Skip to main content

Is alukola.cz a Scam? Security Check Results - RELIGIS s.r.o. Reviews

alukola.cz favicon

Is alukola.cz Safe? Security Analysis for RELIGIS s.r.o.

Check if alukola.cz is a scam or legitimate. Free security scan and reviews.

RetailCzech Republicmedium
jQueryjQuery FancyboxjQuery CarouFredSelGoogle Tag ManagerHeureka SDK+1 more
Analyzed 8/1/2025Completed 12:59:45 AM
38
Security Score
HIGH RISK

AI Summary

Alukola.cz is a Czech Republic-based e-commerce and service business specializing in the sale of alloy wheels, steel wheels, tires, and related automotive services including tire fitting, car servicing, and car rental. The company positions itself as the largest specialist in alloy wheels in the Czech market, offering both online sales and physical service centers such as Pneucentrum Motol. The website is professionally designed, primarily in Czech, targeting vehicle owners seeking quality wheels and tire services. Technically, the site uses a traditional jQuery-based stack with integrations for Google Tag Manager, Heureka, and Seznam retargeting, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. The absence of WHOIS data reduces domain trust assessment, but the website's professional content and contact information support legitimacy. Overall, the site is functional, compliant with GDPR, and well-positioned in its niche.

Detected Technologies

jQueryjQuery FancyboxjQuery CarouFredSelGoogle Tag ManagerHeureka SDKSeznam retargeting script

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Alukola.cz operates in the retail and transportation sectors, focusing on automotive aftermarket products and services. Its business model combines e-commerce with physical service offerings, enhancing customer value through onsite tire and wheel fitting and car servicing. The company leverages partnerships with local service centers and uses marketing tools like Google Ads and Heureka to drive traffic. The presence of a dedicated GDPR info page and cookie consent banner reflects compliance awareness. The company appears medium-sized with a consistent brand presence and a clear market position as a leading specialist in alloy wheels in the Czech Republic. The partnership with Pneucentrum Motol and the website developer RELIGIS s.r.o. indicates a collaborative ecosystem supporting its operations.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@alukola.cz

Phone Numbers (1)

245******

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a good security baseline with HTTPS enabled and cookie consent mechanisms in place, supporting GDPR compliance. However, it lacks advanced security headers such as Content-Security-Policy and X-Frame-Options, which could mitigate certain web-based attacks. No explicit security policies or incident response contacts are published, which is a gap in transparency and readiness. The use of third-party scripts for analytics and marketing introduces potential risks if not regularly audited. The missing WHOIS data is a concern for domain legitimacy verification but does not directly impact website security. Overall, the security posture is adequate for an e-commerce site but could be improved with additional headers and published security policies.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTP security headers including Content-Security-Policy, X-Content-Type-Options, and X-Frame-Options to enhance protection against common web attacks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

RELIGIS s.r.o.

Description:

Specializujeme se výhradně na kvalitní alu kola. Nabízíme kompletní servis, poskytujeme technické informace. Alu kola vám na vaše auto odborně namontujeme. Kromě prodeje alu kol a pneumatik nabízíme také kompletní pneuservisní služby a autoservis.

Key Services:
Sale of alloy wheelsSale of steel wheelsSale of tiresPneuservis (tire fitting and service)Autoservis (car servicing)Car rentalHand car washing
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQueryjQuery FancyboxjQuery CarouFredSelGoogle Tag ManagerHeureka SDKSeznam retargeting script
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enforced
  • Cookie consent implemented
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
Google AnalyticsHeureka SDKSeznam retargeting
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Ad Networks:
Google Ads (AW-819820681)
Tracking Pixels:
Google Analytics (gtag)Heureka SDKSeznam retargeting
Marketing Tools:
Heureka widget
Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF challenges.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

20/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

25/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Twitter

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

75/100
Score

DMARC not enforcing

MEDIUM

DMARC policy is set to "none"

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:_spf.bosystem.cz include:spf.seznam.cz include:_spf.google.com ~all
DNS Lookups:3/10
Policy:~all
DMARC Details
Policy:none
Aggregate Reports:2999de43e5@rua.easydmarc.eu
Forensic Reports:2999de43e5@ruf.easydmarc.eu
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

Mixed Content Detected

MEDIUM

3 resources loaded over insecure HTTP

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

80/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DMARC Policy Set to None

LOW

DMARC is configured but not enforcing any policy

DNS Records

A Records:185.59.211.210
Name Servers:
ns1.ignum.comDNS only
ns2.ignum.czDNS only
MX Records:
1: aspmx.l.google.com
5: alt1.aspmx.l.google.com
5: alt2.aspmx.l.google.com
10: alt3.aspmx.l.google.com
10: alt4.aspmx.l.google.com
SOA:Serial: 2025073101, TTL: 86400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:134ms

SPF Analysis

SPF Record:
v=spf1 include:_spf.bosystem.cz include:spf.seznam.cz include:_spf.google.com ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a classic jQuery-based frontend with plugins such as Fancybox and CarouFredSel for UI components. Google Tag Manager and Heureka SDK are integrated for marketing and analytics purposes. The site is served over HTTPS with a valid SSL certificate, ensuring encrypted communications. Performance appears moderate with multiple external scripts that may impact load times. Mobile optimization is basic, with responsive meta tags but no advanced adaptive design detected. SEO is supported by meta descriptions, keywords, and structured navigation. No modern frontend frameworks or CMS platforms are explicitly detected, suggesting a custom or legacy platform. Hosting provider details are not discernible from the data. Overall, the technical infrastructure is stable but could benefit from modernization and performance tuning.
Analyze Another Website