Transportation security reports

V

Veho Mercedes-Benz Cars

mercedes-benz.fi

75

Veho Mercedes-Benz Cars operates as the official Mercedes-Benz dealership and service provider in Finland, offering a wide range of luxury vehicles including sedans, SUVs, coupes, and electric models. The company provides comprehensive automotive services such as new and used car sales, vehicle servicing, warranty, roadside assistance, and digital tools like vehicle configurators. The website reflects a strong market position with consistent branding and multiple dealership locations across Finland, targeting consumers interested in premium automotive products.

L

Lounais-Suomen Taxidata Oy

taxidata.fi

55

Lounais-Suomen Taxidata Oy operates as a major taxi dispatch and transportation service provider in Southwest Finland, serving multiple municipalities with a fleet of approximately 460 taxis. The company offers a variety of taxi services including normal, eco-friendly, premium, and accessible vehicles, as well as parcel and food delivery. The website reflects a well-established business with a history dating back to 1953 and a modern digital presence since 2016. The company targets both consumers and businesses in the region, emphasizing reliability, safety, and local expertise. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Piwik PRO analytics, and GDPR-compliant cookie management via Complianz. The site is mobile-optimized, uses HTTPS, and integrates reCAPTCHA for form security. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs privacy and cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, some security headers could be improved for enhanced protection. The WHOIS data is transparent and consistent with the business identity, registered through a reputable Finnish registrar without privacy protection, supporting legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. It effectively serves its target audience with clear contact information and service offerings. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing formal security policies to further strengthen trust and compliance.

T

Tampereen Aluetaksi Oy

taksitampere.fi

48

Tampereen Aluetaksi Oy operates the Taksi Tampere service, the largest taxi dispatch center in the Pirkanmaa region of Finland, providing 24/7 taxi ordering services via phone, mobile app, and WhatsApp. The company boasts a fleet of approximately 450 vehicles and handles nearly 2 million rides annually, positioning itself as a dominant regional transportation provider. The website reflects a mature digital presence with multilingual support, social media integration, and modern web technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The business demonstrates transparency with clear contact details and certifications, supporting trustworthiness and compliance with GDPR. Overall, the site is professional, user-friendly, and well-optimized for SEO and mobile use.

L

Lähitaksi Oy

lahitaksi.fi

57

Lähitaksi Oy is a well-established Finnish transportation company specializing in taxi and related transport services since 1965. The company operates primarily in Uusimaa, Riihimäki, and Lapland, serving both consumers and businesses with a large fleet and workforce. Their services include taxi ordering, airport transfers, business-class rides, special transport services, and package deliveries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

G

GE Aerospace

geaerospace.com

71

GE Aerospace is a leading global provider of jet and turboprop engines and integrated aircraft systems serving commercial, military, business, and general aviation sectors. The company offers a broad portfolio of propulsion products and services, including engine maintenance and customer support, positioning itself as a key player in the aerospace industry. The website reflects a mature enterprise with comprehensive content targeting industry professionals, investors, and potential employees. Technically, the website is built on Drupal 10 and incorporates modern web technologies such as Google Tag Manager and Evidon for cookie consent, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices, mobile optimization, and accessibility features, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS, employs security headers, and integrates consent mechanisms for privacy compliance. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS domain registration data raises questions about domain legitimacy that warrant further verification. Strategic improvements in security disclosure and incident response communication would strengthen the security posture and stakeholder confidence.

M

Metsäkonepalvelu Oy

mkpd.fi

44

Metsäkonepalvelu Oy is a well-established forestry service company operating in Finland and Sweden, specializing in mechanized timber harvesting. The company serves industrial clients and private forest owners, leveraging over 50 years of experience through its group including subsidiaries MKP Sverige Ab and Kone-Yijälä Oy. The website reflects a professional digital presence with clear business information and active social media engagement. Technically, the site is built on Joomla CMS with modern frontend libraries and integrates Google Maps and social media streams, hosted likely via Cloudpit. Security posture is solid with HTTPS and CSRF protections, though lacking some security headers and formal policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Faehrinfos.de is a small German niche informational portal providing free notifications via SMS and email about disruptions and important updates for selected ferry services in Germany. The website targets ferry users seeking timely information about ferry operations. Technically, the site uses a basic but functional tech stack including Bootstrap 3.3.7 and jQuery 1.12.4, hosted behind Cloudflare nameservers for DNS and likely CDN services. The site lacks modern security headers and explicit HTTPS confirmation in the provided data, indicating a weak security posture. Privacy compliance is minimal with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Contact information is not explicitly provided, limiting business credibility. Overall, the site is functional but basic in design and security, suitable for its niche but requiring improvements for trust and compliance.

W

Weiße Flotte GmbH

ostsee-bestattungen.de

59

Weiße Flotte GmbH operates a specialized service offering dignified sea burials from the port of Stralsund into the Prohner Wiek, targeting families and individuals seeking maritime funeral services. The company leverages over 60 years of tradition and experience, positioning itself as a trusted regional provider in the transportation and funeral service sector. The website reflects a professional and empathetic approach, emphasizing personal and discreet service. Technically, the site is built on TYPO3 CMS, hosted behind Cloudflare, and integrates Google Analytics and Tag Manager with proper consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, supporting a trustworthy online presence for the business.

T

TBG Metrostav

tbg-metrostav.cz

55

TBG Metrostav is a leading supplier of concrete and related construction materials in the Prague region, offering a comprehensive range of products including fresh concrete mixes, pumping services, and rental equipment. The company targets construction professionals and developers, positioning itself as a market leader with a strong local presence. The website is built on WordPress with modern technologies and includes tracking and analytics tools such as Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

F

FRS Travel

frs-travel.de

66

FRS Travel is a specialized maritime travel service provider focusing on package tours to the German North Sea islands of Sylt and Heligoland. The company offers combined hotel and ferry bookings, leveraging partnerships with local hotels and ferry operators such as FRS Syltfähre and the Halunder Jet catamaran. Their market position is niche but well-defined, targeting tourists seeking maritime vacation experiences in Germany. The website is professionally designed with clear navigation, good content quality, and consistent branding. Technically, the site is built on TYPO3 CMS, uses Cloudflare for DNS and CDN, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Accessibility and SEO optimizations are well implemented.

Fahrgastschifffahrt Rügen operates as a regional passenger shipping service provider on Germany's largest island, Rügen. The company offers scenic tours along the coastline, including visits to national parks and the car-free island of Hiddensee, targeting tourists and visitors seeking nature and cultural experiences. The website is built on the Contao CMS platform, utilizing jQuery and GLightbox for interactive elements, and is hosted on servers associated with kasserver.com. The site demonstrates good mobile optimization and basic accessibility features, with a clear navigation structure and professional design. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible advanced security headers and explicit security or incident response policies. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data shows partial consistency with the business, though registrant details are limited. Overall, the site presents a low-risk profile with a good security posture but could benefit from enhanced security headers and clearer compliance documentation. Strategically, the business is well-positioned in the regional tourism transportation sector with a clear service offering. The website supports this with relevant content and trust indicators such as an impressum and privacy policy. There is room for improvement in transparency regarding terms of service, incident response, and security certifications to further enhance trust and compliance.

F

FRS Systems GmbH

frs-systems.de

64

FRS Systems GmbH is a German company specializing in highly flexible ticketing software solutions tailored for the ferry and passenger vessel industry. Their flagship product, flexWays, offers comprehensive features including sales and distribution, booking management, inventory control, route planning, capacity management, and boarding administration. The company positions itself as an innovative and reliable software provider with a medium-sized workforce and a history dating back to 1992. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing its credibility. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as JavaScript, CSS, and SVG graphics. Hosting and DNS services are managed via Cloudflare, providing robust SSL encryption and potential security benefits. The site demonstrates good performance and accessibility standards, although no advanced analytics or tracking scripts were detected in the provided content. From a security perspective, the website enforces HTTPS and benefits from Cloudflare's DNS services, but lacks visible security headers and explicit security policies. There is no cookie consent mechanism or terms of service present, which are important for GDPR compliance and legal clarity. Incident response contacts and vulnerability disclosure information are also absent, representing areas for improvement. Overall, the website is trustworthy and professional, with a strong business focus and solid technical foundation. However, enhancements in privacy compliance, security policy transparency, and incident response readiness would further strengthen its security posture and regulatory adherence.

F

FRS Shipmanagement

frs-shipmanagement.eu

68

FRS Shipmanagement is a specialized maritime service provider focused on ferry ship management, based in Limassol, Cyprus, and operating as a division of the well-established FRS Group. The company offers comprehensive services including crewing, technical maintenance, administration, and consulting tailored to the ferry industry. Their market position is that of a trusted partner leveraging over 150 years of group experience and direct shipowner insights. Technically, the website is built on TYPO3 CMS with modern web standards, good accessibility, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and incident response/contact security policies are not published. Overall, the site is professional, trustworthy, and well-structured, supporting a small-sized business with a clear niche in transportation. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators are present. Strategic recommendations include enhancing security headers, publishing security policies, and providing incident response contacts to improve trust and compliance.

A

Albanian Ferry Terminal Operator (AFTO)

afto.al

69

Albanian Ferry Terminal Operator (AFTO) operates the modern ferry terminal in Durrës, Albania, serving as a key gateway for passengers and cargo between Albania and the Balkan region with ferry connections to Italian ports. As a subsidiary of the FRS Group since 2013, AFTO manages a terminal that handles significant passenger and vehicle traffic annually. The website reflects a professional and consistent brand presence aligned with its parent company. Technically, the site is built on TYPO3 CMS, incorporates Google Tag Manager and Analytics for tracking, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Privacy compliance is strong with comprehensive cookie and privacy notices adhering to GDPR standards. Overall, the site is trustworthy, safe, and well-structured, supporting AFTO's business operations effectively.

F

FRS Express des îles

frs-express.com

71

FRS Express des îles is a well-established ferry transportation company operating in the Caribbean, serving key destinations such as Guadeloupe, Martinique, Dominica, and Saint Lucia. The company positions itself as a leading regional operator with competitive pricing and a focus on customer experience. Their website is professionally designed, mobile-optimized, and provides comprehensive information including booking options, schedules, and membership programs. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Google Analytics, Hotjar, and Google Ads, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not outweigh the overall professionalism and trust signals present on the site. Strategic recommendations include enhancing security headers, confirming domain registration details, and maintaining compliance with privacy regulations.

R

Reederei Hiddensee

reederei-hiddensee.de

66

Reederei Hiddensee operates as a regional ferry transportation service specializing in trips to the island of Hiddensee, Germany. The company targets tourists and travelers seeking natural and cultural experiences on the island, offering ferry services, excursions, and water taxi options. The website is professionally designed using TYPO3 CMS, featuring a responsive layout, integrated booking forms, and accessibility options. The technical infrastructure leverages Cloudflare for DNS and CDN services and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy disclosures and security best practices.

W

Weiße Flotte

weisse-flotte.de

66

Weiße Flotte operates as a regional transportation and tourism company specializing in passenger ferry and sightseeing boat services around the German islands of Rügen, Hiddensee, and the city of Stralsund. The company offers a variety of ferry routes, special excursions, and online ticketing services, targeting tourists and local travelers seeking convenient and scenic water transport options. The website is built on TYPO3 CMS and utilizes Cloudflare DNS services, indicating a modern and stable technical infrastructure. Google Tag Manager is employed for analytics and marketing purposes, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the website is professional, well-branded, and trustworthy, but could enhance compliance and security transparency to better align with GDPR and industry best practices.

R

Rheinfähre Maul GmbH

rheinfaehre.de

61

Rheinfähre Maul GmbH operates a regional car ferry service connecting Ingelheim and Oestrich-Winkel across the Rhine river in Germany. Established in 1968, the company has a longstanding presence in the transportation sector and was recently acquired by the Flensburger Reederei FRS, a reputable shipping group. The website provides detailed operational information including schedules and tariffs, targeting local commuters and tourists. Technically, the site is built on WordPress with modern plugins for SEO, maps, and galleries, and implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and cookie controls, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data supports the legitimacy of the domain and business. Overall, the site reflects a professional and trustworthy transportation service with good digital maturity.

F

FRS Elbfähre Glückstadt Wischhafen GmbH

frs-elbfaehre.de

66

FRS Elbfähre Glückstadt Wischhafen GmbH operates a regional ferry service crossing the Elbe river in northern Germany, providing frequent and reliable transport for passengers and vehicles. The company emphasizes customer convenience with amenities such as free Wi-Fi and onboard refreshments, and is actively pursuing sustainable mobility initiatives to reduce emissions and increase capacity. The website is professionally designed using TYPO3 CMS, with good accessibility and SEO practices, and integrates Google Analytics and Tag Manager for performance monitoring. Security posture is solid with HTTPS and Cloudflare protection, though explicit security headers and incident response policies are not published. Privacy compliance is strong with comprehensive cookie and privacy policies aligned with GDPR. Overall, the site reflects a trustworthy and credible transportation business with a medium-sized operational scale.

F

FRS Syltfähre GmbH & Co. KG

frs-syltfaehre.de

67

FRS Syltfähre GmbH & Co. KG is a well-established regional ferry operator providing car and passenger ferry services between Havneby on Rømø and List on Sylt. The company operates up to 32 daily departures, catering primarily to tourists and travelers seeking reliable and comfortable transportation across the North Sea. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service information including booking, schedules, fares, and travel tips. The company is part of the larger FRS group, indicating a stable market position and operational backing. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating analytics tools such as Microsoft Clarity, Google Tag Manager, and Hotjar for user behavior insights. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Accessibility features and SEO best practices are well implemented, contributing to a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses reputable third-party services, with no evident vulnerabilities or exposed sensitive data. Privacy and cookie policies are clearly presented with consent mechanisms, aligning with GDPR requirements. However, explicit security headers and incident response policies are not prominently disclosed, representing an area for improvement. Overall, the website demonstrates a strong security posture, good privacy compliance, and solid business credibility. The risk level is low, with recommendations focusing on enhancing security header implementation, publishing incident response information, and maintaining vigilance on third-party scripts.

F

FRS Helgoline

frs-helgoline.de

66

FRS Helgoline operates a specialized high-speed ferry service connecting Hamburg, Brunsbüttel, and Cuxhaven to the offshore island of Heligoland in Germany. The company positions itself as a premium transportation provider offering comfort, speed, and convenience through its modern catamaran 'Halunder Jet'. The website supports this business model with integrated booking and check-in systems, detailed schedules, ticket pricing, and customer information. The target audience includes tourists and travelers seeking efficient and comfortable ferry transport to Heligoland. Technically, the website is built on TYPO3 CMS and leverages Cloudflare for DNS and CDN services, ensuring reliable hosting and performance. Analytics tools such as Microsoft Clarity and Google Tag Manager are employed for user behavior tracking and marketing insights. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses Cloudflare's infrastructure, which enhances security and performance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and no public security policy or incident response contacts are found. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and well-aligned with the business's transportation services. There are no indications of suspicious activity or content safety concerns. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

F

FRS Clipper

clippervacations.com

57

FRS Clipper operates the Clipper Vacations website, providing passenger-only ferry services between Seattle, WA and Victoria, BC, along with hotel packages, day trips, and tours such as whale watching. The company holds a strong regional market position in the Pacific Northwest travel and transportation sector, targeting leisure travelers and groups. Their business model integrates transportation with hospitality services, offering bundled packages and affiliate programs to expand reach. Technically, the website is built on WordPress with Bootstrap framework, leveraging modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, PostHog, and Bing Ads. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and secure form handling, though there is room to improve HTTP security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities were detected in the visible code. Privacy compliance is basic with a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the website presents a professional, trustworthy, and user-friendly platform for travel bookings. The absence of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers, implementing cookie consent, and continuous monitoring of third-party scripts to maintain security and compliance.

F

FRS Portugal, Unipessoal LDA

frs-portugal.pt

75

FRS Portugal is a small transportation company specializing in river cruises and boat tours on the Rio Tejo in Lisbon, Portugal. It offers a variety of services including daytime sightseeing cruises, sunset cruises, group reservations, and corporate events aboard modern vessels. The company is part of the larger FRS World family, positioning itself as a reputable local operator with a strong focus on tourism and customer experience. The website is professionally designed, multilingual, and provides clear booking options and detailed information about routes and points of interest. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

The website www.belgiantrain.be represents NMBS, the Belgian national railway company providing train transportation services. The site is positioned as a national public transportation portal targeting general train travelers in Belgium. However, the current accessible content is blocked by a Cloudflare Turnstile CAPTCHA challenge, preventing direct content access and limiting detailed analysis. The website uses modern security mechanisms like CAPTCHA to prevent automated access, indicating a focus on security, but lacks visible privacy and cookie policies on the landing page. The WHOIS data is not publicly available due to domain registration policies, which is typical for .be domains and large organizations. Overall, the business is a large enterprise in the transportation sector with consistent branding but limited accessible content for deeper evaluation.

K

Komwag, podnik čistoty a údržby města, a.s.

komwag.cz

50

Komwag, podnik čistoty a údržby města, a.s., is a large Czech company providing comprehensive municipal services across the Czech Republic, including waste management, green maintenance, and cleaning services primarily targeting municipalities, government bodies, and private sector clients. The company positions itself as a reliable and professional service provider with a broad portfolio and a strong local presence. The website reflects a mature digital presence with clear branding, extensive service descriptions, and accessible contact information. Technically, the site uses modern web technologies including the cPilot CMS, UIkit framework, and integrates Google Tag Manager for analytics. It is well optimized for mobile devices and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, but lacks explicit security policies or incident response contacts. The absence of WHOIS data limits domain trust assessment, but the professional website and contact details support legitimacy. Overall, the site is secure, compliant with privacy regulations, and professionally maintained, though improvements in security transparency and WHOIS data availability are recommended.

F

FRS GmbH & Co. KG

frs.world

71

FRS GmbH & Co. KG is a well-established international ferry operator with a history dating back to 1866. The company operates approximately 70 vessels worldwide, providing passenger and freight ferry services across Europe, North Africa, North America, and the Middle East. Their business model includes diversified maritime services such as offshore logistics, port management, crewing, and maritime consultancy, positioning them as a leading specialist in the ferry shipping industry. The website reflects a professional and consistent brand presence with comprehensive information about their subsidiaries and services. Technically, the website is built on TYPO3 CMS, employs modern web technologies including responsive design and WebP images, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with clear navigation and SEO-friendly metadata. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies are not evident. The WHOIS data is privacy protected, limiting transparency on domain registration details; however, the website's professional presentation, linked subsidiaries, and social media presence support its legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, FRS demonstrates a mature digital presence aligned with its business stature, though improvements in security policy transparency and security headers could enhance trust and compliance further.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

R

Ridee Nordic Oy

bokabuss.nu

52

Bokabuss.nu is a Swedish transportation service platform that enables users to request and compare quotes for bus and minibus transportation across Sweden. The company, operated by Ridee Nordic Oy, has been active since 2011 and maintains a medium-sized presence in the Nordic transportation market. The website is professionally designed with a clear user journey for submitting transport requests and accessing operator offers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and marketing tools, and employs Cloudflare for hosting and security. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is good with HTTPS enforced, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

C

CFL multimodal

cfl-mm.lu

61

CFL multimodal is a Luxembourg-based logistics and transportation company specializing in rail freight, multimodal hubs, and comprehensive logistics services. It operates as part of the CFL Group, providing sustainable and efficient freight solutions across Europe. The website reflects a professional and well-structured digital presence with clear service offerings and a focus on environmental responsibility. Technically, the site uses modern web technologies including jQuery, Bootstrap, FontAwesome, and integrates analytics tools such as Google Tag Manager and Matomo. The security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain trust assessment, but the overall business credibility is supported by consistent branding and social media presence. Privacy compliance is well addressed with GDPR-aligned policies and cookie management.

S

SNCB-NMBS International

b-europe.com

62

SNCB-NMBS International operates a professional online platform for booking international train travel across Europe, including services for Eurostar, TGV INOUI, ICE, and other major train operators. The website targets European travelers seeking convenient ticket purchasing and travel planning, offering additional services such as Interrail passes and special tickets for bikes and dogs. The platform is built on a modern technology stack including C#, JavaScript, and Sitecore CMS, with integration of Google and Facebook APIs and a robust consent management system for GDPR compliance. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are lacking. The absence of WHOIS domain registration data is a notable concern, potentially indicating a subdomain usage or incomplete WHOIS information. Overall, the website presents a trustworthy and user-friendly experience for its target audience, but would benefit from enhanced transparency in domain registration and security disclosures.

A

Associazione nazionale Pionieri dell'Aeronautica

pionieriaeronautica.org

54

The Associazione nazionale Pionieri dell'Aeronautica is Italy's oldest aeronautical association dedicated to promoting and preserving the history and culture of Italian aeronautics. The website serves as an informational and cultural platform targeting enthusiasts, members, and the general public interested in aeronautical heritage. Technically, the site is built on WordPress using the Divi theme and Slider Revolution plugin, with Google Analytics integrated for visitor tracking. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. Security posture is moderate, with HTTPS enabled but lacking explicit security headers and detailed privacy policies. The absence of WHOIS data limits full trust verification of the domain registration, which slightly impacts overall credibility. Strategic improvements in security headers, privacy compliance, and domain transparency would enhance trust and compliance.

A

Associazione Trasvolatori Atlantici

trasvolatoriatlantici.it

40

The Associazione Trasvolatori Atlantici website serves as the official online presence for a small non-profit association focused on the history and commemoration of transatlantic aviators. The site provides historical content, galleries, and information about cruises and events related to aviation history. The business model is cultural and educational, targeting enthusiasts and members of the association. The website is built on Joomla! CMS with the JA T3 Framework, indicating a moderate level of technical maturity but with basic design and content quality. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks security headers and privacy compliance documentation. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but could benefit from enhanced privacy, security, and user experience improvements.

A

Aittakoodi Oy

synergybus.fi

44

SynergyBus, operated by Aittakoodi Oy, is a Finnish web platform specializing in connecting taxi and bus companies with customers seeking chartered transportation services. The platform aggregates over 15,000 annual booking requests, positioning itself as a leading service in the Finnish transportation sector. The website offers features such as daily email notifications of new requests, the ability to advertise available fleet capacity, and tools to foster long-term customer relationships. The business targets transportation operators and customers within Finland, emphasizing efficiency and market reach.

R

Rideer Nordic Oy

tilausajot.net

52

Tilausajot.net, operated by Rideer Nordic Oy, is a well-established Finnish online platform specializing in competitive bidding for charter taxi and bus transportation services. Founded in 2011, it serves a broad audience including private individuals, companies, and associations across Finland. The platform facilitates efficient request and offer management, supported by a growing network of transportation providers. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Cloudflare for security and performance. It integrates comprehensive analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, balanced with a detailed cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and Cloudflare protection, though some security headers could be improved. The domain registration is consistent and transparent, reinforcing business legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly service with good privacy and security practices.

A

Aittakoodi Oy

tilaataksi.fi

55

Tilaataksi.fi is a Finnish online taxi booking platform operated by Aittakoodi Oy, providing customers with a convenient way to pre-book taxis and receive competitive offers from taxi operators across Finland. The service targets both private individuals and organizations, offering a streamlined multi-step form for detailed ride requests. The platform is supported by Rideer Nordic Oy and integrates with various third-party services for analytics, customer support, and hosting. Technically, the website uses modern frameworks like Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site.

F

Finnair

finnair.fi

77

Finnair is a well-established Finnish airline providing passenger flights and travel services to over 80 destinations worldwide. The company holds a strong market position in Northern Europe and operates with a large-scale business model supported by subsidiaries such as Norra and Finnair Cargo. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to a general audience of travelers. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Akamai CDN, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although public incident response and vulnerability disclosure information are limited. Privacy compliance is well addressed with detailed policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, despite the absence of WHOIS domain registration details which may be due to registry restrictions.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

P

PoriExpress

poriexpress.fi

48

PoriExpress is a Finnish regional transportation company specializing in affordable bus travel primarily between Pori and Helsinki, as well as seasonal travel packages to Lapland (Ylläs). The company targets general consumers seeking economical and convenient bus travel options and related accommodation services through partnerships. The website is professionally designed using WordPress with modern SEO and content management plugins, providing a good user experience and clear navigation. Technical infrastructure is solid with HTTPS and standard WordPress technologies, though some security headers are missing. Contact information is clearly provided, but privacy compliance could be improved with cookie consent mechanisms and more detailed security policies. Overall, the site is trustworthy and well-positioned in its niche.

OnniBus operates as a leading Finnish bus ticket sales platform, offering affordable and reliable bus travel across Finland and to international destinations such as the Baltics and Poland. The company positions itself as a well-known and cheerful brand in the Finnish transportation market, providing various ticketing options including season passes and reward programs. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. Technically, the site employs modern analytics and consent management tools such as Google Analytics, Microsoft Clarity, and Cookiebot, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is a notable anomaly, potentially due to privacy protection or recent domain registration, but the website content and business presence support legitimacy. Overall, the site demonstrates a strong business and technical foundation with moderate risk due to incomplete WHOIS transparency.

L

lux-airport

lux-airport.lu

53

Luxembourg Airport operates as a key regional transportation hub offering passenger and cargo air services with over 100 destinations and 14 airlines. The airport provides comprehensive services including parking, transport options, shopping, dining, and special assistance, targeting travelers and business passengers. The website demonstrates a mature digital presence with multilingual support, modern technologies, and strong branding consistency. Technical infrastructure is based on WordPress with integrations for analytics, accessibility, and cookie compliance. Security posture is solid with HTTPS and privacy mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is unavailable, limiting domain trust verification, but the professional website and official social media presence support legitimacy. Overall, the airport's digital platform is well-structured, user-friendly, and compliant with GDPR, serving its audience effectively.

F

FRS Finland

frs-finland.fi

69

FRS Finland is a regional ferry and charter cruise operator serving the Helsinki Metropolitan Area and surrounding archipelago destinations. The company offers a range of services including scheduled ferry routes, VIP and group cruises, seasonal passes, and gift cards. It holds sustainability certifications and is part of the FRS Group, indicating a solid market position in transportation services. The website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, accessible, and trustworthy, supporting a positive user experience.

J

JT-Line Oy

jt-line.fi

45

JT-Line Oy is a Finnish small-sized transportation company specializing in ferry and charter cruise services in the Helsinki archipelago. The company operates authentic paddle steamer ferries and water buses, emphasizing sustainable travel by using renewable biofuels and promoting inclusivity. Their market position is niche but well-defined, targeting tourists, families, and groups seeking maritime experiences in the Helsinki region. The website reflects a professional and consistent brand image with clear service offerings and certifications such as Sustainable Travel Finland and Ekokompassi. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and Facebook Pixel, supported by a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed. Contact information is comprehensive, supporting business credibility.

T

Turun seudun joukkoliikenne

foli.fi

52

Turun seudun joukkoliikenne (Föli) operates as the primary public transportation provider in the Turku region, Finland. The website serves as a comprehensive portal for bus schedules, route planning, ticketing, and real-time transit updates, targeting residents and visitors of the region. Föli maintains a strong market position as a regional transit authority, supported by partnerships with seven municipalities. The business model is public service oriented, focusing on accessibility and user convenience.

O

Oulun seudun liikenne

oulunjoukkoliikenne.fi

66

Oulun seudun liikenne operates as a regional public transportation authority in Finland, providing bus schedules, ticketing, and travel information primarily for the Oulu region. The website serves residents and travelers with relevant transit data and customer service resources. The business model focuses on public transport facilitation with digital tools such as the OSL app and integration with partner services like Waltti for ticket purchases. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good SEO and accessibility practices with responsive design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Privacy compliance is partially met with a detailed cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-aligned with its public service mission, though improvements in transparency and security documentation are recommended.

Lahden seudun liikenne operates as the official public transportation authority for the Lahti region in Finland, providing comprehensive bus route information, timetables, ticketing options, and customer service. The website serves as a key digital touchpoint for residents and visitors seeking transit information. The company holds a solid market position as a regional transport provider with a clear focus on accessibility and user convenience. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good performance, mobile optimization, and accessibility features, ensuring a positive user experience across devices. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website reflects a mature digital infrastructure supporting a trusted public service entity.

N

Nysse, Tampereen seudun joukkoliikenne

nysse.fi

55

Nysse is the public transportation service provider for the Tampere region in Finland, offering responsible and evolving transit solutions to residents and visitors. The website reflects a regional public service entity with a clear focus on accessibility, user convenience, and compliance with privacy regulations. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management, alongside Matomo for analytics, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of a published security policy and incident response contact suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the organization's public service mission effectively.

V

VR-Yhtymä Oyj

vrgroup.fi

51

VR Group is a Finnish state-owned enterprise specializing in transportation, logistics, and maintenance services, with a strong focus on sustainable and carbon-neutral rail and urban mobility solutions. The company operates multiple business units including long-distance rail, urban transport, logistics, and fleet care, serving both consumer and corporate clients. Their market position is significant within Finland and parts of Sweden, supported by a 160-year history and a clear commitment to environmental responsibility. The website reflects a mature digital presence with multilingual support and comprehensive corporate information. Technically, the site employs modern web technologies, including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, ensuring good performance, accessibility, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the domain registration and WHOIS data align well with the company's profile, confirming legitimacy and trustworthiness. The site is safe for general audiences with no adult or questionable content detected.

OnniBus operates as a leading Finnish bus ticket sales platform, providing affordable and reliable bus transportation services across Finland and to neighboring countries. The website offers a user-friendly online booking system, promotional offers, and partnerships with other transportation providers such as Eckerö Line. The company targets travelers seeking cost-effective and convenient bus travel options. Technically, the website employs modern analytics and tracking technologies including Google Analytics, Microsoft Clarity, and Cookiebot for consent management, ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforced and session management in place, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain is a notable anomaly that slightly diminishes trust but does not detract from the professional presentation and functionality of the site. Overall, OnniBus presents a mature digital presence with good privacy compliance and a strong market position in the Finnish transportation sector.

L

Littlepay

littlepay.com

73

Littlepay is a specialized payments infrastructure provider focused on transit and mobility sectors, offering modular systems for contactless open loop fare collection. The company positions itself as a key player in improving payment experiences for transit operators and mobility services. The website reflects a mature business with a professional digital presence, leveraging modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Visual Website Optimizer. The technical infrastructure is built on WordPress, hosted with Amazon-related services, and employs HTTPS with a valid SSL certificate, ensuring secure communications. However, the site lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security posture is generally good with domain protections in place, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is professional and trustworthy but would benefit from enhanced transparency on privacy and security policies.