Transportation security reports

A

ANWB

werkenbijanwb.nl

74

The website 'werkenbijanwb.nl' serves as a career portal for ANWB, a well-established Dutch organization in the transportation and mobility sector. It provides job seekers with access to various vacancies and promotes employment opportunities within ANWB. The site is professionally designed with consistent branding and targets individuals interested in mobility and adventure careers. The technical infrastructure includes modern web technologies such as Bootstrap, Google Tag Manager, and reCAPTCHA, supporting a good user experience and moderate performance. Security measures like HTTPS and security headers are properly implemented, although explicit security policies and incident response contacts are absent. The site employs multiple analytics and advertising tools, indicating a focus on marketing and user engagement. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy.

Bedel Logistique is a French logistics company specializing in storage, inventory management, transport, and installation services. The company operates multiple storage sites with controlled environmental conditions and offers a proprietary software solution for inventory monitoring. Positioned as a regional player in Île-de-France and Rhône-Alpes, Bedel Logistique serves business clients requiring agile and secure supply chain solutions. The website is professionally designed, mobile-optimized, and includes interactive features such as parallax scrolling and a contact form protected by Google reCAPTCHA v3. However, the absence of WHOIS registration data and lack of privacy and cookie policies represent compliance and trust gaps. Security posture is moderate with HTTPS enforced but missing security headers and incident response information. Overall, the website reflects a credible business presence but would benefit from enhanced transparency and security practices.

A

ANWB

anwb.nl

63

ANWB is a well-established Dutch association focused on mobility, travel, insurance, and roadside assistance services. The website reflects a mature digital presence with comprehensive content aimed at Dutch residents and travelers. It offers a broad range of services including travel insurance, energy solutions, and retail products, positioning itself as a leading player in the Dutch transportation and travel sector. The technical infrastructure leverages modern web technologies such as React and Next.js, supported by a Bloomreach CMS platform, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

Bedel Déménagement d'entreprise is a French company specializing in corporate relocation and transfer services, including moving offices, hospitals, laboratories, hotels, and art works. The company holds multiple ISO certifications (9001, 14001, 45001) and a Confidentiel Défense status, positioning it as a trusted and professional service provider in the transportation and logistics sector. Their client portfolio includes major corporations such as Orange, Krys, and Eni, indicating a strong market presence and reliability. The website reflects a medium-sized enterprise with a consistent brand and clear service offerings tailored to business clients requiring complex relocation solutions. Technically, the website uses modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and incident response information, which are important for enhancing trust and compliance. The security posture is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies, as well as incident response contacts, reduces the overall privacy compliance score. The company demonstrates strong business credibility through certifications and client testimonials but should improve transparency regarding data protection and user consent mechanisms. Overall, Bedel's website is professional and trustworthy, serving its business audience effectively. Strategic improvements in privacy compliance and security transparency would further strengthen its digital maturity and risk posture.

C

CTS GROUP

ctsgroup.nl

69

CTS GROUP is a Netherlands-based logistics and distribution company specializing in European pallet transport and warehousing services. The company offers a comprehensive range of logistics solutions including groupage, special transport, B2B and B2C logistics, e-commerce logistics, and marketplace logistics. Positioned as a medium-sized player in the European transportation sector, CTS GROUP emphasizes top-quality service with a personal approach, targeting businesses requiring reliable and efficient pallet transport across Europe. The website reflects a professional and consistent brand image with multilingual support and clear navigation.

S

Stasher

stasher.com

70

Stasher is a UK-based company specializing in providing secure luggage storage services worldwide through a network of trusted shops and hotels. The platform offers travelers an affordable and convenient alternative to traditional station lockers, with 24/7 access and insured baggage storage. Their business model revolves around an online marketplace and mobile app that connects customers with local storage providers, positioning them as a leading player in the transportation and hospitality sectors. The company has a well-established online presence, supported by a domain registered since 2002, reflecting a mature and stable business. Technically, the website leverages modern web technologies including Next.js and React, with integration of Google Maps API for location services and Cloudflare for DNS and hosting. The site demonstrates good performance, mobile optimization, and SEO practices. Privacy and cookie policies are clearly presented with an active consent mechanism, indicating compliance with GDPR and related regulations. Analytics and marketing tools such as Google Analytics and Tapfiliate are used responsibly with moderate user tracking. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact information suggests room for improvement in transparency and preparedness. Overall, the security posture is solid but could be enhanced by publishing vulnerability disclosure information. The overall risk assessment is low, with the website exhibiting high professionalism, trustworthiness, and compliance. Strategic recommendations include enhancing security transparency, adding incident response details, and considering a public vulnerability disclosure policy to further strengthen user trust and security culture.

O

Optimum by Shiftmove

optimum-automotive.com

63

Optimum by Shiftmove is a European specialist in connected vehicle and mobility solutions, offering a comprehensive 360° platform for car fleet management. The company provides modular and scalable SaaS solutions that help businesses and public organizations optimize fleet costs, reduce carbon footprint, and improve operational efficiency. Since its integration into SHIFTMOVE in 2024, Optimum has expanded its offerings to include employee travel and goods management. The website demonstrates a mature digital presence with modern technologies, strong branding, and clear business messaging. Security posture is good with HTTPS and privacy compliance via Usercentrics CMP, though explicit security policies and incident response information are not publicly available. The domain WHOIS data is missing or privacy protected, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, Optimum presents as a credible and professional fleet management solution provider with a solid technical foundation and compliance awareness.

A

Avrios

avrios.com

63

Avrios is a cloud-based fleet management software provider targeting fleet managers and administrators primarily in Europe. The platform offers comprehensive tools for digitizing fleet data, automating workflows, managing compliance, and reducing costs. The website demonstrates a mature digital presence with multi-language support, professional design, and clear calls to action such as free trials and demos. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and privacy-focused analytics tools like Usermaven and Plausible, combined with Usercentrics for consent management. Security posture is strong with HTTPS, GDPR compliance, and TÜV-certified data protection, though explicit incident response and vulnerability disclosure policies are not publicly found. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, Avrios presents a credible and professional business with a solid technical and security foundation.

S

Shiftmove

shiftmove.com

62

Shiftmove is a business-focused platform providing integrated fleet and mobility management solutions designed to simplify vehicle and driver management while ensuring legal compliance and operational efficiency. The company positions itself as a key player in the transportation technology sector, targeting fleet operators and businesses requiring digital logbooks, GPS tracking, and connected fleet services. The website demonstrates a modern technical infrastructure built on Webflow with advanced analytics and consent management tools, reflecting a mature digital presence. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are absent, indicating room for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, but the professional content and partner ecosystem suggest a credible business. Overall, the site is well-designed and user-friendly, supporting business credibility but would benefit from enhanced transparency and security disclosures.

V

Vimcar

vimcar.com

60

Vimcar is a German-based company specializing in digital vehicle management solutions, including digital logbooks, GPS tracking, and fleet management software. The company targets self-employed individuals, fleet managers, and tax consultants, offering automated and tax-compliant vehicle documentation services. Vimcar holds reputable certifications such as TÜV and KPMG and is recommended by DATEV and DStV, positioning itself as a trusted player in the transportation software market. The website is professionally designed, mobile-optimized, and uses modern technologies like Webflow CMS, Google Tag Manager, and Usercentrics for consent management. Security posture is solid with HTTPS and data redaction enabled, though some security headers and explicit policies are missing. Overall, Vimcar demonstrates a mature digital presence with good privacy compliance and business credibility.

B

Bounce, Inc.

bounce.com

65

Bounce, Inc. operates a global luggage storage platform connecting travelers with local businesses offering secure storage spaces. With over 23,000 locations worldwide and a highly rated service, Bounce positions itself as a leading player in the travel convenience sector. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing its accessibility and user experience. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and scalability. Security practices include HTTPS enforcement and secure payment processing, though some security headers could be more explicitly implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Bounce demonstrates a mature digital presence with strong business credibility and customer trust.

L

Lesauto leasen? Alles-in-1, scherp geprijsd, 350+ rijscholen!

lesautodeal.nl

48

Lesautodeal.nl is a Dutch website specializing in leasing driving lesson cars (lesauto's) for driving schools and learners in the Netherlands. The business offers all-inclusive leasing packages including insurance, maintenance, repairs, and same-day replacement vehicles. The website targets driving schools and students seeking competitively priced, reliable driving cars. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. However, security posture is moderate due to lack of DNSSEC and missing security headers. Privacy compliance is weak as no explicit privacy or cookie policies were found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and a mature online presence.

V

Vimcar

vimcar.de

58

Vimcar is a German-based company specializing in digital vehicle management solutions, including digital logbooks, GPS tracking, and fleet management software. The company targets self-employed individuals, fleet managers, and tax advisors, offering SaaS products that simplify vehicle administration and ensure tax compliance. The website is professionally designed, mobile-optimized, and uses modern technologies such as Webflow CMS, Google Tag Manager, and Usercentrics for consent management. Hosting is provided via AWS, ensuring reliable infrastructure. Security posture is strong with HTTPS, security headers, and no exposed sensitive data. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, represent areas for improvement. Overall, Vimcar demonstrates a mature digital presence with good trust indicators and certifications, positioning it well in the transportation SaaS market.

S

Stuart

stuart.com

63

Stuart is a leading European urban logistics company specializing in instant, same-day, and next-day delivery solutions for businesses across various sectors including restaurants, grocery, retail, and professional services. The company positions itself as a key player in the urban delivery market, leveraging technology to provide efficient and scalable delivery services. The website reflects a mature digital presence with a modern tech stack primarily based on Vue.js and HubSpot CMS, supported by extensive analytics and marketing tools. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, Stuart demonstrates a professional and trustworthy online presence aligned with its business objectives.

N

Nexxiot

nexxiot.com

53

Nexxiot is a Swiss-based TradeTech company specializing in IoT solutions aimed at enhancing operational efficiency in the supply chain, particularly focusing on railcars, shipping containers, and cargo monitoring in real-time. The company positions itself as a pioneer in asset intelligence for rail and intermodal logistics, targeting supply chain operators and logistics companies. Their business model is B2B, providing technology-driven monitoring services to improve supply chain visibility and efficiency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Cookiebot for GDPR-compliant cookie consent management, and analytics tools such as Google Analytics, Hotjar, and Matomo. The hosting infrastructure leverages Microsoft Azure DNS services, indicating a reliable hosting environment. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms to comply with privacy regulations. However, explicit security headers are not detected, and no published security or incident response policies are found on the site. The use of multiple third-party scripts necessitates regular security audits to mitigate potential vulnerabilities. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, which adds to the trustworthiness. Overall, Nexxiot's website reflects a professional and trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance their security posture and user trust.

G

GPS Chile

gpschile.com

46

GPS Chile operates as a specialized provider of fleet management solutions, offering a platform that enables businesses to optimize their vehicle fleets through GPS tracking, cost control, and productivity enhancement. The company targets businesses in Chile requiring efficient fleet oversight and positions itself as a leader in this niche market. The website reflects a medium-sized enterprise with a professional digital presence, leveraging modern web technologies and multiple analytics tools to monitor user engagement and marketing effectiveness. However, the absence of publicly available WHOIS data introduces some uncertainty regarding domain ownership legitimacy. The site is well-structured with good SEO practices but lacks visible privacy and cookie policies, which are critical for compliance with data protection regulations.

C

Cowboy SA

cowboy.com

69

Cowboy SA is a Belgian-based company specializing in connected electric bikes designed for urban riders seeking efficient and stylish mobility solutions. The company holds a strong market position as an innovative leader, evidenced by multiple prestigious design awards and its status as the first e-bike producer to achieve B Corp certification. Their business model revolves around direct e-commerce sales, supported by a comprehensive service network of over 200 stores and a feature-rich mobile app enhancing the user experience. The website reflects a mature digital presence built on the Shopify platform, integrating advanced marketing and analytics tools to optimize customer engagement and conversion. Security posture is robust with enforced HTTPS, domain locking, and cookie consent mechanisms, although minor improvements such as enabling DNSSEC and publishing a dedicated security policy could enhance trust further. Overall, Cowboy presents a professional, trustworthy, and well-structured online presence aligned with its business goals and compliance requirements.

C

CallPass

callpass.com

46

CallPass operates as a provider of advanced asset tracking solutions, specializing in IoT-based platforms for fleet, vehicle, and asset tracking. The company positions itself as a market leader offering location-based business intelligence to enterprises requiring real-time tracking and management of assets. The website reflects a professional business-to-business model targeting industries reliant on transportation and asset management. Technically, the site is built on WordPress with a modern tech stack including various analytics and marketing tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in transparency, privacy compliance, and security practices are recommended to enhance credibility and reduce risk.

Air France is a leading French airline offering flight booking services to over 230 destinations worldwide. The website serves as the official platform for ticket reservations, travel deals, and customer support, targeting general travelers and business customers. The site reflects Air France's strong market position as part of the Air France-KLM group, with a consistent brand presence and comprehensive service offerings. Technically, the website employs modern web technologies including Angular and Material Design components, ensuring a responsive and accessible user experience. The infrastructure supports good performance and SEO optimization, with mobile-friendly design and accessibility features. Security posture is robust, with HTTPS enforced, strong security headers, and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence and a visible data protection officer contact. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, suitable for an enterprise-level airline service. Strategic recommendations include publishing a public incident response policy and vulnerability disclosure framework to enhance transparency and security readiness.

L

Letuška.cz

letuska.cz

58

Letuška.cz is a Czech online travel agency specializing in affordable flight bookings worldwide, complemented by a broad range of travel-related services including car rentals, travel insurance, visa assistance, and group bookings. The website presents a professional and user-friendly interface, leveraging modern web technologies such as Angular and htmx.org, and integrates multiple tracking and analytics tools for marketing and performance monitoring. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall business presence and service offerings indicate a credible and established entity in the transportation sector. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and providing clearer direct contact information to improve trust and compliance.

K

KAFKA TRANSPORT a.s.

kafkatransport.cz

49

KAFKA TRANSPORT a.s. is a Czech transportation company with over three decades of experience, providing a broad range of logistics and transport services including international and domestic freight, parcel delivery, storage, vehicle repair, washing, and rental services. The company targets businesses and individuals requiring reliable transport solutions and maintains an active presence on social media platforms to engage with its audience. The website is professionally designed, mobile-optimized, and includes essential business information and GDPR-compliant privacy and cookie policies. Technically, the website leverages modern web technologies such as Google Analytics, Bootstrap, FontAwesome, and Google Fonts, and is built on the Pagebuilder CMS platform. It employs HTTPS for secure communication and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. However, some security best practices like explicit security headers are missing, and no incident response or security policy information is publicly available. From a security perspective, the site shows good baseline protections but lacks advanced security disclosures and headers. The absence of WHOIS data for the domain is a notable concern, as it limits the ability to verify domain legitimacy and registration details. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security hardening. The overall risk assessment is moderate; the business appears legitimate and professional, but the missing WHOIS data and lack of explicit security policies reduce trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving domain registration transparency to strengthen trust and compliance.

S

SwitzerlandMobility

schweizmobil.ch

68

SwitzerlandMobility operates a national platform focused on summer mobility and outdoor activities in Switzerland, providing route planning, sightseeing, and travel report services primarily targeting tourists and outdoor enthusiasts. The website demonstrates moderate digital maturity with modern JavaScript frameworks and bundling tools, and integrates Google Analytics and Tag Manager for user tracking. However, the site lacks visible privacy and cookie policies, contact information, and explicit security headers, which impacts its compliance and security posture. The domain registration data aligns well with the business focus and country, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

A

AutoMapa Sp. z o.o.

targeo.pl

57

AutoMapa Sp. z o.o. operates the Targeo website, a comprehensive mapping and routing platform focused on Poland. The service offers detailed maps with over 8 million addresses, precise route planning, and real-time traffic congestion monitoring branded as Korkometr™. The platform targets both general users and businesses requiring location intelligence and delivery optimization solutions. The website integrates with AutoMapa's broader ecosystem, providing business services such as geocoding, territory planning, and proof of delivery. Technically, the site employs modern analytics tools including Google Analytics, Microsoft Clarity, and Piwik, alongside a robust cookie consent mechanism via CookieScript, ensuring GDPR compliance. Advertising is managed through reputable networks like Google Adsense and OpenX, with transparent disclosures. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and compliance indicate legitimacy.

A

APG|SGA

infosnow.ch

45

infosnow.ch is a specialized portal offering interactive maps and detailed information about ski resorts and mountain tourism destinations primarily in Switzerland. The site targets tourists and outdoor enthusiasts seeking seasonal activity information and resort details. The business operates in the transportation sector with a focus on mountain tourism. Technically, the site uses OpenStreetMap tiles and custom JavaScript for map rendering, providing a good user experience with moderate performance and basic mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is functional and relevant but would benefit from improved security and compliance measures.

A

AGC Automotive

agc-automotive.com

71

AGC Automotive is a leading global supplier specializing in automotive glazing solutions with a history spanning over 60 years. The company positions itself as a world leader in automotive glass, offering a broad range of products including automotive replacement glass, glass for transport vehicles, and mobility solutions such as displays, antennas, and sensors. The website reflects a mature enterprise with a strong focus on innovation and sustainability, aligned with the AGC Group's corporate philosophy. Technically, the website employs modern JavaScript frameworks and integrates multimedia content via YouTube APIs, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, though improvements can be made by implementing security headers and explicit cookie consent mechanisms. The absence of WHOIS data raises concerns about domain registration transparency, warranting further verification. Overall, the website is professional, trustworthy, and well-structured, targeting automotive industry professionals and partners.

S

Schweizerische Bodensee-Schifffahrt AG

yachthafen-romanshorn.ch

56

Schweizerische Bodensee-Schifffahrt AG operates two harbor facilities in Romanshorn, Switzerland, providing mooring and maintenance services for private sailing and motor boats. The company holds a regional position in transportation and harbor management on Lake Constance, offering additional services such as boat lifting and radar training. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation tailored to boat owners and visitors. Technically, the site employs modern web technologies and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, though some security headers are not explicitly detected in the HTML source. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-maintained, supporting the company's business objectives effectively.

S

Schweizerische Bodensee-Schifffahrt AG

sbsag.ch

55

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

F

Flight Safety Foundation

flightsafety.org

55

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.

S

Schweizerische Bodensee-Schifffahrt AG

bodensee-schiffe.ch

55

Schweizerische Bodensee-Schifffahrt AG operates a regional transportation and tourism service on Lake Constance, offering ferry and cruise ship services, experience trips, event hosting, and gastronomy. The company maintains a professional website built on WordPress with Elementor, integrating multiple plugins for booking and event management. The site is well-structured with good SEO practices and modern technology usage, including Google Analytics and Tag Manager for tracking. However, the absence of explicit privacy and cookie policies, as well as lack of visible security headers, indicates gaps in compliance and security posture. No contact emails or phone numbers were found in the provided content, which may affect user trust and support accessibility. Overall, the website is legitimate, consistent with the business claims, and provides a good user experience for its target audience.

V

Vertical Aviation International

verticalavi.org

68

Vertical Aviation International (VAI) is a well-established membership organization dedicated to advocating for the vertical flight industry globally. With over 75 years of history, VAI serves as a leading voice providing safety initiatives, education, advocacy, and community engagement for professionals in vertical aviation. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS with modern SEO and analytics tools. The technical infrastructure is solid, hosted via reputable providers, and includes standard security practices such as HTTPS and domain status protections. However, there are opportunities to enhance security by enabling DNSSEC and implementing additional security headers. Privacy compliance is addressed with visible privacy and cookie policies, though GDPR compliance could be improved with more explicit statements. Overall, VAI's website demonstrates a strong market position and trustworthy online presence suitable for its industry and audience.

T

TEAS spol. s r.o.

teas.cz

43

TEAS spol. s r.o. is a well-established software supplier specializing in the automotive market in the Czech Republic and Slovakia, with a domain registered since 1997. The company positions itself as the largest software provider for this sector in the region, offering tailored software solutions to automotive businesses. Their website reflects a professional and consistent brand image, targeting automotive industry clients with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a reputable consent management platform to comply with privacy regulations. Hosting is provided by Forpsi, a known Czech hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

F

Flight Safety Foundation

aviation-safety.net

60

The Aviation Safety Network (ASN) is a specialized information service focused on aircraft accidents and civil aviation safety issues. It operates as an exclusive service of the Flight Safety Foundation, a reputable organization in the aviation safety sector. ASN provides comprehensive accident databases, investigation details, safety statistics, and monthly email digests, targeting aviation professionals, researchers, and safety analysts worldwide. The website demonstrates a consistent brand identity aligned with its parent organization and maintains a professional presence with active social media channels. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Google Charts for data visualization. It integrates Google Analytics for user tracking and offers a moderate level of mobile optimization and accessibility. While the site is functional and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, ensuring encrypted communication, but does not visibly implement advanced security headers or publish detailed security policies. The absence of WHOIS registrant data limits domain trust assessment, though the affiliation with Flight Safety Foundation and the quality of content provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, ASN presents a trustworthy and authoritative resource in the aviation safety domain with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

V

Virgin Voyages

virginvoyages.com

59

Virgin Voyages operates as a premium adults-only cruise line offering luxury, almost all-inclusive cruise vacations primarily targeting adult travelers seeking unique and boutique cruise experiences. The website reflects a mature digital infrastructure with advanced personalization and A/B testing capabilities, leveraging modern JavaScript frameworks and multiple third-party marketing and analytics tools. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the branding and external references strongly support legitimacy. Overall, the site presents a professional, secure, and user-friendly platform aligned with Virgin Group's standards.

V

Virgin Balloon Flights

virginballoonflights.co.uk

56

Virgin Balloon Flights is a well-established UK-based company specializing in hot air balloon rides and related experience gifts. Positioned as the UK's leading passenger balloon rides operator, the company offers flights from over 100 locations nationwide. Their business model focuses on selling adventure experiences and gift vouchers through a professionally designed and user-friendly website. The company demonstrates strong branding consistency and trust indicators including CAA certification and a long operational history since 1994. Technically, the website employs modern web technologies such as HTMX, Alpine.js, Google Tag Manager, and integrates marketing and analytics tools like Mailchimp and Ahrefs Analytics. The site is mobile-optimized, SEO-friendly, and provides a smooth user experience. While HTTPS is enforced, the site could improve security posture by implementing additional HTTP security headers. From a security perspective, the website shows good practices including secure forms, cookie consent management, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response information is noted. The WHOIS data for the www subdomain is unavailable due to domain naming rules, but the overall legitimacy of the domain and business is supported by consistent branding and contact information. Overall, Virgin Balloon Flights presents a low-risk profile with a strong market position and a mature digital presence. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

Virgin Atlantic Airways Limited is a major UK-based international airline specializing in passenger air travel primarily to the US and other global destinations. The company is part of the Virgin Group and operates with a strong brand presence and a focus on customer experience, including onboard amenities such as food, drinks, entertainment, and WiFi. The website reflects a mature digital presence with modern technologies and excellent design quality. The technical infrastructure leverages Next.js and React frameworks, hosted likely on Akamai's CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

T

Thurbo AG

thurbo.ch

65

Thurbo AG is a regional railway company operating in Eastern Switzerland and parts of Southern Germany, providing passenger rail services primarily targeting commuters and regional travelers. The company is a subsidiary of the Swiss Federal Railways (SBB), positioning it as a key player in the regional transportation sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation, supporting a positive user experience. The technical infrastructure includes modern tracking and marketing tools such as Google Tag Manager, Adobe DTM, Facebook Pixel, and Hotjar, alongside a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. However, the site lacks a public security policy and incident response contact details, which are recommended for enhanced transparency and trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website.

T

Thomann Nutzfahrzeuge AG

thomannag.com

67

Thomann Nutzfahrzeuge AG is a Swiss-based company specializing in commercial vehicles including trucks, buses, and transporters from major brands such as Renault Trucks, Volvo Trucks, Mercedes-Benz, and others. With 30 years of experience and multiple locations across Switzerland, the company offers a comprehensive range of services including sales, rental, maintenance, driver training, and proprietary software solutions (Thomann Plus) to optimize fleet management. The website reflects a mature business with a clear market position targeting commercial vehicle operators and fleet managers. Technically, the website is built on Concrete CMS and employs modern web technologies including JavaScript and SVG graphics. It is mobile-optimized and includes SEO best practices. The site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. However, explicit security policies and incident response contacts are not found, which could be improved. Security posture is solid with HTTPS and cookie consent, but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business identity, though the domain is newly registered in 2024, which may indicate a recent domain acquisition or rebranding. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security transparency and DNS security could enhance trust and resilience.

T

thurgautravel.ch

thurgautravel.ch

64

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

W

WYVERN Ltd

wyvernltd.com

61

WYVERN Ltd is a globally recognized leader in aviation safety auditing, consulting, and information services, founded in 1991. The company offers a comprehensive suite of services including safety auditing, training, consulting, SMS software, and certification programs such as the Wingman and Flight Leader Programs. Their market position is strong within the aerospace transportation sector, supported by ISO 9001 certification and a robust digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a professional and responsive user experience. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, WYVERN demonstrates a mature and trustworthy online presence aligned with its business operations.

V

VERTICON 2026

verticon.org

51

VERTICON 2026 is a prominent global event focused on the vertical aviation industry, organized by HAI and hosted in Atlanta, Georgia. The event attracts a large audience of industry professionals, exhibitors, and international participants, offering extensive educational sessions and networking opportunities. The website effectively communicates the event's scale and benefits, targeting aviation professionals and exhibitors. Technically, the website is built on WordPress using the Salient theme and incorporates modern web technologies including Yoast SEO, WPBakery Page Builder, Google Tag Manager, and Facebook Pixel. Hosting is provided by SiteGround, and the site employs HTTPS with a good SSL configuration. The cookie consent mechanism is robust, offering detailed user controls and compliance with GDPR principles. From a security perspective, the site has a good baseline with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional, trustworthy, and well-structured, with moderate technical sophistication and good marketing integration. Strategic improvements in privacy documentation and security headers would further strengthen its compliance and security stance.

E

Experimental Aircraft Association

eaaforums.org

38

The Experimental Aircraft Association (EAA) operates the EAA Forums website, a community platform dedicated to aviation enthusiasts, pilots, and aircraft builders. The site serves as a niche forum for discussions related to experimental aircraft, aviation events, and member support. The business model focuses on fostering community engagement and information sharing within the aviation sector. The domain registration and organizational details are consistent and legitimate, reflecting a well-established entity founded in 2011 in the United States. Technically, the website is built on the vBulletin 4.2.4 forum software, supplemented by YUI JavaScript libraries and Google Analytics for tracking. Hosting appears to be managed via Network Solutions with VPS nameservers. The site demonstrates moderate performance and basic mobile optimization, with a straightforward design and clear navigation. However, the use of an older forum software version and lack of modern security headers indicate some technical debt and potential security risks. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and modern security headers. There is no visible privacy or cookie consent mechanism, which may pose compliance risks under GDPR. No incident response or vulnerability disclosure policies are evident. The site does not expose sensitive data but could improve its security posture by updating software and implementing additional security controls. Overall, the EAA Forums website is a legitimate, well-established community platform with good business credibility and safe content. It would benefit from enhanced privacy compliance measures and security improvements to better protect users and align with modern standards.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

46

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

C

Cebia, spol. s r.o.

carolina.cz

60

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

C

Car Aukce, spol. s.r.o.

caraukce.cz

50

Car Aukce, spol. s.r.o. operates an established online vehicle auction platform primarily serving the Czech market. The company offers services including vehicle purchase and sales auctions, operative leasing, and vehicle verification, targeting both individual and business customers. With over 20 years of experience and more than 51,000 vehicles sold, the company holds a strong market position supported by partnerships with reputable organizations such as Cardetect. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive auction information. Technically, the site employs modern JavaScript libraries and frameworks like jQuery, Bootstrap, and integrates analytics and verification services such as Google Analytics and Foxentry. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the website demonstrates high business credibility and good privacy compliance, making it a trustworthy platform for vehicle auctions.

The website eautoservis.cz is an online platform operated by Teas spol. s r. o. that provides a comprehensive database and online booking system for automotive service providers such as auto repair shops, tire services, car washes, and emission testing centers primarily in the Czech Republic and Slovakia. The platform targets vehicle owners seeking convenient online reservations and service providers managing bookings and customer interactions. With nearly 1000 registered companies, it holds a solid position in the local automotive service market. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript with jQuery 1.7.1. While functional, the technology stack is somewhat outdated, and the site shows only basic mobile optimization and accessibility features. SEO and performance optimizations are moderate but could be improved. No advanced CMS or frameworks are detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, which may expose it to vulnerabilities. There is no evidence of privacy or cookie policies, nor incident response or security policy disclosures, indicating compliance gaps with GDPR and best practices. The site uses HTTPS (assumed) and secure form submission methods but would benefit from enhanced security controls. Overall, the website is moderately professional and trustworthy but requires improvements in privacy compliance, security posture, and technical modernization to reduce risk and enhance user trust. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts.

A

AUTOJOB s.r.o.

autojob.cz

41

AUTOJOB s.r.o. operates AUTOJOB.cz, a specialized online job portal focused on the automotive and transport industries primarily in the Czech Republic and Slovakia. The platform offers job listings, candidate databases, employer services, and industry-related content including an automotive magazine and a competition called Autoopravář Junior. The site targets job seekers and employers within the automotive sector, providing a niche service that supports recruitment and industry engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.3.2 and jQuery UI 1.7.3, alongside modern analytics tools like Google Analytics and Facebook SDK. While the site is functional and moderately optimized, it shows signs of technical debt and could benefit from modernization, especially in updating libraries and improving mobile responsiveness and accessibility. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. Privacy compliance is partially addressed with a privacy policy and terms of service, but the absence of a cookie consent mechanism and security.txt reduces compliance maturity. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site is a credible and professional niche job portal with room for technical and security improvements. The lack of WHOIS data reduces domain trust slightly, but the presence of partner logos and clear contact information supports legitimacy. Strategic enhancements in security headers, library updates, and privacy compliance would strengthen the platform's risk posture and user trust.

C

Cirrus Owners & Pilots Association

cirruspilots.org

64

The Cirrus Owners & Pilots Association (COPA) is a well-established non-profit organization founded in 2001, serving a global community of Cirrus aircraft owners, pilots, and aviation enthusiasts. The organization provides a comprehensive suite of services including safety training, proficiency programs, social events, forums, and member discounts, positioning itself as a niche leader in the aviation community. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and EasyDNNnews modules. It is hosted with Cloudflare DNS and uses NameCheap as the registrar. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen the site's trustworthiness and regulatory adherence.

T

The Alaska Airmen's Association

alaskaairmen.org

51

The Alaska Airmen's Association is a well-established non-profit organization dedicated to supporting and advocating for general aviation in Alaska. With a membership exceeding 2,000, it serves as a significant voice for aviators in the region, offering services such as advocacy, scholarships, workforce development, and community events. The website reflects a mature organization with a clear mission and active community engagement. Technically, the site is built on WordPress with modern plugins and integrations, including Google Analytics and Neon One platform services, providing a solid digital infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and serves its target audience effectively.