Transportation security reports

A

AUTOPORT s.r.o.

autoport.cz

51

AUTOPORT s.r.o. is an established automotive dealership and service provider specializing in Citroën vehicles in the Czech Republic. The company offers a comprehensive range of services including sales of new and used cars, vehicle servicing, spare parts, and financing options. Positioned as an official Citroën partner in Prague, AUTOPORT targets families and business customers seeking quality vehicles and support. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the website is built on WordPress using the Divi theme, enhanced with Gravity Forms for customer interactions and CleanTalk for anti-spam protection. It employs modern JavaScript libraries such as Swiper.js and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Performance is moderate, suitable for the target audience. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, it lacks some recommended security headers and a security.txt file for vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content appear legitimate and consistent with the business claims. Overall, AUTOPORT's digital presence is solid with good content quality, privacy compliance, and business credibility. Strategic improvements in security headers and accessibility could further enhance trust and user experience.

A

Asociace sportu pro radost, z.s.

roadclassics.cz

46

Road Classics is a Czech Republic-based organization focused on organizing premium amateur road cycling events and community activities. The website showcases a series of cycling monuments, community engagement, educational content, and premium services such as VIP hospitality and merchandise sales. The organization partners with several reputable companies and maintains an active presence on social media platforms to engage its target audience of amateur cyclists. Technically, the website employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates third-party services like SmartEmailing for newsletters and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust assessment, but the presence of multiple trusted partners and clear contact information supports legitimacy. Overall, the website presents a professional and trustworthy front for its business, with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data verification are recommended to enhance trust and compliance.

K

Kiosk

kioskophetstation.nl

58

Kiosk is a retail convenience store brand operating primarily at train stations in the Netherlands, offering coffee, fresh baked goods, snacks, and beverages for travelers. The website reflects a well-established business with over 100 locations, targeting commuters and travelers who need quick and quality food options on the go. The brand is consistent and professional, with a clear market position linked to NS Stations, the Dutch railway company. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and includes Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS and CAPTCHA, but lacks some security headers and explicit policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

A

ACI - Auto Components International, s. r. o.

aci.cz

56

ACI - Auto Components International, s. r. o. is a well-established Czech company specializing in automotive components and accessories. Founded in 2000, it serves both B2B and B2C markets with a broad product range including auto parts, classic car components, original manufacturer parts, trailers, and air conditioning systems. The company targets automotive professionals and vehicle owners primarily in the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses a custom CMS with ASP pages and relies on jQuery libraries and Google Fonts, hosted on Dial Telecom infrastructure. While the site is functional and moderately optimized for performance and mobile, some outdated libraries and missing security headers present potential risks. Security posture is adequate but could be improved with modern best practices and explicit policies. Contact information is comprehensive, including phone, email, physical address, and social media links, enhancing business credibility. Cookie consent is implemented, but privacy and terms policies are not clearly found. Overall, the site is trustworthy and professionally maintained with room for security and compliance enhancements.

F

Federal Cars spol. s r.o.

federalcars.cz

57

Federal Cars spol. s r.o. is a Czech Republic based automotive dealership specializing in multiple car brands including Volvo, Peugeot, Mazda, Honda, and Citroen. The company operates through a structured website with dedicated subdomains for each brand, offering new and used car sales as well as servicing. The website targets general consumers in the Liberec region and positions itself as an authorized dealer with a focus on quality and ecological vehicles. Technically, the site uses jQuery and jQuery UI libraries, has a cookie consent mechanism, and is moderately optimized for mobile and SEO. However, the absence of WHOIS data and lack of visible security headers reduce transparency and security posture. No privacy policy or terms of service pages were found, which impacts compliance. Overall, the site is functional and professional but could improve in security and compliance documentation.

AutosEU Limited s.r.o. operates an online marketplace specializing in electric and hybrid cars across Europe, positioning itself as one of the largest platforms in this niche. The website offers comprehensive search and listing functionalities, targeting consumers interested in sustainable automotive options. The business is medium-sized, founded in 2016, and based in the Czech Republic. The company maintains a professional digital presence with active social media channels and a modern website built on WordPress with Elementor and Vehica theme.

L

Leo Express Global a. s.

leoexpress.com

78

Leo Express is a transportation company specializing in train and bus ticket sales across Central Europe, offering travel to over 120 destinations. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, ensuring a responsive and performant platform. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional front for its business operations.

S

ScanBox

scanbox.se

66

ScanBox is a Swedish company specializing in food transport solutions for professional kitchens worldwide, ensuring food quality and temperature control from preparation to serving. The website is well-designed, modern, and optimized for mobile devices, reflecting a mature digital presence. The technical infrastructure leverages Next.js and React frameworks, with integrations for cookie consent and analytics, indicating a focus on compliance and user experience. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the site presents a trustworthy and professional image suitable for its B2B audience.

R

Roadtrippers, LLC

roadtrippers.com

11

Roadtrippers, LLC operates a leading road trip planning platform that enables users to plan trips, discover unique stops, and navigate routes including RV-specific features. The company has a strong market position with millions of users and offers tiered memberships to monetize its services. Technically, the website is built on WordPress with React components, integrates modern analytics and marketing tools, and is hosted under Amazon Registrar infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and domain protection measures, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

C

CityChangers

citychangers.eu

45

CityChangers is a Czech-based non-profit initiative focused on improving urban mobility and transportation planning through community engagement and sharing best practices. The platform connects citizens with city leadership to foster projects such as cycling infrastructure, school streets, and sustainable logistics. Supported by European Union funding, the initiative targets local governments, civic groups, and the general public interested in urban development. Technically, the website employs common web technologies including jQuery, Bootstrap, and Google services, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some improvements like security headers and updated libraries are recommended. Privacy compliance is well addressed with cookie consent and a privacy policy in Czech. Overall, the site is professional, trustworthy, and serves its community-oriented mission effectively.

C

Cyklovize 2030

stavbycyklo.cz

43

Cyklovize 2030 is a Czech Republic based project focused on promoting healthy, affordable, and ecological transportation through cycling infrastructure development. The website serves as a national platform to encourage cycling as a daily transport mode, targeting city residents, families, and local governments. Supported by the Czech Insurance Bureau's Damage Prevention Fund, it positions itself as a key advocate for safer cycling networks. Technically, the site uses a traditional web stack including jQuery, Bootstrap, and Google Fonts, with moderate performance and good mobile optimization. Security-wise, HTTPS is implemented and cookie consent mechanisms are in place, but the use of an outdated jQuery version and lack of security headers present risks. The absence of a privacy policy and WHOIS data limits full trust assessment. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

DPDgroup UK Ltd. operates the website www.dpd.co.uk, presenting itself as a leading parcel delivery and logistics provider in the United Kingdom. The company offers extensive UK parcel delivery services, international shipping including Europe and Air Express worldwide, and additional services such as fulfilment and public sector delivery. The website is professionally designed with consistent branding and clear navigation, targeting both business and consumer audiences seeking parcel delivery solutions. The presence of multiple subdomains and partner links indicates a mature business ecosystem under the DPDgroup umbrella. Technically, the website employs modern web technologies including the Foundation CSS framework, jQuery, Google reCAPTCHA for form security, and custom analytics scripts. The site is mobile responsive and optimized for user experience, though accessibility features are basic. SEO optimization is present but could be enhanced with richer metadata and structured data. Hosting appears to be on Google Cloud Platform, supporting scalability and performance. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms from abuse. However, no explicit security headers were detected in the HTML content, and no cookie consent mechanism was found, which may impact GDPR compliance. The WHOIS lookup for the exact queried domain failed due to it being a subdomain, but the overall domain and website content strongly indicate legitimacy and a well-established business. No vulnerabilities or suspicious content were identified. Overall, the website demonstrates a solid business presence with good technical implementation and a generally positive security posture. Improvements in privacy compliance, security headers, and accessibility would further enhance trust and compliance. The lack of direct contact emails or phone numbers on the main site suggests reliance on internal customer portals or partner sites for direct communication.

C

Chronopost

chronopost.fr

61

Chronopost is a leading French express parcel delivery company serving both individual and professional customers. The website offers comprehensive information about their services, including parcel tracking, online postage, and specialized delivery options such as Shop2Shop. The company is part of the Geopost group, which is reflected in the website branding and footer links. Technically, the website is built on Drupal 10 with modern libraries and includes cookie consent and tracking mechanisms. Security posture is good with HTTPS and secure forms, though explicit security headers and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment but the website content and branding strongly indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

D

DPD Ireland

dpd.ie

68

DPD Ireland operates as Ireland's leading parcel delivery and courier service, targeting both general consumers and businesses requiring reliable and sustainable shipping solutions. The company positions itself as Ireland's largest courier company, emphasizing speed, reliability, and sustainability in its service offerings. The website reflects a professional brand image with consistent branding and a clear business focus on transportation and logistics within Ireland. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies and third-party services such as Google Analytics and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but lacks some advanced security headers and published security policies. The absence of WHOIS data limits full domain legitimacy verification, but the website content and branding strongly indicate a legitimate and established business. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy online presence for parcel delivery services in Ireland.

P

Partnerství pro městskou mobilitu z. s.

dobramesta.cz

45

Partnerství pro městskou mobilitu z. s. is a Czech non-profit organization dedicated to promoting urban mobility, cycling, and sustainable transport solutions. The website serves as an information hub for municipalities, non-profit sectors, and stakeholders interested in urban mobility projects, education, and advocacy. It features news, events, project descriptions, and educational resources, positioning the organization as a key player in the Czech urban mobility landscape. Technically, the website employs a custom CMS with a technology stack including jQuery, Bootstrap, and various JavaScript libraries for UI and interactivity. It integrates Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with a good SSL configuration, although some libraries like jQuery are outdated, which could pose security risks. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and explicit contact information for security or incident response. The absence of WHOIS data due to privacy protection reduces transparency but is justified for a non-profit entity. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively. Strategic improvements in security headers, updating libraries, and publishing security policies would enhance its security posture and trustworthiness.

Fly4Free.cz is a Czech travel portal specializing in providing travel guides, tips, and discounted flight deals primarily through affiliate marketing partnerships. The website targets budget-conscious travelers seeking affordable flights, hotels, car rentals, and travel insurance. Established in 2014, it has a moderate market presence in the Czech Republic's travel media sector. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Fonts, and integrates third-party services such as Google Analytics, Adsense, OneSignal push notifications, and affiliate widgets from Pelikan.cz and Rentalcars.com. The site is hosted with WEDOS, a reputable Czech hosting provider, and uses HTTPS for secure communications. Security posture is adequate but could be improved by implementing security headers and publishing formal privacy and cookie policies. No direct company contact information or incident response details are provided, which limits transparency and compliance. Overall, the website is functional, content-rich, and moderately professional but has room for improvement in privacy compliance and security best practices.

P

Paletonoš

posilame.cz

50

Paletonoš.cz is an online platform specializing in comparing pallet transport services, offering users quick access to the most suitable shipping options including consolidated lines, additional deliveries, sea and air freight, as well as transshipment, storage, and fulfillment services. The website targets businesses or individuals involved in logistics and transportation within the Czech Republic. The platform operates in a niche market segment focused on pallet logistics and freight comparison. Technically, the site is built using Framer, with assets hosted on framerusercontent.com, and demonstrates basic mobile optimization and SEO practices. However, the absence of WHOIS registration data, privacy policies, contact information, and security headers indicates gaps in compliance and security posture. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a basic but functional business presence with room for improvement in security, privacy, and trust indicators.

ČD Nostalgie is a service operated under České dráhy, a.s., offering nostalgic railway experiences including historic train rides and museum visits across the Czech Republic. The website serves as a portal for event information, bookings, and visitor engagement, targeting railway enthusiasts and families. The company holds a strong market position as the national railway operator's nostalgic branch, providing unique cultural and leisure services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and clear contact information reflects a basic level of privacy compliance. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or published security policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Igate is a well-established Latvian company specializing in road and infrastructure construction, founded in 1991. The company operates multiple asphalt plants, mineral material quarries, and a paving stone production facility, serving both public and private infrastructure projects. Their website reflects a professional presence with good content quality and consistent branding, targeting government and commercial clients in Latvia. Technically, the site is built on WordPress using legacy JavaScript libraries and includes Google Analytics and Tag Manager for tracking. Security posture is moderate with no HTTPS status visible in the provided data and missing security headers, which could be improved. Privacy policies exist but lack explicit consent mechanisms. Overall, the site is safe with no adult content and shows legitimacy consistent with the company's history and WHOIS data.

H

Hifour s.r.o.

balikonos.cz

48

Balíkonoš.cz, operated by Hifour s.r.o., is a Czech-based shipment management platform established in 2013. It offers a comprehensive suite of services including parcel and pallet shipping, packaging materials, lettershop and printing services, targeting businesses and individuals who require efficient shipment solutions domestically and internationally. The company positions itself as a reliable partner with a significant client base and shipment volume, leveraging partnerships with logistics providers to deliver competitive pricing and service variety. Technically, the website employs a modern tech stack with multiple analytics and marketing tools, hosted on WEDOS infrastructure, and built likely on the Nette framework. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and forms include validation and anti-spam measures; however, explicit security headers and published security policies are absent, which could be improved. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR statements. Overall, the website is legitimate, professionally maintained, and serves its business purpose effectively, though enhancements in security transparency and privacy compliance are recommended.

YAUTO.cz is a well-established Czech online automotive marketplace operated by Kurzy.cz, spol. s r.o., founded in 2005. The platform offers a large inventory of vehicles from both professional dealers and private sellers, targeting vehicle buyers and sellers primarily in the Czech Republic and Slovakia. The website features comprehensive vehicle listings, VIN checking services, and a mobile app, positioning itself as a leading autobazar in the region. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, Gemius analytics, and DoubleClick advertising, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, consent management for cookies, and no visible vulnerabilities, although no dedicated security or incident response pages were found. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business indicators.

G

GOLD SERVICE s.r.o.

goldservice.cz

63

GOLD SERVICE s.r.o. is a well-established Czech logistics and freight forwarding company with over 30 years of experience. The company offers a comprehensive range of services including road, sea, and air transport, customs declarations, warehousing, and specialized logistics solutions. Their market position is that of a reliable local partner with a family business approach and a medium-sized operational scale. The website is professionally designed, multilingual, and provides clear contact information and customer testimonials, enhancing trustworthiness. Technically, the website uses a custom CMS developed by eBRÁNA s.r.o., employs modern web technologies such as responsive design, Google Fonts, and JavaScript libraries for enhanced user experience. Hosting is provided by WEDOS, consistent with the domain registrar. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal and could be improved to enhance protection. No explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are evident. No suspicious or vulnerable scripts were detected. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen their security posture.

O

Odtahové vozy s.r.o

odtahovevozy.eu

58

Odtahové vozy s.r.o is a Czech-based company specializing in professional towing equipment and vehicles. Founded in 2021, it serves towing companies in the Czech Republic and Slovakia as an official representative of several reputable brands. The company offers a broad range of towing vehicles, accessories, and custom products through its website and e-shop, positioning itself as a trusted supplier in the transportation sector. The website is well-structured, professionally designed, and provides clear contact channels, enhancing customer engagement and trust. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. It features responsive design and basic accessibility, with a moderate performance profile. The site enforces HTTPS and includes a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site demonstrates good practices such as secure forms and user consent management but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators were found, and the domain appears consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security and user trust.

M

MOTO OLOMOUC R&V s.r.o.

bartonmotors.cz

51

MOTO OLOMOUC R&V s.r.o. is a Czech small business founded in 2020 specializing in the sale and servicing of motorcycles, scooters, electric scooters, and quads, primarily under the Barton Motors brand. The company targets both children and adult riders, offering a range of vehicles and branded rider equipment. Their market position is that of a reliable and professional partner with a strong focus on customer service and quality products. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Google services, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies are missing. The absence of WHOIS data reduces domain trust, but the website content and contact information appear legitimate and professional. Overall, the site is well-designed and user-friendly, supporting the company’s business goals effectively.

E

Element Fleet Management

elementfleet.com

78

Element Fleet Management is a leading global fleet management company specializing in intelligent mobility solutions and comprehensive fleet services. The company serves a broad range of industries with a focus on optimizing fleet costs, safety, and productivity. With over 1.5 million vehicles under management and thousands of clients, Element holds a strong market position in North America and Australia/New Zealand. Their business model centers on providing end-to-end fleet lifecycle services including acquisition, management, optimization, and remarketing. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools, and video platforms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. The use of multiple tracking and marketing tools indicates extensive user engagement monitoring, balanced with privacy compliance through clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs reCAPTCHA for form security. However, it lacks visible security headers and a public incident response or vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding. Overall, Element Fleet Management presents a professional, trustworthy, and well-structured online presence suitable for its enterprise clientele. Strategic improvements in security transparency and WHOIS data availability would further strengthen trust and compliance.

E

Element Arval

elementarval.com

60

Element Arval is a global alliance specializing in fleet management solutions, managing over 4.5 million vehicles across 55 countries. The alliance leverages nearly three decades of partnership to deliver harmonized and customized fleet services, positioning itself as a worldwide leader in the transportation sector. Their business model focuses on strategic partnerships and tailored global fleet strategies to meet diverse client needs. Technically, the website is built on WordPress with Bootstrap and integrates modern tools such as Google Analytics and 6Sense for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is professional and trustworthy, with clear business focus and compliance with privacy regulations.

E

European Cyclists’ Federation

ecf.com

72

The European Cyclists’ Federation (ECF) is a well-established Brussels-based non-profit organization founded in 1983, dedicated to promoting cycling as a sustainable and healthy mode of transport across Europe. The website serves as a comprehensive platform for advocacy, event promotion, member networking, and resource dissemination, positioning ECF as the leading cycling federation in Europe with a broad membership base. The digital infrastructure leverages modern web technologies including Bootstrap, jQuery, GSAP, and integrates analytics and user tracking tools such as Google Analytics and Hotjar, all managed with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforcement, clientTransferProhibited domain status, and Cloudflare protection, although DNSSEC is not enabled and no explicit security.txt or vulnerability disclosure is present. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence aligned with the organization's mission and audience.

The website suwer.pl represents a modern urban bike rental system operating in Suwałki, Poland, managed by ROOVEE S.A. The service offers 160 bikes across 17 stations, including standard, electric, and tandem bikes. The platform supports multiple languages and integrates with a dedicated mobile app for seamless rental and payment experiences. The business is positioned as a local transportation solution with EU co-financing, indicating public sector support and legitimacy. Technically, the site uses standard web technologies including jQuery, Google Maps API, and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, providing clear contact information and user support channels.

Płocki Rower Miejski is a municipal bike rental service operated by ROOVEE S.A., offering a fleet of approximately 310 bikes across 31 stations in Płock, Poland. The service targets local residents and visitors, providing flexible bike rental options via a dedicated mobile application and SMS. The platform integrates with local city cards (PłocKArta) to offer benefits such as free initial ride time. The website is professionally designed with clear navigation, accessibility features, and multilingual support, reflecting a mature digital presence for a recently founded business (2023). Technically, the site uses modern web technologies including Google Maps API and FontAwesome, but relies on an outdated jQuery version and lacks some advanced security headers and DNSSEC, indicating room for technical improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no explicit security or incident response policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy, safe, and well-aligned with its business purpose.

N

Nextbike Polska S.A.

zielonogorskirowermiejski.pl

62

Zielonogórski Rower Miejski is a bike-sharing service operated under Nextbike Polska S.A., providing urban mobility solutions in Zielona Góra, Poland. The service offers bike rentals via a mobile app, supporting multiple languages and providing clear user guidance. The website is professionally designed with good content quality and clear navigation, targeting residents and visitors seeking alternative transportation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and functional with room for security and compliance enhancements.

Czeladzki Rower Miejski operates a local urban bike rental system in Czeladź, Poland, offering 50 modern bikes distributed across 4 stations. The service is integrated with the Roovee mobile application, enabling users to rent, pay, and manage rides conveniently. The business targets local commuters and visitors seeking flexible urban mobility solutions. The website demonstrates a solid digital presence with clear service descriptions, pricing, and user support contacts. Technically, the site uses modern web technologies including Google Maps API and FontAwesome, with responsive design and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

KROTOWER is a localized urban bike rental service operating in Krotoszyn, Poland, offering flexible bike rentals without fixed stations. The service is supported by a mobile application available on iOS and Android platforms, enabling users to rent, pay, and manage their rides conveniently. The business partners with Roovee for system management, Autopay for payment processing, and Orange as a technology partner, positioning itself as a modern and user-friendly transportation solution in its market niche. Technically, the website employs a moderate technology stack including Bootstrap, jQuery, FontAwesome, and Google Maps API to deliver a responsive and functional user experience. While the site is mobile-optimized and well-structured, it lacks some advanced SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and modern framework adoption. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but it lacks important security headers and published security policies. There is no visible cookie consent mechanism, which may impact GDPR compliance. Incident response and vulnerability disclosure information are absent, indicating areas for maturity improvement. Overall, the website and business present a trustworthy and professional image with clear contact information and regulatory documentation. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security practices and privacy compliance would enhance the risk posture and user trust.

Żarskie Rowery is a localized urban bike rental service operating in Żary, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application and web panel, enabling users to rent and park bikes flexibly within designated zones. The business targets urban commuters and visitors seeking convenient, technology-enabled transportation solutions. The website reflects a consistent brand identity and provides clear user guidance, contact information, and partner affiliations, positioning it as a trustworthy local mobility provider. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google Maps API for interactive mapping. Hosting is managed via home.pl with standard performance and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. The WHOIS data confirms domain legitimacy and alignment with the business entity, supporting trustworthiness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and incident response information reduces the overall security maturity. Privacy compliance is partial, with a privacy policy available but no cookie consent or explicit GDPR compliance indicators. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices. Strategically, the business should prioritize implementing security headers, cookie consent, and publishing security policies to improve compliance and user trust. Enhancing analytics and marketing transparency could also support growth. The current risk level is moderate with no critical issues detected.

Śremski Rower Miejski (ŚRM) is a localized urban bike rental service operating in Śrem, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application or SMS, providing flexible rental and parking options within a defined service zone. The business targets urban commuters and visitors seeking convenient, eco-friendly transportation. The website is professionally designed with clear navigation and multilingual support, reflecting a focused and user-friendly digital presence. Technically, the site uses standard web technologies including Bootstrap, jQuery, FontAwesome, and Google Maps API, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website and domain registration data align well, indicating a legitimate and operational business.

Toruński Rower Miejski, operated by ROOVEE S.A., is a medium-sized transportation service providing a bike-sharing system in Toruń, Poland. The service offers 360 standard bikes across 70 stations with options for short and long-term rentals, supported by a dedicated mobile application. The website is professionally designed, accessible, and provides comprehensive user information including pricing, FAQs, and legal documents. The business is well-positioned locally with partnerships including Orange and Autopay, enhancing its credibility and operational capabilities. Technically, the site employs modern web technologies such as Google Maps API and FontAwesome, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a trustworthy and professional business with a solid digital presence.

Polkowicki Rower Miejski (PRM) is a localized urban bike sharing service operating in Polkowice, Poland, managed by ROOVEE S.A. The service offers modern city bikes equipped with GPS and electronic locks, enabling users to rent bikes via a dedicated mobile app or SMS. The business model focuses on flexible, stationless bike rentals with clear pricing and deposit structures. The website is professionally designed, providing clear user guidance, contact information, and partner acknowledgments, positioning PRM as a trusted local transportation option. Technically, the website employs a modern but basic tech stack including Bootstrap, FontAwesome, jQuery, and Google Maps API. The site is mobile optimized and accessible with a cookie consent mechanism and privacy policy in place. However, some security best practices are missing such as DNSSEC and HTTP security headers, and the use of an outdated jQuery version poses potential risks. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. The WHOIS data is consistent and transparent, reinforcing legitimacy. Overall, the site scores well on business credibility and privacy compliance but has room for improvement in security hardening. Strategically, PRM should focus on enhancing security posture by enabling DNSSEC, adding security headers, updating libraries, and publishing security policies. These steps will improve trust and resilience while maintaining a user-friendly and privacy-respecting service.

A

Artel

artel-solutions.biz

62

Artel is a French company founded in 2017 specializing in telematics solutions, likely targeting businesses in transportation and fleet management sectors. The website analyzed is primarily a login portal for their telematics platform, indicating a B2B service model focused on vehicle tracking and fleet management. The company's market position appears niche, serving specialized telematics needs. Technically, the website uses AngularJS and Angular Material frameworks and is hosted on AWS infrastructure, suggesting a modern but somewhat dated frontend technology stack. The site lacks public-facing content such as privacy policies, cookie consent mechanisms, or terms of service, which limits transparency and compliance visibility. Security posture is basic with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is available. Overall, the website is functional but lacks comprehensive security and privacy features, which could impact trust and compliance.

A

Arval

myarval.com

65

My Arval is a corporate login portal associated with Arval, a major player in vehicle leasing and fleet management services, part of the BNP Paribas group. The website serves existing customers across multiple countries, providing access to contract management and related services. The branding and content align with a professional transportation services business model targeting B2B and B2C clients. The platform is built using the OutSystems low-code framework, integrating common web technologies such as jQuery and Google Analytics for tracking and performance monitoring. Technically, the site demonstrates moderate digital maturity with HTTPS enforced and basic mobile optimization. However, it lacks visible security headers and comprehensive privacy or terms of service documentation, which are important for compliance and user trust. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or technical issues with domain registration visibility. From a security perspective, the site uses secure forms with validation and cookie consent mechanisms, but it does not expose detailed security policies or incident response contacts. No vulnerabilities or malicious content were detected in the provided data. Overall, the security posture is moderate but could be improved by adding security headers, publishing privacy and terms policies, and providing clear contact information for security incidents. The overall risk is moderate due to the lack of WHOIS transparency and incomplete privacy documentation. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, adding vulnerability disclosure information, and improving accessibility and contact transparency to strengthen trust and compliance.

A

Arval BNP Paribas

arval.com

73

Arval BNP Paribas is a leading global provider of full-service vehicle leasing and innovative mobility solutions, operating as part of the BNP Paribas Group. The company targets businesses and fleet managers seeking sustainable and efficient vehicle leasing options, emphasizing corporate social responsibility and sustainable mobility. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its corporate identity. Technically, the site is built on Drupal 10, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent management, indicating a modern and privacy-aware infrastructure. Security posture is strong with HTTPS enforcement, Content Security Policy with nonce, and cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate signals and external references. Overall, the site is professional, secure, and compliant with privacy regulations, serving its business audience effectively.

A

ARVAL CZ s.r.o.

arvalauto.cz

54

ARVAL CZ s.r.o. operates a professional vehicle leasing and sales platform in the Czech Republic, specializing in operational leasing of new and used vehicles. The company targets both individual and business customers, offering a wide range of vehicle brands and flexible leasing options. The website is well-structured, with clear navigation and comprehensive content supporting the business model. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager and Adform, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers suggests room for improvement. The lack of publicly available WHOIS data for the domain slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site presents a credible and professional digital presence for a medium-sized transportation leasing business.

Roovee S.A. operates a modern city bike rental system primarily in Poland, leveraging IoT technology, solar panels, and a mobile app to provide eco-friendly transportation solutions. The company positions itself as the only fully Polish bike sharing provider with a growing presence in multiple cities, supported by partnerships with technology leaders like Orange. The website reflects a mature digital infrastructure built on WordPress with SEO and analytics integrations, offering a good user experience and clear business information. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the business demonstrates credibility and compliance with GDPR, including a named Data Protection Officer. The domain registration data aligns well with the company's claims, supporting legitimacy.

I

International Brotherhood of Teamsters

teamster.org

67

The International Brotherhood of Teamsters website serves as the official online presence of one of North America's largest and most diverse labor unions. The site provides information on union campaigns, benefits, divisions, and news updates, targeting union members and the general public interested in labor issues. The organization's market position is strong, supported by a long-established domain and consistent branding. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

C

CitizenPlane

citizenplane.com

57

CitizenPlane is a technology company providing an operating system and flight distribution platform tailored for airlines and tour operators. Their flagship products, Zenith and Air, enable airlines to optimize revenue, manage offers, and distribute flights through major online travel agencies and metasearch engines. The company positions itself as a global player with offices in France, Singapore, Brazil, and Panama, serving hundreds of airline customers worldwide. The website reflects a professional and modern digital presence built on Webflow, with strong branding and clear messaging focused on the airline industry. Technically, the website employs modern web technologies including Webflow CMS, Google reCAPTCHA for form security, and Amazon S3 for asset hosting. The site is mobile-optimized, fast-loading, and well-structured for SEO. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and includes CAPTCHA protections on forms, indicating a baseline security posture. The absence of WHOIS data for the domain is a concern, suggesting either recent registration or privacy protection, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy and terms of service documents are provided, indicating attention to compliance, though cookie consent is lacking. Overall, CitizenPlane's website presents a credible and professional business with a solid technical foundation. Strategic improvements in security headers, cookie consent, and transparency around domain registration would further strengthen trust and compliance.

T

Travel Technology Interactive

ttinteractive.com

56

Travel Technology Interactive is a medium-sized SaaS provider specializing in cloud-based airline passenger service systems and logistics management solutions. Their flagship product, Zenith, is a fully cloud-based passenger experience platform integrated into the CitizenPlane Operating System. The company targets mid-tier and fast-growing airlines globally, offering modular solutions to optimize airline operations, revenue, and distribution. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with common plugins and is hosted on AWS infrastructure, ensuring reliability and scalability. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements are recommended such as updating outdated libraries and configuring analytics properly. The domain is long-established since 2002, consistent with the business history, and WHOIS data supports legitimacy. Overall, the website presents a trustworthy and professional image suitable for its B2B audience.

E

Eckerö Line

eckeroline.ee

73

Eckerö Line operates as a regional transportation company specializing in ferry line trips and day cruises between Tallinn and Helsinki, offering additional services such as car and hotel packages. The website reflects a mature digital presence built on the Magento eCommerce platform, integrating modern technologies and third-party services for analytics and marketing. The site is well-structured with good design quality and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service policies are not found in the provided content. Cookie consent is managed effectively through Cookiebot, indicating awareness of privacy compliance requirements. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

V

Veho Group Oy Ab

veho.fi

64

Veho Group Oy Ab is a well-established Finnish automotive company specializing in the sales, leasing, and servicing of Mercedes-Benz, smart, and BYD vehicles, including passenger cars and commercial vehicles. The company holds a strong market position as an authorized dealer and service provider in Finland, targeting both private consumers and professional clients. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is hosted on reliable infrastructure with Elisa Oyj as the domain reseller and nameserver provider. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be verified further. Privacy compliance is robust, featuring detailed privacy and cookie policies with GDPR adherence. Overall, the website and domain registration data align well, indicating a trustworthy and legitimate business with a high level of professionalism and digital maturity.

E

Eckerö Line Ab Oy

eckeroline.com

71

Eckerö Line Ab Oy operates a professional and well-established ferry service between Helsinki, Finland, and Tallinn, Estonia. The company offers a range of services including passenger ferry trips, hotel packages, daycruises, onboard shopping, and cargo transport. Their market position is solid within the Baltic Sea transportation sector, targeting tourists, business travelers, families, and car travelers. The website reflects a mature digital presence with e-commerce capabilities and multilingual support. Technically, the website is built on Magento, leveraging modern JavaScript frameworks and libraries such as RequireJS and jQuery. It integrates Google Analytics 4 and Google Tag Manager for analytics and marketing, and uses Cookiebot for cookie consent management. The site is mobile optimized and performs moderately well, with good SEO and accessibility features, though some accessibility improvements are recommended. From a security perspective, the site enforces HTTPS and implements key security headers, demonstrating a good security posture. However, there is no explicit security policy or incident response information publicly available, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain is a concern, as it reduces trust and raises questions about domain registration transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could improve transparency around security policies and domain registration details. Strategic recommendations include publishing a security policy, enhancing accessibility, and clarifying domain registration information to strengthen trust and compliance.

P

Palau International Airport

palau-airport.com

60

Palau International Airport's website serves as the official digital presence for the airport, providing essential information about flights and airport services. The site is built on the Wix platform, leveraging standard Wix technologies and Google Analytics for visitor tracking. While the website offers relevant content for travelers and stakeholders, it lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. The absence of visible contact information and WHOIS data transparency further limits the site's credibility from a security and compliance perspective. Technically, the site is moderately optimized for mobile devices but shows basic SEO and accessibility features. Security posture is weak due to missing security headers and lack of HTTPS verification data. Overall, the site functions adequately for informational purposes but requires significant improvements in security, privacy, and trust indicators to meet professional standards.

N

Nauru Airlines

nauruair.com

58

Nauru Airlines is a regional airline operating in the Central and South Pacific, providing scheduled passenger flights, freight services, charters, and ACMI leasing. The airline connects Nauru with key regional hubs including Brisbane, Nadi, Majuro, and others, serving both leisure and business travelers. The website reflects a well-established business with over 50 years of operation, emphasizing safety, service excellence, and regional connectivity. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is missing, which reduces transparency and trustworthiness, though the website content and branding appear legitimate. Overall, the site is professional and trustworthy but could improve in security transparency and contact information availability.