and web fonts enhancing performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which impacts trust and transparency. Overall, the website presents a credible business presence with room for improvement in security and contact transparency.

N

nexum Magyarország Kft.

karrierportal.hu

62

Karrier Portál, operated by nexum Magyarország Kft., is a well-established Hungarian recruitment software provider with a history dating back to 2002. The company offers a comprehensive online recruitment platform targeting HR professionals and recruiters, emphasizing fast deployment and continuous development. The website reflects a professional B2B SaaS business model with a consistent brand presence and a clear focus on recruitment technology solutions. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a responsive design optimized for mobile devices. However, it lacks some advanced security headers and formal privacy documentation. Security posture is moderate with HTTPS implied but no explicit security policies or incident response information published. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

Mobiliti is a Hungarian company specializing in electric and gas mobility services, positioning itself as the market leader in Hungary. The company offers a range of services including e-mobility charging, gas mobility (CNG), and additional services such as electronic vignettes and parking solutions. The website reflects a professional and consistent brand image aligned with the MVM Group, a major energy sector player in Hungary. The target audience includes Hungarian consumers and businesses interested in sustainable mobility solutions. The business model focuses on providing infrastructure and services for electric and gas-powered vehicles, supporting Hungary's transition to cleaner transportation.

H

Hotel Panoráma Balatongyörök

hotelpanorama.hu

38

Hotel Panoráma Balatongyörök is a well-established hospitality business located in Hungary, offering accommodation, wellness, dining, and event services. The website reflects a mature digital presence with multiple awards and customer testimonials enhancing its market credibility. The business targets leisure travelers including families, seniors, and corporate clients, positioning itself as a trusted regional hotel with direct booking advantages. Technically, the site is built on WordPress using modern plugins and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved and formal security policies published. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site demonstrates a professional and trustworthy online presence suitable for its industry and audience.

M

MVM Lumen Kft.

mvmlumen.hu

60

MVM Lumen Kft. is a Hungarian company specializing in public lighting and lighting services, operating as part of the MVM Group. The company focuses on providing public lighting maintenance, lighting technology modernization, and indoor lighting wholesale services primarily to municipalities and public sector clients. The website reflects a professional corporate presence with consistent branding and clear navigation. Technically, the site uses JavaServer Faces with PrimeFaces and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and accessible privacy policy. Overall, the website is trustworthy and aligns well with the company's business profile.

M

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt.

mvmtavho.hu

61

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt. is a regional energy company specializing in district heating services for the Oroszlány and Szolnok areas in Hungary. The website acts as a portal directing users to localized district heating service sites, reflecting a focused business model in the energy utility sector. The company appears to be a medium-sized entity founded in 2020, likely part of the larger MVM group, a major Hungarian energy provider. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, and uses responsive design techniques to ensure usability across devices. However, the site lacks advanced SEO and accessibility features and does not appear to use a CMS or complex frameworks. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms on the landing page, which is positive. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is functional and consistent with its business purpose but requires enhancements in privacy compliance, security best practices, and user contact information to improve trust and regulatory adherence.

M

MVM

mvmhomeandpro.hu

60

MVM Home & Pro is a Hungarian energy efficiency solutions provider operating under the MVM brand, a leading Central European energy group. The website offers a range of energy-saving products and programs targeted at residential customers, including home renovation programs and energy-efficient devices. The company positions itself as a trusted partner in sustainable energy consumption with a focus on carbon neutrality by 2035. Technically, the website is built on a JavaServer Faces framework with PrimeFaces UI components, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the website is legitimate, well-branded, and compliant with GDPR, reflecting a mature digital presence for a large energy sector entity.

M

MVM Next

mvmnext.hu

59

MVM Next is a prominent Hungarian energy company specializing in electricity and natural gas supply and distribution. The company operates multiple subsidiaries responsible for various aspects of energy delivery, including gas and electricity distribution, public lighting, and district heating. The website serves both residential and business customers, offering online services such as billing, customer support, and energy-related products like solar panels and insurance. The company maintains a strong market position as a major national utility provider in Hungary.

R

REICO

reico.cz

65

REICO is a Czech-based asset management company specializing in real estate investment funds and capital market instruments, with over 15 years of market presence. The company operates under the umbrella of Česká spořitelna a.s., a major Czech financial institution, which enhances its market credibility and trustworthiness. The website reflects a professional and well-structured digital presence, targeting investors interested in real estate and financial products. The content is relevant, well-organized, and supported by comprehensive legal and privacy documentation, indicating a mature compliance posture. Technically, the website leverages modern web technologies including JavaScript, jQuery, and the proprietary GEM framework by Erste Group, hosted on Erste Group's CDN infrastructure. The site is responsive and optimized for mobile devices, with good SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. No critical vulnerabilities or suspicious content were detected, and the domain's WHOIS data is privacy protected, which is typical for financial services. Overall, REICO's website demonstrates a solid business and technical foundation with good security hygiene, suitable for its industry and audience. Strategic improvements in security transparency and performance optimization would further strengthen its posture.

O

OUR MEDIA SR a. s.

pravda.sk

60

Pravda.sk is a leading Slovak online news media portal operated by OUR MEDIA SR a. s. It provides comprehensive news coverage including politics, sports, culture, health, and entertainment targeted at a general Slovak audience. The website features multimedia content such as videos and podcasts, supported by a robust advertising and analytics infrastructure. Technically, the site employs modern web technologies and multiple analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and consent management, although explicit privacy and terms of service documents are not found in the provided content. Overall, the site is legitimate, professionally maintained, and trusted within its market segment.

L

La Vanguardia

lavanguardia.com

68

La Vanguardia is a prominent Spanish news media company providing up-to-date news and information focused on Catalunya, Spain, and global events. The website serves a broad general audience with a comprehensive digital news platform supported primarily by advertising revenue. The company maintains a strong market position as a leading regional and national news outlet in Spain. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, multiple ad networks, and a consent management platform to ensure GDPR compliance. The infrastructure is optimized for performance and mobile responsiveness, delivering an excellent user experience. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of news content.

O

OnVoard

onvoard.com

63

OnVoard is a specialized ecommerce marketing platform offering a suite of integrated marketing applications designed to help online merchants increase revenue with minimal effort. The platform targets ecommerce businesses and integrates with major platforms such as Shopify, BigCommerce, EasyStore, and Wix. The website presents a professional and consistent brand image with clear descriptions of its key services including email marketing, progress bars to increase average order value, back-in-stock notifications, reviews management, loyalty programs, product recommendations, and popup marketing tools. Technically, the site is built on Webflow CMS, leveraging modern web technologies and Google services for analytics and user interaction tracking. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy and GDPR hosting claims, though cookie consent mechanisms are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and business presence appear credible. Overall, the site scores well in business credibility and technical implementation but could improve in security and privacy compliance.

B

Bold Commerce

shappify.com

66

Bold Commerce is a Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms such as Magento, Adobe Commerce, OpenCart, and Shopify. The company targets payment companies and merchants seeking advanced checkout experiences including Apple Pay, Google Pay, and PayPal Fastlane. Bold Commerce holds a strong market position as an established provider with a medium-sized business footprint founded in 2014. Technically, the website is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, and integrates multiple marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and OneTrust for cookie consent. The site is well optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and a bug bounty program in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, with extensive user tracking balanced by privacy controls.

P

Podnik podporující zdraví

podnikpodporujicizdravi.cz

62

The website 'Podnik podporující zdraví' represents a Czech government-recognized program focused on promoting health in workplaces through an annual competition and certification system. Established since 2005, it targets Czech legal entities and organizations committed to employee health and well-being. The site provides information about the competition, criteria, awarded companies, and related conferences. Technically, the website uses modern JavaScript libraries such as Google Analytics, Google Tag Manager, Flickity for carousels, and lazy loading for images, indicating a moderate level of digital maturity. The site is mobile optimized with good navigation and professional design. Security posture is adequate with HTTPS usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the official nature of the content and references to government bodies support its legitimacy. Overall, the website is a credible resource for workplace health promotion in the Czech Republic, with recommendations to enhance privacy compliance and security transparency.

D

Důvěřuj svému lékaři

antibiotickarezistence.cz

46

The website 'Důvěřuj svému lékaři' is an educational campaign focused on raising awareness about antibiotic resistance in the Czech Republic. It targets both the general public and healthcare professionals, providing information on the risks of antibiotic misuse and the global threat posed by resistant bacteria. The site is supported by the State Health Institute, indicating a government or public health affiliation. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for tracking. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by adding explicit security policies and headers. WHOIS data is unavailable, which slightly reduces trust but the official branding and content quality support legitimacy. Overall, the site is a credible, informative resource with room for enhanced privacy and security compliance.

B

Blueboard.cz Webhosting s.r.o.

blueboard.cz

61

Blueboard.cz Webhosting s.r.o. is a Czech Republic-based technology company specializing in domain registration, web hosting, server rental, and bulk email marketing services. With over 20 years of experience and a solid customer base including notable clients like Seznam.cz and Ford, the company positions itself as a reliable and comprehensible service provider for individuals and businesses seeking digital presence solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and Plausible Analytics for tracking, and uses Crisp Chat for customer support. The site is mobile-optimized and performs moderately well, although accessibility features could be improved. Security-wise, HTTPS is enforced, and forms include validation, but the absence of security headers and cookie consent mechanisms indicates room for enhancement in security posture and privacy compliance. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data transparency is a concern, as it limits trust verification. The website does not publish explicit security policies or incident response contacts, which could be improved to strengthen security culture and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security disclosures. Strategically, Blueboard should focus on improving transparency by resolving WHOIS data issues, implementing comprehensive cookie consent, publishing security policies, and adopting security headers. These steps will enhance user trust, compliance with GDPR, and overall security resilience.

M

Ministerstvo pro místní rozvoj ČR

dotaceeu.cz

60

The website dotaceeu.cz serves as the official Czech government portal dedicated to European Union funds in the Czech Republic. It provides comprehensive information on EU funding programs, project maps, calls for proposals, events, and statistical data. The portal targets a broad audience including citizens, public institutions, and businesses interested in EU funding opportunities. The site is well-established, with a domain registered since 2004, and is operated by the Ministry of Regional Development of the Czech Republic. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and APIs such as jQuery, Bootstrap, Google Maps, and Chart.js. It integrates tracking and analytics tools like Hotjar and Google Tag Manager, alongside a live chat service for user support. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms, though it lacks explicit HTTP security headers and dedicated security policy pages. Overall, the site demonstrates a strong security posture with no visible vulnerabilities or suspicious content. The domain WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and maintaining regular security audits to uphold compliance and user trust.

I

Internet Projekt, a.s.

cng.cz

65

The website www.cng.cz represents a professional platform operated by Internet Projekt, a.s., focused on providing information and services related to compressed natural gas (CNG) refueling stations across the Czech Republic. It serves vehicle owners and fleet operators who utilize CNG as an alternative fuel, offering detailed station locations, pricing, payment options, and route planning tools. The site demonstrates a solid market position within the energy and transportation sectors in the region. Technically, the website employs modern web technologies including Google Maps API for geolocation services, jQuery for DOM manipulation, and Cookiebot for cookie consent management. It integrates Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, which are positive indicators. However, the absence of visible security headers and lack of explicit privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Overall, the website is functional, professional, and serves its business purpose well, but it would benefit from enhanced transparency regarding privacy, security policies, and contact information to strengthen user trust and compliance posture.

The website prepis.innogy.cz serves as an online platform for innogy, a major energy company in the Czech Republic, offering convenient online services for electricity and gas contract transfers. The site targets both households and businesses, providing detailed guides, video tutorials, and customer support channels to facilitate energy contract changes efficiently. The business model focuses on digital customer engagement and streamlined service delivery in the energy sector, positioning innogy as a trusted and accessible energy provider in the Czech market. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets for customer interaction. The site is well-structured with responsive design, good accessibility features, and SEO optimization. However, no CMS or hosting provider details were explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit HTTP security headers and a published vulnerability disclosure policy. No WHOIS registration data was found, which slightly reduces trustworthiness but the strong brand presence and consistent content mitigate concerns. Contact information is clearly provided, including phone numbers and interactive forms, supporting good user engagement. Overall, the website demonstrates a solid digital presence with good content quality and user experience. Security posture is adequate but could be improved by adding security headers and formal incident response information. The absence of WHOIS data is a notable gap. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain a robust security and compliance posture.

I

innogy

ipremium.cz

67

Innogy.cz operates as a major energy provider in the Czech Republic, serving over 1.7 million customers with electricity, natural gas, and related services. The website premium.innogy.cz focuses on the innogy Premium customer loyalty program, offering discounts and monthly contests to enhance customer engagement. The company positions itself as a leading energy supplier with a large workforce and a broad market presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is professional, user-friendly, and trustworthy, but the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

I

innogy Česká republika a.s.

innosvet.cz

67

Innogy Česká republika a.s. operates a professional energy supply and customer management portal branded as 'innosvět'. The website targets Czech energy consumers, offering services such as electricity and gas supply, consumption monitoring, and online account management. The company is positioned as a major energy provider in the Czech Republic with a large customer base. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's branding, structured data, and contact information strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a reliable digital platform for energy customers.

O

ORLEN

orlen.cz

73

ORLEN Česká republika operates the largest network of fuel stations in the Czech Republic, providing quality fuels and convenience services such as Stop Cafe. The company holds a strong market position as a leading energy retailer in the region, supported by its parent company PKN ORLEN S.A. The website reflects a mature digital presence with localized content, professional design, and compliance with privacy regulations including GDPR. Technically, the site uses Kentico CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and enforces HTTPS with appropriate security headers. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of a public security policy and incident response page suggests room for improvement. Overall, the domain's privacy-protected WHOIS data is typical for corporate entities and does not raise suspicion. The site is safe for general audiences and well-optimized for SEO and mobile use.

P

Paramo, a.s.

paramo.cz

58

Paramo, a.s. is a Czech-based petrochemical company operating as a subsidiary of the ORLEN Unipetrol group. The company specializes in the production and distribution of process oils, asphalt products, and motor oils, serving primarily industrial and business clients in the Czech Republic and neighboring countries. The website reflects a professional corporate presence with detailed product information, news updates, and comprehensive contact details. It is built on Microsoft SharePoint and integrates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is accessible, GDPR compliant, and includes social media channels for broader engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is likely due to privacy protection policies, but the website's affiliation with the ORLEN group and consistent branding support its legitimacy.

S

Spolana

spolana.cz

67

Spolana is a Czech chemical company operating primarily in the energy and chemical production sector, likely a subsidiary or closely related to Unipetrol and Orlen group companies. The website is built on Microsoft SharePoint and uses modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is primarily in Czech and targets industrial clients and partners. The presence of Google Analytics and Cookiebot indicates a moderate level of user tracking with GDPR compliance mechanisms in place. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable from the CZ NIC registry, which reduces trust slightly but is not uncommon for domains under certain registries or privacy policies. Overall, the website is professional, functional, and compliant with privacy regulations, serving a large industrial business audience.

B

Butadien Kralupy

butadien.cz

64

Butadien Kralupy is a corporate website representing a subsidiary of the ORLEN Group, a major energy and chemical production conglomerate in Central Europe. The site provides information about the company and its operations primarily in Czech language, targeting industry professionals and partners. The website is built on Microsoft SharePoint and uses common web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. It integrates Google Analytics and Google Tag Manager for analytics and tracking purposes. The site implements a comprehensive cookie consent mechanism and a detailed privacy policy, indicating good privacy compliance and GDPR adherence. However, the absence of WHOIS data and lack of visible contact information on the main page reduce overall trustworthiness. Security posture is moderate with no visible security headers and no explicit security or incident response policies published. Overall, the website is professional and functional but could improve transparency and security practices.

Polymer Institute Brno is a corporate entity under the ORLEN Group umbrella, specializing in polymer research and production. The website serves as an information portal for industry professionals and partners, providing detailed insights into their polymer technologies and services. The site is primarily in Czech and targets a regional audience in the energy and chemical sectors. Technically, the site is built on Microsoft SharePoint with integration of modern tools such as Cookiebot for consent management and Google Analytics for user behavior tracking. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a strong commitment to GDPR compliance. Security-wise, while HTTPS is presumably enabled, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy, with no signs of malicious activity or content blocking.

O

ORLEN Unipetrol Doprava

orlenunipetroldoprava.cz

60

ORLEN Unipetrol Doprava operates in the energy and transportation sectors, focusing on logistics and transport services related to petrochemical products. The company is part of the ORLEN group, a significant player in the regional energy market. The website reflects a professional corporate presence with a focus on compliance and user privacy, evidenced by a comprehensive privacy policy and cookie consent mechanism. The technical infrastructure is based on Microsoft SharePoint with modern web technologies such as jQuery and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and mobile optimization. Overall, the website is trustworthy and serves its business audience effectively.

O

ORLEN Unipetrol Hungary

orlenunipetrol.hu

66

ORLEN Unipetrol Hungary operates as a significant entity within the ORLEN Group, focusing on energy and petrochemical products. The website reflects a corporate presence with detailed information about subsidiaries and related companies, targeting a general audience interested in energy sector services. The technical infrastructure is based on Microsoft SharePoint, enhanced with modern JavaScript libraries and cookie consent management via Cookiebot, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent compliance, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates good professionalism and compliance with GDPR, supporting trustworthiness and business credibility.

O

ORLEN Unipetrol Deutschland

orlenunipetrol.de

63

ORLEN Unipetrol Deutschland is a significant entity within the ORLEN Group, operating primarily in the energy and petrochemical sectors in Germany. The website reflects a corporate B2B focus, providing information about refining and petrochemical products and services. The company maintains a consistent brand presence aligned with its parent company, PKN ORLEN, and its subsidiaries. The digital infrastructure is based on Microsoft SharePoint, indicating a mature but traditional CMS choice. The site employs modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management, demonstrating compliance with GDPR and user privacy standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

O

ORLEN Unipetrol Slovakia s.r.o.

orlenunipetrol.sk

51

ORLEN Unipetrol Slovakia s.r.o. is a medium-sized corporate entity operating in the energy and transportation sectors, specializing in wholesale distribution of fuels and lubricants in Slovakia. It is part of the larger ORLEN Unipetrol group, which is a leading petrochemical and refining conglomerate in Central Europe. The website reflects a professional corporate presence with clear business descriptions, product offerings, and group affiliations. Technically, the site is built on Microsoft SharePoint with integration of modern tools like Cookiebot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with accessible policies. Overall, the site demonstrates a trustworthy and professional digital footprint aligned with its business operations.

R

REMAQ, s.r.o.

remaq.cz

51

REMAQ, s.r.o. is a Czech Republic-based company specializing in the production of high-quality plastic regranulates including polypropylene, polyethylene, and polystyrene. The company positions itself as the leading and fastest growing plastic recycler in the Czech market with a significant presence in Europe. Their business model focuses on manufacturing and recycling plastics with a customer and product-oriented approach, offering both standard and custom-developed products to meet client specifications. The website content is professionally presented, targeting industrial companies involved in plastics processing. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. It uses a custom CMS likely developed by Emersion Software. The site is mobile optimized with good navigation and basic accessibility features. Performance is moderate with no critical technical issues detected. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and explicit security policies are absent. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks security headers and published incident response or vulnerability disclosure information. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of WHOIS registration data is a concern, reducing domain trustworthiness, though the website content and professional presentation support legitimacy. Overall, the website is functional, professional, and compliant with basic privacy requirements but would benefit from enhanced security policies, direct contact information, and improved domain registration transparency.

O

ORLEN Unipetrol RPA

orlenunipetrolrpa.cz

63

ORLEN Unipetrol RPA operates in the energy sector, focusing on refining and petrochemical products primarily for the Czech Republic market. The website reflects a corporate presence with a professional design and consistent branding, targeting business and industrial customers. The company appears to be part of the ORLEN Group, a significant player in the regional energy market. Technically, the website is built on Microsoft SharePoint with common web technologies such as jQuery and Bootstrap, and it integrates modern tools like Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is accessible and mobile-optimized, though performance is moderate. From a security perspective, the website uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no public security or incident response policies are available. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and external references suggest a legitimate corporate entity. Advertising and analytics practices are transparent, using reputable services such as Google Analytics, Hotjar, and Facebook Ads. Overall, the website demonstrates a good level of digital maturity and privacy compliance but would benefit from enhanced security headers, clearer contact information, and public security policies. The domain registration opacity slightly reduces trustworthiness, warranting further verification. Strategic recommendations include improving security posture, publishing incident response and vulnerability disclosure information, and enhancing accessibility features.

P

Petrotrans

petrotrans.cz

65

Petrotrans operates in the energy and transportation sectors, focusing on the logistics and transportation of chemical and petrochemical products primarily in the Czech Republic. The company targets industrial and business clients requiring specialized transport services. The website is built on Microsoft SharePoint and incorporates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent mechanism. However, the absence of WHOIS registrant data and explicit contact details slightly reduces business credibility. Overall, the website is professional, functional, and trustworthy for its business domain.

Solino is a large Polish company specializing in the production of salt brine and related natural resource products, operating under the ORLEN group umbrella. The website reflects a professional corporate presence with a focus on business customers and partners in the energy and industrial sectors. The site uses Adobe Experience Manager CMS and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, but lacks visible direct contact information and terms of service. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the site's affiliation with ORLEN.

Centrum Edukacji is a well-established educational service provider in Poland, operating since 1999 and affiliated with the ORLEN Group. The company offers a broad range of services including technical and developmental training, postgraduate studies, language courses, event organization, and conference services. The website reflects a mature digital presence built on Adobe Experience Manager, with integrated analytics and cookie consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website projects a professional and trustworthy image suitable for its target audience of individuals and corporate clients seeking educational services.

ANWIL is a leading Polish chemical company specializing in the production of nitrogen fertilizers and plastics, operating as a large enterprise under the parent company ORLEN. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations including GDPR. The technical infrastructure leverages Adobe Experience Manager CMS, Google Tag Manager, and Cookiebot for consent management, indicating a modern and compliant setup. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance protection. Overall, the website is trustworthy and well-maintained, supporting ANWIL's market position as a leader in its sector.

Fundacja ORLEN is a Polish non-profit foundation affiliated with the ORLEN Group, operating since 2001. It focuses on social impact through grant and scholarship programs, safety initiatives, and employee volunteering. The website is professionally designed, primarily targeting Polish-speaking audiences interested in corporate social responsibility and community support. Technically, the site is built on Adobe Experience Manager CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers could be improved. WHOIS data is not publicly available, which is typical for .pl domains, but the website content and corporate affiliation support its legitimacy. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.

ORLEN Serwis is a well-established industrial service provider specializing in maintenance, repair, and servicing of industrial installations primarily in Poland, Czech Republic, and Lithuania. The company leverages over 50 years of experience and a workforce of more than 2000 specialists, positioning itself as a key player within the ORLEN Group in the energy sector. Their service offerings include mechanical, electrical, automation, and rotating machinery services, alongside quality control and hydrogen station operations. The website reflects a professional and consistent brand image aligned with their corporate identity. Technically, the website is built on Adobe Experience Manager, indicating a mature enterprise-grade CMS platform. It integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized with good SEO and accessibility features, although some accessibility improvements could be made. Performance is moderate, suitable for the target audience. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, supporting GDPR compliance. However, explicit security policies and incident response contacts are not published, which could be improved to enhance transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, secure, and compliant with privacy regulations, though the lack of WHOIS data transparency and absence of explicit security and incident response documentation slightly reduce trustworthiness. Strategic improvements in these areas would strengthen the company's digital security posture and stakeholder confidence.