Medium-risk security reports

Mobiliti is a Hungarian company specializing in electric and gas mobility services, positioning itself as the market leader in Hungary. The company offers a range of services including e-mobility charging, gas mobility (CNG), and additional services such as electronic vignettes and parking solutions. The website reflects a professional and consistent brand image aligned with the MVM Group, a major energy sector player in Hungary. The target audience includes Hungarian consumers and businesses interested in sustainable mobility solutions. The business model focuses on providing infrastructure and services for electric and gas-powered vehicles, supporting Hungary's transition to cleaner transportation.

MVM NUKA Nukleáris Karbantartó Zrt. is a Hungarian company specializing in nuclear maintenance services as part of the larger MVM Group, a key player in the energy sector. The company provides high-quality electrical, control technology, and mechanical maintenance services primarily for the MVM Paksi Atomerőmű Zrt. and affiliated group companies. The website reflects a professional corporate presence with clear contact information and compliance with GDPR through comprehensive privacy and cookie policies. The site is primarily in Hungarian and targets industry stakeholders and partners within the energy sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Charts, built on the Sitecore CMS platform. The site is mobile optimized with moderate performance and basic accessibility features. Analytics are implemented via Google Analytics with a cookie consent mechanism ensuring user privacy compliance. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration details align well with the business profile, indicating a legitimate and trustworthy entity. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in security transparency and accessibility. The risk level is low, with recommendations to enhance security policy visibility and incident response readiness to further strengthen trust and compliance.

MVM OVIT Zrt. is a well-established Hungarian energy sector company, operating as a wholly owned subsidiary of MVM Energetika Zrt. With over 70 years of experience, it specializes in manufacturing steel structures, power plant machinery, heavy transportation, and electricity supply system operations across Hungary. The company is positioned as a key player within the MVM Group, serving the national energy infrastructure market. The website reflects a professional corporate presence with clear branding and comprehensive information about its services and group affiliations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is likely powered by the Sitecore CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks a dedicated security policy page and explicit incident response contacts, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

Flogiston.hu is a Hungarian company specializing in the manufacturing, servicing, and wholesale distribution of gas consumption meters and related equipment. Established in 2000, it holds a niche position in the Hungarian energy sector, partnering with recognized brands such as Itron and Elster. The website targets industrial and residential customers requiring gas metering solutions and related services. Technically, the site uses a custom CMS with jQuery and common plugins like Nivo Slider and Lightbox, offering moderate performance and basic mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, though a cookie consent mechanism is implemented. Privacy compliance is basic, with a privacy policy present but lacking comprehensive GDPR indicators. Contact information is notably absent from the homepage, reducing user trust and accessibility. Overall, the site is functional but would benefit from enhanced security, privacy, and contact transparency.

MVM CEEnergy Zrt. is Hungary's largest natural gas trader, serving as a key partner to the national universal gas service provider to ensure reliable gas supply to residential consumers. The company operates as part of the MVM Group, a large energy conglomerate with numerous subsidiaries across production, storage, distribution, retail, and services sectors. The website reflects a professional corporate presence with comprehensive information about the company, its subsidiaries, and services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is built on a Sitecore CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is well-structured, compliant with GDPR, and trustworthy.

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

MVM Lumen Kft. is a Hungarian company specializing in public lighting and lighting services, operating as part of the MVM Group. The company focuses on providing public lighting maintenance, lighting technology modernization, and indoor lighting wholesale services primarily to municipalities and public sector clients. The website reflects a professional corporate presence with consistent branding and clear navigation. Technically, the site uses JavaServer Faces with PrimeFaces and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and accessible privacy policy. Overall, the website is trustworthy and aligns well with the company's business profile.

MVM Hálózat is a major Hungarian energy network operator providing electricity and natural gas distribution services through multiple subsidiaries. The website serves as an information portal for customers and stakeholders, offering news updates, fault reporting, and e-invoice services. The site is well-branded and clearly targeted at Hungarian energy consumers and business clients. Technically, the site is built on a Java EE stack using JSF and PrimeFaces, integrating modern libraries such as jQuery, Swiper.js, and Google reCAPTCHA for security. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS enforced and secure cookies, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional, secure, and compliant with relevant privacy regulations.

Magyar Földgáztároló Zrt. is Hungary's largest commercial underground natural gas storage company, operating four storage facilities with significant capacity. The company plays a critical role in ensuring the country's winter gas supply and aims to strengthen Hungary's position in the Central European energy market. The website reflects a professional corporate presence with clear navigation, regulatory information, and customer engagement features such as newsletter subscription. Technically, the site uses standard web technologies including Bootstrap and jQuery, with Google Analytics for visitor tracking. Security practices include HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

MAVIR Zrt. is the Hungarian Transmission System Operator responsible for managing the national electricity transmission network and market operations. The company operates critical infrastructure, provides system and market operation services, and supports business development and regulatory compliance. The website reflects MAVIR's role as a key national energy entity with a large operational scope and multiple subsidiaries. The site targets energy sector professionals, partners, and the general public interested in electricity transmission and market data. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The site uses HTTPS with strong SSL configuration and implements several security headers, indicating a solid security posture. Security-wise, the site follows best practices including HTTPS enforcement and secure form handling. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good, with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, MAVIR's website is professional, trustworthy, and well-maintained, reflecting the organization's essential role in Hungary's energy sector. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

MVM Paksi Atomerőmű Zrt. operates Hungary's primary nuclear power plant, providing critical electricity generation services. As a key entity within the MVM Group, it maintains a strong market position in the energy sector, offering not only power production but also public education and environmental stewardship. The website serves as an informative portal for stakeholders, visitors, and the general public, featuring detailed information about the company, its subsidiaries, and related services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. The content is well-structured and professionally presented, though there is room for improvement in accessibility and SEO. The CMS appears to be Sitecore, indicating a robust content management infrastructure. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and public security policies suggests opportunities to enhance the security posture. No vulnerabilities or exposed sensitive data were detected, and the domain registration is consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security headers, incident response transparency, and SEO could further strengthen its position and trustworthiness.

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt. is a regional energy company specializing in district heating services for the Oroszlány and Szolnok areas in Hungary. The website acts as a portal directing users to localized district heating service sites, reflecting a focused business model in the energy utility sector. The company appears to be a medium-sized entity founded in 2020, likely part of the larger MVM group, a major Hungarian energy provider. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, and uses responsive design techniques to ensure usability across devices. However, the site lacks advanced SEO and accessibility features and does not appear to use a CMS or complex frameworks. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms on the landing page, which is positive. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is functional and consistent with its business purpose but requires enhancements in privacy compliance, security best practices, and user contact information to improve trust and regulatory adherence.

MVM Home & Pro is a Hungarian energy efficiency solutions provider operating under the MVM brand, a leading Central European energy group. The website offers a range of energy-saving products and programs targeted at residential customers, including home renovation programs and energy-efficient devices. The company positions itself as a trusted partner in sustainable energy consumption with a focus on carbon neutrality by 2035. Technically, the website is built on a JavaServer Faces framework with PrimeFaces UI components, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the website is legitimate, well-branded, and compliant with GDPR, reflecting a mature digital presence for a large energy sector entity.

MVM Next is a prominent Hungarian energy company specializing in electricity and natural gas supply and distribution. The company operates multiple subsidiaries responsible for various aspects of energy delivery, including gas and electricity distribution, public lighting, and district heating. The website serves both residential and business customers, offering online services such as billing, customer support, and energy-related products like solar panels and insurance. The company maintains a strong market position as a major national utility provider in Hungary.

REICO is a Czech-based asset management company specializing in real estate investment funds and capital market instruments, with over 15 years of market presence. The company operates under the umbrella of Česká spořitelna a.s., a major Czech financial institution, which enhances its market credibility and trustworthiness. The website reflects a professional and well-structured digital presence, targeting investors interested in real estate and financial products. The content is relevant, well-organized, and supported by comprehensive legal and privacy documentation, indicating a mature compliance posture. Technically, the website leverages modern web technologies including JavaScript, jQuery, and the proprietary GEM framework by Erste Group, hosted on Erste Group's CDN infrastructure. The site is responsive and optimized for mobile devices, with good SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. No critical vulnerabilities or suspicious content were detected, and the domain's WHOIS data is privacy protected, which is typical for financial services. Overall, REICO's website demonstrates a solid business and technical foundation with good security hygiene, suitable for its industry and audience. Strategic improvements in security transparency and performance optimization would further strengthen its posture.

Pravda.sk is a leading Slovak online news media portal operated by OUR MEDIA SR a. s. It provides comprehensive news coverage including politics, sports, culture, health, and entertainment targeted at a general Slovak audience. The website features multimedia content such as videos and podcasts, supported by a robust advertising and analytics infrastructure. Technically, the site employs modern web technologies and multiple analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and consent management, although explicit privacy and terms of service documents are not found in the provided content. Overall, the site is legitimate, professionally maintained, and trusted within its market segment.

La Vanguardia is a prominent Spanish news media company providing up-to-date news and information focused on Catalunya, Spain, and global events. The website serves a broad general audience with a comprehensive digital news platform supported primarily by advertising revenue. The company maintains a strong market position as a leading regional and national news outlet in Spain. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, multiple ad networks, and a consent management platform to ensure GDPR compliance. The infrastructure is optimized for performance and mobile responsiveness, delivering an excellent user experience. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of news content.

The website retentionup-doplnek.cz appears to be a minimal landing page for a product or service named RetentionUp, likely a plugin or add-on for the Shoptet e-commerce platform. The site contains very limited content, primarily a title and basic styling with no visible business or contact information. The technical infrastructure relies on common frontend libraries such as Bootstrap and jQuery loaded from reputable CDNs, but lacks advanced features or metadata. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site presents a low trust profile with minimal digital maturity and poor compliance indicators.

OnVoard is a specialized ecommerce marketing platform offering a suite of integrated marketing applications designed to help online merchants increase revenue with minimal effort. The platform targets ecommerce businesses and integrates with major platforms such as Shopify, BigCommerce, EasyStore, and Wix. The website presents a professional and consistent brand image with clear descriptions of its key services including email marketing, progress bars to increase average order value, back-in-stock notifications, reviews management, loyalty programs, product recommendations, and popup marketing tools. Technically, the site is built on Webflow CMS, leveraging modern web technologies and Google services for analytics and user interaction tracking. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy and GDPR hosting claims, though cookie consent mechanisms are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and business presence appear credible. Overall, the site scores well in business credibility and technical implementation but could improve in security and privacy compliance.

Bold Commerce is a Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms such as Magento, Adobe Commerce, OpenCart, and Shopify. The company targets payment companies and merchants seeking advanced checkout experiences including Apple Pay, Google Pay, and PayPal Fastlane. Bold Commerce holds a strong market position as an established provider with a medium-sized business footprint founded in 2014. Technically, the website is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, and integrates multiple marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and OneTrust for cookie consent. The site is well optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and a bug bounty program in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, with extensive user tracking balanced by privacy controls.

Media Heroes s.r.o. is a Czech-based digital agency specializing in web development and internet marketing services. The company positions itself as a provider that saves clients time and helps them navigate the complexities of internet marketing. The website is professionally designed, targeting businesses and individuals in the Czech Republic seeking digital marketing and web creation services. The content is primarily in Czech and reflects a small to medium-sized agency with a local market focus. Technically, the website employs a modern technology stack including jQuery, Google Fonts, Google Analytics, Facebook Pixel, Smartlook, Leady tracking, and Cookiebot for cookie consent management. The site is mobile optimized and includes SEO best practices such as meta tags and Open Graph data. However, no CMS or hosting provider information is explicitly detected. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, indicating some attention to privacy. Cookie consent is implemented comprehensively via Cookiebot, categorizing cookies by purpose and provider. However, no WHOIS data is available, which reduces transparency and trustworthiness. No explicit privacy policy or terms of service pages were found in the provided content, and no security or incident response policies are visible. The site uses multiple third-party marketing and analytics tools, which increases tracking but is managed with user consent. Overall, the website presents a legitimate and professional digital agency with good privacy compliance and marketing transparency. The lack of WHOIS data and explicit privacy/security policies are areas for improvement. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing contact information for incident response to increase trust and compliance.

Téma 21 is a newly established (2024) Czech media platform specializing in journalism, interviews, podcasts, and articles. It targets Czech and Slovak audiences interested in in-depth media analysis and current affairs. The website demonstrates a professional and modern design, leveraging technologies such as Tailwind CSS and Font Awesome, hosted via Websupport. GDPR compliance is well implemented with a clear cookie consent mechanism and privacy policy. However, explicit contact information and terms of service are not prominently available, which could be improved for better transparency. Security posture is good with HTTPS and some security best practices, though additional security headers and incident response details are recommended. Overall, the platform presents high-quality content with excellent user experience and trustworthy branding.

The website 'Podnik podporující zdraví' represents a Czech government-recognized program focused on promoting health in workplaces through an annual competition and certification system. Established since 2005, it targets Czech legal entities and organizations committed to employee health and well-being. The site provides information about the competition, criteria, awarded companies, and related conferences. Technically, the website uses modern JavaScript libraries such as Google Analytics, Google Tag Manager, Flickity for carousels, and lazy loading for images, indicating a moderate level of digital maturity. The site is mobile optimized with good navigation and professional design. Security posture is adequate with HTTPS usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the official nature of the content and references to government bodies support its legitimacy. Overall, the website is a credible resource for workplace health promotion in the Czech Republic, with recommendations to enhance privacy compliance and security transparency.

The website www.mametonataliri.cz is a Czech language site focused on providing information about school catering systems. It appears to be a small-scale business or informational site hosted on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site content is accessible and does not present any WAF or security challenge barriers. However, the absence of WHOIS data and registrant information raises concerns about domain registration transparency. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks advanced security headers and analytics integrations. Overall, the security posture is basic, with room for improvement in privacy compliance and business credibility.

TenderMarket.cz is a Czech language website focused on providing information and guidance related to tendering and procurement processes, targeting suppliers and contracting authorities. The platform appears to serve as an informational resource rather than a transactional or e-commerce site. The website uses modern web technologies such as Angular and Material Design components, hosted on Czech hosting infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and explicit security policies are not evident, indicating room for improvement in security posture. The domain is well aged and registered with a reputable Czech registrar, supporting the legitimacy of the business. Overall, the site is functional but basic in content and compliance features.

Blueboard.cz Webhosting s.r.o. is a Czech Republic-based technology company specializing in domain registration, web hosting, server rental, and bulk email marketing services. With over 20 years of experience and a solid customer base including notable clients like Seznam.cz and Ford, the company positions itself as a reliable and comprehensible service provider for individuals and businesses seeking digital presence solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and Plausible Analytics for tracking, and uses Crisp Chat for customer support. The site is mobile-optimized and performs moderately well, although accessibility features could be improved. Security-wise, HTTPS is enforced, and forms include validation, but the absence of security headers and cookie consent mechanisms indicates room for enhancement in security posture and privacy compliance. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data transparency is a concern, as it limits trust verification. The website does not publish explicit security policies or incident response contacts, which could be improved to strengthen security culture and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security disclosures. Strategically, Blueboard should focus on improving transparency by resolving WHOIS data issues, implementing comprehensive cookie consent, publishing security policies, and adopting security headers. These steps will enhance user trust, compliance with GDPR, and overall security resilience.

InstaWP is a specialized cloud platform focused on rapid WordPress site deployment and hosting, targeting developers, agencies, and freelancers. The platform offers instant site creation, reusable snapshots, migration tools, and a marketplace for templates and WaaS solutions. The business is positioned as a nimble, technology-driven service with a pay-as-you-go hosting model and no long-term commitments. Technically, the website is built on WordPress with Elementor and uses modern caching and SEO plugins, supported by Cloudflare DNS and NameCheap domain registration. The site is well-optimized for performance, mobile responsiveness, and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but could improve transparency on privacy and security policies.

The website dotaceeu.cz serves as the official Czech government portal dedicated to European Union funds in the Czech Republic. It provides comprehensive information on EU funding programs, project maps, calls for proposals, events, and statistical data. The portal targets a broad audience including citizens, public institutions, and businesses interested in EU funding opportunities. The site is well-established, with a domain registered since 2004, and is operated by the Ministry of Regional Development of the Czech Republic. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and APIs such as jQuery, Bootstrap, Google Maps, and Chart.js. It integrates tracking and analytics tools like Hotjar and Google Tag Manager, alongside a live chat service for user support. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms, though it lacks explicit HTTP security headers and dedicated security policy pages. Overall, the site demonstrates a strong security posture with no visible vulnerabilities or suspicious content. The domain WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and maintaining regular security audits to uphold compliance and user trust.

The website 'Lepší příběh' is a government-backed platform managed by the Czech Ministry of Labour and Social Affairs, funded by the European Social Fund. It focuses on social inclusion, employment support, and education initiatives across the Czech Republic. The site showcases various projects and success stories aimed at improving lives, targeting a broad audience including families, seniors, and marginalized groups. Technically, the site is built on the Liferay CMS platform with modern JavaScript frameworks like React and jQuery, providing a responsive and functional user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. The absence of WHOIS data reduces domain trust verification, but the content and branding strongly suggest legitimacy. Overall, the site is a credible government resource with moderate technical maturity and some compliance gaps.

The website www.cng.cz represents a professional platform operated by Internet Projekt, a.s., focused on providing information and services related to compressed natural gas (CNG) refueling stations across the Czech Republic. It serves vehicle owners and fleet operators who utilize CNG as an alternative fuel, offering detailed station locations, pricing, payment options, and route planning tools. The site demonstrates a solid market position within the energy and transportation sectors in the region. Technically, the website employs modern web technologies including Google Maps API for geolocation services, jQuery for DOM manipulation, and Cookiebot for cookie consent management. It integrates Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, which are positive indicators. However, the absence of visible security headers and lack of explicit privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Overall, the website is functional, professional, and serves its business purpose well, but it would benefit from enhanced transparency regarding privacy, security policies, and contact information to strengthen user trust and compliance posture.

The website prepis.innogy.cz serves as an online platform for innogy, a major energy company in the Czech Republic, offering convenient online services for electricity and gas contract transfers. The site targets both households and businesses, providing detailed guides, video tutorials, and customer support channels to facilitate energy contract changes efficiently. The business model focuses on digital customer engagement and streamlined service delivery in the energy sector, positioning innogy as a trusted and accessible energy provider in the Czech market. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets for customer interaction. The site is well-structured with responsive design, good accessibility features, and SEO optimization. However, no CMS or hosting provider details were explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit HTTP security headers and a published vulnerability disclosure policy. No WHOIS registration data was found, which slightly reduces trustworthiness but the strong brand presence and consistent content mitigate concerns. Contact information is clearly provided, including phone numbers and interactive forms, supporting good user engagement. Overall, the website demonstrates a solid digital presence with good content quality and user experience. Security posture is adequate but could be improved by adding security headers and formal incident response information. The absence of WHOIS data is a notable gap. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain a robust security and compliance posture.

Innogy.cz operates as a major energy provider in the Czech Republic, serving over 1.7 million customers with electricity, natural gas, and related services. The website premium.innogy.cz focuses on the innogy Premium customer loyalty program, offering discounts and monthly contests to enhance customer engagement. The company positions itself as a leading energy supplier with a large workforce and a broad market presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is professional, user-friendly, and trustworthy, but the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

Innogy Česká republika a.s. operates a professional energy supply and customer management portal branded as 'innosvět'. The website targets Czech energy consumers, offering services such as electricity and gas supply, consumption monitoring, and online account management. The company is positioned as a major energy provider in the Czech Republic with a large customer base. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's branding, structured data, and contact information strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a reliable digital platform for energy customers.

Paramo, a.s. is a Czech-based petrochemical company operating as a subsidiary of the ORLEN Unipetrol group. The company specializes in the production and distribution of process oils, asphalt products, and motor oils, serving primarily industrial and business clients in the Czech Republic and neighboring countries. The website reflects a professional corporate presence with detailed product information, news updates, and comprehensive contact details. It is built on Microsoft SharePoint and integrates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is accessible, GDPR compliant, and includes social media channels for broader engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is likely due to privacy protection policies, but the website's affiliation with the ORLEN group and consistent branding support its legitimacy.

Spolana is a Czech chemical company operating primarily in the energy and chemical production sector, likely a subsidiary or closely related to Unipetrol and Orlen group companies. The website is built on Microsoft SharePoint and uses modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is primarily in Czech and targets industrial clients and partners. The presence of Google Analytics and Cookiebot indicates a moderate level of user tracking with GDPR compliance mechanisms in place. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable from the CZ NIC registry, which reduces trust slightly but is not uncommon for domains under certain registries or privacy policies. Overall, the website is professional, functional, and compliant with privacy regulations, serving a large industrial business audience.

Butadien Kralupy is a corporate website representing a subsidiary of the ORLEN Group, a major energy and chemical production conglomerate in Central Europe. The site provides information about the company and its operations primarily in Czech language, targeting industry professionals and partners. The website is built on Microsoft SharePoint and uses common web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. It integrates Google Analytics and Google Tag Manager for analytics and tracking purposes. The site implements a comprehensive cookie consent mechanism and a detailed privacy policy, indicating good privacy compliance and GDPR adherence. However, the absence of WHOIS data and lack of visible contact information on the main page reduce overall trustworthiness. Security posture is moderate with no visible security headers and no explicit security or incident response policies published. Overall, the website is professional and functional but could improve transparency and security practices.

Polymer Institute Brno is a corporate entity under the ORLEN Group umbrella, specializing in polymer research and production. The website serves as an information portal for industry professionals and partners, providing detailed insights into their polymer technologies and services. The site is primarily in Czech and targets a regional audience in the energy and chemical sectors. Technically, the site is built on Microsoft SharePoint with integration of modern tools such as Cookiebot for consent management and Google Analytics for user behavior tracking. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a strong commitment to GDPR compliance. Security-wise, while HTTPS is presumably enabled, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy, with no signs of malicious activity or content blocking.

ORLEN Unipetrol Doprava operates in the energy and transportation sectors, focusing on logistics and transport services related to petrochemical products. The company is part of the ORLEN group, a significant player in the regional energy market. The website reflects a professional corporate presence with a focus on compliance and user privacy, evidenced by a comprehensive privacy policy and cookie consent mechanism. The technical infrastructure is based on Microsoft SharePoint with modern web technologies such as jQuery and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and mobile optimization. Overall, the website is trustworthy and serves its business audience effectively.

ORLEN Unipetrol Hungary operates as a significant entity within the ORLEN Group, focusing on energy and petrochemical products. The website reflects a corporate presence with detailed information about subsidiaries and related companies, targeting a general audience interested in energy sector services. The technical infrastructure is based on Microsoft SharePoint, enhanced with modern JavaScript libraries and cookie consent management via Cookiebot, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent compliance, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates good professionalism and compliance with GDPR, supporting trustworthiness and business credibility.

ORLEN Unipetrol Deutschland is a significant entity within the ORLEN Group, operating primarily in the energy and petrochemical sectors in Germany. The website reflects a corporate B2B focus, providing information about refining and petrochemical products and services. The company maintains a consistent brand presence aligned with its parent company, PKN ORLEN, and its subsidiaries. The digital infrastructure is based on Microsoft SharePoint, indicating a mature but traditional CMS choice. The site employs modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management, demonstrating compliance with GDPR and user privacy standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

ORLEN Unipetrol Slovakia s.r.o. is a medium-sized corporate entity operating in the energy and transportation sectors, specializing in wholesale distribution of fuels and lubricants in Slovakia. It is part of the larger ORLEN Unipetrol group, which is a leading petrochemical and refining conglomerate in Central Europe. The website reflects a professional corporate presence with clear business descriptions, product offerings, and group affiliations. Technically, the site is built on Microsoft SharePoint with integration of modern tools like Cookiebot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with accessible policies. Overall, the site demonstrates a trustworthy and professional digital footprint aligned with its business operations.

REMAQ, s.r.o. is a Czech Republic-based company specializing in the production of high-quality plastic regranulates including polypropylene, polyethylene, and polystyrene. The company positions itself as the leading and fastest growing plastic recycler in the Czech market with a significant presence in Europe. Their business model focuses on manufacturing and recycling plastics with a customer and product-oriented approach, offering both standard and custom-developed products to meet client specifications. The website content is professionally presented, targeting industrial companies involved in plastics processing. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. It uses a custom CMS likely developed by Emersion Software. The site is mobile optimized with good navigation and basic accessibility features. Performance is moderate with no critical technical issues detected. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and explicit security policies are absent. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks security headers and published incident response or vulnerability disclosure information. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of WHOIS registration data is a concern, reducing domain trustworthiness, though the website content and professional presentation support legitimacy. Overall, the website is functional, professional, and compliant with basic privacy requirements but would benefit from enhanced security policies, direct contact information, and improved domain registration transparency.

ORLEN Unipetrol RPA operates in the energy sector, focusing on refining and petrochemical products primarily for the Czech Republic market. The website reflects a corporate presence with a professional design and consistent branding, targeting business and industrial customers. The company appears to be part of the ORLEN Group, a significant player in the regional energy market. Technically, the website is built on Microsoft SharePoint with common web technologies such as jQuery and Bootstrap, and it integrates modern tools like Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is accessible and mobile-optimized, though performance is moderate. From a security perspective, the website uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no public security or incident response policies are available. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and external references suggest a legitimate corporate entity. Advertising and analytics practices are transparent, using reputable services such as Google Analytics, Hotjar, and Facebook Ads. Overall, the website demonstrates a good level of digital maturity and privacy compliance but would benefit from enhanced security headers, clearer contact information, and public security policies. The domain registration opacity slightly reduces trustworthiness, warranting further verification. Strategic recommendations include improving security posture, publishing incident response and vulnerability disclosure information, and enhancing accessibility features.

Petrotrans operates in the energy and transportation sectors, focusing on the logistics and transportation of chemical and petrochemical products primarily in the Czech Republic. The company targets industrial and business clients requiring specialized transport services. The website is built on Microsoft SharePoint and incorporates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent mechanism. However, the absence of WHOIS registrant data and explicit contact details slightly reduces business credibility. Overall, the website is professional, functional, and trustworthy for its business domain.

ORLEN Upstream Canada is a corporate entity within the ORLEN Group, focusing on upstream oil and gas operations in Canada. The website serves as an informational portal linking to various ORLEN subsidiaries and related companies. The technical infrastructure is based on Microsoft SharePoint with standard web technologies including jQuery and Cookiebot for cookie consent management. Google Analytics is used for visitor tracking. Security posture is moderate with cookie consent implemented but lacking visible advanced security headers or explicit security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and extensive linkage to official ORLEN domains support legitimacy. Overall, the site is basic in design and content quality, suitable for industry stakeholders and partners.

ORLEN Upstream is a medium-sized energy sector company operating in Poland, specializing in upstream oil and gas exploration and production. It is a subsidiary of the larger ORLEN group, a major player in the Polish energy market. The website is built on Microsoft SharePoint, reflecting a corporate and professional digital presence. The site includes a comprehensive cookie consent mechanism compliant with GDPR, indicating attention to privacy and regulatory requirements. Technically, the site uses common web technologies such as jQuery and Google Analytics for visitor tracking, with a moderate performance profile and basic mobile optimization. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the domain WHOIS data is not publicly available, which is typical for .pl domains, but the website content and branding strongly support legitimacy. The site lacks explicit contact details and terms of service pages, which could be enhanced for better business credibility.

ORLEN Południe is a corporate entity operating within the ORLEN Group, a major energy sector player in Poland. The company focuses on fuel production, petrochemical products, and energy services, targeting both business customers and the general public. The website reflects a professional corporate presence consistent with its market position and branding standards. The site is primarily in Polish and serves as an information and service portal for ORLEN Południe's offerings. Technically, the website is built on Microsoft SharePoint, leveraging ASP.NET technologies and integrating third-party services such as Cookiebot for cookie consent management and Google Analytics for visitor tracking. The site is served over HTTPS with good security headers, indicating a solid technical infrastructure. However, mobile optimization and accessibility are basic and could be improved to enhance user experience. From a security perspective, the site demonstrates good practices including enforced HTTPS, cookie consent mechanisms compliant with GDPR, and session management. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or incident response contacts on the site suggests room for improvement in transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The lack of WHOIS data is typical for .pl domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing mobile responsiveness, explicitly publishing security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security.

ORLEN OIL is a subsidiary of the ORLEN Group specializing in the production and distribution of automotive and industrial lubricants, oils, and related products. The company holds certifications from major automotive manufacturers such as Mercedes-Benz, Volkswagen, Volvo, BMW, and Siemens, indicating a strong market position in the energy sector focused on lubricants. The website is built on Microsoft SharePoint, integrating modern consent management tools like Cookiebot and analytics via Google Analytics, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements in security headers and mobile optimization are recommended. Overall, the site presents a professional and trustworthy image with good content quality and compliance with GDPR requirements.

ORLEN Lietuva operates as a significant energy company in Lithuania, focusing on fuel production, distribution, and retail services. The website reflects a professional corporate presence with clear branding and content tailored to its target audience in the energy sector. The company is part of the larger PKN ORLEN group, indicating a strong market position in the Baltic region. Technically, the website is built on Microsoft SharePoint, integrating modern tools such as Cookiebot for privacy compliance and Google Analytics for visitor tracking. While the site is functional and secure with HTTPS, there is room for improvement in mobile optimization and explicit security header implementation. The absence of WHOIS data limits full domain legitimacy verification, but the website content and external links support a trustworthy business identity. Overall, the site demonstrates good privacy compliance and business credibility, though contact information and detailed security policies are not prominently available.

The website orlenkoltrans.pl is currently inaccessible, returning a 403 Forbidden error with minimal HTML content, indicating that access is blocked by administrative rules. Due to this, no meaningful content, metadata, or business information is available for analysis. The WHOIS data provided is suspicious, showing a domain creation date in the future (May 24, 2025), which is inconsistent and undermines trust in the domain's legitimacy. No security policies, privacy statements, or contact information are present on the site, and no technologies or external links can be identified. Overall, the website appears non-functional and provides no value to visitors at this time.