Transportation security reports

H

HOPI HOLDING

hopijobs.eu

45

HOPI HOLDING is a well-established Czech family-owned company operating primarily in logistics, agriculture, and food production sectors. The website serves as a career portal showcasing detailed job offers, corporate culture, and company values. The company positions itself as a top employer with a strong market presence in Central Europe. Technically, the site uses modern web technologies including Next.js, Google Fonts, FontAwesome, and integrates analytics tools such as Google Analytics and Hotjar. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

H

HOPI Global Solution

hopiglobal.eu

56

HOPI Global Solution is a professional international transportation service provider specializing in road, rail, sea, and air freight solutions with a strong presence in Central Eastern Europe and global reach. The company is part of HOPI HOLDING and emphasizes optimal transportation solutions for business partners worldwide. The website reflects a medium-sized business with good branding consistency and trust indicators such as ISO 9001 certifications. Technically, the website uses modern web technologies, is hosted by a reputable provider, and offers a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies, although a cookie consent mechanism is present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

H

HOPI CEE Fish HUB

hopifishhub.eu

60

HOPI CEE Fish HUB operates as a modern logistics and fresh fish processing center targeting Central and Eastern Europe. The company emphasizes speed, quality, and comprehensive services including transport, storage, processing, and packaging of fresh fish and seafood. The website reflects a professional business with clear branding and a focus on serving B2B clients in the seafood logistics sector. Technically, the site uses a modern CMS (Solidpixels), integrates Google Analytics and Tag Manager for tracking, and hosts video content via Vimeo. Security posture is adequate with HTTPS and secure forms, but lacks explicit security headers and published privacy or terms policies. The WHOIS data is privacy protected, which is common and acceptable for this business type. Overall, the website is well-structured, content-rich, and trustworthy, though improvements in privacy transparency and security headers are recommended.

S

SAMOHÝL MB a.s.

samohylmb.cz

66

SAMOHÝL MB a.s. is an authorized Mercedes-Benz dealership and service provider based in the Czech Republic, primarily serving customers in Zlín and surrounding regions. The company offers a comprehensive range of automotive services including new and used vehicle sales, authorized servicing, financing, leasing, and 24/7 towing assistance. Their market position is strengthened by official Mercedes-Benz certifications and multiple branch locations, targeting both individual consumers and business clients seeking premium automotive solutions. Technically, the website employs modern web technologies such as Tiny Slider for carousels, FontAwesome for icons, and Facebook Pixel for marketing analytics. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Privacy and cookie compliance mechanisms are implemented, reflecting GDPR adherence. However, the absence of WHOIS data limits full trust verification of the domain registration. From a security perspective, the site uses HTTPS and includes anti-spam measures in forms, but lacks visible HTTP security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. The website maintains a moderate security posture with room for improvement in headers and incident response transparency. Overall, SAMOHÝL MB a.s. presents a professional and trustworthy online presence aligned with its business operations. The main risk lies in the missing WHOIS data, which should be addressed to enhance domain legitimacy and trust. Strategic recommendations include strengthening security headers, enhancing accessibility, and publishing clear security and incident response policies.

H

HOPI Logistics s.r.o.

hopi.cz

50

HOPI Logistics s.r.o. is a family-owned logistics company based in the Czech Republic, offering innovative and sustainable logistics solutions across Central and Eastern Europe. The company specializes in warehousing, transportation, value-added services, and e-commerce fulfilment, serving notable clients such as P&G, Tesco, and Lindt. Their business model focuses on B2B logistics services with a strong emphasis on quality, sustainability, and ethical standards. The website reflects a professional and consistent brand image, targeting businesses requiring reliable logistics support in the region. Technically, the website is built on modern JavaScript libraries including jQuery, Swiper.js, and uses Google Tag Manager for analytics and marketing. It is hosted by a reputable Czech hosting provider and uses the Nette Framework CMS. The site is mobile-optimized with good SEO practices and moderate performance. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Improvements are recommended in privacy policy publication, security header implementation, and contact information transparency to enhance compliance and trust.

Mercedes-Benz Mobility AG operates the Mercedes pay GmbH, a digital payment platform integral to the Mercedes-Benz Group's mobility and digitalization strategy. The platform supports seamless, secure payment transactions across over 40 markets, facilitating e-commerce, in-car payments, and vehicle purchases within the Mercedes ecosystem. The website reflects a mature digital infrastructure with modern technologies such as jQuery, Google Tag Manager, and Usercentrics for consent management, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and privacy compliance, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly impacts transparency but does not detract significantly from the site's legitimacy given the strong corporate branding and contact information. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

F

FRESO comp., s.r.o.

fresocomp.cz

40

FRESO comp., s.r.o. is a Czech-based manufacturing company specializing in the production of machined and welded parts primarily for railway vehicles, including locomotives and freight and passenger cars. Founded in 1999, the company has established itself as a significant supplier in both domestic and international markets, expanding its operations into the construction sector since 2011. The website reflects a professional business presence with clear descriptions of its services and history, targeting industrial clients in transportation and construction sectors. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO plugins, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and visible privacy or cookie policies, which are essential for compliance and user trust. No contact information or incident response details are provided, limiting transparency. The absence of WHOIS data reduces domain trustworthiness, although the website content itself appears legitimate and professional. Overall, the site presents a credible business with room for improvement in privacy compliance, security best practices, and transparency. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding clear contact information, and addressing the WHOIS data gap to enhance trust and compliance.

D

Dopravní značení Šůs

dopravniznacenisus.cz

45

Dopravní značení Šůs is a small Czech Republic-based company specializing in horizontal and vertical traffic signage services, including pedestrian crossings, parking markings, and traffic playground reconstructions. The company targets municipalities and businesses requiring professional traffic marking solutions. Their website is built on WordPress and integrates common plugins for social media, GDPR compliance, and security features such as Google reCAPTCHA. The business presents clear contact information and maintains a consistent brand image. However, it lacks formal privacy and security policies on the website. Technically, the website uses a modern CMS with standard plugins and scripts, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and CAPTCHA protections, but the absence of security headers and published incident response policies indicates room for improvement. GDPR cookie consent is implemented, but no privacy policy page was found, which is a compliance gap. Overall, the website is trustworthy and professional for a small local business, with no signs of malicious activity or adult content. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic improvements in privacy documentation, security headers, and incident response disclosures would enhance compliance and trustworthiness.

CzechToll s.r.o. operates the electronic toll system in the Czech Republic, leveraging advanced satellite technology to provide efficient toll collection and traffic management services. As part of the PPF Group, CzechToll holds a strong market position as the official operator selected by the Czech Ministry of Transport. The website reflects a professional and business-focused presence, targeting transport companies and government stakeholders. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google APIs, with a WordPress CMS backend. Security measures include HTTPS enforcement and Google reCAPTCHA on contact forms, though some security headers are missing. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data reduces domain registration transparency but does not detract from the business legitimacy indicated by the website content and affiliations.

S

Silniční konference

silnicnikonference.eu

47

Silniční konference is a professional event organizer focused on hosting an annual road conference in the Czech Republic, targeting transportation professionals and industry delegates. The website presents detailed information about the upcoming 32nd conference scheduled for September 2025 in Brno, highlighting significant participation metrics from previous years. The business model centers on event management, exhibitor engagement, and providing a platform for industry knowledge exchange. The site is built on WordPress and employs common web technologies including jQuery and Google Analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy compliance documentation. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

U

US Aviation Training Solutions

usatsflighttraining.com

55

US Aviation Training Solutions (USATS) is a well-established FAA-certified flight school based in Titusville, Florida, offering comprehensive airplane and helicopter pilot training programs. With over 30 years of experience and certifications including FAA, NATO, and Part 141 approval, USATS serves a global student base from over 120 countries. Their services include private pilot licenses, commercial pilot licenses, flight instructor certifications, discovery flights, and maintenance services. The school leverages a modern fleet and a strategic location near the Kennedy Space Center to provide year-round training in ideal weather conditions. The website is professionally designed, mobile-optimized, and rich in content, targeting aspiring pilots, international students, and military veterans.

S

Slovak Training Academy

sk-ta.com

58

Slovak Training Academy is a specialized aviation training center based in Slovakia, focusing on helicopter pilot and mechanic training. It holds a unique market position as the first civil operator of UH-60A Black Hawk helicopters in Europe, offering a comprehensive range of aviation training services to both civil and military customers. The company leverages over 12 years of experience combined with modern aviation technology to deliver high-quality training programs. The website reflects a professional and well-structured digital presence, targeting aviation professionals and enthusiasts in Europe. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including modern lazy loading and analytics integration. Security posture is good with HTTPS enforced, though some security headers are missing and privacy compliance could be improved. The absence of WHOIS data is a concern but does not negate the evident legitimacy of the business based on website content and social media presence. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

Česká letecká servisní a.s. is a specialized aviation service company established in 1997, focusing on modernization, integration, and repair of avionics and special equipment for military, para-military, and civil aviation sectors. The company operates primarily in the Czech Republic and across multiple European countries, positioning itself as a leading expert in its field. Their key services include military and civil aviation modernization projects, avionics sales and servicing, and integration of mission-specific equipment. The website reflects a professional and consistent brand image with clear business information and certifications such as EASA PART 145 and PART 21 J/G, enhancing trust and credibility.

A

Ace Aeronautics

aceaero.com

52

Ace Aeronautics is a medium-sized aviation company founded in 2014, specializing in innovative avionic and airframe solutions for commercial and government aviation sectors worldwide. The company offers a range of services including engineering, rapid prototyping, manufacturing, certification, flight testing, and maintenance. Their business model focuses on providing commercial off-the-shelf and military off-the-shelf products to address avionics obsolescence and capability gaps, positioning them as a global leader in aviation solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at aviation industry stakeholders. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, leveraging Google Fonts, FontAwesome, and UIkit framework for UI components. Hosting appears to be supported by GoDaddy with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and some important security headers like Content Security Policy. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Cookie consent is implemented, but a privacy policy page is missing, which is a compliance gap. The domain registration data is consistent with the business claims, showing no suspicious patterns. Overall, the website is trustworthy and professional with moderate security posture and some privacy compliance gaps. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance the security and compliance profile significantly.

ChampionChip.cz is a specialized service provider in the sports timing industry, leveraging MYLAPS chip timing technology to offer comprehensive timing, registration, GPS tracking, and result processing services for sports events primarily in the Czech Republic. The website presents a professional and consistent brand image with clear focus on sports event timing and related services. The technical infrastructure relies on established JavaScript libraries and Google services for analytics and marketing, though some libraries are outdated and may pose security risks. The site is mobile responsive and offers multilingual support, enhancing accessibility for a broader audience. Security posture is moderate with HTTPS usage but lacks visible security headers and updated libraries, and privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the domain registration data supports the legitimacy and longevity of the business. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

C

CROSS Zlín, a.s.

cross-traffic.com

60

CROSS Zlín, a.s. is a Czech Republic-based company specializing in intelligent transportation systems, including weigh-in-motion, traffic control, parking systems, road weather monitoring, and data collection solutions. Established in 1994, the company has a strong market presence with over 200 employees and multiple innovation awards, positioning itself as a key player in smart city and transportation technology sectors. Their website reflects a professional and comprehensive digital presence with detailed case studies and references, targeting municipalities and transportation authorities globally. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and a proprietary CMS (Studio9 webManager), delivering a good user experience with mobile optimization and SEO best practices. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the company demonstrates a mature business and digital footprint with moderate risk due to domain registration opacity.

H

Půjčovna kol Valtice - Hurá na kolo!

huranakolo.cz

44

The website www.huranakolo.cz represents a small local business specializing in bicycle and electric bike rentals in the Valtice region of the Czech Republic. It targets tourists and cycling enthusiasts visiting the Lednicko-valtický area, offering a range of bicycles, accessories, and related services such as bike delivery and route recommendations. The business model is straightforward, focusing on rental services supported by quality assurance and customer guidance. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

SKIAREÁL KLÍNOVEC s.r.o.

trailpark.cz

40

TrailPark.cz is a professionally maintained website representing SKIAREÁL KLÍNOVEC s.r.o., a medium-sized company operating a mountain bike trail park on Klínovec mountain in the Czech Republic. The business offers a range of services including bike trails for various skill levels, bike rental, food and beverage services, and accommodation partnerships. The site is well-branded and targets mountain biking enthusiasts and tourists. Technically, the website is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact details appear trustworthy. Overall, the site is a reliable digital presence for the business with room for improvement in privacy compliance and security transparency.

H

Helicopter Alliance

helicopter-alliance.com

74

Helicopter Alliance is a newly established (2023) consortium of six leading helicopter companies specializing in the full lifecycle of UH-60 Black Hawk helicopters. Their services include sale, delivery, modernization, maintenance, training, and mission equipment installation, targeting military, law enforcement, commercial, and aerial firefighting sectors. The company positions itself as a niche leader with a global presence headquartered in the US and Europe. Technically, the website employs modern web technologies with a focus on multimedia content and responsive design, though some improvements in accessibility and security headers could be made. Security posture is solid with HTTPS and GDPR compliance, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

Č

Česká silniční společnost z.s.

silnicnispolecnost.cz

44

Česká silniční společnost z.s. is a well-established professional association in the Czech Republic, specializing in road infrastructure, engineering, and transport safety. Founded in 1934, it serves a diverse audience including engineers, technicians, students, and industry professionals. The organization publishes the monthly magazine Silniční obzor and organizes conferences and expert events, positioning itself as a key player in the Czech transportation sector. The website reflects this professional focus with comprehensive content, event announcements, and membership information. Technically, the website is built on WordPress 6.8.1 using Oxygen Builder and includes modern libraries such as Swiper.js and jQuery 3.7.1. It is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. The site uses HTTPS with good SSL configuration, but lacks some advanced security headers. Forms are secured with CAPTCHA scripts, and data collection is transparent via privacy policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but could improve by adding explicit security headers, incident response contacts, and vulnerability disclosure policies. No critical vulnerabilities or suspicious content were detected. The absence of WHOIS data due to privacy protection slightly reduces trust but is typical for professional organizations. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security policy transparency and technical hardening would further enhance its posture.

S

Státní fond dopravní infrastruktury

edalnice.cz

66

The website edalnice.cz serves as the official e-commerce platform for electronic highway vignettes in the Czech Republic, operated by the State Fund for Transport Infrastructure. It offers a comprehensive range of services including vignette purchase, validation, management, and bulk buying options for fleets. The platform is well-positioned as the authoritative source for electronic toll stickers, targeting vehicle owners within the Czech Republic. The site is multilingual and designed with a user-friendly interface, ensuring accessibility and ease of navigation.

Ř

Ředitelství silnic a dálnic s. p.

pracersd.cz

63

Ředitelství silnic a dálnic s. p. (ŘSD) is a Czech state enterprise responsible for the management, maintenance, and development of highways and first-class roads. The organization positions itself as a key player in ensuring safe and efficient transportation infrastructure, supporting national prosperity. The website serves as a career portal targeting job seekers, students, and graduates interested in transportation infrastructure careers. The company emphasizes future-oriented infrastructure development with a significant annual budget and ongoing projects on major highways.

Ř

Ředitelství silnic a dálnic s. p.

mytocz.eu

57

The website myto.gov.cz is the official web portal for the Electronic Toll System in the Czech Republic, operated by Ředitelství silnic a dálnic s. p., a government entity. It provides comprehensive information and services related to toll payment, vehicle registration, toll rates, and customer support. The portal targets vehicle operators and transport companies using toll roads in the Czech Republic, serving as a centralized resource for toll-related matters. Technically, the site is built on Drupal 10, employs modern web technologies including Google Analytics for traffic analysis, and is mobile optimized with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and a published security policy would enhance protection. The absence of WHOIS data limits domain registration insights, but the use of a .gov.cz domain strongly supports legitimacy. Overall, the site is professional, trustworthy, and well-suited for its governmental function.

E

Eisenbahn- und Verkehrsgewerkschaft (EVG)

evg-online.org

64

The Eisenbahn- und Verkehrsgewerkschaft (EVG) is a well-established German labor union representing railway and transport workers. The organization focuses on advocating for employee rights, fair tariff agreements, and workplace co-determination. The website serves as a comprehensive portal for members and prospective members, offering news, member benefits, educational resources, and political information. The union has a strong presence in Germany with multiple regional offices and active social media channels. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs secure login forms with encryption attributes. However, it lacks explicit security headers and published security or incident response policies, which could be improved. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and branding strongly indicate a legitimate and trustworthy organization. Overall, the EVG website is a robust, professional platform supporting a major labor union in Germany. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance further.

O

OpenSeaMap

openseamap.org

43

OpenSeaMap is a community-driven open-source project providing free nautical charts and maritime data for various platforms including PC, Garmin, Lowrance, Android, iPad, and Windows. The project targets sailors, mariners, and boating enthusiasts, offering key services such as offline map downloads, ship tracking, weather forecasts, and harbor information. The website is built on TYPO3 CMS and uses OpenLayers and OpenStreetMap technologies for map rendering. Hosting is provided by Cloudpit, with domain registration dating back to 2009, indicating a mature and stable project. Security posture is moderate with no DNSSEC and lack of visible security headers or HTTPS enforcement details. Privacy and cookie policies are absent, and no contact emails or phone numbers are provided on the main page. Overall, the website is safe, content-rich, and moderately professional but would benefit from improved security and privacy compliance measures.

The website zelaznyszlakrowerowy.pl represents a regional government-backed project called "Żelazny szlak rowerowy" focused on promoting a cycling trail with interactive quiz elements. The project is co-financed by the European Regional Development Fund and targets adult cyclists and tourists interested in exploring the trail. The site provides user registration, login, and quiz participation features, along with a map visualization of the cycling route. The business model is public sector-driven, aiming to enhance regional tourism and community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap for styling, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with basic SEO and usability features. There is no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with room for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and secures password inputs. However, DNSSEC is not enabled and no explicit HTTP security headers were detected, which are areas for improvement. The privacy policy and GDPR compliance are well documented, including a named Data Protection Officer with contact details. No incident response or vulnerability disclosure policies are found. The site is free from suspicious or malicious content and does not employ WAF or blocking mechanisms. Overall, the website is trustworthy and professionally maintained with strong compliance to privacy regulations. Recommendations include enabling DNSSEC, adding security headers, and continuous monitoring of third-party scripts to enhance security posture and user trust.

Č

ČSAD SVT Praha, s.r.o.

svt.cz

54

ČSAD SVT Praha, s.r.o. is a Czech IT/IS company specializing in the development, implementation, and maintenance of information and sales systems for the passenger transport sector. As a member of the ČD-Telematika group, it holds a strong market position with flagship projects such as the multi-modal journey planner IDOS and the AMSBus pre-sale and reservation system. The company targets transport operators and partners, providing B2B software solutions that facilitate ticketing and journey planning across multiple transport modes. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and Google Analytics for tracking. The site is mobile-optimized with good navigation and professional design, although some accessibility features could be improved. The presence of cookie consent indicates awareness of privacy regulations, but the absence of explicit privacy and terms of service pages suggests room for compliance enhancement. From a security perspective, the site lacks visible security headers and published security policies, which lowers its security posture score. No critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS data for the domain raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content but would benefit from improved security and privacy disclosures. Strategically, the company should prioritize publishing comprehensive privacy and security policies, implementing security headers, and resolving WHOIS data visibility issues to enhance trust and compliance. These steps will strengthen its security posture and align with GDPR and industry best practices.

Č

Česká asociace organizátorů veřejné dopravy

caovd.cz

45

ČAOVD.cz is the official website of the Czech Association of Public Transport Organizers, established in 2005. The site serves as an informational platform for stakeholders in the Czech public transportation sector. The website is built on WordPress using common web technologies such as Bootstrap and Google Fonts, indicating a standard technical infrastructure with moderate performance and mobile optimization. However, the site lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and incident response contacts, which are essential for compliance and trust. Security posture is minimal with no detected security headers or vulnerability disclosures. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.

O

ODIS

odisapka.cz

43

ODISapka is a mobile application designed to facilitate online ticket purchases and integrated public transportation usage within the Moravian-Silesian region of the Czech Republic. It offers users convenient features such as cashless payment, mobile long-term passes (ODISka), real-time departure information, and route planning. The website is well-structured, professionally designed, and provides comprehensive user support including FAQs, contact forms, and detailed guides. The app is available on both Google Play and Apple App Store, indicating a mature digital presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPBakery Page Builder, and various plugins for translation and UI enhancements. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. HTTPS is enforced, and cookie consent mechanisms are implemented, supporting privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and secure form handling. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security policy or incident response information is available. The absence of WHOIS data is a notable concern, reducing trust in domain registration transparency, though the presence of official partner logos and links mitigates this somewhat. Overall, the website presents a trustworthy and functional platform for its intended audience, with recommendations to enhance security headers, verify domain registration details, and improve accessibility to further strengthen its posture.

The website mpvnet.cz serves as a public transport monitoring platform providing departure boards and real-time vehicle locations for several integrated transport systems across Czech regions. It is operated by CHAPS, spol. s r.o., a small company specializing in transport monitoring solutions. The site targets public transport users seeking timely information on bus and train schedules and vehicle positions. Technically, the site uses basic web technologies including jQuery and FontAwesome, with no advanced frameworks or CMS detected. The design and content quality are basic but functional, with moderate mobile optimization and accessibility. Security posture is minimal, lacking HTTPS verification details, security headers, and privacy policies, which presents compliance and risk concerns. No contact information or incident response details are provided, limiting user trust and support avenues. Overall, the domain is long-established and legitimate, but the site would benefit from enhanced security, privacy compliance, and richer business information to improve trust and user experience.

AMSBus.cz is an established Czech online platform specializing in the sale and reservation of bus tickets. Operated by ČSAD SVT Praha, s.r.o., the website targets general public users seeking convenient e-ticketing solutions for bus travel within the Czech Republic and surrounding regions. The business model focuses on providing a user-friendly interface for searching, purchasing, and managing bus tickets, supported by partnerships with transportation offices and portals. The domain age since 2001 supports a mature market presence. Technically, the website is built on a custom ASP.NET platform utilizing legacy JavaScript libraries such as jQuery 1.4.1, with integrations for Google Analytics and Gemius Audience for user tracking and marketing. The site shows moderate performance and basic mobile optimization, with room for modernization and improved accessibility. External links to trusted partners and payment providers enhance the ecosystem. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, the use of outdated JavaScript libraries introduces potential vulnerabilities. The absence of explicit security headers and cookie consent mechanisms indicates partial compliance with modern security and privacy standards. No incident response or security policy information is published, limiting transparency. Overall, AMSBus.cz presents a functional and moderately secure platform with a solid business foundation. Strategic improvements in updating technology, enhancing privacy compliance, and publishing security policies would strengthen trust and reduce risk exposure.

L

Letiště Ostrava, a.s.

airport-ostrava.cz

52

Letiště Ostrava, a.s. operates as a regional airport in the Czech Republic, providing air transport connectivity and related services. The website offers comprehensive flight information, ticket reservations, VIP and business lounge services, and passenger amenities. The company is positioned as a key transportation hub for the Ostrava region with a medium-sized operational scale and a founding date consistent with its domain registration in 1999. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and reCAPTCHA, ensuring a functional and user-friendly experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and form protections, though improvements in security headers and explicit policies are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

F

FIRESTA-Fišer, rekonstrukce, stavby a.s.

firesta.cz

44

FIRESTA-Fišer is a well-established construction and engineering company based in Brno, Czech Republic, with over 30 years of operational history. The company specializes in infrastructure projects including bridges, railways, roads, water management, steel structures, and industrial buildings. It employs over 600 qualified workers and has received multiple industry awards, indicating a strong market position in the regional construction sector. The website reflects a professional business with clear service offerings and contact information, targeting business and public sector clients. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses responsive design, though some SEO and accessibility features could be enhanced. The absence of CMS identification and hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a security.txt file for vulnerability disclosure. Privacy compliance is basic, with no dedicated privacy or terms of service pages, though a cookie consent mechanism is present. The WHOIS data is unavailable, which reduces trustworthiness but may be due to privacy protection. Overall, the website presents a credible and professional business presence with moderate technical maturity and security posture. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

GHH-BONATRANS is a leading global manufacturer specializing in wheelsets, wheels, axles, and related components for rolling stock including high-speed trains, metros, trams, locomotives, and freight wagons. The company serves over 80 countries worldwide and is recognized for its technological innovation, comprehensive product portfolio, and commitment to quality and customer service. The website reflects a mature business with a professional online presence, showcasing news, certifications, and career opportunities. Technically, the website employs a modern but somewhat dated technology stack including jQuery, Bootstrap, and Font Awesome, with integrations for Google Analytics, reCAPTCHA, and social sharing tools. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, some improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. The presence of Google reCAPTCHA on forms adds protection against automated abuse. No critical vulnerabilities or exposed sensitive data were detected, but the absence of explicit security headers and incident response information suggests room for improvement in security posture. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

C

CARTEC GROUP, S. R. O.

cartecolomouc.cz

60

CarTec Group, operating under CARTEC GROUP, S. R. O., is an authorized automotive dealership and service provider specializing in BMW, MINI, and BMW Motorrad vehicles in the Czech Republic, specifically Olomouc. The company offers new and used vehicle sales, servicing, and original accessories, positioning itself as a regional authorized dealer with a consistent brand presence. The website reflects a professional and well-structured digital presence with good content quality and user experience, targeting automotive customers in the region. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS, but lacks some security headers and explicit privacy and terms of service pages, which are areas for improvement. The extensive use of third-party tracking and marketing scripts indicates a mature digital marketing strategy but requires careful privacy compliance management. From a security perspective, the site enforces HTTPS and has implemented a detailed cookie consent mechanism, which is positive. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No critical vulnerabilities or exposed sensitive data were detected, but the lack of security headers and formal privacy documentation suggests room for enhancing the security posture. Overall, the website is functional, professional, and trustworthy from a user perspective but requires verification of domain registration and improvements in security and privacy compliance to strengthen its risk profile and trustworthiness.

A

AUTOHITY CZ s.r.o.

autohity.cz

42

AUTOHITY CZ s.r.o. operates a professional and well-established used and nearly new car dealership in the Czech Republic, primarily serving the Ostrava region with a branch in Olomouc. The company offers a broad inventory of approximately 400 vehicles across multiple popular brands, complemented by financing options and vehicle servicing. Their market position is strong as one of the largest used car dealers in the country, supported by a clear business model focused on retail automotive sales and customer service. The website reflects this with good content quality, consistent branding, and clear navigation.

M

Martin Balcárek VÁHOSERVIS OLOMOUC

mostni-vahy.cz

45

The website www.mostni-vahy.cz represents a small Czech business specializing in the manufacture, installation, and servicing of heavy vehicle weighing systems such as bridge and road scales with capacities from 30 to 60 tons. The company, identified as Martin Balcárek VÁHOSERVIS OLOMOUC, targets businesses requiring certified and reliable weighing solutions. The site is professionally designed with clear navigation and mobile responsiveness, leveraging modern technologies including Bootstrap, jQuery, Google Maps API, and Google Analytics for tracking and analytics. Cookie consent is implemented, indicating some level of privacy compliance, though no formal privacy policy or terms of service are present. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. Overall, the website is functional and business-focused with moderate risk due to missing WHOIS and privacy documentation.

S

Starship Gazer

starshipgazer.com

55

Starship Gazer is a niche media content provider focused on professional photography and video coverage of SpaceX Starship activities at Starbase Texas. The business operates primarily through membership subscriptions on platforms like Patreon, YouTube, and X, offering exclusive access to high-quality media and updates. The website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and domain legitimacy. Security posture is adequate with HTTPS enforced but lacks advanced security headers and policies. Overall, the site serves a specialized audience of space enthusiasts and supporters with professional content but should improve compliance and security transparency.

M

Michelin

viamichelin.de

61

ViaMichelin is a well-established online travel and mobility platform operated under the Michelin brand, providing detailed maps, route planning, traffic information, and travel-related services such as hotel and restaurant searches. The website targets general travelers and drivers primarily in Germany and Europe, leveraging Michelin's strong market position and brand recognition. Technically, the site uses modern web frameworks like SvelteKit and MapLibre GL JS, combined with a comprehensive consent management system (Didomi) to ensure GDPR compliance. Advertising is integrated via reputable ad networks with user consent. Security posture is solid with HTTPS and consent management, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the site is professional, trustworthy, and provides a good user experience with extensive content and clear navigation.

H

Hot Rod Fun

hotrod-fun.com

47

Hot Rod Fun is a small service provider specializing in guided city tours, firm events, and voucher sales primarily in Germany with additional locations in cities like Bucharest and Leipzig. The company offers unique experiences using Hot Rod vehicles, targeting general audiences interested in fun and adventurous city tours. The website is built on WordPress using Elementor, featuring a professional design with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data slightly reduce the overall trustworthiness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Overall, the website presents a functional and professional front for its niche market but would benefit from enhanced compliance and transparency measures.

Boot for fun is a small local business based in Malchow, Germany, specializing in boat rentals and event floß services on the Mecklenburgische Seenplatte. The company offers license-free motorboats and a party/event floß suitable for various social occasions. The website is built on WordPress and uses common plugins and themes, providing a professional and user-friendly experience. Contact information including phone, email, and physical address is clearly presented, enhancing business credibility. Cookie consent mechanisms are implemented, indicating GDPR compliance awareness. However, no explicit security policies or incident response information are provided. The domain registration data aligns with the hosting providers and the business location, supporting legitimacy. Overall, the website is well-positioned for its niche market with good content quality and technical implementation.

B

Bremicker Verkehrstechnik GmbH

bremicker-vt.de

34

Bremicker Verkehrstechnik GmbH is a leading German manufacturer specializing in traffic technology products and solutions since 1932. The company offers a broad portfolio including traffic signs, variable message signs, speed warning systems, parking management, and comprehensive training programs. With multiple locations and over 220 employees, Bremicker serves municipalities, traffic authorities, and related sectors with innovative and high-quality products. The website reflects a mature digital presence built on WordPress with Divi theme, integrating privacy-respecting analytics and modern UI/UX design. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates strong business credibility, professional content, and good compliance with GDPR requirements.

Luftfahrttechnisches Museum Rechlin e.V. is a small non-profit museum located in Germany, dedicated to the history and technology of aviation and military developments in the Rechlin region. The museum operates in historic buildings formerly used by the Luftwaffe and later Soviet forces, offering exhibitions on German and Soviet aviation, shipbuilding, and military history. It is supported by two volunteer associations and funded through entrance fees, donations, and memberships. The museum also engages in digital innovation through an augmented reality project funded by the German federal government. Technically, the website is built on the Contao CMS platform with Bootstrap and jQuery, providing a modern, mobile-optimized user experience. The site includes a cookie consent mechanism and basic SEO metadata but lacks advanced security headers and analytics tracking. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent, but no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. No WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and suitable for its target audience of history and aviation enthusiasts. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure policy to improve trust and compliance.

T

Todos

todos.sk

60

Todos is a well-established authorized vehicle dealership and service provider operating multiple branches across Slovakia. The company specializes in the sale and servicing of popular automotive brands including Škoda, Toyota, SEAT, Cupra, and several premium American brands. Their business model focuses on comprehensive vehicle sales, authorized servicing, fleet management for companies, and an e-commerce platform for vehicle accessories. The website reflects a strong market position with clear branding and multiple service offerings tailored to Slovak customers seeking reliable automotive solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrated with Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses IP anonymization for analytics, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is addressed with a cookie consent mechanism and a basic cookie policy, though a dedicated privacy policy page is not explicitly found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website at flughafen-graz.at currently presents only minimal content, specifically a placeholder message indicating 'This is where Dendrite is installed.' There is no substantive business information, metadata, or user-facing content to analyze. The lack of privacy, cookie, or terms of service policies, as well as absence of contact information, social media links, or technical indicators, suggests the site is either under development or misconfigured. From a technical perspective, no technologies, frameworks, or CMS platforms are detectable from the provided HTML snippet. The site does not appear to implement any security headers or SSL configuration details, and no WHOIS data was provided to assess domain legitimacy or registration details. Security posture cannot be fully assessed due to lack of data, but the absence of HTTPS and security policies is a concern. No vulnerabilities or malicious content were detected, but the site’s minimal content and lack of compliance documentation indicate a low maturity level. Overall, the site is accessible but functionally empty, with critical gaps in content, security, and compliance. Strategic recommendations include deploying a full website with proper content, implementing HTTPS, adding privacy and cookie policies, and publishing contact and incident response information to improve trust and security posture.

S

Student Agency k.s.

kralovna.cz

61

Královna.cz is an online travel agency operated by Student Agency k.s., specializing in offering the cheapest airline tickets worldwide along with complementary travel services such as accommodation, car rental, travel insurance, and visa assistance. The website targets travelers seeking affordable and convenient travel booking options, positioning itself as a competitive player in the transportation sector within the Czech Republic. The platform provides a user-friendly interface with clear navigation and a professional design, supporting multiple airlines and travel options.

M

Müritz-Yacht Management e.K.

mueritz-yacht.de

50

Müritz-Yacht Management e.K. is a well-established medium-sized company based in Germany specializing in yacht charter, houseboat rentals, boat sales, individual yacht construction, and comprehensive yacht services. Founded in 1993, the company has grown to become a recognized and certified player in the Mecklenburg region, offering a broad range of maritime leisure services to tourists and boating enthusiasts. Their website reflects a professional and customer-focused approach, providing detailed information about their offerings and easy access to contact channels. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and slick carousel for a responsive and engaging user experience. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security measures include HTTPS enforcement and cookie consent mechanisms, but there is room for improvement in explicit security headers and published security policies. From a security perspective, the site maintains a good posture with no detected vulnerabilities or malicious content. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of a public security policy or incident response contact is noted. Overall, the domain registration and website content are consistent and trustworthy, supporting the company's legitimacy. Strategically, Müritz-Yacht Management should focus on enhancing their security transparency and incident readiness, while continuing to leverage their strong market position and customer trust. The website serves as a robust digital front for their business, effectively supporting their operational and marketing goals.

H

Herr Velo Brandt Schewe GbR

herr-velo.de

40

Herr Velo Brandt Schewe GbR operates a specialized bicycle retail and service shop located in Neubrandenburg, Germany. The business focuses on sales, repairs, and customization of bicycles, targeting local customers who value quality and style. The website reflects a small but professional local business with clear branding and consistent messaging. Technically, the site uses a modern Bootstrap framework with jQuery and Font Awesome, hosted on kasserver.com. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with no explicit security headers detected and no visible vulnerabilities, but SSL configuration details are not provided. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page, though no terms of service or incident response policies are found. Overall, the website is trustworthy and safe, with no adult or questionable content. The WHOIS data aligns with the website's business claims, indicating legitimacy.

V

VMOBIL

vmobil.at

63

VMOBIL is a regional mobility platform serving the Vorarlberg region in Austria, offering integrated public transportation services including bus, train, bicycle, carsharing, ferry, and walking options. The website is professionally designed using Drupal 9 CMS and incorporates modern web technologies such as lazy loading and a chat widget for user support. The platform targets residents and visitors seeking comprehensive mobility solutions in the region. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit privacy or security policies are found on the site. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the website is trustworthy and well-positioned in its niche, but could improve transparency and security practices.

R

Rīgas satiksme

rigassatiksme.lv

47

Rīgas satiksme is the primary public transportation provider in Riga, Latvia, offering comprehensive services including trams, trolleybuses, buses, and night transport. The website serves as an information hub for route schedules, ticketing, parking, and company news, targeting residents and visitors of Riga. The business operates under municipal partnership, positioning itself as a key player in the city's transportation infrastructure. Technically, the website employs a traditional tech stack with jQuery and related libraries, hosted partially on Cloudfront. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. The content is well-structured and professionally presented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy and GDPR-aligned consent, though a dedicated privacy policy page is basic. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, functional, and aligned with its public service mission. Strategic improvements in security headers, incident response transparency, and enhanced mobile optimization could further strengthen its posture.