Transportation security reports

Ř

Ředitelství silnic a dálnic s. p.

mytocz.eu

57

The website myto.gov.cz is the official web portal for the Electronic Toll System in the Czech Republic, operated by Ředitelství silnic a dálnic s. p., a government entity. It provides comprehensive information and services related to toll payment, vehicle registration, toll rates, and customer support. The portal targets vehicle operators and transport companies using toll roads in the Czech Republic, serving as a centralized resource for toll-related matters. Technically, the site is built on Drupal 10, employs modern web technologies including Google Analytics for traffic analysis, and is mobile optimized with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and a published security policy would enhance protection. The absence of WHOIS data limits domain registration insights, but the use of a .gov.cz domain strongly supports legitimacy. Overall, the site is professional, trustworthy, and well-suited for its governmental function.

E

Eisenbahn- und Verkehrsgewerkschaft (EVG)

evg-online.org

64

The Eisenbahn- und Verkehrsgewerkschaft (EVG) is a well-established German labor union representing railway and transport workers. The organization focuses on advocating for employee rights, fair tariff agreements, and workplace co-determination. The website serves as a comprehensive portal for members and prospective members, offering news, member benefits, educational resources, and political information. The union has a strong presence in Germany with multiple regional offices and active social media channels. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs secure login forms with encryption attributes. However, it lacks explicit security headers and published security or incident response policies, which could be improved. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and branding strongly indicate a legitimate and trustworthy organization. Overall, the EVG website is a robust, professional platform supporting a major labor union in Germany. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance further.

O

OpenSeaMap

openseamap.org

43

OpenSeaMap is a community-driven open-source project providing free nautical charts and maritime data for various platforms including PC, Garmin, Lowrance, Android, iPad, and Windows. The project targets sailors, mariners, and boating enthusiasts, offering key services such as offline map downloads, ship tracking, weather forecasts, and harbor information. The website is built on TYPO3 CMS and uses OpenLayers and OpenStreetMap technologies for map rendering. Hosting is provided by Cloudpit, with domain registration dating back to 2009, indicating a mature and stable project. Security posture is moderate with no DNSSEC and lack of visible security headers or HTTPS enforcement details. Privacy and cookie policies are absent, and no contact emails or phone numbers are provided on the main page. Overall, the website is safe, content-rich, and moderately professional but would benefit from improved security and privacy compliance measures.

The website zelaznyszlakrowerowy.pl represents a regional government-backed project called "Żelazny szlak rowerowy" focused on promoting a cycling trail with interactive quiz elements. The project is co-financed by the European Regional Development Fund and targets adult cyclists and tourists interested in exploring the trail. The site provides user registration, login, and quiz participation features, along with a map visualization of the cycling route. The business model is public sector-driven, aiming to enhance regional tourism and community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap for styling, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with basic SEO and usability features. There is no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with room for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and secures password inputs. However, DNSSEC is not enabled and no explicit HTTP security headers were detected, which are areas for improvement. The privacy policy and GDPR compliance are well documented, including a named Data Protection Officer with contact details. No incident response or vulnerability disclosure policies are found. The site is free from suspicious or malicious content and does not employ WAF or blocking mechanisms. Overall, the website is trustworthy and professionally maintained with strong compliance to privacy regulations. Recommendations include enabling DNSSEC, adding security headers, and continuous monitoring of third-party scripts to enhance security posture and user trust.

Č

ČSAD SVT Praha, s.r.o.

svt.cz

54

ČSAD SVT Praha, s.r.o. is a Czech IT/IS company specializing in the development, implementation, and maintenance of information and sales systems for the passenger transport sector. As a member of the ČD-Telematika group, it holds a strong market position with flagship projects such as the multi-modal journey planner IDOS and the AMSBus pre-sale and reservation system. The company targets transport operators and partners, providing B2B software solutions that facilitate ticketing and journey planning across multiple transport modes. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and Google Analytics for tracking. The site is mobile-optimized with good navigation and professional design, although some accessibility features could be improved. The presence of cookie consent indicates awareness of privacy regulations, but the absence of explicit privacy and terms of service pages suggests room for compliance enhancement. From a security perspective, the site lacks visible security headers and published security policies, which lowers its security posture score. No critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS data for the domain raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content but would benefit from improved security and privacy disclosures. Strategically, the company should prioritize publishing comprehensive privacy and security policies, implementing security headers, and resolving WHOIS data visibility issues to enhance trust and compliance. These steps will strengthen its security posture and align with GDPR and industry best practices.

Č

Česká asociace organizátorů veřejné dopravy

caovd.cz

45

ČAOVD.cz is the official website of the Czech Association of Public Transport Organizers, established in 2005. The site serves as an informational platform for stakeholders in the Czech public transportation sector. The website is built on WordPress using common web technologies such as Bootstrap and Google Fonts, indicating a standard technical infrastructure with moderate performance and mobile optimization. However, the site lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and incident response contacts, which are essential for compliance and trust. Security posture is minimal with no detected security headers or vulnerability disclosures. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.

O

ODIS

odisapka.cz

43

ODISapka is a mobile application designed to facilitate online ticket purchases and integrated public transportation usage within the Moravian-Silesian region of the Czech Republic. It offers users convenient features such as cashless payment, mobile long-term passes (ODISka), real-time departure information, and route planning. The website is well-structured, professionally designed, and provides comprehensive user support including FAQs, contact forms, and detailed guides. The app is available on both Google Play and Apple App Store, indicating a mature digital presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPBakery Page Builder, and various plugins for translation and UI enhancements. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. HTTPS is enforced, and cookie consent mechanisms are implemented, supporting privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and secure form handling. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security policy or incident response information is available. The absence of WHOIS data is a notable concern, reducing trust in domain registration transparency, though the presence of official partner logos and links mitigates this somewhat. Overall, the website presents a trustworthy and functional platform for its intended audience, with recommendations to enhance security headers, verify domain registration details, and improve accessibility to further strengthen its posture.

The website mpvnet.cz serves as a public transport monitoring platform providing departure boards and real-time vehicle locations for several integrated transport systems across Czech regions. It is operated by CHAPS, spol. s r.o., a small company specializing in transport monitoring solutions. The site targets public transport users seeking timely information on bus and train schedules and vehicle positions. Technically, the site uses basic web technologies including jQuery and FontAwesome, with no advanced frameworks or CMS detected. The design and content quality are basic but functional, with moderate mobile optimization and accessibility. Security posture is minimal, lacking HTTPS verification details, security headers, and privacy policies, which presents compliance and risk concerns. No contact information or incident response details are provided, limiting user trust and support avenues. Overall, the domain is long-established and legitimate, but the site would benefit from enhanced security, privacy compliance, and richer business information to improve trust and user experience.

AMSBus.cz is an established Czech online platform specializing in the sale and reservation of bus tickets. Operated by ČSAD SVT Praha, s.r.o., the website targets general public users seeking convenient e-ticketing solutions for bus travel within the Czech Republic and surrounding regions. The business model focuses on providing a user-friendly interface for searching, purchasing, and managing bus tickets, supported by partnerships with transportation offices and portals. The domain age since 2001 supports a mature market presence. Technically, the website is built on a custom ASP.NET platform utilizing legacy JavaScript libraries such as jQuery 1.4.1, with integrations for Google Analytics and Gemius Audience for user tracking and marketing. The site shows moderate performance and basic mobile optimization, with room for modernization and improved accessibility. External links to trusted partners and payment providers enhance the ecosystem. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, the use of outdated JavaScript libraries introduces potential vulnerabilities. The absence of explicit security headers and cookie consent mechanisms indicates partial compliance with modern security and privacy standards. No incident response or security policy information is published, limiting transparency. Overall, AMSBus.cz presents a functional and moderately secure platform with a solid business foundation. Strategic improvements in updating technology, enhancing privacy compliance, and publishing security policies would strengthen trust and reduce risk exposure.

L

Letiště Ostrava, a.s.

airport-ostrava.cz

52

Letiště Ostrava, a.s. operates as a regional airport in the Czech Republic, providing air transport connectivity and related services. The website offers comprehensive flight information, ticket reservations, VIP and business lounge services, and passenger amenities. The company is positioned as a key transportation hub for the Ostrava region with a medium-sized operational scale and a founding date consistent with its domain registration in 1999. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and reCAPTCHA, ensuring a functional and user-friendly experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and form protections, though improvements in security headers and explicit policies are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

F

FIRESTA-Fišer, rekonstrukce, stavby a.s.

firesta.cz

44

FIRESTA-Fišer is a well-established construction and engineering company based in Brno, Czech Republic, with over 30 years of operational history. The company specializes in infrastructure projects including bridges, railways, roads, water management, steel structures, and industrial buildings. It employs over 600 qualified workers and has received multiple industry awards, indicating a strong market position in the regional construction sector. The website reflects a professional business with clear service offerings and contact information, targeting business and public sector clients. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses responsive design, though some SEO and accessibility features could be enhanced. The absence of CMS identification and hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a security.txt file for vulnerability disclosure. Privacy compliance is basic, with no dedicated privacy or terms of service pages, though a cookie consent mechanism is present. The WHOIS data is unavailable, which reduces trustworthiness but may be due to privacy protection. Overall, the website presents a credible and professional business presence with moderate technical maturity and security posture. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

GHH-BONATRANS is a leading global manufacturer specializing in wheelsets, wheels, axles, and related components for rolling stock including high-speed trains, metros, trams, locomotives, and freight wagons. The company serves over 80 countries worldwide and is recognized for its technological innovation, comprehensive product portfolio, and commitment to quality and customer service. The website reflects a mature business with a professional online presence, showcasing news, certifications, and career opportunities. Technically, the website employs a modern but somewhat dated technology stack including jQuery, Bootstrap, and Font Awesome, with integrations for Google Analytics, reCAPTCHA, and social sharing tools. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, some improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. The presence of Google reCAPTCHA on forms adds protection against automated abuse. No critical vulnerabilities or exposed sensitive data were detected, but the absence of explicit security headers and incident response information suggests room for improvement in security posture. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

C

CARTEC GROUP, S. R. O.

cartecolomouc.cz

60

CarTec Group, operating under CARTEC GROUP, S. R. O., is an authorized automotive dealership and service provider specializing in BMW, MINI, and BMW Motorrad vehicles in the Czech Republic, specifically Olomouc. The company offers new and used vehicle sales, servicing, and original accessories, positioning itself as a regional authorized dealer with a consistent brand presence. The website reflects a professional and well-structured digital presence with good content quality and user experience, targeting automotive customers in the region. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS, but lacks some security headers and explicit privacy and terms of service pages, which are areas for improvement. The extensive use of third-party tracking and marketing scripts indicates a mature digital marketing strategy but requires careful privacy compliance management. From a security perspective, the site enforces HTTPS and has implemented a detailed cookie consent mechanism, which is positive. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No critical vulnerabilities or exposed sensitive data were detected, but the lack of security headers and formal privacy documentation suggests room for enhancing the security posture. Overall, the website is functional, professional, and trustworthy from a user perspective but requires verification of domain registration and improvements in security and privacy compliance to strengthen its risk profile and trustworthiness.

A

AUTOHITY CZ s.r.o.

autohity.cz

42

AUTOHITY CZ s.r.o. operates a professional and well-established used and nearly new car dealership in the Czech Republic, primarily serving the Ostrava region with a branch in Olomouc. The company offers a broad inventory of approximately 400 vehicles across multiple popular brands, complemented by financing options and vehicle servicing. Their market position is strong as one of the largest used car dealers in the country, supported by a clear business model focused on retail automotive sales and customer service. The website reflects this with good content quality, consistent branding, and clear navigation.

M

Martin Balcárek VÁHOSERVIS OLOMOUC

mostni-vahy.cz

45

The website www.mostni-vahy.cz represents a small Czech business specializing in the manufacture, installation, and servicing of heavy vehicle weighing systems such as bridge and road scales with capacities from 30 to 60 tons. The company, identified as Martin Balcárek VÁHOSERVIS OLOMOUC, targets businesses requiring certified and reliable weighing solutions. The site is professionally designed with clear navigation and mobile responsiveness, leveraging modern technologies including Bootstrap, jQuery, Google Maps API, and Google Analytics for tracking and analytics. Cookie consent is implemented, indicating some level of privacy compliance, though no formal privacy policy or terms of service are present. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. Overall, the website is functional and business-focused with moderate risk due to missing WHOIS and privacy documentation.

S

Starship Gazer

starshipgazer.com

55

Starship Gazer is a niche media content provider focused on professional photography and video coverage of SpaceX Starship activities at Starbase Texas. The business operates primarily through membership subscriptions on platforms like Patreon, YouTube, and X, offering exclusive access to high-quality media and updates. The website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and domain legitimacy. Security posture is adequate with HTTPS enforced but lacks advanced security headers and policies. Overall, the site serves a specialized audience of space enthusiasts and supporters with professional content but should improve compliance and security transparency.

M

Michelin

viamichelin.de

61

ViaMichelin is a well-established online travel and mobility platform operated under the Michelin brand, providing detailed maps, route planning, traffic information, and travel-related services such as hotel and restaurant searches. The website targets general travelers and drivers primarily in Germany and Europe, leveraging Michelin's strong market position and brand recognition. Technically, the site uses modern web frameworks like SvelteKit and MapLibre GL JS, combined with a comprehensive consent management system (Didomi) to ensure GDPR compliance. Advertising is integrated via reputable ad networks with user consent. Security posture is solid with HTTPS and consent management, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the site is professional, trustworthy, and provides a good user experience with extensive content and clear navigation.

H

Hot Rod Fun

hotrod-fun.com

47

Hot Rod Fun is a small service provider specializing in guided city tours, firm events, and voucher sales primarily in Germany with additional locations in cities like Bucharest and Leipzig. The company offers unique experiences using Hot Rod vehicles, targeting general audiences interested in fun and adventurous city tours. The website is built on WordPress using Elementor, featuring a professional design with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data slightly reduce the overall trustworthiness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Overall, the website presents a functional and professional front for its niche market but would benefit from enhanced compliance and transparency measures.

Boot for fun is a small local business based in Malchow, Germany, specializing in boat rentals and event floß services on the Mecklenburgische Seenplatte. The company offers license-free motorboats and a party/event floß suitable for various social occasions. The website is built on WordPress and uses common plugins and themes, providing a professional and user-friendly experience. Contact information including phone, email, and physical address is clearly presented, enhancing business credibility. Cookie consent mechanisms are implemented, indicating GDPR compliance awareness. However, no explicit security policies or incident response information are provided. The domain registration data aligns with the hosting providers and the business location, supporting legitimacy. Overall, the website is well-positioned for its niche market with good content quality and technical implementation.

B

Bremicker Verkehrstechnik GmbH

bremicker-vt.de

34

Bremicker Verkehrstechnik GmbH is a leading German manufacturer specializing in traffic technology products and solutions since 1932. The company offers a broad portfolio including traffic signs, variable message signs, speed warning systems, parking management, and comprehensive training programs. With multiple locations and over 220 employees, Bremicker serves municipalities, traffic authorities, and related sectors with innovative and high-quality products. The website reflects a mature digital presence built on WordPress with Divi theme, integrating privacy-respecting analytics and modern UI/UX design. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates strong business credibility, professional content, and good compliance with GDPR requirements.

Luftfahrttechnisches Museum Rechlin e.V. is a small non-profit museum located in Germany, dedicated to the history and technology of aviation and military developments in the Rechlin region. The museum operates in historic buildings formerly used by the Luftwaffe and later Soviet forces, offering exhibitions on German and Soviet aviation, shipbuilding, and military history. It is supported by two volunteer associations and funded through entrance fees, donations, and memberships. The museum also engages in digital innovation through an augmented reality project funded by the German federal government. Technically, the website is built on the Contao CMS platform with Bootstrap and jQuery, providing a modern, mobile-optimized user experience. The site includes a cookie consent mechanism and basic SEO metadata but lacks advanced security headers and analytics tracking. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent, but no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. No WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and suitable for its target audience of history and aviation enthusiasts. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure policy to improve trust and compliance.

T

Todos

todos.sk

60

Todos is a well-established authorized vehicle dealership and service provider operating multiple branches across Slovakia. The company specializes in the sale and servicing of popular automotive brands including Škoda, Toyota, SEAT, Cupra, and several premium American brands. Their business model focuses on comprehensive vehicle sales, authorized servicing, fleet management for companies, and an e-commerce platform for vehicle accessories. The website reflects a strong market position with clear branding and multiple service offerings tailored to Slovak customers seeking reliable automotive solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrated with Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses IP anonymization for analytics, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is addressed with a cookie consent mechanism and a basic cookie policy, though a dedicated privacy policy page is not explicitly found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website at flughafen-graz.at currently presents only minimal content, specifically a placeholder message indicating 'This is where Dendrite is installed.' There is no substantive business information, metadata, or user-facing content to analyze. The lack of privacy, cookie, or terms of service policies, as well as absence of contact information, social media links, or technical indicators, suggests the site is either under development or misconfigured. From a technical perspective, no technologies, frameworks, or CMS platforms are detectable from the provided HTML snippet. The site does not appear to implement any security headers or SSL configuration details, and no WHOIS data was provided to assess domain legitimacy or registration details. Security posture cannot be fully assessed due to lack of data, but the absence of HTTPS and security policies is a concern. No vulnerabilities or malicious content were detected, but the site’s minimal content and lack of compliance documentation indicate a low maturity level. Overall, the site is accessible but functionally empty, with critical gaps in content, security, and compliance. Strategic recommendations include deploying a full website with proper content, implementing HTTPS, adding privacy and cookie policies, and publishing contact and incident response information to improve trust and security posture.

S

Student Agency k.s.

kralovna.cz

61

Královna.cz is an online travel agency operated by Student Agency k.s., specializing in offering the cheapest airline tickets worldwide along with complementary travel services such as accommodation, car rental, travel insurance, and visa assistance. The website targets travelers seeking affordable and convenient travel booking options, positioning itself as a competitive player in the transportation sector within the Czech Republic. The platform provides a user-friendly interface with clear navigation and a professional design, supporting multiple airlines and travel options.

M

Müritz-Yacht Management e.K.

mueritz-yacht.de

50

Müritz-Yacht Management e.K. is a well-established medium-sized company based in Germany specializing in yacht charter, houseboat rentals, boat sales, individual yacht construction, and comprehensive yacht services. Founded in 1993, the company has grown to become a recognized and certified player in the Mecklenburg region, offering a broad range of maritime leisure services to tourists and boating enthusiasts. Their website reflects a professional and customer-focused approach, providing detailed information about their offerings and easy access to contact channels. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and slick carousel for a responsive and engaging user experience. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security measures include HTTPS enforcement and cookie consent mechanisms, but there is room for improvement in explicit security headers and published security policies. From a security perspective, the site maintains a good posture with no detected vulnerabilities or malicious content. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of a public security policy or incident response contact is noted. Overall, the domain registration and website content are consistent and trustworthy, supporting the company's legitimacy. Strategically, Müritz-Yacht Management should focus on enhancing their security transparency and incident readiness, while continuing to leverage their strong market position and customer trust. The website serves as a robust digital front for their business, effectively supporting their operational and marketing goals.

H

Herr Velo Brandt Schewe GbR

herr-velo.de

40

Herr Velo Brandt Schewe GbR operates a specialized bicycle retail and service shop located in Neubrandenburg, Germany. The business focuses on sales, repairs, and customization of bicycles, targeting local customers who value quality and style. The website reflects a small but professional local business with clear branding and consistent messaging. Technically, the site uses a modern Bootstrap framework with jQuery and Font Awesome, hosted on kasserver.com. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with no explicit security headers detected and no visible vulnerabilities, but SSL configuration details are not provided. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page, though no terms of service or incident response policies are found. Overall, the website is trustworthy and safe, with no adult or questionable content. The WHOIS data aligns with the website's business claims, indicating legitimacy.

V

VMOBIL

vmobil.at

63

VMOBIL is a regional mobility platform serving the Vorarlberg region in Austria, offering integrated public transportation services including bus, train, bicycle, carsharing, ferry, and walking options. The website is professionally designed using Drupal 9 CMS and incorporates modern web technologies such as lazy loading and a chat widget for user support. The platform targets residents and visitors seeking comprehensive mobility solutions in the region. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit privacy or security policies are found on the site. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the website is trustworthy and well-positioned in its niche, but could improve transparency and security practices.

R

Rīgas satiksme

rigassatiksme.lv

47

Rīgas satiksme is the primary public transportation provider in Riga, Latvia, offering comprehensive services including trams, trolleybuses, buses, and night transport. The website serves as an information hub for route schedules, ticketing, parking, and company news, targeting residents and visitors of Riga. The business operates under municipal partnership, positioning itself as a key player in the city's transportation infrastructure. Technically, the website employs a traditional tech stack with jQuery and related libraries, hosted partially on Cloudfront. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. The content is well-structured and professionally presented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy and GDPR-aligned consent, though a dedicated privacy policy page is basic. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, functional, and aligned with its public service mission. Strategic improvements in security headers, incident response transparency, and enhanced mobile optimization could further strengthen its posture.

A

ALPINA

alpina-configurator.com

61

The ALPINA Car Configurator website serves as a specialized tool for users to customize ALPINA vehicles, targeting car enthusiasts and potential buyers within the luxury automotive segment. The site leverages modern web technologies such as React and Meteor to deliver interactive configuration capabilities. However, the website lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Contact and security policy information are also absent, limiting transparency and user support avenues. Technically, the site shows moderate performance and basic mobile optimization but misses advanced SEO and accessibility features. Security posture is limited due to missing security headers and unclear SSL configuration. WHOIS data indicates privacy protection for the domain registration, which is common but reduces transparency. Overall, the site is functional but requires improvements in privacy compliance, security practices, and user support to enhance trust and regulatory adherence.

MINI Czech Republic operates as the official localized website for the MINI automotive brand, offering new and used vehicles, financing options, servicing, and accessories. The site is well-positioned within the automotive sector in the Czech market and benefits from its association with the BMW Group, enhancing its market credibility and reach. The website targets consumers interested in premium compact vehicles, including electric models, and provides comprehensive product information and digital services such as the MINI Connected app. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and Adobe's analytics and tag management tools. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good accessibility features. Security is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit incident response and security policy disclosures are absent. Overall, the website presents a professional and trustworthy digital presence with clear business information, privacy compliance, and user-friendly navigation. The lack of WHOIS data is a minor concern but is mitigated by the brand's strong trust signals and official status. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.

S

Svaz spedice a logistiky České republiky

svazspedice.cz

42

Svaz spedice a logistiky České republiky is a Czech national association representing freight forwarding and logistics companies. The website serves as an information hub providing industry news, event calendars, documents, and member services. The organization targets logistics professionals and companies within the Czech Republic, positioning itself as an important industry association. Technically, the site is built on WordPress using common plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces transparency but the website content and contact details suggest a legitimate and professional entity. Overall, the site is functional, informative, and trustworthy for its intended audience.

S

Stellantis Europe S.p.A.

fiat.com

71

Fiat's official website serves as a comprehensive digital platform showcasing the brand's automotive models, heritage, and latest news. It targets a global audience interested in Fiat's vehicles, emphasizing Italian design and innovation, including electric and hybrid models. The site is part of Stellantis Europe S.p.A., reflecting a large enterprise with a strong market position in the transportation sector. Technically, the website leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools, and provides a mobile-optimized, user-friendly experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. The absence of WHOIS data is notable but likely due to privacy or registry issues, not detracting from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

V

ViT Logistics

vit-log.cz

55

ViT Logistics is a Czech Republic based logistics company established in 2013, offering tailored logistics services including warehousing, road, sea, and air transportation, as well as customs services. The company targets businesses requiring reliable and efficient supply chain solutions both domestically and internationally. Their website is professionally designed using WordPress and Elementor, with multilingual support and modern SEO practices. The technical infrastructure includes Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the website reflects a mature digital presence with room for improvement in compliance documentation and security transparency.

M

Matri Europe s.r.o.

matrieurope.com

59

Matri Europe s.r.o. is a small Czech Republic-based logistics consulting company founded in 2021, specializing in turnkey solutions for marketing events and promotional tours across Europe. Their website presents a professional image with clear service offerings including logistics consulting, personnel for roadshows, and event container rentals. The company has established partnerships with notable clients such as Valtra Oy, indicating a credible market presence. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a moderate level of performance and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and policies could enhance protection. Privacy compliance is limited, lacking explicit privacy and terms of service pages, which should be addressed to meet regulatory standards. Overall, the website is trustworthy and professional but would benefit from improved transparency and security practices.

BigBoard Praha a.s. is a well-established leader in the Czech outdoor advertising market, operating since 1996. The company specializes in providing comprehensive advertising solutions in public spaces, including major roadways, Prague metro, and railways, as well as offering modern urban furniture to municipalities and public institutions. Their website reflects a professional and modern digital presence, leveraging technologies such as Laravel Livewire, Alpine.js, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site includes a robust cookie consent mechanism compliant with GDPR, demonstrating a commitment to privacy and regulatory adherence. Security posture is strong with HTTPS enforcement and CSRF protections, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, reinforcing the legitimacy and trustworthiness of the company.

P

Porsche Česká republika s.r.o.

volkswagenprestavby.cz

52

The website volkswagenprestavby.cz is a specialized portal operated by Porsche Česká republika s.r.o., focusing on modifications and conversions of Volkswagen commercial vehicles in the Czech Republic. It serves as an information hub for customers and end-users, providing detailed catalogs, news updates, technical information, and contact forms for inquiries. The site is well-branded with Volkswagen commercial vehicle identity and maintains a consistent professional presence with social media integration. Technically, the site uses AngularJS, Bootstrap, and jQuery, with analytics managed via Google Tag Manager and Tealium. While the site is functional and mobile-optimized, some security best practices such as security headers and updated frameworks could be improved. Privacy and cookie policies are present with consent mechanisms, but no explicit security or incident response policies are found. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

M

MyCard

my-card.cz

67

MyCard.cz operates as a loyalty and benefits program tailored for vehicle owners of Volkswagen Group brands in the Czech Republic. The platform offers brand-specific service advantages and customer engagement opportunities, positioning itself as a niche loyalty solution within the automotive sector. The website is professionally designed with consistent branding and clear navigation, targeting Czech-speaking customers. Technically, the site leverages modern web technologies including Google Fonts, Google Maps API, and integrates trusted third-party analytics and marketing tools. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though lacks explicit security policies and vulnerability disclosure information. Overall, the domain registration and hosting align well with the business profile, indicating legitimacy and trustworthiness.

T

Toyota Central Europe - Czech s.r.o.

toyota-autokpplus.cz

55

Toyota Central Europe - Czech s.r.o. operates a professional automotive dealership website serving the Czech Republic market. The site offers comprehensive information on new and used Toyota vehicles, financing and leasing options, after-sales services, and customer support. The business is well-positioned as an official Toyota dealer with strong brand consistency and a medium-sized market presence. Technically, the website leverages modern web technologies including OpenText DXP CMS, Scene7 media services, and Google Tag Manager for analytics. The site is mobile responsive and performs moderately well. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though explicit privacy and terms of service pages are missing. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy compliance and security disclosures.

F

Fiat Professional

fiatprofessional.com

65

Fiat Professional is a well-established commercial vehicle brand offering a range of vans, pick-ups, and trucks primarily targeting business and professional users. The website serves as an official platform providing detailed product information, technical specifications, dealer locator services, and brand news. The site is built on a modern technical stack including AngularJS, Adobe Experience Manager CMS, and integrates analytics and marketing tools such as Google Tag Manager and Adobe DTM. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable anomaly but the overall digital presence and branding strongly indicate legitimacy. Privacy and cookie policies are present and appear GDPR compliant, supporting user data protection requirements.

A

AUTO KP PLUS CT, s.r.o.

citroen-business-center.cz

46

AUTO KP PLUS CT, s.r.o. operates as a Citroën Business Center in the Czech Republic, specializing in the sale and leasing of commercial and electric vehicles. The company offers a broad portfolio of Citroën models, including new and used vehicles, operational leasing, and rental services. Their website provides detailed information about their offerings, news updates, and customer engagement through newsletters and social media. The business targets entrepreneurs, fleet operators, and individuals seeking commercial vehicles with a focus on electromobility solutions. Technically, the website is built on a custom PHP platform utilizing jQuery and bxSlider for UI components, with integration of Google Analytics and Piwik/Matomo for visitor tracking. The site is mobile responsive and includes cookie consent mechanisms aligned with GDPR requirements. However, the use of an outdated jQuery version and lack of visible security headers indicate areas for improvement in security posture. Security-wise, the site employs HTTPS for resource loading and has implemented cookie consent with categorized tracking controls. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and consistent branding support the site's credibility. Overall, the website demonstrates a solid business presence with good content quality and privacy compliance, though technical and security enhancements are recommended to strengthen trust and resilience. The domain's WHOIS data absence is a concern and should be investigated further to ensure full legitimacy and compliance.

AUTO KP PLUS HOLDING a.s. operates as an authorized Toyota hybrid vehicle dealer based in Liberec, Czech Republic. The company specializes in the sale, rental, and test driving of Toyota hybrid cars, targeting consumers interested in eco-friendly automotive options. Their website presents a professional and user-friendly interface with clear navigation and relevant content focused on hybrid vehicles. The business maintains a regional market position with a medium-sized operational scale and demonstrates consistent branding and trust signals such as customer testimonials and official company registration details. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.8.2, Slick Slider, Bootstrap, and Google Analytics tools. While the site is mobile-optimized and SEO-friendly, some technical debt is evident due to the use of outdated JavaScript libraries and lack of advanced security headers. Performance is moderate, and accessibility is basic but functional. From a security perspective, the website enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit security policies or incident response contacts are published, and some security best practices such as security headers are missing. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website scores well in content quality, privacy compliance, and security posture but is penalized for missing WHOIS data and outdated libraries. Strategic improvements in domain transparency, security headers, and library updates are recommended to enhance trust and security maturity.

D

Dongfeng Motor Česko

dfmotor.cz

54

Dongfeng Motor Česko operates as the Czech Republic representative for Dongfeng Motor, the second largest automobile manufacturer in China with a rich history exceeding 50 years. The website showcases a range of vehicles including personal cars, hybrids, electric vehicles, and commercial vehicles, targeting consumers and businesses interested in Dongfeng products. The business model focuses on vehicle sales and servicing, supported by downloadable catalogs and technical data. The company maintains a medium-sized presence in the transportation sector within the Czech market. Technically, the website is built on WordPress using the Avada theme and incorporates modern plugins such as Yoast SEO and Slider Revolution. Hosting is provided by Exohosting, with a moderate performance profile and good mobile optimization. The site employs a comprehensive cookie consent mechanism compliant with GDPR, and integrates Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate bot attacks. However, it lacks visible security headers and does not publish a privacy policy or terms of service, which are important for compliance and user trust. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture but with room for improvement in transparency and header security. Overall, the website presents a professional and trustworthy front for Dongfeng Motor in the Czech Republic, with good content quality and business credibility. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection inquiries.

A

AUTO KP PLUS TO s.r.o.

liberec-toyota.cz

63

AUTO KP PLUS TO s.r.o. operates as an authorized Toyota dealership in the Czech Republic, offering a comprehensive range of Toyota vehicles, accessories, and after-sales services. The company is positioned as a key local player under the umbrella of Toyota Central Europe - Czech s.r.o., targeting Czech customers seeking reliable automotive solutions. The website reflects a professional business model focused on automotive retail and service, with clear branding and consistent messaging aligned with Toyota's corporate identity. Technically, the website leverages Adobe Experience Manager as its CMS platform, integrating modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent management. The infrastructure appears robust with good mobile optimization and SEO practices, although some performance and accessibility enhancements could be considered. The site uses HTTPS and includes privacy compliance mechanisms, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent with reCAPTCHA for form protection. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data limits domain legitimacy verification, but the overall security posture is solid for a commercial automotive website. Overall, the website presents a trustworthy and professional front for AUTO KP PLUS TO s.r.o., with strong compliance and security foundations. Strategic recommendations include enhancing security header implementation, publishing explicit security policies and incident response contacts, and verifying domain registration details to strengthen trust and compliance further.

C

Citroën

citroen.cz

60

The website www.citroen.cz serves as the official online presence for Citroën in the Czech Republic, focusing on the sale of new and used vehicles along with after-sales services. It targets consumers in the Czech market interested in automotive products, providing tools such as vehicle configuration and dealer locators. The site is professionally designed with consistent branding aligned with the Citroën brand and Stellantis group ownership. Technically, the site leverages modern technologies including Adobe Experience Manager CMS, Google Analytics, Dynamic Yield for personalization, and Adobe Helix RUM for performance monitoring. Security measures such as HTTPS and standard security headers are implemented, ensuring a secure browsing experience. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce the overall trust and compliance posture. The site includes a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. Overall, the website is a credible and professional digital asset for Citroën in the Czech market.

F

Fiat

dealer-fai.cz

61

Fiat Česká republika operates as the official online presence for Fiat in the Czech Republic, offering new vehicles, promotional offers, and a comprehensive online configurator. The website targets consumers interested in Fiat's hybrid and electric vehicles, providing detailed model information and dealer locator tools. The site is well-branded and consistent with Fiat's global identity, supported by modern web technologies including Adobe Experience Manager and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance in mind. However, the absence of WHOIS registration data for the domain raises questions about domain legitimacy, though the website content and branding strongly suggest an official source. Security posture is good with HTTPS and cookie consent mechanisms, but could be improved with additional security headers. Overall, the site provides a professional and user-friendly experience for its target audience.

M

Magyar Suzuki Corporation Ltd. branch office Czech Republic, organizační složka

suzuki.cz

57

Magyar Suzuki Corporation Ltd. branch office Czech Republic operates as the official regional representation of Suzuki Motor Corporation, focusing on the sale and servicing of Suzuki automobiles and motorcycles within the Czech market. The website serves as an information portal for current vehicle offerings, dealer networks, after-sales services, and owner events, targeting consumers and Suzuki enthusiasts in the region. The business model centers on automotive retail and customer support, leveraging the global Suzuki brand to maintain a strong market presence in transportation. Technically, the website is built on legacy ASP.NET WebForms technology, enhanced with modern JavaScript libraries and tracking tools. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages present compliance and trust challenges. Security posture is moderate, with cookie consent implemented but missing security headers and no visible incident response contacts. Overall, the site is functional and trustworthy from a branding perspective but would benefit from improved transparency and security hardening.

P

PFP s.r.o.

suri.cz

62

SURI.CZ is an independent Czech online platform specializing in car insurance comparison and brokerage services. Operated by PFP s.r.o., it offers users quick insurance comparisons, professional advisory services, and a mobile application to assist customers. The website targets Czech vehicle owners seeking optimal insurance solutions and partners with reputable insurance providers for legal protection, cycling, and golf insurance. The platform demonstrates a professional market position with clear branding and trust indicators such as a valid Czech National Bank license and active social media presence. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and PostHog. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. WHOIS data is missing, which slightly reduces trustworthiness, but the business information and contact details are transparent and professional. Overall, the site is safe, well-maintained, and suitable for its target audience.

W

Weiss+Appetito Spezialdienste GmbH

weissappetito.at

53

Weiss+Appetito Spezialdienste GmbH is a specialized service provider based in Austria, focusing on suction and blowing of materials, roof greening, and cleaning services. Their website presents a professional image with clear descriptions of their key services and a focus on consulting and maintenance for roof greening projects. The company targets construction-related clients and property managers requiring specialized material handling and greening solutions. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and delivering a responsive, user-friendly experience. Security posture is solid with HTTPS and HSTS enabled, though additional security headers and privacy compliance mechanisms are recommended. The absence of WHOIS data limits full trust verification, but the website's content and contact information support its legitimacy. Overall, the site is well-structured and suitable for its business purpose, with room for improvement in privacy and security transparency.

D

Dowty

dowty.com

66

Dowty, a GE Aerospace company, is a globally recognized provider of integrated composite propeller systems and related services for commercial and defense aerospace sectors. The company offers high-quality, reliable propeller solutions and tailored maintenance services, supporting large regional turboprops, military transporters, and hovercraft. The website reflects a professional and consistent brand image aligned with its parent company, GE Aerospace, targeting aerospace manufacturers and operators. Technically, the website is built on Drupal 11, leveraging modern web technologies including Google Tag Manager for analytics and Evidon for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies are absent. The WHOIS data is unavailable or withheld, which is unusual but the website's professional presentation and association with GE Aerospace mitigate concerns about legitimacy. No direct contact emails or phone numbers are publicly listed, with contact primarily via web forms. Privacy and terms policies are comprehensive and linked to the parent company domain, indicating good privacy compliance. Overall, the website demonstrates a mature digital presence with strong business credibility and good security hygiene, though improvements in explicit security policies and incident response disclosures are recommended to enhance trust and compliance.

U

Unison Industries

unisonindustries.com

69

Unison Industries, a GE Aerospace company, is a leading supplier of gas turbine engine components and electrical and mechanical systems serving a broad range of markets including aviation, space and defense, power, oil and gas, and transportation. The company holds a strong market position supported by its affiliation with GE Aerospace and certifications such as ISO 9001 and AS9100. Their website reflects a professional B2B supplier model targeting aerospace and related industries. Technically, the website is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and basic accessibility features. Security posture is solid with HTTPS enforced and standard security headers implemented, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy and professional, though the absence of WHOIS data reduces domain registration transparency. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and improving accessibility compliance.