Transportation security reports

R

Renault Hrvatska

renault.hr

54

Renault Hrvatska operates as the official Croatian website for the Renault automotive brand, providing comprehensive information on new and used vehicles, financing options, after-sales services, and vehicle configurators. The website targets Croatian consumers interested in purchasing Renault vehicles, offering a broad portfolio including electric and hybrid models. The site reflects a mature digital presence consistent with a large automotive brand, supported by structured navigation and official branding. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR signals. Security posture is strong with HTTPS enforced and privacy-respecting analytics loading conditioned on user privacy signals. However, explicit privacy policies, terms of service, and security incident response information are not directly visible in the provided content. WHOIS data confirms domain legitimacy and consistency with Renault's global presence. Overall, the site is professional, trustworthy, and well-optimized for its audience.

N

NENBRA Transfer Services

taxi-vienna-bratislava.com

51

NENBRA Transfer Services operates a professional luxury taxi transfer business specializing in airport and cross-border transfers between Vienna, Bratislava, Budapest, Prague, and Schwechat. The company targets travelers seeking premium, reliable, and comfortable transportation with fixed pricing and 24/7 availability. Their market position is niche, focusing on high-end clientele with a fleet of luxury Mercedes Benz vehicles. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager and reCAPTCHA for analytics and security. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS and basic security practices, though improvements are recommended in DNSSEC and security headers. Privacy compliance is good with GDPR and cookie policies implemented. Overall, the business demonstrates credibility with consistent WHOIS data and clear contact information.

T

Tschudi Shipping Company AS

tschudigroup.com

68

Tschudi Shipping Company AS is a well-established, family-owned Norwegian maritime and logistics group with a history dating back to 1883. The company offers a broad range of integrated services including shipping, ship management, transshipment, energy advisory, ocean industries support, offshore wind support, logistics, and financial services. With a strong Nordic and European presence and offices in 12 countries, Tschudi Group targets businesses requiring comprehensive maritime and logistics solutions. The website reflects a professional and consistent brand image, emphasizing their expertise and global reach. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility, with clear navigation and rich content. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. However, explicit security headers are missing, and no public security policy or incident response information is available. From a security perspective, the site enforces HTTPS and anonymizes IPs in analytics, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and transparency about security practices are recommended. Overall, the site demonstrates a solid security posture with room for enhancement. The overall risk assessment is moderate with a legitimacy score impacted by missing WHOIS data. Strategic recommendations include verifying domain registration, enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to strengthen trust and compliance.

V

Vilatrans Empresa de Distribución y Logística

vilatrans.com

53

Vilatrans Empresa de Distribución y Logística is a medium-sized Spanish logistics and distribution company with over 25 years of experience. The company specializes in full load transportation and associated logistics services, leveraging satellite tracking technology and holding necessary administrative authorizations for special transport across Spain. Their website reflects a professional and consistent brand presence, targeting businesses requiring reliable logistics solutions. Technically, the site is built on WordPress with the Divi theme and uses common plugins such as Yoast SEO and Contact Form 7, hosted on Amazon AWS infrastructure. The website is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is partial, with a cookie policy and consent mechanism present but no privacy policy page found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is free from WAF blocking or content restrictions and contains no adult or questionable content.

B

BMW Loyalty

bmwlive.be

56

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners in Belgium and Luxembourg. It offers exclusive membership clubs and unique experiences designed to enhance customer engagement and brand loyalty. The platform is well-branded, consistent with BMW Group standards, and provides clear navigation and content relevant to its target audience. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates video content via Vimeo. The site is mobile-optimized and accessible, with a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS implied, secure login and registration forms, but lacks visible security headers and explicit incident response contacts. WHOIS data is restricted by the registry, but domain legitimacy is supported by branding and domain structure. Overall, the site is professional, trustworthy, and aligned with BMW's premium market positioning.

B

BMW Loyalty

bmwmleague.be

57

BMW Loyalty Belgium operates a premium loyalty program targeting BMW vehicle owners in Belgium, offering exclusive clubs and lifestyle experiences such as the BMW Excellence Club and BMW M League. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience. The technical infrastructure uses modern web standards and includes video integration via Vimeo. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though additional security headers could enhance protection. WHOIS data is privacy protected as per .be registry policies, which is typical and justified for this business type. Overall, the site reflects a mature digital presence aligned with BMW's brand standards.

B

BMW Loyalty

bmw-pure-emotions.be

56

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners and enthusiasts in Belgium. It offers exclusive membership clubs and curated experiences that emphasize luxury, performance, and lifestyle events. The website is well-branded, professionally designed, and provides clear navigation to various loyalty offerings. Technically, the site uses modern web standards with responsive design and integrates multimedia content via Vimeo. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not evident and could be improved. The WHOIS data is restricted, which limits domain ownership transparency but the site’s branding and content strongly support legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with BMW’s premium brand.

B

BMW Loyalty

bmwexcellenceclub.be

57

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners in Belgium, offering exclusive clubs and lifestyle experiences such as the BMW Excellence Club and BMW M League. The website is professionally designed with clear navigation and content relevant to its target audience. Technically, it uses modern web standards, including HTTPS and cookie consent mechanisms, ensuring a good user experience and privacy compliance. Security posture is adequate but could be improved by adding HTTP security headers and publishing security policies. WHOIS data is restricted due to DNS Belgium policies, but the domain's subdomain relationship to bmw.be supports legitimacy. Overall, the site is trustworthy and well-positioned within the BMW brand ecosystem.

B

Buzzatti

buzzattitrasporti.com

50

Buzzatti is a medium-sized Italian logistics company specializing in dry bulk logistics for food, animal feed, and technical products. The company positions itself as an international leader with over 50 years of experience, offering a range of services including road transport, intermodal transport, bonded warehousing, and rebulking. Their business model focuses on providing high-quality, efficient logistics solutions with a strong emphasis on environmental sustainability, as evidenced by their 80% reduction in CO2 emissions and a large fleet of owned vehicles. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Slick Slider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism, indicating basic GDPR compliance. However, there is a lack of advanced security headers and no visible security or incident response policies, which could be improved to enhance trust and resilience. Overall, the website is professional and trustworthy, with clear business information and contact details. The absence of critical security issues and the presence of privacy policies support a positive risk assessment. Strategic improvements in security headers, incident response transparency, and performance optimization are recommended to further strengthen the company's digital posture.

S

Specialized Bicycle Components

rovalcomponents.com

71

Specialized Bicycle Components operates a comprehensive e-commerce platform focused on bicycles, bike wheels, components, and cycling gear. The company targets a broad audience ranging from professional cyclists to casual riders and commuters. Their market position is strong, supported by a professional website that showcases a wide product range and emphasizes quality and innovation. The website is well-designed, mobile-optimized, and provides clear navigation and rich content, enhancing user experience. Technically, the website leverages modern web technologies including React and Next.js, and integrates third-party marketing and analytics tools such as Klaviyo, Monetate, Affirm, and Klarna. The site employs HTTPS with strong security headers, indicating a good security posture. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, though explicit contact details and security policies are limited. Overall, the website demonstrates a mature digital infrastructure and a solid security foundation, with room for improvement in transparency of domain registration and explicit security incident response information. The risk profile is low given the professional nature of the business and the absence of vulnerabilities or suspicious content.

B

Buzzatti

buzzatti.it

52

Buzzatti is a well-established Italian logistics company specializing in dry bulk logistics, particularly for food, feed, and technical products. The company positions itself as an international leader with a strong focus on quality and sustainability, boasting 50 years of experience and a large fleet of vehicles. Their services include road transport, intermodal transport, warehousing, bonded warehouses, and rebulking. The website is built on a modern WordPress platform using Elementor, providing a professional and user-friendly experience with good mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and formal security policies. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the company.

BMW Belgium operates a comprehensive and professionally designed website serving as the official regional portal for BMW automotive products and services. The site targets Belgian consumers interested in new and used BMW vehicles, electric mobility, financial services, and after-sales support. The digital infrastructure leverages Adobe Experience Manager CMS, advanced analytics, and performance optimization tools, reflecting a mature and modern technical environment. Security posture is strong with HTTPS enforcement and standard security headers, though explicit public security policies and incident response contacts are not prominently disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting BMW's premium brand image in the Belgian market.

M

metronom

ich-will-zu-metronom.de

52

Metronom is a prominent private railway company in Germany, offering career opportunities primarily in train operation and passenger services. The website serves as a recruitment portal, providing detailed job listings, employee testimonials, and benefits information. The company positions itself as a stable employer with a focus on teamwork and diversity. Technically, the site leverages modern web technologies including React and integrates with the Talention recruitment platform, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site reflects a professional and trustworthy business presence with a good balance of user experience and security.

M

metronom Eisenbahngesellschaft mbH

der-enno.com

54

The website www.der-enno.com represents a regional train service operated by metronom Eisenbahngesellschaft mbH, focusing on providing comfortable, modern, and environmentally friendly transportation in parts of Lower Saxony, Germany. The platform offers real-time timetable information, ticketing options, and customer service features, targeting commuters and regional travelers. The site is well-structured with a progressive web app implementation, ensuring good mobile responsiveness and accessibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data raises some concerns about domain transparency, but the overall content and branding indicate a legitimate business. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and improving domain registration transparency.

N

NETINERA Deutschland GmbH

netinera-karriere.de

52

NETINERA Deutschland GmbH operates a professional career portal focused on railway and transportation jobs in Germany. The website serves as a recruitment platform for a large group of regional transport companies under the NETINERA Holding umbrella. It targets a broad audience including students, graduates, career changers, and experienced professionals, offering job listings and application facilitation. The company is positioned as a regional leader in the German transportation sector with a strong brand presence and multiple subsidiaries. Technically, the website is built on Craft CMS, hosted behind Cloudflare, and employs modern web technologies including SVG graphics and JavaScript. The site is mobile optimized, accessible, and SEO friendly with proper meta tags and Open Graph data. Security posture is strong with HTTPS, security headers, and CSRF protection on forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not directly visible on the main pages, and no terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and secure, supporting the business goals effectively.

Z

Zweckverband Personennahverkehr Saarland (ZPS)

zps-online.de

10

Zweckverband Personennahverkehr Saarland (ZPS) operates as a regional public transportation authority in Saarland, Germany, focusing on coordinating and planning local passenger transport services including rail and bus networks. The website serves residents and commuters in the region, providing information on transport tasks, schedules, and news. The organization positions itself as a key regional player in public transport management with a medium-sized operational scale. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. It employs Matomo analytics for privacy-conscious user tracking and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, explicit security headers are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or suspicious content are evident, and the site maintains a good security posture overall. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector transportation role effectively. Strategic improvements in security headers and incident response transparency could further enhance its security maturity and stakeholder trust.

R

Rolph

rolph.de

55

Rolph.de is a regional public transport information portal dedicated to mobility in Rheinland-Pfalz, Germany. It provides news, updates, and resources related to local public transportation, including bus networks and the Deutschlandticket. The website targets residents and travelers in the region seeking reliable and up-to-date transit information. The platform appears to be affiliated with regional transport authorities or government entities, supported by references to official ministries and verified Facebook domain ownership. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for UI components. It integrates common marketing and analytics tools including Google Tag Manager, Google Analytics, Facebook Pixel, and advertising networks like DoubleClick and The Trade Desk. The site implements a GDPR-compliant cookie consent mechanism and is mobile-optimized with good accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent opt-in mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration data is consistent and appropriate for a public service website, enhancing trustworthiness. Overall, Rolph.de presents a professional, secure, and privacy-conscious platform serving the transportation sector in Rheinland-Pfalz. Strategic improvements could include adding explicit security headers, publishing terms of service and security policies, and providing direct contact information to enhance transparency and user trust.

V

Verkehrsverbund Rhein-Mosel

vrminfo.de

55

The Verkehrsverbund Rhein-Mosel (VRM) operates as a regional public transportation network in Germany, coordinating 47 transport companies across a large geographic area serving approximately 1.3 million residents. The website provides comprehensive information about public transport lines, ticketing, and network services, targeting regional commuters and travelers. The site is built on the TYPO3 CMS platform, indicating a mature and professional technical infrastructure. Integration with Cookiebot and Google Analytics demonstrates a commitment to privacy compliance and user analytics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the website is accessible, well-structured, and trustworthy for its intended audience.

V

Verkehrsverbund Rhein-Neckar GmbH

vrn.de

49

Verkehrsverbund Rhein-Neckar GmbH operates as a regional public transportation authority in the Rhein-Neckar area of Germany, providing comprehensive services including bus, train, and tram schedules, ticketing, and mobility solutions such as carsharing and e-scooters. The website serves as a central portal for journey planning, traffic updates, and customer service, targeting commuters and general public users in the region. The business model is focused on facilitating public transport and mobility services within a defined geographic area, positioning VRN as a key regional transport provider. Technically, the website is built on the Imperia CMS platform and leverages modern web technologies including jQuery, Leaflet for maps, and Foundation for responsive design. It integrates Matomo analytics with user consent, demonstrating a mature approach to data privacy. Accessibility features such as skip links and visual assistance tools are implemented, enhancing usability for diverse users. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transport entity. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy communication. The overall risk is low given the nature of the business and the absence of suspicious indicators. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, enhancing HTTP security headers, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

R

Regentalbahn GmbH

zugsammen.de

51

Die Länderbahn GmbH, betrieben unter Regentalbahn GmbH, ist ein führendes privates Eisenbahnverkehrsunternehmen im regionalen Personennahverkehr in Deutschland und Tschechien. Die Website präsentiert umfassende Karriere- und Ausbildungsangebote, unterstützt durch moderne Technologien wie Talention für Recruiting und Matomo sowie Google Tag Manager für Analytics. Die technische Infrastruktur ist modern, mobiloptimiert und nutzt Cloudflare als Hosting- und DNS-Anbieter. Die Sicherheitslage ist solide mit HTTPS und Cookie-Consent-Mechanismen, jedoch fehlen explizite Sicherheitsrichtlinien und Incident-Response-Kontakte. Die Website ist vertrauenswürdig, professionell gestaltet und bietet klare Kontaktinformationen, was die Glaubwürdigkeit stärkt.

E

erixx GmbH

erixx.de

56

erixx GmbH is a regional passenger rail service provider operating in Niedersachsen and northern Germany, focusing on routes through Harz, Heide, and Wendland. The company is positioned as a trusted regional transportation operator with a clear business model centered on passenger rail services. The website provides comprehensive travel information, live schedules, ticketing options, and customer support, targeting regional train passengers. The parent company is Netinera, a known transportation group, which adds to erixx's market credibility. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates a Progressive Web App manifest for enhanced user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with embedded third-party widgets for timetable and route planning. From a security perspective, the website enforces HTTPS and follows several best practices, though explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible in the HTML. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact limits transparency in security governance. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing explicit incident response contacts to improve security posture and trust.

M

metronom Eisenbahngesellschaft mbH

der-enno.de

52

The website www.der-enno.de represents a regional rail transport service operated by metronom Eisenbahngesellschaft mbH, serving the Hannover region and surrounding areas in Lower Saxony, Germany. It provides comprehensive travel planning tools, live timetable data, customer support, and career opportunities, positioning itself as a key regional transportation provider. The site is well-branded, professionally designed, and targets commuters and regional travelers with localized German content and an English alternative. Technically, the site employs modern web technologies including a Progressive Web App (PWA) framework, service workers, and integrates third-party public transport widgets from fahrplaner.vbn.de. Hosting and DNS are managed via Cloudflare, ensuring robust performance and security. The site is mobile-optimized with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, and does not publish a vulnerability disclosure policy. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with strong business credibility and technical implementation. The security posture is good but could be enhanced with additional transparency and security headers. The risk level is low, with no detected vulnerabilities or suspicious content.

N

NBtech

nbtech.fr

46

NBtech is a French industrial engineering and technical consulting company founded in 2014, specializing in automotive, aeronautics, railway, and industrial maintenance sectors. The company provides pragmatic and comprehensive solutions including mechanical and electronic testing, incident analysis, and industrial methods consulting. Their client portfolio includes major industry players such as Bosch, Thales, Airbus, Renault, Stellantis, and SNCF, indicating a strong market position. The website is professionally designed, well-structured, and includes detailed information about services, partners, and company values. Technically, the site is built on WordPress with Elementor, uses modern libraries and frameworks, and is hosted by PLANETHOSTER. It implements GDPR-compliant cookie consent and privacy policies, and integrates Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with good privacy compliance and trustworthy business information.

T

Touren Service France S.A.S

grand-est-for-groups.com

55

The website grand-est-for-groups.com operates as an online platform dedicated to planning and booking group travel in France, targeting primarily bus operators and travel agencies. The business, identified as Touren Service France S.A.S, was founded in 2020 and offers services including hotel bookings, activities, and group packages. The platform positions itself as a niche regional service provider in the transportation and hospitality sectors. Technically, the site leverages modern JavaScript frameworks such as Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site appears to be mobile-optimized with a good user experience and professional design. However, there is a lack of visible privacy and cookie policies, and no explicit contact information was found in the analyzed content, which impacts trust and compliance. Security posture is moderate with no detected security headers and DNSSEC not enabled, suggesting room for improvement in technical security controls. Overall, the site is safe with no adult or questionable content detected, but it would benefit from enhanced privacy compliance and security practices.

W

W.A.G. payment solutions, a.s.

inelo.pl

65

Eurowag, incorporating Inelo, is a leading European provider of integrated mobility and payment solutions tailored for the road transport sector. Their offerings include advanced telematics, seamless payment services such as fuel cards and mobile payments, and comprehensive compliance and driver management solutions. The company targets transport companies and fleet managers, aiming to optimize fleet efficiency and regulatory adherence across multiple European markets. The website reflects a mature digital presence with multilingual support and extensive service descriptions. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and LiveChat for analytics and customer engagement. The site is well-optimized for mobile devices, features accessibility considerations, and employs security best practices including HTTPS and CAPTCHA on forms. The technical infrastructure suggests a robust and scalable platform suitable for enterprise operations. From a security perspective, the site demonstrates a strong posture with encrypted communications, secure form handling, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be more clearly implemented, and incident response contact details are not publicly provided. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence and user consent mechanisms. Overall, the website and business exhibit high professionalism, trustworthiness, and operational maturity. The lack of public WHOIS data is consistent with privacy protection practices common among large enterprises. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and providing clearer incident response contacts to further strengthen trust and security readiness.

F

fireTMS.com Sp. z o.o.

firexgo.com

70

fireXgo is a freight exchange platform integrated into the fireTMS transport management system, designed to serve transport and forwarding companies by providing a unified tool for posting freights, finding transport orders, and managing transport operations comprehensively. The platform leverages the established fireTMS user base and infrastructure, offering real-time load monitoring and GPS telematics integration to enhance operational transparency and efficiency. The business targets freight forwarders and carriers, positioning itself as a secure and reliable marketplace with verified users and a large volume of daily orders. Technically, the website is built on a modern React and Next.js stack, hosted by OVH sas, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized and provides a professional user experience with clear navigation and comprehensive content. However, some GDPR compliance aspects, such as cookie consent mechanisms, are missing. From a security perspective, fireXgo enforces HTTPS, uses user verification to reduce fraud risk, and integrates GPS telematics for real-time tracking. The absence of DNSSEC and explicit security headers suggests room for improvement in hardening the platform. No critical vulnerabilities or exposed sensitive data were detected. Overall, fireXgo presents a credible and professional service with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security policies would further enhance trust and regulatory adherence.

S

syndicom

syndicom.ch

52

syndicom is a prominent Swiss trade union representing employees in logistics, information and communication technology, and media sectors. The organization advocates for fair working conditions, social justice, and responsible technological progress. It offers services such as collective bargaining, legal advice, education, and campaigns to its members. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting employees and stakeholders in Switzerland. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration aligns with the organization's identity, supporting legitimacy and trustworthiness.

M

Migros Verteilbetrieb AG

mvb.ch

51

Migros Verteilbetrieb AG is a leading logistics company within the Migros Group, specializing in storage, packaging, picking, and distribution of a wide range of products including food, textiles, and frozen goods. It operates multiple large distribution centers in Switzerland, serving hundreds of Migros stores and migrolino shops daily. The company is well-established with over 50 years of operational history, positioning itself as a key logistics partner in the Swiss retail sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and OwlCarousel, and is built on the Umbraco CMS platform. The site is mobile-optimized, uses HTTPS, and includes cookie consent mechanisms compliant with GDPR. While the site lacks explicit security headers and detailed security policies, it demonstrates a solid baseline security posture with no evident vulnerabilities or exposed sensitive data. From a security perspective, the website benefits from HTTPS encryption and cookie consent but could improve by implementing additional HTTP security headers and publishing incident response or security policies. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security and incident response information to further strengthen trust and compliance.

AutoScout24.ch is a leading online automotive marketplace in Switzerland, offering vehicle listings for buyers and sellers. The platform is part of Scout24 AG, a reputable company in the digital classifieds sector. The website employs modern web technologies such as React and Next.js and is protected by Cloudflare's security services, including Turnstile captcha, indicating a strong focus on security and bot mitigation. However, the current content is inaccessible due to the Cloudflare WAF challenge, limiting the ability to fully assess the website's content, privacy policies, and user experience. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website appears to be a professional and established platform in the transportation sector, but the security challenge page restricts comprehensive analysis.

Auto Schmid AG operates as an authorized Mercedes-Benz dealership in Switzerland, providing a comprehensive range of automotive services including new and used vehicle sales, leasing, financing, and after-sales services. The company benefits from strong brand association with Mercedes-Benz Schweiz AG, leveraging official product information and service offerings. The website targets car buyers and Mercedes-Benz customers in the Swiss market, offering a professional and user-friendly digital experience. Technically, the website is built on a modern stack including Vue.js and Web Components, hosted on Mercedes-Benz's OneWeb platform with Adobe Experience Manager as the CMS. It demonstrates good performance, mobile optimization, and accessibility. The site employs advanced analytics and marketing tools such as Google Analytics 360, Datadog RUM, and Salesforce marketing suites, with appropriate cookie consent mechanisms. From a security perspective, the site enforces HTTPS, uses strong security headers, and avoids exposing sensitive data. However, it lacks explicit security policy and incident response information, which could be improved. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR and Swiss data protection laws. Contact information is transparent and complete, including a named data protection officer. Overall, the website presents a trustworthy, professional, and secure online presence for Auto Schmid AG, supporting its business objectives effectively. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

B

Busbetrieb Aarau AG (BBA)

busaarau.ch

52

Busbetrieb Aarau AG (BBA) is a regional public transportation company operating bus services in Aarau, Switzerland. The company provides comprehensive transit services including bus lines, schedules, ticketing options, and customer support. Their website is designed to serve local commuters and visitors with real-time information and service updates. The business operates in the transportation sector with a medium-sized organizational footprint and a clear focus on regional mobility solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a secure CMS platform but lacks some advanced security headers and does not publish a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

D

DB InfraGO AG

dbinfrago.com

65

DB InfraGO AG is a subsidiary of Deutsche Bahn focused on the future of railway infrastructure in Germany. The company aims to set new standards in efficient and climate-friendly railway infrastructure management. The website reflects a professional and comprehensive digital presence with strong branding consistent with Deutsche Bahn. The technical infrastructure uses CoreMedia CMS, Matomo analytics, and Usercentrics for cookie consent, indicating a mature digital setup with GDPR compliance. Security posture is strong with HTTPS and modern best practices, though explicit security headers and incident response information are not clearly published. The absence of WHOIS registration data for the domain www.dbinfrago.com is a notable concern, potentially indicating privacy protection or an unregistered domain, which slightly reduces trust from a domain registration perspective. Overall, the website is well-structured, accessible, and trustworthy in content and design, serving business and stakeholder audiences in the German transportation sector.

D

DB Bus Challenge

db-bus-challenge.de

41

The website 'DB Bus Challenge' is an interactive online game designed to engage users by simulating bus transportation challenges, likely related to Deutsche Bahn's bus services in Germany. The site targets a general audience interested in public transportation and casual gaming. The business model appears promotional, aiming to increase engagement and brand awareness rather than direct sales. The website is relatively small in scale with basic content and moderate branding consistency. Technically, the site uses a JavaScript-based frontend with RequireJS and jQuery, implementing device detection and responsive design for mobile optimization. Performance is moderate with basic SEO and accessibility features. No CMS or backend technologies are evident from the HTML content. Hosting details are limited but DNS servers indicate a standard hosting environment. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance given the European audience. No contact or incident response information is provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the static content. Overall security posture is average but could be improved with standard best practices. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, improving security headers, providing clear contact and incident response information, and enhancing SEO and accessibility. These improvements would increase user trust, compliance, and security maturity.

D

DB Fernverkehr AG

der-kleine-ice.de

54

Der kleine ICE is a child-focused online platform operated by DB Fernverkehr AG, a subsidiary of Deutsche Bahn AG, providing educational and entertaining content such as games, stories, comics, and audio plays centered around train characters. The website serves as a brand engagement tool targeting children and families, enhancing Deutsche Bahn's market presence in the transportation sector through family-friendly digital content. Technically, the site is built on WordPress with modern web technologies including jQuery and CSS3, hosted via EuroDNS nameservers. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent is missing. Overall, the site is professional, trustworthy, and safe for its target audience.

C

cyber-Wear Heidelberg GmbH

bahnshop.de

53

bahnshop.de is the official merchandise e-commerce platform for Deutsche Bahn, operated by cyber-Wear Heidelberg GmbH. The website offers a wide range of branded products including collectibles, travel accessories, family and kids items, and other merchandise targeted at Bahn fans, travelers, and families. It holds a strong market position as the official shop for Deutsche Bahn merchandise, leveraging the brand's reputation and customer base. The business model focuses on online retail with customer account management and a comprehensive product catalog. The site is well-branded, consistent, and professionally maintained with a medium-sized operational scale and a founding date around 2014. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as JavaScript, CSS3, and HTML5. It integrates Google Tag Manager and Google Analytics for marketing and analytics purposes, and PayPal Unified for payment processing. Hosting is managed via EuroDNS nameservers, indicating a stable and professional hosting environment. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance. From a security perspective, the site enforces HTTPS, uses CSRF tokens on forms, and implements cookie consent mechanisms compliant with GDPR. Security headers are present but could be enhanced with additional policies like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the site lacks a published security.txt or explicit incident response contact information, which could improve transparency and security posture. Overall, bahnshop.de presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contacts to further strengthen trust and security readiness.

H

HŽ Infrastruktura d.o.o.

hzinfra.hr

55

HŽ Infrastruktura d.o.o. is a Croatian state-owned enterprise responsible for organizing, regulating, maintaining, and constructing railway infrastructure, which is a public good. The website serves as an informational portal primarily targeting Croatian railway users and stakeholders. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and explicit security policies. Privacy compliance is limited, with no privacy or terms of service pages detected, though a cookie consent mechanism is present. Overall, the domain registration data aligns well with the business entity, supporting legitimacy. Strategic improvements in privacy transparency, security headers, and contact information visibility are recommended to enhance trust and compliance.

PostNord International is a leading logistics and postal service provider focused on delivering borderless e-commerce solutions globally. The company offers customizable logistics services that enable clients to expand their markets worldwide, targeting e-commerce businesses and retailers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a global audience. The technical infrastructure leverages modern technologies including Episerver CMS, Azure hosting, and advanced analytics tools such as Google Analytics and Microsoft Application Insights, demonstrating a commitment to performance monitoring and user experience optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and business presence indicate a reputable and established enterprise with a focus on compliance and user privacy.

Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.

H

Vozni red vlakova | Udaljenosti.com

hznet.hr

44

Udaljenosti.com is a Croatian travel information website specializing in train schedules and travel planning for Croatian Railways. It targets travelers and commuters in Croatia, providing distance calculations and schedule lookups. The site operates primarily on an advertising revenue model and has been active since at least 2012. Technically, it uses a mix of legacy and modern web technologies including Google Fonts, Leaflet maps, Google Maps API, and Google Analytics. The site implements a cookie consent mechanism and integrates multiple advertising and tracking services. Security posture is moderate but could be improved by updating outdated libraries and adding security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy despite the active and functional website. Overall, the site is functional and provides relevant content but should address security and legitimacy concerns for improved trust.

H

Hrvatski Telekom d.d.

akz.hr

52

The website www.akz.hr serves as the official online platform for the Zagreb Bus Station, providing extensive bus ticketing services across Croatia and neighboring countries. It offers users the ability to search for bus schedules, purchase tickets online up to 15 minutes before departure, and access real-time status updates for arrivals and departures. The platform supports mobile app integration, enhancing accessibility for travelers. The business is positioned as a key transportation service provider in the region, backed by Hrvatski Telekom d.d., a reputable Croatian telecommunications company. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for marketing and analytics purposes. Hosting is managed by Hrvatski Telekom with Cloudflare DNS services, ensuring reliable domain resolution. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content Security Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is limited due to the absence of a visible privacy policy and terms of service, representing a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in privacy policy publication, security header implementation, and comprehensive compliance documentation would elevate its security posture and user trust.

J

Jadrolinija

jadrolinija.hr

11

Jadrolinija is Croatia's largest passenger shipping company, providing ferry and catamaran transport services connecting numerous local and international destinations. The company operates a comprehensive online platform offering schedule information, ticket purchasing, and prepaid travel card services, targeting both local residents and tourists. The website reflects a mature digital presence with consistent branding and a focus on user convenience. Technically, the website employs modern web technologies including jQuery, Plyr video player, and Swiper sliders, alongside Google Fonts and accessibility tools. It is hosted under a Croatian academic network registrar, indicating a stable and regionally appropriate hosting environment. The site is mobile-optimized and accessible, with good SEO practices and performance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit published security policies, incident response plans, and vulnerability disclosure information. The use of third-party tracking pixels from Google, Meta, and TikTok indicates moderate user tracking, balanced by privacy controls. Overall, Jadrolinija's website is professional, trustworthy, and well-aligned with its business objectives. Strategic improvements in security transparency and incident readiness would enhance its security posture and user trust further.

T

Tschudi Logistics Holding AS

tschudilogistics.com

68

Tschudi Logistics Holding AS is a well-established Norwegian logistics company with over 140 years of experience, specializing in multimodal transport solutions including project logistics, ocean, road, rail, air, and short sea shipping. The company emphasizes Nordic quality combined with global reach, serving businesses requiring tailored logistics services. Their website reflects a professional and consistent brand image with clear service offerings and a portfolio showcasing past projects. Technically, the site is built on Webflow with modern analytics and marketing tools, optimized for performance and mobile use. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and incident response contacts are lacking. Privacy compliance is basic with policies present but no active cookie consent mechanism. The absence of WHOIS registration data is a notable concern, potentially impacting trustworthiness. Overall, the website is professional and credible but would benefit from improved transparency and enhanced security disclosures.

H

Hrvatski autoklub

revijahak.hr

61

Revija HAK is an online magazine operated by Hrvatski autoklub, focusing on automotive news, traffic safety, and vehicle maintenance primarily for the Croatian market. The website serves as a content hub for drivers and HAK members, offering news articles, educational tests, and links to official HAK services including membership and webshop. The site is well-branded and professionally designed, targeting Croatian drivers and automotive enthusiasts with relevant and timely content. Technically, the website is built on WordPress with common plugins such as Yoast SEO for search optimization, Advanced Ads for advertising management, and Eightshift GDPR for cookie consent compliance. It uses Cloudflare DNS and is hosted via the Croatian registrar cyber_Folks d.o.o. The site is mobile-optimized and features a clear navigation structure with categorized content sections. Performance is moderate with standard modern web technologies. From a security perspective, the site enforces HTTPS and implements GDPR cookie consent with a detailed modal allowing users to select cookie preferences. However, explicit security headers are not detected, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business entity and geographic location, supporting legitimacy. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Recommendations include publishing privacy and security policies, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

K

Kiwi.com

skypicker.com

70

Kiwi.com is a prominent online travel agency specializing in providing cheap flights, hotels, and car rental services globally. The platform offers a user-friendly interface with advanced search capabilities including flexible dates and map-based destination exploration. It is trusted by millions and provides additional services such as disruption protection and 24/7 customer support. The website demonstrates a mature digital presence with consistent branding and comprehensive content tailored for travelers seeking affordable travel options. Technically, Kiwi.com employs modern web technologies including React and Tailwind CSS, supported by Google Tag Manager and Forter for analytics and fraud prevention respectively. The site is optimized for performance and mobile responsiveness, ensuring a seamless user experience across devices. Security best practices are observed with HTTPS enforcement and presence of key security headers, although explicit incident response and vulnerability disclosure information are not publicly available. From a security and compliance perspective, Kiwi.com maintains a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, the WHOIS data for the domain is not publicly available, which slightly impacts trust but is common for commercial entities using privacy protection services. Overall, the site presents a strong security posture with room for improvement in transparency around incident response and vulnerability management. The overall risk assessment is moderate to low, with recommendations focusing on enhancing security transparency and providing clear contact channels for security incidents. Kiwi.com’s strategic position as a leading travel booking platform is supported by its technical infrastructure and user-centric design, making it a reliable choice for consumers worldwide.

W

Wheels of Arabia

wheelsofarabia.ae

53

Wheels of Arabia is an automotive service provider operating in the United Arab Emirates, likely offering vehicle sales, rentals, and related automotive solutions. The website is built on the Wix platform, leveraging standard Wix technologies and Google analytics and marketing tools. The technical infrastructure is moderate with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS and some JavaScript hardening, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is moderate but would benefit from clearer contact information and trust signals. Overall, the website is functional and safe but requires improvements in privacy compliance and security transparency.

S

Soudal Quick-Step Pro Cycling Team

soudal-quickstepteam.com

51

Soudal Quick-Step Pro Cycling Team operates as a professional cycling team with a strong digital presence showcasing team members, news, multimedia content, and merchandise sales. The website targets cycling enthusiasts and fans, providing comprehensive media and partner information. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a responsive and engaging user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. The WHOIS data anomaly presents a minor legitimacy concern but is mitigated by the professional site and active social media presence. Overall, the site is well-positioned in its niche with room for security and transparency improvements.

N

Nomads.com

airlinelist.com

56

Airline List is an informational platform launched in 2013 that provides comprehensive rankings and data on airlines, airplanes, and airports worldwide, focusing on service quality, safety, and lost luggage statistics. The site targets travelers and aviation enthusiasts seeking detailed and comparative airline information. It integrates affiliate marketing through Travelpayouts and uses flight data APIs from Skypicker to offer flight search capabilities with advanced filtering options. The platform is hosted with Cloudflare and employs HTTPS for secure connections. Technically, it uses jQuery and lightweight analytics services, with a custom-built front-end optimized for mobile devices. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide direct contact or incident response information, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the website is professional, content-rich, and safe for general audiences but could enhance compliance and security transparency.

B

BOX NOW

boxnow.hr

54

BOX NOW is a Croatian company specializing in automated parcel locker services, providing a sustainable and convenient delivery network across Croatia. Their platform supports consumers, e-commerce businesses, physical stores, and courier partners with 24/7 access to parcel lockers powered by solar energy. The website reflects a modern digital infrastructure with integration of mapping, tracking, and mobile app promotion. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the business appears legitimate, well-positioned in the Croatian logistics market, and technically competent.

M

M&T ehf.

mogt.is

57

M&T ehf. is a specialized Icelandic company founded in 1999, focusing on the design, installation, and maintenance of automated weather stations and related meteorological equipment. Their primary clients include government agencies and infrastructure operators such as the Icelandic Road and Coastal Administration and Landsnet. The website reflects a niche B2B service provider with a small company size and a clear focus on weather-related technology solutions within Iceland. The site is built on Joomla! CMS with MooTools JavaScript framework and includes Google Analytics for visitor tracking. However, it lacks modern privacy and security policy disclosures, and no cookie consent mechanism is present. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization.