Transportation security reports

radrevier.ruhr is a professionally managed regional tourism website focused on promoting cycling and bike holidays in the Ruhrgebiet area of Germany. It offers comprehensive route information, planning tools, and thematic cycling routes, positioning itself as a leading urban cycling travel region certified by the ADFC. The platform targets cycling tourists and outdoor enthusiasts, providing rich content and digital resources to enhance visitor experience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and cookie consent tools effectively. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity suitable for its tourism promotion role.

D

Deutsche Bahn AG

bahnhof.de

63

bahnhof.de is the official platform operated by Deutsche Bahn AG providing comprehensive information about passenger train stations across Germany. It offers live departure and arrival times, station facilities, accessibility information, and local services to travelers. The website is well-positioned as a leading national transportation information portal, serving a broad audience of train passengers and mobility users. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, bahnhof.de demonstrates a mature digital presence with high trustworthiness and professional content.

K

Klima-Bündnis Services

stadtradeln.de

65

STADTRADELN is an established international campaign managed by Klima-Bündnis Services that promotes cycling as a means to improve climate protection, increase bicycle traffic, and enhance quality of life in municipalities. The website serves as a platform for participants and municipalities to register, track cycling activities, and access campaign information. The site is built on TYPO3 CMS with a modern, responsive design and integrates Matomo analytics configured to disable cookies, reflecting some privacy awareness. Security posture is good with HTTPS enforced and secure login mechanisms, though explicit security policies and privacy documentation are not found in the provided content. Overall, the website is professional, trustworthy, and well-positioned in its niche.

A

ADIP, spol. s r. o.

adipsk.sk

46

ADIP SLOVAKIA, spol. s r. o. is a well-established distributor of automotive spare parts and accessories primarily serving the transportation sector in Slovakia and the Czech Republic. With over 28 years of market presence, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence with clear navigation, relevant content, and legal compliance documents. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. Security measures include HTTPS, cookie consent with granular controls, and Google reCAPTCHA integration, although some security headers and policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, with room for improvement in formal security policies and accessibility.

L

Vendre sa moto rapidement et au meilleur prix du marché avec Le coin moto

lecoinmoto.fr

51

Lecoinmoto.fr is a French small business website dedicated to facilitating the sale of motorcycles by providing free quick valuation and handling the sales process including secure payment. The website targets motorcycle owners in France seeking a fast and efficient way to sell their vehicles at the best market price. The business operates as an online service platform with a clear and focused value proposition. Technically, the website uses a modern Bootstrap 5.2.1 framework ensuring responsive design and moderate performance. The hosting provider is OVH, a reputable French hosting company. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to a single email address with no phone or physical address provided. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security transparency.

D

DS.C. DELIVERY SOLUTIONS S.A.

sameday.ro

57

SAMEDAY is a well-established Romanian courier and logistics company founded in 2007, offering rapid parcel delivery services including innovative locker-based delivery (easybox) and next-day courier options. The company has a strong market position in Romania, recently expanding through acquisition and maintaining a large network of delivery points. Their digital maturity is evidenced by a modern WordPress-based website, mobile app integration, and use of advanced analytics and performance optimization tools. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies could be improved. Overall, the website is professional, user-friendly, and compliant with GDPR, reflecting a trustworthy and credible business.

T

TESTCAR s.r.o.

testcar.cz

46

TESTCAR s.r.o. operates a network of vehicle technical inspection stations across the Czech Republic, providing services such as regular technical inspections for road vehicles, ADR inspections, individual vehicle imports, and sales of ecological stickers. The company is well-established since 2007 and maintains multiple branch locations, indicating a solid market presence in the transportation sector. The website is built on WordPress using Elementor and JetEngine, with integration of Google Maps API for branch location display, although the map currently has an API key issue preventing proper loading. Security posture is moderate with HTTPS enabled but lacking security headers and formal security or privacy policies. Contact information is comprehensive and clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed.

S

STK RITZ s.r.o.

stk-novyjicin.cz

44

STK RITZ s.r.o. is a Czech Republic based company specializing in vehicle technical inspections, emission measurements, and related regulatory services. Established in 1996, the company operates a certified technical inspection station with ISO 9001:2009 certification and partnership with DEKRA, serving personal, commercial, and special vehicles. The website presents a professional and well-structured digital presence, targeting vehicle owners and operators requiring compliance with Czech vehicle regulations. The business model focuses on service provision for mandatory vehicle inspections and technical data issuance. Technically, the website is built on WordPress using Elementor and Slider Revolution plugins, with jQuery as a JavaScript library. The site is mobile optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate, with good SEO and accessibility basics, though security headers are not evident in the provided data. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of WHOIS transparency and missing security headers suggest areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy and cookie policy in Czech language. Contact information is clearly provided, including phone numbers, email, physical address, and a contact form. Overall, the website and business appear legitimate and professional, though the lack of WHOIS data transparency slightly reduces trust. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving WHOIS transparency to strengthen domain trustworthiness.

N

Nikey s.r.o.

nikey.cz

52

Nikey s.r.o. is a Czech company operating a network of 11 vehicle washing centers and 18 fuel stations specialized in serving truck and bus transportation across the Czech Republic. The company offers personalized fuel dispensing systems, flexible washing programs, parking solutions, and vehicle interior disinfection services. Their market position is that of a medium-sized regional player with over 200 corporate clients and a strong focus on quality and customer satisfaction. Technically, the website employs a modern but somewhat dated technology stack including Bootstrap 3, jQuery, and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacking explicit security policies and advanced HTTP headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

K

KAR

kar.cz

45

KAR is a well-established Czech company founded in 2011, specializing in comprehensive service solutions for truck and bus transportation. The company operates multiple modern service centers across Czech regions and acts as a dealer for IVECO BUS, offering sales, maintenance, and custom manufacturing services. Their website reflects a mature digital presence built on WordPress with Elementor, optimized for performance and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the company demonstrates high business credibility and trustworthiness with clear contact information and certifications.

F

FESH FESH Group v.o.s.

feshfesh.group

56

FESH FESH Group v.o.s. operates a professional racing team based in the Czech Republic, focusing on motorsport events, team activities, and news dissemination. The website serves as a hub for fans and stakeholders to access updates, event information, and team details. The business targets motorsport enthusiasts and operates a niche but professional presence within the transportation sector. Technically, the website is built on WordPress with Elementor and JetEngine plugins, hosted likely by Websupport, and incorporates modern web technologies including Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not enabled. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in Czech language, aligning with GDPR requirements. No explicit security or incident response policies are published, and no terms of service page was found. Overall, the domain registration details are consistent with the business claims, supporting legitimacy and trustworthiness.

Č

ČSAD Ostrava a.s.

cova.cz

40

ČSAD Ostrava a.s. is a well-established transportation and logistics company in the Czech Republic with a history dating back to 1992 and roots from 1949. The company offers a broad range of services including international truck transport, spedition, logistics, vehicle servicing, and management of bus stations and real estate. The website reflects a professional and consistent brand presence targeting business clients and job seekers in the transport sector. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Maps API, and includes privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be improved. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, secure, and compliant with GDPR, providing a trustworthy digital presence for the company.

Č

ČSAD LOGISTIK Ostrava a.s.

csadlogistik.cz

36

ČSAD LOGISTIK Ostrava a.s. is a Czech logistics and transportation company offering a wide range of services including domestic and international trucking, warehousing, customs services, and combined transport solutions. The company is part of the OSTRA GROUP holding, indicating a stable market position within the transportation sector in the Czech Republic. Their website presents a professional image with clear service offerings and contact information, targeting businesses requiring logistics solutions. Technically, the website is built on WordPress using Elementor and several JetPlugins, supported by modern SEO and GDPR compliance tools such as Yoast SEO and Complianz GDPR plugin. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a mature digital infrastructure. Analytics and marketing tools like Google Tag Manager and Leady are used for tracking and retargeting, balanced with user privacy considerations. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent banners. However, additional security headers could be implemented to enhance protection. No exposed sensitive data or vulnerabilities were detected in the content. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and security posture. Strategic improvements in security headers and domain transparency could further strengthen trust and resilience.

A

ADIP, spol. s r. o.

adip.cz

42

ADIP, spol. s r. o. is a well-established distributor of automotive spare parts and accessories operating primarily in the Czech Republic and Slovakia. With over 34 years in the market, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence targeting automotive industry clients including truck, bus, and passenger vehicle operators. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces domain trustworthiness.

V

Vimec Polska

vimecpolska.pl

41

Vimec Polska is a specialized company providing mobility and accessibility solutions primarily targeting seniors and individuals with disabilities. Their product range includes stairlifts, vertical platforms, stair climbers, and home lifts, designed to improve mobility within residential and public buildings. The company is part of the larger Vimec group, with a strong international presence indicated by multiple regional websites. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation. Privacy and cookie policies are implemented with Iubenda, reflecting GDPR compliance. However, WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. The site uses HTTPS and modern web technologies but lacks some security headers and formal security policies.

V

Vimec

vimec.de

43

Vimec is a medium-sized company specializing in home lifts and platform lifts, with a strong international presence evidenced by 150,000 lift installations worldwide. The website targets the German market but is part of a broader international ecosystem with localized partner sites in multiple countries. The business model focuses on manufacturing and distributing accessibility and mobility solutions for residential environments. Technically, the website is built on WordPress using Elementor and Astra theme, with modern SEO and tracking tools implemented. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism via Iubenda, but lack explicit security headers and published security policies. Overall, the site demonstrates good professionalism and moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacation bookings targeting German-speaking customers in Switzerland, Germany, and Austria. The site offers detailed information about cruise experiences, ships, destinations, and booking options, supported by a modern Adobe Experience Manager CMS infrastructure. The technical setup includes advanced tracking and consent management tools such as Adobe DTM and Usercentrics, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, well-branded, and serves a large enterprise in the transportation and hospitality sectors.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations targeting German-speaking markets, particularly Austria. The site offers detailed navigation for booking cruises, exploring ships, destinations, and travel preparation. Technically, the site is built on Adobe Experience Manager CMS with modern tracking and consent management tools, ensuring a good digital maturity level. Security posture is strong with HTTPS and security headers, though explicit privacy and terms of service documents are missing from the provided content. Overall, the website is trustworthy and well-positioned in the transportation and hospitality sectors.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations and travel services primarily targeting the German-speaking market. The company offers a wide range of cruise options, detailed travel preparation information, and ship details, positioning itself as a leading cruise operator in Germany. The website is built on Adobe Experience Manager, leveraging modern web technologies and content delivery networks for performance and scalability. User privacy is managed via a Usercentrics consent platform, indicating compliance with GDPR requirements. Security posture is strong with HTTPS and reputable hosting, though explicit security policies and incident response contacts are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness suitable for a large enterprise in the transportation and hospitality sectors.

O

OSTRA GROUP a.s.

ostragroup.cz

47

OSTRA GROUP a.s. is a large multi-sector strategic group based in the Czech Republic, primarily focused on transportation services including sales and servicing of transport technology, logistics, modular construction, real estate rental, and R&D of vehicle chassis components. The group also supports a professional motorsport racing team and offers diverse career opportunities. The website is professionally designed, mobile optimized, and provides clear navigation and comprehensive business information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and retargeting services. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and incident response policies could be improved. The domain registration data is consistent with the business claims and founding year, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and professionals in transportation and related sectors.

O

Opel CZ

opel-ihned.cz

53

The website www.opel-ihned.cz serves as a comprehensive online platform for listing and filtering Opel brand vehicles available immediately from authorized dealers in the Czech Republic. It aggregates stock and demo vehicles, providing detailed filtering options by model, dealer, engine type, color, equipment, and price. The platform targets consumers seeking to purchase Opel vehicles quickly and conveniently, positioning itself as a trusted intermediary between buyers and authorized dealers. The business model focuses on lead generation and vehicle inventory display, supported by dealer contact information and location mapping. Technically, the site is built on JavaServer Faces with PrimeFaces UI components, enhanced by Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager, Google Analytics, and Adform for marketing and tracking purposes, alongside a live chat service (Smartsupp). The site is mobile-optimized with good SEO practices, including structured data (JSON-LD) and Open Graph metadata, enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and no published security or incident response policies are found. The absence of WHOIS data reduces transparency but does not directly imply malicious intent. Overall, the security posture is moderate with room for improvement in policy publication and header implementation. The overall risk assessment suggests a legitimate, professionally maintained automotive sales platform with moderate technical maturity and privacy compliance. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

B

Benes Consulting Group

spolecnebezpecne.cz

43

The website 'Společně bezpečně' is a safety awareness and educational project primarily focused on increasing road safety and general safety awareness in the Czech Republic. It is a collaborative initiative involving ESSOX and the Hasičský záchranný sbor Jihočeského kraje, targeting children and the general public through educational campaigns and activities. The site presents a professional and consistent brand image with clear navigation and relevant content. Technically, it employs a modern front-end stack including jQuery, Bootstrap, and various plugins, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces transparency and trust somewhat, but partnerships and content quality support legitimacy. Overall, the site is a trustworthy educational resource with room for improvement in privacy compliance and security best practices.

Š

Škoda Auto a.s.

skoda-handy.cz

73

Škoda Auto a.s. is a leading automotive manufacturer in the Czech Republic, offering a specialized program called Škoda Handy aimed at enhancing mobility for persons with reduced mobility. The program provides expert consultancy, vehicle purchase assistance with discounts, financing options, insurance, and tailored vehicle modifications. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs modern web technologies including React and Bootstrap, hosted on a CDN infrastructure ensuring moderate to fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, modern security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. The absence of WHOIS data slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site is trustworthy, secure, and well-aligned with the business objectives of Škoda Auto.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

D

Die Länderbahn CZ s.r.o.

laenderbahn.cz

46

Die Länderbahn CZ s.r.o. is a private regional railway operator active in the Czech Republic since 2010, with a Czech subsidiary founded in 2019. The company operates under the parent Die Länderbahn GmbH DLB and is part of the NETINERA group, itself linked to Ferrovie dello Stato Italiane. The website targets regional travelers in Liberec, Českolipsko, and Lounsko areas, offering train schedules, tariffs, and tourist information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google services, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which reduces domain trust but the website content and business information appear consistent and professional. Overall, the site is a reliable source for regional rail transport information with room for security and privacy improvements.

GW Train Regio a.s. operates regional train services across multiple regions in the Czech Republic, providing transportation solutions with a focus on passenger convenience through online ticket sales and timely operational updates. The company maintains a professional web presence with clear branding, comprehensive contact information, and certifications that enhance trust. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google services for analytics and security, and implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some HTTP security headers could be improved. Overall, the website is accessible, well-structured, and serves its target audience effectively.

H

HURT s.r.o.

rucniovladani.cz

63

HURT s.r.o. is a Czech Republic-based company specializing in vehicle modifications for disabled individuals, offering a range of products including hand controls, vehicle entry aids, wheelchair loading solutions, and electric wheelchair drives. The company has a strong market presence with approximately 29 years of experience and partnerships with notable automotive and mobility organizations. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their target audience of disabled drivers and vehicle users. Technically, the site employs modern web technologies such as Google Tag Manager and AJAX for enhanced user experience, though it lacks some advanced security headers and comprehensive privacy policies. Security posture is moderate with HTTPS enforced and privacy-conscious tracking settings, but the absence of a detailed Content-Security-Policy and vulnerability disclosure mechanisms indicates room for improvement. The missing WHOIS data for the domain is a significant concern for trust and legitimacy, warranting further verification. Overall, the website is functional and trustworthy from a business perspective but requires enhancements in privacy compliance and security transparency.

O

Opel

opel.cz

63

The website www.opel.cz serves as the official Czech Republic portal for Opel, a well-known automotive brand under the Stellantis group. It provides comprehensive information about Opel's passenger and commercial vehicles, including models like Insignia, Astra, and Corsa. The site offers tools such as vehicle configurators, test drive bookings, and service appointment scheduling, targeting Czech consumers interested in purchasing or servicing Opel vehicles. The website is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Manager and advanced analytics platforms.

S

SUDOP GROUP a.s.

sudop-group.cz

65

SUDOP GROUP a.s. is a large, well-established company based in the Czech Republic specializing in design, consulting, and IT services primarily for the construction, transportation, energy, and water management sectors. The company positions itself as the largest group of such companies in Central Europe, offering services including Construction and BIM, Consulting & IT, and Research & Development. Their business model focuses on digitalizing construction processes and providing engineering preparation for infrastructure projects. The website content is professional and targeted at business clients in relevant industries. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate with efficient use of scripts and stylesheets. The site uses HTTPS with an excellent SSL configuration but lacks explicit security headers such as CSP or HSTS. From a security perspective, the site demonstrates good practices including HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No exposed sensitive data or vulnerable libraries were detected. However, the absence of WHOIS data and security.txt or incident response contacts slightly reduces trust. There are no visible forms collecting user data on the homepage, reducing attack surface. Overall, the security posture is solid but could be enhanced with additional headers and published incident response policies. The domain WHOIS data is unavailable, which is a concern for trust but may be due to privacy protection or registry issues. The website content and business information appear legitimate and professional, mitigating some concerns. The overall risk is moderate with recommendations to improve transparency and security headers to enhance trust and compliance.

P

P Automobil Import s.r.o.

handycars.cz

45

Handycars.cz is a specialized automotive mobility program in the Czech Republic focused on providing vehicles and services tailored for persons with disabilities, caregivers, and war veterans. Supported by major automotive brands such as Opel, Peugeot, Citroën, and Fiat, the program offers a comprehensive suite of services including vehicle selection, financing, insurance, vehicle modifications, and assistance services. The website reflects a medium-sized business with a clear target audience and a strong partnership ecosystem. Technically, the website uses modern web technologies including Livewire and jQuery, with a responsive design optimized for mobile devices. Cookie consent is managed via Cookiebot, and Google Analytics and Google Tag Manager are used for analytics and marketing purposes. While the site is well-structured and professional, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy on the main page. Contact information is primarily via forms and a contact page, with no direct emails or phone numbers found. Overall, the website is trustworthy and professionally maintained, with a solid business model and technical foundation. Strategic improvements in privacy policy publication, security headers, and accessibility would enhance compliance and security posture.

P

Peugeot Česká republika

peugeot.cz

64

Peugeot Česká republika operates an official website offering a full range of Peugeot vehicles, including electric and hybrid models, with services such as vehicle configuration, test drives, financing, and after-sales support. The site targets B2C customers in the Czech Republic and reflects a strong market position as part of the Stellantis group. Technically, the website uses Adobe Experience Manager CMS, integrates modern analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policy and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable likely due to registry policies rather than privacy protection.

S

ShipEngine

shipengine.com

71

ShipEngine operates as a technology platform specializing in multi-carrier shipping and logistics APIs, serving platforms, third-party logistics providers, brands, and developers. The company positions itself as a leading API provider with a significant shipment volume, offering services such as shipping APIs, address validation, tracking, rate comparison, and embeddable components. The website reflects a mature digital presence with modern technologies including WordPress CMS, jQuery libraries, Google Tag Manager, and Optimizely for marketing and analytics. Privacy compliance is supported by a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. WHOIS data for the www subdomain is unavailable, which is unusual but does not detract from the professional appearance and trustworthiness of the site. Overall, the website demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information clarity.

L

Letiště České Budějovice

airport-cb.cz

53

Letiště České Budějovice operates as a regional airport in the Czech Republic, providing passenger arrivals and departures, handling, customs clearance, and ancillary services such as parking and tourist information. The website positions the airport as a dynamically developing regional hub with a focus on high service quality and personalized client care in a family-friendly environment. The digital infrastructure is built on WordPress with Elementor, ensuring a modern and responsive design. The site includes comprehensive GDPR and cookie compliance mechanisms, reflecting a mature approach to privacy and user consent. Security posture is generally good with HTTPS enforced, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with the business's regional transportation focus.

G

GEORG BÖRNER

georgboerner.de

73

GEORG BÖRNER operates a professional website focused on providing sealing systems for civil engineering projects, targeting infrastructure and transportation sectors. The company positions itself as a specialized B2B supplier with a medium-sized market presence in Germany. The website is built on the Magento e-commerce platform, leveraging modern frontend technologies such as RequireJS, jQuery, KnockoutJS, and Algolia Search for enhanced user experience and search capabilities. Analytics and monitoring are implemented via Matomo and New Relic, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. Overall, the website is professional, trustworthy, and safe for general audiences.

A

AutoVerify

autoverify.com

61

AutoVerify is a Canadian-based technology company specializing in automotive digital merchandising, customer engagement, and transaction solutions for dealers, manufacturers, lenders, and marketplaces. The company offers a suite of products designed to improve customer experience, maximize profits, and streamline automotive sales processes. Their market position is strong, representing over 900 dealers and major automotive brands, supported by trust indicators such as SOC II compliance and customer testimonials. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Analytics, Facebook Pixel, Hotjar, and Splitbee for analytics and user tracking. The site is well-optimized for mobile devices, fast loading, and features good SEO and accessibility practices. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. The presence of SOC II compliance indicates a commitment to security standards, but the absence of visible security headers and lack of published incident response or vulnerability disclosure policies suggest areas for enhancement. The missing WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness. Overall, AutoVerify presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security transparency would further strengthen their security posture and customer trust.

R

RRT s.r.o.

autaslovensky.sk

52

AUTÁSLOVENSKY.sk is a specialized service provider focused on integrating Slovak and Czech language translations into vehicle control systems. With over 17 years of experience and more than 17,500 vehicles served, the company operates primarily in Slovakia and the Czech Republic, offering on-site installation and custom software development for automotive brands. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager, reCAPTCHA v3, and LiveChat, ensuring user interaction and marketing capabilities. Security posture is solid with HTTPS and form protections, though additional HTTP security headers and incident response information could enhance resilience. Overall, the site is well-structured, GDPR compliant, and presents a credible business presence in the automotive localization niche.

B

Best Transport a.s.

best-transport.cz

39

Best Transport a.s. is a Czech-based transportation and forwarding company with nearly 30 years of experience, specializing in furniture transport and logistics services primarily across Central Europe. The company emphasizes quality, reliability, and environmental responsibility, serving business clients with regional freight forwarding, warehousing, and distribution. The website reflects a professional and consistent brand image with detailed contact information and shareholder transparency documents. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and WPML for multilingual support. It employs modern web fonts and scripts, integrates Google reCAPTCHA for form security, and uses Google Tag Manager for analytics. The site is mobile-optimized with good navigation and performance, though accessibility and SEO could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes reCAPTCHA to protect forms. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a credible business front with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

M

MIDOCAR Logistic, s.r.o

dopravomat.cz

49

Dopravomat.cz is a Czech-based platform operated by MIDOCAR Logistic, s.r.o, founded in 2020, specializing in group transportation services. The website enables users to submit transportation requests for groups and receive competitive offers from a network of verified transport providers across the Czech Republic. The business model focuses on transparency, no hidden fees, and payment only after service completion, positioning itself as a trusted intermediary in the transportation sector. The platform targets groups needing various transport sizes, from personal cars to large buses, emphasizing convenience and cost-effectiveness. Technically, the website employs a custom-built infrastructure leveraging modern web technologies including Google Maps API for location autocomplete, jQuery and jQuery UI for UI components, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and user experience, though some accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses secure form inputs but lacks visible security headers and published security policies. There is no cookie consent mechanism, which may impact privacy compliance. No incident response or vulnerability disclosure information is available. The WHOIS data is consistent with the business identity, indicating legitimacy. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance trust and reduce risk. The platform is well-positioned in its niche with a clear value proposition and solid business credibility.

D

DRONTE s.r.o.

dronte.cz

45

DRONTE s.r.o. operates a specialized boat rental and water sports service primarily in the Czech Republic, focusing on rivers such as Berounka, Hron, Ohře, Otava, Sázava, Lužnice, Vltava, and Malý Dunaj. The company offers rentals of kayaks, rafts, and canoes, organizes water sports events, and provides accredited courses through its water sports school. The business also engages in boat manufacturing and sales, targeting outdoor enthusiasts and tourists interested in water activities. The website reflects a small but established regional player with a clear focus on water recreation and tourism. Technically, the website employs a moderately modern tech stack including jQuery, Nette Framework, and various UI libraries. It integrates multiple third-party analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Seznam Retargeting. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. Cookie consent is implemented, indicating some privacy compliance. No incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data limits domain trust verification, though the website content and business information appear consistent and legitimate. Overall, the security posture is average with room for improvement in headers, policies, and transparency. The overall risk assessment is moderate. The business appears credible and operational, but the lack of WHOIS transparency and limited security policies suggest caution. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, auditing third-party scripts, and improving accessibility and privacy compliance to strengthen trust and security culture.

Půjčovna lodí Samba s.r.o. operates a specialized water sports equipment rental service focusing on canoe, raft, and kayak rentals across several Czech rivers including Sázava, Otava, Lužnice, Morava, and Ohře. The company targets water sports enthusiasts, families, schools, and corporate groups, offering additional services such as baggage transport and theft insurance. The website is well-structured, professionally designed, and provides clear contact information and service descriptions, positioning the company as a trusted regional provider in the water sports rental market. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and retargeting scripts from Seznam, with responsive design and embedded widgets for real-time river conditions. While the site uses HTTPS and cookie consent mechanisms, it lacks explicit security headers and a formal security policy page, which could be improved to enhance security posture. Security-wise, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and contact details appear authentic and professional. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around vulnerability disclosure would further strengthen trust and security posture.

R

RRT s.r.o.

autacesky.cz

51

AUTAČESKY.cz is a specialized service provider based in the Czech Republic offering Czech language localization for automotive systems. The company serves a niche market of drivers who own foreign cars and want their vehicle systems translated into Czech. With over 17,500 customers served and 17 years of experience claimed, the business operates primarily in the transportation sector, providing on-site installation services across Czech regions. The website is professionally designed, featuring customer testimonials, social media integration, and comprehensive contact options including phone, email, and forms protected by Google reCAPTCHA. Technically, the website employs modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Elfsight widgets. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, some security best practices like security headers are not evident, and no explicit security or incident response policies are published. The WHOIS data for the domain is missing, which reduces trust in domain registration legitimacy but is partially offset by the presence of verifiable business information on the site. The security posture is solid with encrypted connections and spam protection on forms, but could be improved by adding security headers and formalizing security policies. Privacy compliance is basic but functional, with cookie consent and a privacy policy page. Overall, the website is trustworthy, user-friendly, and well-targeted to its audience, though domain registration transparency should be improved to enhance credibility.

H

Hartmann Jelínek Malý Moreno a partneři s.r.o.

hjmm.cz

55

Hartmann Jelínek Malý Moreno a partneři s.r.o. is a well-established law firm with over thirty years of history, providing specialized legal services primarily in the transportation and logistics sector. The firm operates multiple offices across Prague, Hradec Králové, Olomouc, Madrid, and Bratislava, serving clients in the Czech Republic, Slovakia, and Spain. Their website reflects a professional and consistent brand image, highlighting their awards and expertise. Technically, the site uses common web technologies such as jQuery and Nivo Slider, with Google Analytics and Tag Manager integrated under a privacy-conscious consent framework. However, the absence of WHOIS data limits verification of domain legitimacy and age, which is a notable gap in trust assessment. Security-wise, the site implements cookie consent and denies ad personalization by default but lacks visible security headers and explicit incident response policies.

T

Transguard Group

transguarddelivery.com

70

Transguard Delivery Service, a subsidiary of Transguard Group, operates as a delivery service provider across the UAE, offering express, economy, and standard delivery options with real-time tracking and 24/7 customer support. The company targets SMEs and general customers, positioning itself as a reliable and technology-enabled logistics provider within the UAE market. The website is built on WordPress with modern front-end technologies and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Security posture is moderate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with a legitimate business. Overall, the site demonstrates good technical implementation and user experience but requires improvements in privacy compliance and security best practices.

F

Flipohity

flipohity.pl

51

Flipohity is a Polish travel website specializing in offering cheap flight tickets and travel inspiration. The site targets travelers primarily from Poland and Germany, providing curated flight deals and travel articles authored by their editorial team. The business operates on an affiliate marketing model, partnering with flight booking platforms such as Flipo.pl to monetize traffic. The website is relatively young, founded in 2018, and maintains a consistent brand presence with active social media channels. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and advertising services to support its business model. Security posture is adequate with HTTPS enabled, but lacks advanced DNS security and explicit security headers. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, Flipohity presents as a legitimate small business travel portal with room for improvement in security and compliance transparency.

P

Pelipecky

pelipecky.cz

52

Pelipecky.cz is a Czech travel deals and tips website specializing in affordable flight offers, holiday packages, and travel advice. The site targets travelers primarily from the Czech Republic and neighboring countries, offering curated content and affiliate links to Pelikan.cz for bookings. The business model relies on content marketing and affiliate revenue streams, positioning itself as a popular resource for budget-conscious travelers. Technically, the site is built on WordPress with modern analytics and marketing integrations, hosted by Webglobe. The website demonstrates good content quality, mobile optimization, and SEO practices, though it lacks explicit privacy and terms of service pages. Security posture is solid with HTTPS and no visible vulnerabilities, but could improve with additional security headers and published policies. Overall, Pelipecky.cz is a legitimate, well-maintained travel portal with moderate technical sophistication and good market presence.

M

Medialink Communications Consult s.r.o.

interpraca.pl

57

Interpraca.pl is a Polish-German job portal specializing in employment opportunities abroad, primarily in Germany, Austria, Switzerland, and the Czech Republic. The platform targets Polish-speaking job seekers interested in cross-border work, offering categorized job listings and paid advertisement services. The company behind the portal is Medialink Communications Consult s.r.o., based in Prague, Czech Republic. The website demonstrates a solid market position within its niche, providing valuable services to its audience. Technically, the website is built on Drupal CMS with a modern frontend stack including jQuery and Bootstrap. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is generally good with HTTPS enforced, though some security headers and cookie consent mechanisms are missing. The absence of WHOIS data for the .pl domain reduces transparency and trust slightly, but the presence of clear contact information and professional content supports legitimacy. No adult or questionable content is present, and privacy policy compliance is basic but adequate. Overall, the site is a functional, professional job portal with room for improvement in privacy and security practices.

A

ASIANA, spol. s r. o.

asiana.cz

56

ASIANA, spol. s r. o. is a well-established Czech travel agency founded in 1993, offering a comprehensive portfolio of travel services including flight tickets, hotels, car rentals, visa assistance, and corporate travel solutions. The company operates multiple branded subsidiaries targeting both individual and corporate clients, positioning itself as a leader in the Czech travel market. The website reflects a professional and consistent brand image with clear service offerings and a focus on technology-enabled travel solutions. Technically, the site is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and reCAPTCHA for spam protection. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks advanced security headers and incident response information. The absence of WHOIS data limits domain trust verification, but the business information and certifications like IATA support legitimacy. Overall, the site is safe, professional, and trustworthy for general audiences.

M

Medialink Communications Consult s.r.o.

interprace.cz

58

Interprace.cz is a Czech-German employment portal specializing in job offers and employment information for Czech speakers seeking work in Germany, Austria, Switzerland, and neighboring countries. The portal provides job listings, employer advertising services, and useful information about working and living in the EU. The website targets job seekers and employers interested in cross-border employment, positioning itself as a niche regional job portal with a focus on transportation and manual labor sectors. Technically, the website is built on Drupal CMS, utilizing common web technologies such as jQuery and Bootstrap 3.3.7. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with a good SSL configuration but lacks several important security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was found, which is a compliance gap under GDPR. Contact information is clearly available, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its business purpose well. However, the absence of WHOIS data and domain registration details reduces trustworthiness from a domain legitimacy standpoint. Strategic improvements in security headers and privacy compliance would enhance the site's security posture and regulatory adherence.