Transportation security reports

A

ALPINA

alpina-configurator.com

61

The ALPINA Car Configurator website serves as a specialized tool for users to customize ALPINA vehicles, targeting car enthusiasts and potential buyers within the luxury automotive segment. The site leverages modern web technologies such as React and Meteor to deliver interactive configuration capabilities. However, the website lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Contact and security policy information are also absent, limiting transparency and user support avenues. Technically, the site shows moderate performance and basic mobile optimization but misses advanced SEO and accessibility features. Security posture is limited due to missing security headers and unclear SSL configuration. WHOIS data indicates privacy protection for the domain registration, which is common but reduces transparency. Overall, the site is functional but requires improvements in privacy compliance, security practices, and user support to enhance trust and regulatory adherence.

MINI Czech Republic operates as the official localized website for the MINI automotive brand, offering new and used vehicles, financing options, servicing, and accessories. The site is well-positioned within the automotive sector in the Czech market and benefits from its association with the BMW Group, enhancing its market credibility and reach. The website targets consumers interested in premium compact vehicles, including electric models, and provides comprehensive product information and digital services such as the MINI Connected app. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and Adobe's analytics and tag management tools. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good accessibility features. Security is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit incident response and security policy disclosures are absent. Overall, the website presents a professional and trustworthy digital presence with clear business information, privacy compliance, and user-friendly navigation. The lack of WHOIS data is a minor concern but is mitigated by the brand's strong trust signals and official status. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.

S

Svaz spedice a logistiky České republiky

svazspedice.cz

42

Svaz spedice a logistiky České republiky is a Czech national association representing freight forwarding and logistics companies. The website serves as an information hub providing industry news, event calendars, documents, and member services. The organization targets logistics professionals and companies within the Czech Republic, positioning itself as an important industry association. Technically, the site is built on WordPress using common plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces transparency but the website content and contact details suggest a legitimate and professional entity. Overall, the site is functional, informative, and trustworthy for its intended audience.

S

Stellantis Europe S.p.A.

fiat.com

71

Fiat's official website serves as a comprehensive digital platform showcasing the brand's automotive models, heritage, and latest news. It targets a global audience interested in Fiat's vehicles, emphasizing Italian design and innovation, including electric and hybrid models. The site is part of Stellantis Europe S.p.A., reflecting a large enterprise with a strong market position in the transportation sector. Technically, the website leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools, and provides a mobile-optimized, user-friendly experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. The absence of WHOIS data is notable but likely due to privacy or registry issues, not detracting from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

V

ViT Logistics

vit-log.cz

55

ViT Logistics is a Czech Republic based logistics company established in 2013, offering tailored logistics services including warehousing, road, sea, and air transportation, as well as customs services. The company targets businesses requiring reliable and efficient supply chain solutions both domestically and internationally. Their website is professionally designed using WordPress and Elementor, with multilingual support and modern SEO practices. The technical infrastructure includes Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the website reflects a mature digital presence with room for improvement in compliance documentation and security transparency.

M

Matri Europe s.r.o.

matrieurope.com

59

Matri Europe s.r.o. is a small Czech Republic-based logistics consulting company founded in 2021, specializing in turnkey solutions for marketing events and promotional tours across Europe. Their website presents a professional image with clear service offerings including logistics consulting, personnel for roadshows, and event container rentals. The company has established partnerships with notable clients such as Valtra Oy, indicating a credible market presence. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a moderate level of performance and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and policies could enhance protection. Privacy compliance is limited, lacking explicit privacy and terms of service pages, which should be addressed to meet regulatory standards. Overall, the website is trustworthy and professional but would benefit from improved transparency and security practices.

BigBoard Praha a.s. is a well-established leader in the Czech outdoor advertising market, operating since 1996. The company specializes in providing comprehensive advertising solutions in public spaces, including major roadways, Prague metro, and railways, as well as offering modern urban furniture to municipalities and public institutions. Their website reflects a professional and modern digital presence, leveraging technologies such as Laravel Livewire, Alpine.js, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site includes a robust cookie consent mechanism compliant with GDPR, demonstrating a commitment to privacy and regulatory adherence. Security posture is strong with HTTPS enforcement and CSRF protections, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, reinforcing the legitimacy and trustworthiness of the company.

P

Porsche Česká republika s.r.o.

volkswagenprestavby.cz

52

The website volkswagenprestavby.cz is a specialized portal operated by Porsche Česká republika s.r.o., focusing on modifications and conversions of Volkswagen commercial vehicles in the Czech Republic. It serves as an information hub for customers and end-users, providing detailed catalogs, news updates, technical information, and contact forms for inquiries. The site is well-branded with Volkswagen commercial vehicle identity and maintains a consistent professional presence with social media integration. Technically, the site uses AngularJS, Bootstrap, and jQuery, with analytics managed via Google Tag Manager and Tealium. While the site is functional and mobile-optimized, some security best practices such as security headers and updated frameworks could be improved. Privacy and cookie policies are present with consent mechanisms, but no explicit security or incident response policies are found. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

M

MyCard

my-card.cz

67

MyCard.cz operates as a loyalty and benefits program tailored for vehicle owners of Volkswagen Group brands in the Czech Republic. The platform offers brand-specific service advantages and customer engagement opportunities, positioning itself as a niche loyalty solution within the automotive sector. The website is professionally designed with consistent branding and clear navigation, targeting Czech-speaking customers. Technically, the site leverages modern web technologies including Google Fonts, Google Maps API, and integrates trusted third-party analytics and marketing tools. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though lacks explicit security policies and vulnerability disclosure information. Overall, the domain registration and hosting align well with the business profile, indicating legitimacy and trustworthiness.

T

Toyota Central Europe - Czech s.r.o.

toyota-autokpplus.cz

55

Toyota Central Europe - Czech s.r.o. operates a professional automotive dealership website serving the Czech Republic market. The site offers comprehensive information on new and used Toyota vehicles, financing and leasing options, after-sales services, and customer support. The business is well-positioned as an official Toyota dealer with strong brand consistency and a medium-sized market presence. Technically, the website leverages modern web technologies including OpenText DXP CMS, Scene7 media services, and Google Tag Manager for analytics. The site is mobile responsive and performs moderately well. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though explicit privacy and terms of service pages are missing. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy compliance and security disclosures.

F

Fiat Professional

fiatprofessional.com

65

Fiat Professional is a well-established commercial vehicle brand offering a range of vans, pick-ups, and trucks primarily targeting business and professional users. The website serves as an official platform providing detailed product information, technical specifications, dealer locator services, and brand news. The site is built on a modern technical stack including AngularJS, Adobe Experience Manager CMS, and integrates analytics and marketing tools such as Google Tag Manager and Adobe DTM. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable anomaly but the overall digital presence and branding strongly indicate legitimacy. Privacy and cookie policies are present and appear GDPR compliant, supporting user data protection requirements.

A

AUTO KP PLUS CT, s.r.o.

citroen-business-center.cz

46

AUTO KP PLUS CT, s.r.o. operates as a Citroën Business Center in the Czech Republic, specializing in the sale and leasing of commercial and electric vehicles. The company offers a broad portfolio of Citroën models, including new and used vehicles, operational leasing, and rental services. Their website provides detailed information about their offerings, news updates, and customer engagement through newsletters and social media. The business targets entrepreneurs, fleet operators, and individuals seeking commercial vehicles with a focus on electromobility solutions. Technically, the website is built on a custom PHP platform utilizing jQuery and bxSlider for UI components, with integration of Google Analytics and Piwik/Matomo for visitor tracking. The site is mobile responsive and includes cookie consent mechanisms aligned with GDPR requirements. However, the use of an outdated jQuery version and lack of visible security headers indicate areas for improvement in security posture. Security-wise, the site employs HTTPS for resource loading and has implemented cookie consent with categorized tracking controls. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and consistent branding support the site's credibility. Overall, the website demonstrates a solid business presence with good content quality and privacy compliance, though technical and security enhancements are recommended to strengthen trust and resilience. The domain's WHOIS data absence is a concern and should be investigated further to ensure full legitimacy and compliance.

AUTO KP PLUS HOLDING a.s. operates as an authorized Toyota hybrid vehicle dealer based in Liberec, Czech Republic. The company specializes in the sale, rental, and test driving of Toyota hybrid cars, targeting consumers interested in eco-friendly automotive options. Their website presents a professional and user-friendly interface with clear navigation and relevant content focused on hybrid vehicles. The business maintains a regional market position with a medium-sized operational scale and demonstrates consistent branding and trust signals such as customer testimonials and official company registration details. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.8.2, Slick Slider, Bootstrap, and Google Analytics tools. While the site is mobile-optimized and SEO-friendly, some technical debt is evident due to the use of outdated JavaScript libraries and lack of advanced security headers. Performance is moderate, and accessibility is basic but functional. From a security perspective, the website enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit security policies or incident response contacts are published, and some security best practices such as security headers are missing. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website scores well in content quality, privacy compliance, and security posture but is penalized for missing WHOIS data and outdated libraries. Strategic improvements in domain transparency, security headers, and library updates are recommended to enhance trust and security maturity.

D

Dongfeng Motor Česko

dfmotor.cz

54

Dongfeng Motor Česko operates as the Czech Republic representative for Dongfeng Motor, the second largest automobile manufacturer in China with a rich history exceeding 50 years. The website showcases a range of vehicles including personal cars, hybrids, electric vehicles, and commercial vehicles, targeting consumers and businesses interested in Dongfeng products. The business model focuses on vehicle sales and servicing, supported by downloadable catalogs and technical data. The company maintains a medium-sized presence in the transportation sector within the Czech market. Technically, the website is built on WordPress using the Avada theme and incorporates modern plugins such as Yoast SEO and Slider Revolution. Hosting is provided by Exohosting, with a moderate performance profile and good mobile optimization. The site employs a comprehensive cookie consent mechanism compliant with GDPR, and integrates Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate bot attacks. However, it lacks visible security headers and does not publish a privacy policy or terms of service, which are important for compliance and user trust. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture but with room for improvement in transparency and header security. Overall, the website presents a professional and trustworthy front for Dongfeng Motor in the Czech Republic, with good content quality and business credibility. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection inquiries.

A

AUTO KP PLUS TO s.r.o.

liberec-toyota.cz

63

AUTO KP PLUS TO s.r.o. operates as an authorized Toyota dealership in the Czech Republic, offering a comprehensive range of Toyota vehicles, accessories, and after-sales services. The company is positioned as a key local player under the umbrella of Toyota Central Europe - Czech s.r.o., targeting Czech customers seeking reliable automotive solutions. The website reflects a professional business model focused on automotive retail and service, with clear branding and consistent messaging aligned with Toyota's corporate identity. Technically, the website leverages Adobe Experience Manager as its CMS platform, integrating modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent management. The infrastructure appears robust with good mobile optimization and SEO practices, although some performance and accessibility enhancements could be considered. The site uses HTTPS and includes privacy compliance mechanisms, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent with reCAPTCHA for form protection. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data limits domain legitimacy verification, but the overall security posture is solid for a commercial automotive website. Overall, the website presents a trustworthy and professional front for AUTO KP PLUS TO s.r.o., with strong compliance and security foundations. Strategic recommendations include enhancing security header implementation, publishing explicit security policies and incident response contacts, and verifying domain registration details to strengthen trust and compliance further.

C

Citroën

citroen.cz

60

The website www.citroen.cz serves as the official online presence for Citroën in the Czech Republic, focusing on the sale of new and used vehicles along with after-sales services. It targets consumers in the Czech market interested in automotive products, providing tools such as vehicle configuration and dealer locators. The site is professionally designed with consistent branding aligned with the Citroën brand and Stellantis group ownership. Technically, the site leverages modern technologies including Adobe Experience Manager CMS, Google Analytics, Dynamic Yield for personalization, and Adobe Helix RUM for performance monitoring. Security measures such as HTTPS and standard security headers are implemented, ensuring a secure browsing experience. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce the overall trust and compliance posture. The site includes a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. Overall, the website is a credible and professional digital asset for Citroën in the Czech market.

F

Fiat

dealer-fai.cz

61

Fiat Česká republika operates as the official online presence for Fiat in the Czech Republic, offering new vehicles, promotional offers, and a comprehensive online configurator. The website targets consumers interested in Fiat's hybrid and electric vehicles, providing detailed model information and dealer locator tools. The site is well-branded and consistent with Fiat's global identity, supported by modern web technologies including Adobe Experience Manager and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance in mind. However, the absence of WHOIS registration data for the domain raises questions about domain legitimacy, though the website content and branding strongly suggest an official source. Security posture is good with HTTPS and cookie consent mechanisms, but could be improved with additional security headers. Overall, the site provides a professional and user-friendly experience for its target audience.

M

Magyar Suzuki Corporation Ltd. branch office Czech Republic, organizační složka

suzuki.cz

57

Magyar Suzuki Corporation Ltd. branch office Czech Republic operates as the official regional representation of Suzuki Motor Corporation, focusing on the sale and servicing of Suzuki automobiles and motorcycles within the Czech market. The website serves as an information portal for current vehicle offerings, dealer networks, after-sales services, and owner events, targeting consumers and Suzuki enthusiasts in the region. The business model centers on automotive retail and customer support, leveraging the global Suzuki brand to maintain a strong market presence in transportation. Technically, the website is built on legacy ASP.NET WebForms technology, enhanced with modern JavaScript libraries and tracking tools. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages present compliance and trust challenges. Security posture is moderate, with cookie consent implemented but missing security headers and no visible incident response contacts. Overall, the site is functional and trustworthy from a branding perspective but would benefit from improved transparency and security hardening.

P

PFP s.r.o.

suri.cz

62

SURI.CZ is an independent Czech online platform specializing in car insurance comparison and brokerage services. Operated by PFP s.r.o., it offers users quick insurance comparisons, professional advisory services, and a mobile application to assist customers. The website targets Czech vehicle owners seeking optimal insurance solutions and partners with reputable insurance providers for legal protection, cycling, and golf insurance. The platform demonstrates a professional market position with clear branding and trust indicators such as a valid Czech National Bank license and active social media presence. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and PostHog. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. WHOIS data is missing, which slightly reduces trustworthiness, but the business information and contact details are transparent and professional. Overall, the site is safe, well-maintained, and suitable for its target audience.

W

Weiss+Appetito Spezialdienste GmbH

weissappetito.at

53

Weiss+Appetito Spezialdienste GmbH is a specialized service provider based in Austria, focusing on suction and blowing of materials, roof greening, and cleaning services. Their website presents a professional image with clear descriptions of their key services and a focus on consulting and maintenance for roof greening projects. The company targets construction-related clients and property managers requiring specialized material handling and greening solutions. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and delivering a responsive, user-friendly experience. Security posture is solid with HTTPS and HSTS enabled, though additional security headers and privacy compliance mechanisms are recommended. The absence of WHOIS data limits full trust verification, but the website's content and contact information support its legitimacy. Overall, the site is well-structured and suitable for its business purpose, with room for improvement in privacy and security transparency.

D

Dowty

dowty.com

66

Dowty, a GE Aerospace company, is a globally recognized provider of integrated composite propeller systems and related services for commercial and defense aerospace sectors. The company offers high-quality, reliable propeller solutions and tailored maintenance services, supporting large regional turboprops, military transporters, and hovercraft. The website reflects a professional and consistent brand image aligned with its parent company, GE Aerospace, targeting aerospace manufacturers and operators. Technically, the website is built on Drupal 11, leveraging modern web technologies including Google Tag Manager for analytics and Evidon for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies are absent. The WHOIS data is unavailable or withheld, which is unusual but the website's professional presentation and association with GE Aerospace mitigate concerns about legitimacy. No direct contact emails or phone numbers are publicly listed, with contact primarily via web forms. Privacy and terms policies are comprehensive and linked to the parent company domain, indicating good privacy compliance. Overall, the website demonstrates a mature digital presence with strong business credibility and good security hygiene, though improvements in explicit security policies and incident response disclosures are recommended to enhance trust and compliance.

U

Unison Industries

unisonindustries.com

69

Unison Industries, a GE Aerospace company, is a leading supplier of gas turbine engine components and electrical and mechanical systems serving a broad range of markets including aviation, space and defense, power, oil and gas, and transportation. The company holds a strong market position supported by its affiliation with GE Aerospace and certifications such as ISO 9001 and AS9100. Their website reflects a professional B2B supplier model targeting aerospace and related industries. Technically, the website is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and basic accessibility features. Security posture is solid with HTTPS enforced and standard security headers implemented, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy and professional, though the absence of WHOIS data reduces domain registration transparency. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and improving accessibility compliance.

V

Veho Mercedes-Benz Cars

mercedes-benz.fi

75

Veho Mercedes-Benz Cars operates as the official Mercedes-Benz dealership and service provider in Finland, offering a wide range of luxury vehicles including sedans, SUVs, coupes, and electric models. The company provides comprehensive automotive services such as new and used car sales, vehicle servicing, warranty, roadside assistance, and digital tools like vehicle configurators. The website reflects a strong market position with consistent branding and multiple dealership locations across Finland, targeting consumers interested in premium automotive products.

L

Lounais-Suomen Taxidata Oy

taxidata.fi

55

Lounais-Suomen Taxidata Oy operates as a major taxi dispatch and transportation service provider in Southwest Finland, serving multiple municipalities with a fleet of approximately 460 taxis. The company offers a variety of taxi services including normal, eco-friendly, premium, and accessible vehicles, as well as parcel and food delivery. The website reflects a well-established business with a history dating back to 1953 and a modern digital presence since 2016. The company targets both consumers and businesses in the region, emphasizing reliability, safety, and local expertise. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Piwik PRO analytics, and GDPR-compliant cookie management via Complianz. The site is mobile-optimized, uses HTTPS, and integrates reCAPTCHA for form security. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs privacy and cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, some security headers could be improved for enhanced protection. The WHOIS data is transparent and consistent with the business identity, registered through a reputable Finnish registrar without privacy protection, supporting legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. It effectively serves its target audience with clear contact information and service offerings. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing formal security policies to further strengthen trust and compliance.

T

Tampereen Aluetaksi Oy

taksitampere.fi

48

Tampereen Aluetaksi Oy operates the Taksi Tampere service, the largest taxi dispatch center in the Pirkanmaa region of Finland, providing 24/7 taxi ordering services via phone, mobile app, and WhatsApp. The company boasts a fleet of approximately 450 vehicles and handles nearly 2 million rides annually, positioning itself as a dominant regional transportation provider. The website reflects a mature digital presence with multilingual support, social media integration, and modern web technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The business demonstrates transparency with clear contact details and certifications, supporting trustworthiness and compliance with GDPR. Overall, the site is professional, user-friendly, and well-optimized for SEO and mobile use.

L

Lähitaksi Oy

lahitaksi.fi

57

Lähitaksi Oy is a well-established Finnish transportation company specializing in taxi and related transport services since 1965. The company operates primarily in Uusimaa, Riihimäki, and Lapland, serving both consumers and businesses with a large fleet and workforce. Their services include taxi ordering, airport transfers, business-class rides, special transport services, and package deliveries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

G

GE Aerospace

geaerospace.com

71

GE Aerospace is a leading global provider of jet and turboprop engines and integrated aircraft systems serving commercial, military, business, and general aviation sectors. The company offers a broad portfolio of propulsion products and services, including engine maintenance and customer support, positioning itself as a key player in the aerospace industry. The website reflects a mature enterprise with comprehensive content targeting industry professionals, investors, and potential employees. Technically, the website is built on Drupal 10 and incorporates modern web technologies such as Google Tag Manager and Evidon for cookie consent, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices, mobile optimization, and accessibility features, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS, employs security headers, and integrates consent mechanisms for privacy compliance. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS domain registration data raises questions about domain legitimacy that warrant further verification. Strategic improvements in security disclosure and incident response communication would strengthen the security posture and stakeholder confidence.

M

Metsäkonepalvelu Oy

mkpd.fi

44

Metsäkonepalvelu Oy is a well-established forestry service company operating in Finland and Sweden, specializing in mechanized timber harvesting. The company serves industrial clients and private forest owners, leveraging over 50 years of experience through its group including subsidiaries MKP Sverige Ab and Kone-Yijälä Oy. The website reflects a professional digital presence with clear business information and active social media engagement. Technically, the site is built on Joomla CMS with modern frontend libraries and integrates Google Maps and social media streams, hosted likely via Cloudpit. Security posture is solid with HTTPS and CSRF protections, though lacking some security headers and formal policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Faehrinfos.de is a small German niche informational portal providing free notifications via SMS and email about disruptions and important updates for selected ferry services in Germany. The website targets ferry users seeking timely information about ferry operations. Technically, the site uses a basic but functional tech stack including Bootstrap 3.3.7 and jQuery 1.12.4, hosted behind Cloudflare nameservers for DNS and likely CDN services. The site lacks modern security headers and explicit HTTPS confirmation in the provided data, indicating a weak security posture. Privacy compliance is minimal with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Contact information is not explicitly provided, limiting business credibility. Overall, the site is functional but basic in design and security, suitable for its niche but requiring improvements for trust and compliance.

W

Weiße Flotte GmbH

ostsee-bestattungen.de

59

Weiße Flotte GmbH operates a specialized service offering dignified sea burials from the port of Stralsund into the Prohner Wiek, targeting families and individuals seeking maritime funeral services. The company leverages over 60 years of tradition and experience, positioning itself as a trusted regional provider in the transportation and funeral service sector. The website reflects a professional and empathetic approach, emphasizing personal and discreet service. Technically, the site is built on TYPO3 CMS, hosted behind Cloudflare, and integrates Google Analytics and Tag Manager with proper consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, supporting a trustworthy online presence for the business.

T

TBG Metrostav

tbg-metrostav.cz

55

TBG Metrostav is a leading supplier of concrete and related construction materials in the Prague region, offering a comprehensive range of products including fresh concrete mixes, pumping services, and rental equipment. The company targets construction professionals and developers, positioning itself as a market leader with a strong local presence. The website is built on WordPress with modern technologies and includes tracking and analytics tools such as Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

F

FRS Travel

frs-travel.de

66

FRS Travel is a specialized maritime travel service provider focusing on package tours to the German North Sea islands of Sylt and Heligoland. The company offers combined hotel and ferry bookings, leveraging partnerships with local hotels and ferry operators such as FRS Syltfähre and the Halunder Jet catamaran. Their market position is niche but well-defined, targeting tourists seeking maritime vacation experiences in Germany. The website is professionally designed with clear navigation, good content quality, and consistent branding. Technically, the site is built on TYPO3 CMS, uses Cloudflare for DNS and CDN, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Accessibility and SEO optimizations are well implemented.

Fahrgastschifffahrt Rügen operates as a regional passenger shipping service provider on Germany's largest island, Rügen. The company offers scenic tours along the coastline, including visits to national parks and the car-free island of Hiddensee, targeting tourists and visitors seeking nature and cultural experiences. The website is built on the Contao CMS platform, utilizing jQuery and GLightbox for interactive elements, and is hosted on servers associated with kasserver.com. The site demonstrates good mobile optimization and basic accessibility features, with a clear navigation structure and professional design. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible advanced security headers and explicit security or incident response policies. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data shows partial consistency with the business, though registrant details are limited. Overall, the site presents a low-risk profile with a good security posture but could benefit from enhanced security headers and clearer compliance documentation. Strategically, the business is well-positioned in the regional tourism transportation sector with a clear service offering. The website supports this with relevant content and trust indicators such as an impressum and privacy policy. There is room for improvement in transparency regarding terms of service, incident response, and security certifications to further enhance trust and compliance.

F

FRS Systems GmbH

frs-systems.de

64

FRS Systems GmbH is a German company specializing in highly flexible ticketing software solutions tailored for the ferry and passenger vessel industry. Their flagship product, flexWays, offers comprehensive features including sales and distribution, booking management, inventory control, route planning, capacity management, and boarding administration. The company positions itself as an innovative and reliable software provider with a medium-sized workforce and a history dating back to 1992. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing its credibility. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as JavaScript, CSS, and SVG graphics. Hosting and DNS services are managed via Cloudflare, providing robust SSL encryption and potential security benefits. The site demonstrates good performance and accessibility standards, although no advanced analytics or tracking scripts were detected in the provided content. From a security perspective, the website enforces HTTPS and benefits from Cloudflare's DNS services, but lacks visible security headers and explicit security policies. There is no cookie consent mechanism or terms of service present, which are important for GDPR compliance and legal clarity. Incident response contacts and vulnerability disclosure information are also absent, representing areas for improvement. Overall, the website is trustworthy and professional, with a strong business focus and solid technical foundation. However, enhancements in privacy compliance, security policy transparency, and incident response readiness would further strengthen its security posture and regulatory adherence.

F

FRS Shipmanagement

frs-shipmanagement.eu

68

FRS Shipmanagement is a specialized maritime service provider focused on ferry ship management, based in Limassol, Cyprus, and operating as a division of the well-established FRS Group. The company offers comprehensive services including crewing, technical maintenance, administration, and consulting tailored to the ferry industry. Their market position is that of a trusted partner leveraging over 150 years of group experience and direct shipowner insights. Technically, the website is built on TYPO3 CMS with modern web standards, good accessibility, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and incident response/contact security policies are not published. Overall, the site is professional, trustworthy, and well-structured, supporting a small-sized business with a clear niche in transportation. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators are present. Strategic recommendations include enhancing security headers, publishing security policies, and providing incident response contacts to improve trust and compliance.

A

Albanian Ferry Terminal Operator (AFTO)

afto.al

69

Albanian Ferry Terminal Operator (AFTO) operates the modern ferry terminal in Durrës, Albania, serving as a key gateway for passengers and cargo between Albania and the Balkan region with ferry connections to Italian ports. As a subsidiary of the FRS Group since 2013, AFTO manages a terminal that handles significant passenger and vehicle traffic annually. The website reflects a professional and consistent brand presence aligned with its parent company. Technically, the site is built on TYPO3 CMS, incorporates Google Tag Manager and Analytics for tracking, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Privacy compliance is strong with comprehensive cookie and privacy notices adhering to GDPR standards. Overall, the site is trustworthy, safe, and well-structured, supporting AFTO's business operations effectively.

F

FRS Express des îles

frs-express.com

71

FRS Express des îles is a well-established ferry transportation company operating in the Caribbean, serving key destinations such as Guadeloupe, Martinique, Dominica, and Saint Lucia. The company positions itself as a leading regional operator with competitive pricing and a focus on customer experience. Their website is professionally designed, mobile-optimized, and provides comprehensive information including booking options, schedules, and membership programs. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Google Analytics, Hotjar, and Google Ads, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not outweigh the overall professionalism and trust signals present on the site. Strategic recommendations include enhancing security headers, confirming domain registration details, and maintaining compliance with privacy regulations.

R

Reederei Hiddensee

reederei-hiddensee.de

66

Reederei Hiddensee operates as a regional ferry transportation service specializing in trips to the island of Hiddensee, Germany. The company targets tourists and travelers seeking natural and cultural experiences on the island, offering ferry services, excursions, and water taxi options. The website is professionally designed using TYPO3 CMS, featuring a responsive layout, integrated booking forms, and accessibility options. The technical infrastructure leverages Cloudflare for DNS and CDN services and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy disclosures and security best practices.

W

Weiße Flotte

weisse-flotte.de

66

Weiße Flotte operates as a regional transportation and tourism company specializing in passenger ferry and sightseeing boat services around the German islands of Rügen, Hiddensee, and the city of Stralsund. The company offers a variety of ferry routes, special excursions, and online ticketing services, targeting tourists and local travelers seeking convenient and scenic water transport options. The website is built on TYPO3 CMS and utilizes Cloudflare DNS services, indicating a modern and stable technical infrastructure. Google Tag Manager is employed for analytics and marketing purposes, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the website is professional, well-branded, and trustworthy, but could enhance compliance and security transparency to better align with GDPR and industry best practices.

R

Rheinfähre Maul GmbH

rheinfaehre.de

61

Rheinfähre Maul GmbH operates a regional car ferry service connecting Ingelheim and Oestrich-Winkel across the Rhine river in Germany. Established in 1968, the company has a longstanding presence in the transportation sector and was recently acquired by the Flensburger Reederei FRS, a reputable shipping group. The website provides detailed operational information including schedules and tariffs, targeting local commuters and tourists. Technically, the site is built on WordPress with modern plugins for SEO, maps, and galleries, and implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and cookie controls, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data supports the legitimacy of the domain and business. Overall, the site reflects a professional and trustworthy transportation service with good digital maturity.

F

FRS Elbfähre Glückstadt Wischhafen GmbH

frs-elbfaehre.de

66

FRS Elbfähre Glückstadt Wischhafen GmbH operates a regional ferry service crossing the Elbe river in northern Germany, providing frequent and reliable transport for passengers and vehicles. The company emphasizes customer convenience with amenities such as free Wi-Fi and onboard refreshments, and is actively pursuing sustainable mobility initiatives to reduce emissions and increase capacity. The website is professionally designed using TYPO3 CMS, with good accessibility and SEO practices, and integrates Google Analytics and Tag Manager for performance monitoring. Security posture is solid with HTTPS and Cloudflare protection, though explicit security headers and incident response policies are not published. Privacy compliance is strong with comprehensive cookie and privacy policies aligned with GDPR. Overall, the site reflects a trustworthy and credible transportation business with a medium-sized operational scale.

F

FRS Syltfähre GmbH & Co. KG

frs-syltfaehre.de

67

FRS Syltfähre GmbH & Co. KG is a well-established regional ferry operator providing car and passenger ferry services between Havneby on Rømø and List on Sylt. The company operates up to 32 daily departures, catering primarily to tourists and travelers seeking reliable and comfortable transportation across the North Sea. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service information including booking, schedules, fares, and travel tips. The company is part of the larger FRS group, indicating a stable market position and operational backing. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating analytics tools such as Microsoft Clarity, Google Tag Manager, and Hotjar for user behavior insights. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Accessibility features and SEO best practices are well implemented, contributing to a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses reputable third-party services, with no evident vulnerabilities or exposed sensitive data. Privacy and cookie policies are clearly presented with consent mechanisms, aligning with GDPR requirements. However, explicit security headers and incident response policies are not prominently disclosed, representing an area for improvement. Overall, the website demonstrates a strong security posture, good privacy compliance, and solid business credibility. The risk level is low, with recommendations focusing on enhancing security header implementation, publishing incident response information, and maintaining vigilance on third-party scripts.

F

FRS Helgoline

frs-helgoline.de

66

FRS Helgoline operates a specialized high-speed ferry service connecting Hamburg, Brunsbüttel, and Cuxhaven to the offshore island of Heligoland in Germany. The company positions itself as a premium transportation provider offering comfort, speed, and convenience through its modern catamaran 'Halunder Jet'. The website supports this business model with integrated booking and check-in systems, detailed schedules, ticket pricing, and customer information. The target audience includes tourists and travelers seeking efficient and comfortable ferry transport to Heligoland. Technically, the website is built on TYPO3 CMS and leverages Cloudflare for DNS and CDN services, ensuring reliable hosting and performance. Analytics tools such as Microsoft Clarity and Google Tag Manager are employed for user behavior tracking and marketing insights. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses Cloudflare's infrastructure, which enhances security and performance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and no public security policy or incident response contacts are found. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and well-aligned with the business's transportation services. There are no indications of suspicious activity or content safety concerns. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

F

FRS Clipper

clippervacations.com

57

FRS Clipper operates the Clipper Vacations website, providing passenger-only ferry services between Seattle, WA and Victoria, BC, along with hotel packages, day trips, and tours such as whale watching. The company holds a strong regional market position in the Pacific Northwest travel and transportation sector, targeting leisure travelers and groups. Their business model integrates transportation with hospitality services, offering bundled packages and affiliate programs to expand reach. Technically, the website is built on WordPress with Bootstrap framework, leveraging modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, PostHog, and Bing Ads. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and secure form handling, though there is room to improve HTTP security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities were detected in the visible code. Privacy compliance is basic with a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the website presents a professional, trustworthy, and user-friendly platform for travel bookings. The absence of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers, implementing cookie consent, and continuous monitoring of third-party scripts to maintain security and compliance.

F

FRS Portugal, Unipessoal LDA

frs-portugal.pt

75

FRS Portugal is a small transportation company specializing in river cruises and boat tours on the Rio Tejo in Lisbon, Portugal. It offers a variety of services including daytime sightseeing cruises, sunset cruises, group reservations, and corporate events aboard modern vessels. The company is part of the larger FRS World family, positioning itself as a reputable local operator with a strong focus on tourism and customer experience. The website is professionally designed, multilingual, and provides clear booking options and detailed information about routes and points of interest. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

The website www.belgiantrain.be represents NMBS, the Belgian national railway company providing train transportation services. The site is positioned as a national public transportation portal targeting general train travelers in Belgium. However, the current accessible content is blocked by a Cloudflare Turnstile CAPTCHA challenge, preventing direct content access and limiting detailed analysis. The website uses modern security mechanisms like CAPTCHA to prevent automated access, indicating a focus on security, but lacks visible privacy and cookie policies on the landing page. The WHOIS data is not publicly available due to domain registration policies, which is typical for .be domains and large organizations. Overall, the business is a large enterprise in the transportation sector with consistent branding but limited accessible content for deeper evaluation.

K

Komwag, podnik čistoty a údržby města, a.s.

komwag.cz

50

Komwag, podnik čistoty a údržby města, a.s., is a large Czech company providing comprehensive municipal services across the Czech Republic, including waste management, green maintenance, and cleaning services primarily targeting municipalities, government bodies, and private sector clients. The company positions itself as a reliable and professional service provider with a broad portfolio and a strong local presence. The website reflects a mature digital presence with clear branding, extensive service descriptions, and accessible contact information. Technically, the site uses modern web technologies including the cPilot CMS, UIkit framework, and integrates Google Tag Manager for analytics. It is well optimized for mobile devices and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, but lacks explicit security policies or incident response contacts. The absence of WHOIS data limits domain trust assessment, but the professional website and contact details support legitimacy. Overall, the site is secure, compliant with privacy regulations, and professionally maintained, though improvements in security transparency and WHOIS data availability are recommended.

F

FRS GmbH & Co. KG

frs.world

71

FRS GmbH & Co. KG is a well-established international ferry operator with a history dating back to 1866. The company operates approximately 70 vessels worldwide, providing passenger and freight ferry services across Europe, North Africa, North America, and the Middle East. Their business model includes diversified maritime services such as offshore logistics, port management, crewing, and maritime consultancy, positioning them as a leading specialist in the ferry shipping industry. The website reflects a professional and consistent brand presence with comprehensive information about their subsidiaries and services. Technically, the website is built on TYPO3 CMS, employs modern web technologies including responsive design and WebP images, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with clear navigation and SEO-friendly metadata. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies are not evident. The WHOIS data is privacy protected, limiting transparency on domain registration details; however, the website's professional presentation, linked subsidiaries, and social media presence support its legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, FRS demonstrates a mature digital presence aligned with its business stature, though improvements in security policy transparency and security headers could enhance trust and compliance further.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.