Transportation security reports

T

Toyota България

toyota.bg

70

Toyota България operates as the official national website and distributor for Toyota vehicles and services in Bulgaria. The site offers a comprehensive range of products including new Toyota cars, hybrid models, used vehicles, and accessories, alongside official service booking capabilities. Positioned as a key player in the Bulgarian automotive market, the company leverages the global Toyota brand and infrastructure to serve its customers effectively. The website reflects a strong brand presence with consistent corporate identity and professional content tailored to a general audience interested in automotive products and services. From a technical perspective, the website utilizes a modern technology stack including Adobe Experience Manager as the CMS, Adobe Launch for tag management, Datadog for real user monitoring, and OneTrust for cookie consent management. The infrastructure appears robust, hosted likely on Toyota Europe’s cloud services with CDN support, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be further improved. Security posture is strong with enforced HTTPS, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy documentation, vulnerability disclosure mechanisms, and incident response contact information, which are recommended for enhanced trust and compliance. Privacy compliance is partially addressed through cookie consent but lacks a clearly accessible privacy policy and terms of service, which are critical for GDPR adherence. Overall, the website is a professional, secure, and credible digital asset for Toyota Bulgaria, supporting its business objectives effectively. Strategic improvements in privacy transparency, security documentation, and accessibility would further strengthen its position and compliance standing.

T

Toyota Slovenija

toyota.si

71

Toyota Slovenija operates as the official Toyota brand presence in Slovenia, offering automotive sales, financing, and customer support services. The website targets general consumers interested in Toyota vehicles and related offers within Slovenia. It is part of the larger Toyota Europe digital ecosystem, leveraging advanced digital tools and platforms to deliver a localized user experience. The company is well-established with a domain age dating back to 1998, reflecting a mature market presence. Technically, the website is built on Adobe Experience Manager (AEM) and integrates modern technologies such as Adobe Launch for tag management, Datadog for real user monitoring, and Scene7 for media delivery. The site demonstrates good mobile optimization, SEO practices, and performance characteristics, although some accessibility features could be improved. The use of HTTPS and consent management for cookies aligns with current best practices. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, explicit security headers and published security policies are absent, representing areas for enhancement. No vulnerabilities or suspicious patterns were detected, and the domain registration details are consistent with the business claims, supporting a strong legitimacy profile. Overall, Toyota Slovenija's website is professional, secure, and compliant with basic privacy standards, though it would benefit from publishing comprehensive privacy and security policies. Strategic improvements in security transparency and accessibility would further strengthen its digital maturity and trustworthiness.

L

Luka Koper

luka-kp.si

61

Luka Koper is a large, established port operator based in Slovenia, specializing in connecting Central Europe with maritime transport routes. The company offers reliable port services and a network of maritime and rail connections to support global logistics solutions. The website reflects a professional business presence with clear branding and relevant content targeting logistics and transport stakeholders. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not published. Overall, the site is trustworthy and well-maintained, suitable for its business audience.

S

Slovenske železnice d.o.o.

zelezniskimuzej.si

46

Železniški muzej is a Slovenian railway museum operated by Slovenske železnice d.o.o., showcasing the history and heritage of railway transport in Slovenia. The museum offers permanent exhibitions, guided tours, and educational programs targeting the general public, railway enthusiasts, and tourists. The website is professionally designed using WordPress and modern front-end technologies, providing good user experience and mobile optimization. Social media integration and clear contact information enhance its digital presence. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy compliance mechanisms. Overall, the website is trustworthy and serves its cultural and educational mission effectively.

Prometni institut Ljubljana d.o.o is a well-established Slovenian research and development organization specializing in transport, particularly railway transport. The company operates as part of the Slovenske železnice group and holds a leading position in national and international transport research projects. Their services encompass transport technology, infrastructure, economic and legal research, investment documentation, and digitalization in transport. The website reflects a professional and credible business with clear contact information, GDPR-compliant privacy and cookie policies, and ISO 9001:2015 certification, reinforcing trust. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms for data collection, jQuery, and various UI libraries. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. HTTPS is enforced, and no critical vulnerabilities or suspicious domains were detected. The site uses a cookie consent mechanism and collects minimal user data primarily via a contact form. Security posture is solid with HTTPS and spam protection on forms, but lacks publicly available incident response or vulnerability disclosure information. The domain is long-standing and consistent with the business profile, indicating high legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website presents a trustworthy, professional, and secure digital presence for a medium-sized transport research entity. Strategic improvements could include enhanced security headers, publishing security policies, and adding vulnerability disclosure channels to further strengthen security and compliance.

S

SŽ – Vleka in tehnika, d.o.o.

sz-vit.si

55

SŽ – Vleka in tehnika, d.o.o. is a medium-sized Slovenian company specializing in railway vehicle maintenance, train towing, and technical wagon services. It operates as a subsidiary of the Slovenske železnice group, providing comprehensive maintenance, overhaul, wheelset processing, mobile service, and engineering consulting. The company holds multiple ISO certifications, indicating a commitment to quality, environmental management, and occupational health and safety. The website is professionally designed with multilingual support, clear navigation, and detailed contact information, targeting railway operators and transportation sector clients. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Maps API, and Google Tag Manager. It is hosted behind Cloudflare, ensuring good performance and security. The site includes accessibility features and cookie consent mechanisms compliant with GDPR. However, explicit security headers could be improved, and no dedicated security or incident response pages were found. The security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the business profile, having been registered in 2012 and matching the company branding. No suspicious WHOIS patterns were detected. Overall, the website presents a trustworthy and professional digital presence for the company. Strategic recommendations include enhancing security headers, publishing an incident response policy, and adding a vulnerability disclosure mechanism to further improve security and trust.

SŽ-ŽIP, storitve, d.o.o. is a medium-sized Slovenian company founded in 2002, operating as a subsidiary of Slovenske železnice. The company focuses on providing socially responsible employment for disabled railway workers and offers a range of services including comprehensive facility management, vehicle fleet management, production and trade activities, and accommodation services. The website is professionally designed, consistent with the brand, and targets both internal Slovenske železnice stakeholders and external clients requiring related services. Technically, the site is built on WordPress with modern libraries and APIs such as Google Maps and Leaflet, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business profile, indicating legitimacy.

SŽ - Železniško gradbeno podjetje Ljubljana d.d. is a specialized Slovenian company focused on the construction and maintenance of railway infrastructure, including upper track structures and signal safety devices. Established in 2001, it holds a unique market position as the sole specialized provider in Slovenia for upper railway track construction, trusted by the state and private railway owners. The website reflects a professional and consistent brand image with clear business information and a focus on railway infrastructure projects. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and ScrollReveal, providing a moderate performance and good mobile optimization, though accessibility and SEO could be improved. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is safe, trustworthy, and compliant with GDPR, with no signs of adult or questionable content.

F

Fersped d. o. o.

fersped.si

56

Fersped d. o. o. is a Slovenian logistics and transportation company established in 1997, leveraging its strategic geographic location and strong transport connections to provide fast, comprehensive, and modern logistics solutions to its customers and partners. The company positions itself as a reliable service provider within the transportation sector, targeting business clients requiring efficient logistics services. The website reflects a professional and consistent brand image with clear messaging about its services and business focus. Technically, the site is built on WordPress with modern libraries and plugins such as Google Analytics, Google Tag Manager, and FontAwesome, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. Security posture is decent with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and formal security or privacy policies, which are recommended for compliance and trust enhancement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Verkehrsverbund Oberelbe GmbH (VVO)

vvo-mobil.de

53

VVO Mobil is a regional public transportation platform serving the Oberelbe region in Germany. It offers trip planning, real-time departure information, ticket purchasing, and network maps. The website is built on a modern Angular framework and integrates trusted third-party services such as Google Maps and PayPal for enhanced user experience and payment processing. The platform targets public transport users in the region, providing essential mobility services with a focus on usability and accessibility. The business operates in the transportation sector with a medium-sized footprint and maintains a consistent brand presence online. Technically, the website demonstrates a mature digital infrastructure with a strict Content-Security-Policy, HTTPS enforcement, and integration of analytics via Matomo. The site is mobile-optimized and provides a good user experience, though some accessibility features could be improved. The absence of a cookie consent mechanism and terms of service pages indicates room for enhancement in privacy compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data. From a security perspective, the site employs best practices such as HTTPS and CSP headers, but lacks explicit security policies and incident response contacts. No vulnerability disclosure or security.txt files were found, which could be added to improve transparency and trust. The WHOIS data aligns well with the website's claims, showing consistent domain registration and authoritative name servers. Overall, VVO Mobil presents a trustworthy and professional online presence for a regional transportation service. Strategic improvements in privacy compliance, security transparency, and accessibility would further strengthen its position and user trust.

K

KÜS Akademie GmbH

kues-akademie.de

57

KÜS Akademie GmbH operates as the educational and training arm of the KÜS group, a well-established German vehicle inspection organization with over 30 years of experience. The website offers comprehensive information on career opportunities, training programs, and dual study options in automotive and vehicle inspection fields. The company maintains a strong market position in the transportation and education sectors within Germany, supported by a network of subsidiaries and partner domains. Technically, the website is built on a modern WordPress CMS with Elementor and Borlabs Cookie for privacy compliance, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

KÜS Automotive GmbH

kues-automotive.de

57

KÜS Automotive GmbH is a specialized service provider in the automotive sector, focusing on expert damage assessment reports, vehicle valuations, and evaluations of historical vehicles. The company operates as part of the larger KÜS group, which includes several related subsidiaries offering complementary automotive services. Their market position is that of an important regional player in Germany, serving vehicle owners, insurance companies, and automotive professionals. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the website is built on a modern WordPress platform using Elementor and the Astra theme, ensuring good mobile optimization and user experience. The presence of Borlabs Cookie plugin indicates attention to GDPR compliance and user privacy. Performance is moderate, with room for optimization. No hosting provider details were identified. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, there is a lack of explicit security headers and no visible security or incident response policies published. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the business branding, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance trust and security posture.

K

KÜS Technik GmbH

kues-technik.de

56

KÜS Technik GmbH is a specialized technical service provider in the automotive sector, officially recognized by the German Kraftfahrt-Bundesamt. The company offers expert services including part approvals, individual vehicle approvals, and technical assessments for manufacturers, importers, and private individuals. Their market position is supported by official designations and a broad portfolio of services related to vehicle parts and modifications. The website reflects a medium-sized enterprise with consistent branding and professional content tailored to a German-speaking audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers and policies could be enhanced. Overall, the site is trustworthy, professional, and well-maintained.

K

KÜS Fahrzeugüberwachung

kues-fahrzeugueberwachung.de

57

KÜS Fahrzeugüberwachung is a well-established German organization specializing in vehicle inspection and certification services. With a network of approximately 1,600 inspectors and experts, it provides a broad range of services including main vehicle inspections, emission testing, safety checks, and specialized certifications for gas-powered vehicles and hazardous goods transport. The website reflects a professional and comprehensive service offering targeted at vehicle owners and operators within Germany. The business operates within the transportation sector and is part of a larger corporate group with several related subsidiaries.

The website odontotos.com is dedicated to promoting the Odontotos rack railway, a historic and scenic narrow-gauge railway line in Greece connecting Diakopto and Kalavryta. It serves as an informational portal targeting tourists and railway enthusiasts, providing detailed historical context, technical specifications, renovation updates, schedules, ticket prices, and regional tourism links. The site is primarily in Greek with some English navigation options, reflecting its regional focus. From a technical perspective, the website is built using basic HTML, CSS, and JavaScript without modern CMS or frameworks. The design is dated and lacks mobile optimization and accessibility features. There is no evidence of HTTPS enforcement or security headers, which raises concerns about security posture. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. Contact information is limited but includes an email and phone numbers, and social media presence is limited to a Facebook group link. Security-wise, the site lacks modern security best practices such as HTTPS, security headers, and secure forms. There are no visible vulnerabilities but also no advanced protections. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations. Overall, the site is functional for informational purposes but requires significant improvements in security, privacy, and technical modernization. The overall risk is moderate given the lack of security controls and privacy compliance, but the content is safe and non-malicious. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, improving mobile responsiveness, and enhancing user experience and trust signals.

Bike Slovenia is a small tourism business specializing in guided cycling tours and bike rentals in Slovenia, particularly in the Green Karst region. The company targets active travelers and cycling enthusiasts seeking customized and group cycling experiences. The website is built on Joomla CMS with modern frameworks like Bootstrap and integrates tracking and marketing tools such as Google Analytics and Amplitude. It implements a cookie consent mechanism with user control and uses hCaptcha for form security. However, it lacks a published privacy policy, terms of service, and explicit contact information, which are important for compliance and trust. The domain registration is consistent with the business location and age, supporting legitimacy. Overall, the website is professional and functional but could improve privacy and security transparency.

V

Verkehrsverbund Oberelbe

vvo-online.de

54

Verkehrsverbund Oberelbe (VVO) operates as a regional public transportation authority providing integrated ticketing and mobility services for Dresden and its surrounding areas. The website serves as a comprehensive mobility portal offering timetable information, ticket sales, service updates, and accessibility features. The target audience includes residents and visitors relying on buses, trams, S-Bahn, and ferries within the VVO region. The business model focuses on facilitating seamless public transport usage through digital tools and customer service. Technically, the website employs a modern JavaScript stack with accessibility enhancements such as Eye-Able tools and uses Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no visible security vulnerabilities and demonstrates good SEO and accessibility practices, though mobile optimization is basic. The content is well-structured, multilingual, and professionally presented, supporting a positive user experience. From a security perspective, the site benefits from HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional platform for regional public transport users, with recommendations to improve privacy compliance and security transparency to further strengthen its posture.

T

teilAuto

teilauto.net

58

teilAuto is a well-established carsharing provider operating primarily in the German states of Sachsen, Sachsen-Anhalt, and Thüringen. Founded in 1998, the company offers a range of vehicle classes with a pay-per-use model that includes fuel costs, accessible via a dedicated mobile app and web platform. The website reflects a professional and consistent brand image, emphasizing sustainability and community values, including a notable Gemeinwohl certification. Technically, the site is built on the Contao CMS with modern JavaScript libraries and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and domain transfer protections, though some enhancements like DNSSEC and security headers could improve resilience. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site is user-friendly, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

S

Slovenske železnice

sz.si

63

Slovenske železnice is a large Slovenian railway group providing comprehensive rail mobility and logistics services, including passenger and freight transport, infrastructure management, and construction. The company operates through a network of nine subsidiaries, positioning itself as a leading national transport and logistics provider. The website reflects a professional corporate presence with clear business information and a focus on service offerings. Technically, the site is built on WordPress with modern libraries and SEO tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

L

Ljubljana Airport

lju-airport.si

49

Ljubljana Airport operates as the primary international airport in Slovenia, providing comprehensive flight information, travel destinations, and airport services to passengers and partners. The website is well-structured, professionally designed, and targets travelers and business partners with relevant content and services. The technical infrastructure leverages SilverStripe CMS, Azure DNS hosting, and modern web technologies ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is robust with GDPR-aligned policies and consent management. Overall, the website reflects a mature digital presence consistent with a medium-sized transportation entity.

P

PROMET.SI

promet.si

65

The website promet.si serves as the official Traffic Information Centre for Slovenian roads, providing comprehensive traffic forecasts, freight traffic details, and detailed real-time traffic information such as cameras, incidents, roadworks, and travel times. It targets general road users and freight operators within Slovenia and neighboring regions, positioning itself as a key national transportation information portal. The domain is well-established since 2005, reinforcing its credibility and market presence. Technically, the site employs a modern tech stack including jQuery, Bootstrap, MapLibre GL, and Google Tag Manager, hosted by a Slovenian registrar NEOSERV.si. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks explicit security headers and incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

DarsGo is a Slovenian government-operated portal dedicated to tolling vehicles over 3500 kg. It provides comprehensive services including vehicle and customer registration, toll calculation, payment options, and user support. The website is well-branded and consistent with the parent company DARS d.d., serving as the primary toll system operator in Slovenia. Technically, the site uses a modern Angular framework with supporting libraries such as Bootstrap and PrimeNG, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with secure login forms and cookie consent mechanisms, though explicit security policies and headers are not publicly visible. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the site is professional, trustworthy, and serves its target audience effectively.

D

DARS d.d.

dars.si

60

DARS d.d. is the Slovenian national motorway operator responsible for toll collection, motorway maintenance, traffic management, and infrastructure investments. The company operates a vinjetni toll system and an electronic toll system (DarsGo) for heavy vehicles. The website reflects a well-established, state-owned enterprise with a clear focus on transportation infrastructure and public service. The site targets Slovenian motorway users, transport companies, and the general public, providing comprehensive information about services, projects, and traffic updates. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for spam protection. The site is mobile-optimized with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is solid with HTTPS, secure forms, and no exposed sensitive data. The use of reCAPTCHA and cookie consent aligns with GDPR requirements. The domain is long-established (since 1996) and registered with a Slovenian registrar consistent with the business location, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency by publishing security policies and incident response contacts. The site effectively supports the company’s role as a key national transportation infrastructure operator.

T

Tous à pied

tousapied.be

49

Tous à pied is a Belgian non-profit organization advocating for pedestrian rights and promoting walking as a vital mode of mobility in Wallonia and Brussels. The website serves as a platform to engage citizens, public authorities, educators, and professionals with resources, events, and advocacy campaigns. It enjoys a strong market position within its niche, supported by recognized partners and a clear mission to defend pedestrian rights. Technically, the website is built on WordPress with modern features such as PWA support and Google Analytics integration, reflecting a moderate to good digital maturity. Security posture is generally good with HTTPS enforced, though improvements are recommended in security headers and cookie consent mechanisms to enhance GDPR compliance. Overall, the site is professional, trustworthy, and well-structured, with no signs of malicious activity or content blocking.

Dresdner Verkehrsbetriebe AG operates the MOBI platform, a comprehensive multimodal mobility service in Dresden, Germany. The website presents a well-structured and professional digital presence highlighting integrated public transport, bike- and carsharing, and electric vehicle charging services. The company positions itself as a local leader in sustainable urban mobility, supported by partnerships with local government and recognized organizations. The site targets residents and visitors seeking flexible and environmentally friendly transportation options. Technically, the website employs modern web standards including responsive design, SVG icons, and optimized images with WebP support. While no explicit CMS or frameworks are detected, the site demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No security headers or incident response policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The WHOIS data aligns with the business claims, showing consistent domain registration without privacy protection, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, though enhancements in security policies and privacy compliance would strengthen its posture. The absence of tracking scripts suggests a privacy-conscious approach. Strategic recommendations include implementing security headers, cookie consent, and publishing security and incident response policies.

J

JCDecaux

jcdecaux.com

56

JCDecaux is a leading global outdoor advertising company founded in 1964 in France. The company operates over one million advertising panels across more than 80 countries, serving advertisers, municipalities, and transport authorities. The website reflects a mature enterprise with a strong market position and comprehensive service offerings in outdoor advertising and street furniture. Technically, the site is built on Drupal 10, uses modern libraries like jQuery, and employs CDN services for performance optimization. The presence of GDPR-compliant consent management and cookie policies indicates good privacy practices. Security posture is solid with HTTPS enforcement and security headers, though explicit security and incident response policies are not publicly detailed. The missing WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.

F

Fraport Slovenija, d.o.o.

fraport-slovenija.si

45

Fraport Slovenija, d.o.o. operates Ljubljana Airport, providing airport management and passenger services in Slovenia. The company is a subsidiary of Fraport AG and holds a key position in the Slovenian transportation sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for passengers, partners, and job seekers. Technically, the site uses Adobe Experience Manager CMS, integrates Adobe Analytics for data insights, and employs Usercentrics for GDPR-compliant cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Overall, the site demonstrates a mature digital presence aligned with corporate standards.

S

Slovenske železnice - Potniški promet

slo-zeleznice.si

63

Slovenske železnice - Potniški promet is the national passenger railway operator in Slovenia, providing comprehensive train travel services including domestic and international routes, ticketing, and travel information. The company is part of the larger Slovenske železnice group with multiple subsidiaries covering freight, infrastructure, and technical services. The website is professionally designed, multilingual, and offers detailed content relevant to travelers. Technically, it is built on WordPress with modern analytics and marketing tools integrated, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a mature digital presence aligned with a large, reputable transportation entity.

K

KÜS

kues.de

58

KÜS is a well-established German organization specializing in vehicle and traffic safety services. The company operates multiple subsidiaries covering vehicle inspections, technical assessments, automotive expertise, training, data services, and safety consulting. Their market position is strong with a nationwide presence and a large team of vehicle inspection engineers. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience of vehicle owners and automotive professionals. Technically, the site is built on WordPress with Elementor, uses modern libraries, and implements cookie consent mechanisms, indicating a moderate to good digital maturity. Security posture is solid with HTTPS and cookie consent, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professionally maintained, supporting KÜS's business credibility in the transportation sector.

W

Webtasy, d.o.o.

dravabike.si

55

Drava Bike is an official regional tourism website promoting the Drava Bike cycling route that spans four countries including Slovenia. The site provides comprehensive information about the cycling stages, accommodations, services, and experiences along the route. It targets cyclists of various skill levels and tourists interested in outdoor activities and cultural experiences. The website is multilingual and includes an online shop hosted on a partner domain. Technically, the site uses modern JavaScript frameworks like Alpine.js and Vite, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and anonymized Google Analytics tracking, but lacks some security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no explicit cookie consent. Overall, the domain registration data is consistent and supports the legitimacy of the business.

D

Dresdner Verkehrsbetriebe AG

dvb.de

58

Dresdner Verkehrsbetriebe AG operates as the primary public transportation provider in Dresden, Germany, offering a comprehensive range of services including tram, bus, ferry, and shared mobility options. The website serves residents and visitors by providing route planning, ticketing, and real-time service updates. The company maintains a strong market position as the main transit operator in the region. Technically, the website employs modern JavaScript libraries, integrates Matomo analytics for privacy-conscious tracking, and uses OpenStreetMap for geographic data. The site is accessible, well-structured, and provides a good user experience with basic mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve its security posture by adding missing headers and vulnerability disclosure information.

S

Sächsische Dampfschifffahrt

saechsische-dampfschifffahrt.de

51

Sächsische Dampfschifffahrt operates as a regional transportation and tourism company specializing in river cruises along the Elbe river in Germany. The company offers scheduled cruises, charter events, conference hosting, and onboard gastronomy services, targeting tourists and local travelers interested in scenic river journeys. The website is built on WordPress with multilingual support and employs modern web technologies including JavaScript and CSS. It features a cookie consent mechanism via the Borlabs Cookie plugin and uses Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit privacy or terms of service pages detected. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy disclosures and security practices are recommended.

Experian Automotive provides advanced automotive market reporting and analytics services, delivering accurate and timely data on vehicle sales, financing trends, and competitive market insights. Their offerings target automotive dealers, lenders, ad agencies, and aftermarket manufacturers, positioning Experian as a leading data intelligence provider in the automotive sector. The website demonstrates a mature digital presence with comprehensive content, professional design, and multiple client portals supporting various automotive data services. Technically, the site leverages Adobe Experience Manager CMS, integrates modern marketing and analytics tools such as Adobe DTM, 6sense, and Bing UET, and employs Google reCAPTCHA for form security. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a large enterprise brand.

A

AutoCheck.com | Homepage | AutoCheck.com

autocheck.com

59

AutoCheck.com is an online service providing vehicle history reports primarily targeting vehicle buyers and automotive industry stakeholders. The website offers key services such as vehicle history data and analytics to assist in used vehicle assessments. The site demonstrates a moderate level of digital maturity, utilizing modern web technologies including Bootstrap, Google Analytics, and Google reCAPTCHA for user experience and security. The website is well-designed with good navigation and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS and Content Security Policy implemented, though additional security headers could enhance protection. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap. Overall, the website appears professional and trustworthy, but the absence of WHOIS data and privacy documentation suggests areas for improvement in transparency and compliance.

J

Javno podjetje Marprom d.o.o.

marprom.si

39

Javno podjetje Marprom d.o.o. is a medium-sized public transportation company based in Maribor, Slovenia, established in 2011. It operates urban bus lines, cable car services, and manages public parking facilities, offering modern mobility solutions including mobile applications for ticketing and route planning. The company targets residents and visitors of Maribor, positioning itself as a key regional transport provider. The website is built on WordPress with Elementor and related plugins, demonstrating a moderate level of digital maturity with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and functional, supporting the company’s public service mission effectively.

Universal LTD is a Latvian-based manufacturer specializing in buses and special vehicles, with over 32 years of experience. The company serves a diverse clientele including bus fleets, passenger carriers, tourism entrepreneurs, sports organizations, and government institutions. Their business model focuses on manufacturing, exporting seats and vehicle parts, and providing tailored solutions with 24/7 customer support. The company holds reputable certifications such as ISO 9001 and Mercedes-Benz Van Partner status, reinforcing its market credibility. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies like Bootstrap and FontAwesome. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with privacy and cookie policies present but no explicit consent mechanisms or GDPR details. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy image with a solid business foundation. Strategic improvements in security headers, privacy compliance, and accessibility would enhance its security posture and user trust.

N

Nomago

nomago.si

54

Nomago is a large Slovenian transportation and travel services company established in 2017. The company offers a wide range of services including bus tickets, vehicle rentals, travel packages, bike rentals, airport shuttle services, and driving school programs. The website is professionally designed with excellent content quality and clear navigation, targeting general travelers and commuters in Slovenia and Europe. Technically, the site uses modern web technologies such as Bootstrap, Leaflet.js, and Cookiebot for cookie consent management, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and consent management in place, though some security headers could be improved and explicit security policies are not published. WHOIS data confirms the domain's legitimacy and consistent registration with a Slovenian registrar. Overall, the website is trustworthy, secure, and compliant with GDPR requirements, providing a positive user experience.

B

Booking Trolley

bookingtrolley.com

53

Booking Trolley is an online travel agency specializing in affordable flight bookings and airfare deals for domestic and international destinations. The platform offers services including flight ticket booking, rental car reservations, and travel consultation, with a unique selling proposition of flexible payment options such as installment plans. The website targets budget-conscious travelers seeking last-minute and unpublished deals. Technically, the site employs a modern tech stack including jQuery, Google Tag Manager, Microsoft Clarity, and various advertising and tracking services. The site is mobile-optimized and uses HTTPS, but lacks some compliance documentation such as privacy and cookie policies. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the domain registration data aligns with the business profile, indicating legitimacy. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

D

Dynamic Lines GmbH

sicherheitsexpo.de

48

SicherheitsExpo.de is the official website for the SicherheitsExpo trade fair held in Munich, Germany, focusing on security technology for various sectors including industry, banking, healthcare, transportation, and public authorities. The site serves as an information and promotional platform for exhibitors, visitors, and partners, showcasing the event's offerings and associated programs. The business positions itself as an innovator in security technology with a strong emphasis on economic benefits and practical applications. Technically, the website is built on TYPO3 CMS, hosted via SchlundTech, and employs Cookiebot for GDPR-compliant cookie management. The site is accessible, mobile-optimized, and uses HTTPS, reflecting a moderate to good level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies, incident response contacts, or vulnerability disclosure mechanisms, indicating room for improvement in transparency and security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively.

T

The Flight Makers

theflightmakers.com

62

The Flight Makers is an online travel agency specializing in affordable flight bookings and airfare deals. Established in 2015, the company targets travelers seeking cost-effective flight options globally. The website offers a flight search engine, coupon codes, and customer support via phone and live chat, positioning itself as a customer-friendly service provider in the transportation sector. Technically, the site is built on ASP.NET WebForms with a modern front-end stack including jQuery, Bootstrap, and Owl Carousel, hosted behind Cloudflare DNS. While the site is mobile-optimized and SEO-friendly, it lacks advanced security headers and privacy compliance features such as a privacy or cookie policy. Security posture is moderate with HTTPS enabled but missing important headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

The Indian Railways Institute of Logistics & Materials Management (IRILMM) operates as a professional institute focused on logistics, materials management, and public procurement primarily for Indian Railways personnel and related professionals. The website presents a comprehensive range of services including membership, diploma courses, training seminars, consultancy, and publications, positioning itself as a niche educational and professional body within the transportation sector in India. The site is well-structured with clear navigation and relevant content targeting railway officers and logistics professionals. Technically, the website is built on WordPress with modern frontend technologies such as Bootstrap 5, jQuery, and Smart Slider 3. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. However, the absence of privacy and cookie policies highlights compliance gaps. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. Despite this, the website content and contact information appear professional and consistent with the organization's stated mission. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and compliance posture.

T

The Travel Makers

thetravelmakers.co.uk

64

The Travel Makers is a UK-based travel agency specializing in affordable flight bookings, holiday packages, and cruise services. Established in 2015, the company targets UK travelers seeking last-minute deals and competitive pricing. The website presents a professional and user-friendly interface with clear contact information and trust signals such as ATOL certification and Trustpilot integration. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and integrates multiple analytics and marketing tools. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is credible and functional but would benefit from enhanced privacy and security practices.

R

Rhein-Main-Verkehrsverbund GmbH (RMV)

rmv.de

61

The Rhein-Main-Verkehrsverbund (RMV) operates a comprehensive public transportation network serving the Rhein-Main region in Germany. The website provides extensive information on timetables, ticketing options, flexible mobility services, and local partner information. It targets a broad audience including daily commuters, tourists, and residents seeking reliable transport options. The business model is centered on regional public transport service provision and coordination. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery frameworks, hosted on a secure provider with HTTPS enforced. The site demonstrates good mobile optimization and accessibility features, including options for easy language and sign language. Matomo analytics is used, reflecting a privacy-conscious approach to user tracking. Security posture is solid with HTTPS and secure form handling, though the absence of explicit security headers and a cookie consent mechanism are areas for improvement. No vulnerabilities or exposed sensitive data were detected. WHOIS data aligns well with the business identity, indicating legitimacy and consistent domain registration. Overall, the RMV website is a professional, trustworthy portal for public transport users, with recommendations to enhance security headers, privacy consent, and incident response transparency to further strengthen its security and compliance stance.

F

Fraport AG

frankfurt-airport.com

60

Fraport AG operates the Frankfurt Airport, one of the largest and busiest airports in Europe. The website provides comprehensive travel-related information including flight data, parking options, check-in services, and airline details. It targets travelers, visitors, and business partners with a professional and user-friendly digital presence. The site is well-structured, mobile-optimized, and integrates modern web technologies and consent management tools to ensure privacy compliance. Despite the lack of WHOIS data, the website's branding, social media presence, and content quality strongly support its legitimacy. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy policies and cookie consent mechanisms are implemented in line with GDPR requirements.

AMS Automarkt am Schieferstein GmbH is a small, regionally focused automotive business established in 1990, specializing in the sale and marketing of vehicles including Mitsubishi Jahreswagen, leasing returns, fleet vehicles, and service cars. The company targets both end consumers and business clients within the transportation sector, offering financing and leasing options. The website reflects a professional and consistent brand presence with clear contact information and a comprehensive privacy policy, supporting GDPR compliance. Technically, the site uses a modern tech stack including Bootstrap and Matomo analytics, with moderate performance and good mobile optimization. Security posture is adequate with privacy-conscious analytics and cookie consent, though lacking explicit security headers and incident response details. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Momentum

momentum-biking.com

65

Momentum is a lifestyle bicycle brand offering stylish, comfortable commuter, hybrid, and electric bikes aimed at urban mobility enthusiasts. The brand is positioned under the reputable Giant Group umbrella, enhancing its market credibility. The website presents a professional and consistent brand image with clear navigation and relevant content targeting urban cyclists seeking functional and fun transportation options. Technically, the site employs modern JavaScript frameworks such as Vue.js and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Klaviyo, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand's association with Giant Group. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear contact information to improve transparency and trust.

G

Giant Bicycles

giant-bicycles.com

69

Giant Bicycles is a globally recognized leader in the manufacturing and retail of bicycles and cycling gear. The website serves as the official platform for showcasing their latest products, news, events, and pro cycling team information, targeting cycling enthusiasts worldwide. The company operates under the parent Giant Group and includes subsidiaries such as Liv and Momentum, reinforcing its strong market position in the transportation sector. Technically, the website employs a modern tech stack including jQuery, Vue.js, Google Analytics, Klaviyo, Microsoft Clarity, and Facebook Pixel, ensuring robust analytics and marketing capabilities. The site is well-optimized for mobile devices, features comprehensive SEO and accessibility practices, and uses GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and integrates consent-based analytics and marketing scripts. However, explicit security headers are not detected, and no public security or incident response policies are found, indicating room for improvement in transparency and security posture. The absence of WHOIS data for the domain is unusual but does not detract from the site's apparent legitimacy based on content and branding. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong compliance to privacy regulations. Strategic enhancements in security policy publication and domain registration transparency would further strengthen its risk profile and stakeholder confidence.

R

Raaberbahn Cargo GmbH

raaberbahncargo.at

51

Raaberbahn Cargo GmbH is a medium-sized, dynamically growing rail freight logistics company operating primarily along the Danube corridor between Austria and Hungary. Founded in 2011 as a wholly owned subsidiary of GYSEV CARGO Zrt., it provides national and international rail freight services, including export-import and combined transport. The company emphasizes efficiency, safety, and quality in its operations and maintains an integrated management system covering these aspects. The website is professionally designed, mobile-optimized, and provides clear business information and social media links, reflecting a mature digital presence. Technically, the site uses modern frontend technologies and integrates Google services for analytics and security, including reCAPTCHA and Tag Manager. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to NIC.AT restrictions, but the domain appears legitimate and consistent with the business history. Overall, the site presents a trustworthy and professional image suitable for its business sector.

B

BeachTech

beach-tech.com

72

BeachTech is a German-based company specializing in the manufacturing and distribution of professional beach cleaning machines. The company positions itself as a global provider of environmentally friendly and efficient beach cleaning solutions, targeting municipalities and businesses responsible for beach maintenance. The website reflects a medium-sized enterprise with consistent branding linked to its parent company, Kässbohrer Geländefahrzeug AG. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and multi-language support indicating a mature digital presence. Security-wise, the site uses HTTPS and implements cookie consent via Cookiebot, but lacks visible security headers and formal security policies, which could be improved. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and partner links suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.