Transportation security reports

L

Louda Auto

autolouda.cz

68

Louda Auto is a large, well-established automotive dealership and service provider in the Czech Republic, founded in 2004. It operates as the largest certified dealer for 12 automotive brands with 18 branches nationwide, offering new and used vehicle sales, leasing, carsharing, and servicing. The website reflects a mature digital presence with modern technologies such as Blazor Server, Bootstrap, and multiple analytics and tracking tools. Privacy and cookie policies are implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

K

Kongresové centrum ILF a.s.

kcilf.cz

49

Kongresové centrum ILF a.s. operates multimodal logistics centers in the Czech Republic, specializing in strategic connections for road, rail, and water freight transport. Established in 1995, the company has a strong market presence with over 25 years of experience and a portfolio of subsidiaries offering complementary logistics, storage, and related services. The website reflects a professional business model focused on investment, development, and leasing of logistics centers, targeting business clients in transportation and real estate sectors. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and privacy controls, though some security headers and policies could be improved. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable, limiting transparency.

Simple Avia Solutions is a newly established ACMI provider operating on four continents, specializing in aircraft leasing with crew, maintenance, and insurance services. The company targets airlines and businesses requiring flexible capacity solutions globally, positioning itself as a reliable and well-distributed operator. The website reflects a basic but professional digital presence with clear contact information and consistent branding. Technically, the site uses standard web technologies such as Bootstrap and jQuery, hosted behind Cloudflare DNS, but lacks advanced security configurations like DNSSEC and security headers. No privacy or cookie policies are published, indicating gaps in compliance. The security posture is moderate with room for improvement, especially in implementing best practices and transparency. Overall, the website is safe, accessible, and credible but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

T

THL-Luna, a.s.

thlluna.cz

68

THL-Luna, a.s. is a Czech logistics company specializing in comprehensive supply chain solutions including warehousing, container transport, and logistics outsourcing. The company operates multiple strategically located warehouse centers across the Czech Republic, serving businesses requiring efficient storage and distribution services. The website is professionally designed using WebJET CMS and modern web technologies, providing clear navigation and relevant business content primarily in Czech. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency but the presence of legal company information and contact details supports legitimacy. Overall, the site reflects a medium-sized logistics provider with a stable market position and a parent company affiliation.

A

Autokomplex Menčík

autokomplex.cz

44

Autokomplex Menčík is a reputable automotive dealership specializing in Škoda vehicles, operating primarily in the Czech Republic with two main branches in Prague and Benátky nad Jizerou. The company offers a comprehensive range of services including new and used car sales, servicing, fleet management, insurance, and car washing. Their market position is that of a regional authorized dealer with a strong local presence and partnerships with various sports and community organizations. Technically, the website employs modern front-end technologies such as jQuery, Bootstrap, and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data and security headers slightly diminishes the overall trustworthiness and security posture. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, content-rich, and well-branded, though improvements in security practices and domain registration transparency are recommended.

S

Sailun Group Europe

sailun-tyres.eu

59

Sailun Group Europe operates as a tyre manufacturer and distributor specializing in passenger car, light truck, truck, and bus tyres. The company offers a broad product portfolio including summer, winter, and all-season tyres, with a focus on performance, safety, and eco-friendly technologies tailored also for electric and hybrid vehicles. Positioned competitively in the European market, Sailun emphasizes quality and sustainability, evidenced by certifications such as the EcoVadis Silver Medal and endorsements like AutoBild approval. Their business model includes a dealer locator service and direct customer engagement through comprehensive product catalogs and press releases. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, Google Maps API, and Cookiebot for consent management. The site is mobile-optimized with good navigation and moderate performance. Analytics are implemented via Google Tag Manager, indicating moderate user tracking with privacy compliance measures in place. However, some security best practices such as security headers and explicit incident response policies are not publicly visible. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, contributing to a solid security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to EURid's privacy policy for .eu domains, which is common and justified for this business type. Overall, the domain and website present strong legitimacy and trustworthiness. The overall risk assessment is low, with recommendations to enhance security headers, publish security policies, and consider a vulnerability disclosure program to further strengthen trust and compliance. The website quality and business credibility are high, supporting Sailun's position as a reputable tyre brand in Europe.

R

RONAL GROUP

ronal-wheels.com

59

RONAL GROUP operates an international website focused on manufacturing and supplying high-quality automotive wheels. The company offers a variety of wheel products including forged and winter wheels, targeting automotive dealers and vehicle owners globally. The website is professionally designed using Drupal 10 CMS, incorporating modern web technologies such as Vue.js and jQuery, and includes multimedia content and configurator tools to enhance user engagement. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and an interactive cookie consent mechanism. However, the absence of WHOIS registration data for the domain www.ronal-wheels.com raises concerns about domain legitimacy, despite the professional appearance and active social media presence. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, but the lack of explicit security policies and incident response contacts suggests room for improvement. Overall, the website presents a credible business front but should address domain registration transparency to enhance trust.

H

Heidelberg Materials, a.s.

transportbeton.cz

45

Heidelberg Materials CZ operates as a major provider of transport concrete and related construction materials across the Czech Republic. The company offers comprehensive services including production, delivery, and pumping of concrete, as well as manufacturing of various mortars and screeds. It is part of the larger Heidelberg Materials group, which is a recognized leader in the building materials industry. The website reflects a professional corporate presence with clear branding and a focus on serving construction professionals such as builders, developers, and architects. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and a proprietary CMS, delivering a moderately fast and mobile-optimized experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong corporate branding and content quality. Overall, the site is well-positioned to support the company's business objectives and maintain trust with its audience.

S

STUDENT AGENCY TRAVEL k.s.

dovolena.cz

66

STUDENT AGENCY TRAVEL k.s. operates dovolena.cz, a comprehensive online travel platform offering a wide range of holiday packages, flight tickets, train and bus tickets, travel insurance, and related services primarily targeting Czech and German travelers. The company is well-established, with a domain age dating back to 2000, and maintains a strong market position supported by multiple subsidiaries and partnerships. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and enforces HTTPS with strong security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Contact information and trust indicators such as certifications and memberships are clearly presented, enhancing business credibility. No critical security issues or content safety concerns were detected.

S

STUDENT AGENCY TRAVEL k.s.

studentagency.cz

65

STUDENT AGENCY is a well-established Czech travel company offering a broad range of travel services including flight tickets, bus tickets, vacations, and language stays. With a market presence spanning over 30 years, it holds a strong position in the transportation sector in the Czech Republic. The website reflects a professional and comprehensive online travel agency platform targeting travelers seeking affordable and convenient travel options. The company operates multiple related domains serving different travel needs, indicating a diversified service portfolio. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a robust security posture. However, the absence of visible privacy and cookie policies, as well as lack of WHOIS transparency, slightly reduce the overall trust and privacy compliance score. No explicit incident response or vulnerability disclosure information is found, which could be improved to enhance security transparency. Overall, the site is secure, professional, and trustworthy with room for improvement in privacy and compliance documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing WHOIS data transparency, and establishing clear security incident response and vulnerability disclosure channels to strengthen compliance and trust.

S

STUDENT AGENCY TRAVEL k.s.

sa.cz

66

STUDENT AGENCY TRAVEL k.s. operates a comprehensive online travel platform primarily serving the Czech Republic. The company offers a wide range of travel-related services including flight tickets, bus tickets, holiday packages, language stays, hotel bookings, and travel insurance. With a market presence of over 30 years, it holds a strong position in the regional travel market, targeting travelers, students, and general consumers seeking affordable and convenient travel options. The website reflects a mature business model with multiple related domains and a consistent brand identity. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA v3 for analytics and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security best practices are observed, including HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact information is transparent, enhancing business credibility. However, the absence of WHOIS data and vulnerability disclosure mechanisms slightly reduce trust scores. Overall, the site is professional, secure, and trustworthy, suitable for general audiences without any adult or questionable content.

R

RegioJet a.s.

regiojet.cz

69

RegioJet a.s. is a well-established transportation company founded in 2009, operating primarily in the Czech Republic and across Europe. The company offers train and bus ticketing services with a strong focus on customer service and convenience. Their website reflects a mature digital presence with multilingual support, comprehensive travel options, and integration with partner services such as hotel bookings and language stays. The company holds a strong market position as a leading private transport operator in Central Europe. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is robust, though the site lacks a dedicated security policy and incident response contact information. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness. The risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response. The company demonstrates a professional and trustworthy online presence suitable for its business sector.

O

OPPORTUNITY, spol. s r.o.

alpinecentrumbrno.cz

58

OPPORTUNITY, spol. s r.o. operates the Alpine Store Brno, a specialized automotive dealership focusing on Alpine sports cars, with a modern showroom in Brno, Czech Republic. The company has a long history in automotive sales and racing, positioning itself as a key player in the regional luxury sports car market. The website is professionally designed, mobile-optimized, and provides clear contact information and business details. Technically, it uses modern JavaScript libraries and integrates multiple marketing and analytics tools with appropriate cookie consent mechanisms. Security posture is good with HTTPS and obfuscated emails, though some security headers could be improved. The domain is newly registered, which aligns with a new brand initiative rather than the company's founding date. Overall, the site is trustworthy and well-maintained.

D

dacia

dacia.cz

68

The website www.dacia.cz serves as the official Czech Republic portal for the Dacia automobile brand, providing comprehensive information on new and used vehicles, financing options, insurance, and after-sales services. It targets consumers in the Czech market interested in affordable and hybrid/electric vehicles. The site demonstrates a mature digital presence with modern technologies such as React, optimized images, and integration with Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy and security headers, which are recommended for enhanced compliance and protection. The absence of WHOIS data reduces domain trustworthiness, but the branding and content strongly indicate legitimacy as an official brand site. Strategic recommendations include publishing clear privacy and terms policies, adding security headers, and providing contact information for security incidents and data protection officers.

K

Kubíček Aircraft s.r.o.

kubicekaircraft.com

57

Kubíček Aircraft s.r.o. is a Czech-based manufacturer specializing in ultralight aircraft, emphasizing a family tradition and quality craftsmanship. The company targets ultralight pilots and aviation enthusiasts with versatile aircraft designed for rugged and comfortable flying experiences. Their market position is niche but credible, supported by a professional website and active social media presence. Technically, the website employs modern web technologies including Alpine.js and Splide.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

K

Kubíček Balloons

kubicekballoons.com

60

Kubíček Balloons is a reputable hot air balloon manufacturer based in the Czech Republic, with a domain registered since 2016. The company offers innovative and reliable products tailored to pilots and balloon enthusiasts worldwide. Their website demonstrates a strong market position with a focus on quality, custom design, and proprietary polyester fabric production. Technically, the website employs modern JavaScript frameworks and libraries such as Alpine.js, Splide.js, and lightGallery, alongside Google Tag Manager and Analytics for marketing and tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site uses HTTPS with strong security headers and cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the domain registration and website content are consistent, supporting the business's legitimacy and credibility.

T

TUkas a.s.

tukas.cz

47

TUkas a.s. is a large, authorized automotive dealership and service provider operating in Prague, Czech Republic. The company represents seven major automotive brands including Kia, Dacia, Renault, Opel, Volvo, ŠKODA, Volkswagen, and Audi. Their business model focuses on new and used car sales, authorized servicing, and operational leasing, targeting both individual consumers and business clients. The website reflects a professional presence with clear branding and multiple partner brand logos, indicating a strong market position within the automotive retail and service sector in the region. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and includes structured data for SEO enhancement. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and branding suggest a legitimate and established business. Security posture is moderate with good SSL configuration and use of anti-bot measures, but lacks explicit security policies or incident response information. Privacy compliance is good with visible privacy and cookie policies and GDPR indicators. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, though improvements in security headers and WHOIS transparency are recommended. Strategic recommendations include enhancing security headers, maintaining up-to-date software, improving accessibility, and publishing clear security and incident response policies to strengthen trust and compliance.

O

Opportunity spol. s r.o.

opportunity.cz

57

Opportunity spol. s r.o. is a regional automotive dealership group operating in the Czech Republic, representing multiple well-known automotive brands including Renault, Dacia, Alpine, Seat, and Cupra. The company provides new car sales and automotive servicing, targeting customers in the Czech market. The website reflects a professional and consistent brand presence with clear contact information and multiple brand partnerships. Technically, the site uses a modern JavaScript stack including jQuery and integrates major analytics and advertising platforms such as Google Analytics, Facebook Pixel, and Adform. The site is served over HTTPS with good SSL configuration but lacks some security headers and a published privacy policy, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces domain trustworthiness, but the website content and branding appear legitimate and consistent with a medium-sized automotive dealership business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security posture to enhance trust and compliance.

F

Úvodní stránka | Flying Magazín

flying-mag.eu

65

Flying Mag is a biannual magazine serving passengers of Brno Airport, providing travel, cultural, and regional content primarily in Czech. The website is professionally designed with good content quality and consistent branding, targeting travelers and regional tourists. Technically, the site uses modern web technologies including lazy loading and Google Tag Manager, with a cookie consent mechanism implemented via CookieHub. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policy documentation. WHOIS data is privacy protected, which is common for media sites but limits transparency. Overall, the site is legitimate and well-positioned as a regional media publication.

D

Dopravní podnik města Brna, a. s.

pipniajed.cz

53

The website 'Pípni a jeď!' is the official electronic ticketing platform for Dopravní podnik města Brna, the main public transport operator in Brno, Czech Republic. It offers a contactless payment system for public transport tickets using Visa, Mastercard, GooglePay, and ApplePay, enabling passengers to pay without paper tickets or registration. The platform supports automatic fare calculation, various ticket types including discounted and multi-passenger tickets, and integration with regional transport tariffs. The site targets daily commuters and occasional travelers within Brno and its immediate surroundings.

D

Dopravní podnik města Brna, a. s.

dpmb.cz

62

Dopravní podnik města Brna, a. s. (DPMB) is the primary public transportation operator in Brno, Czech Republic, providing bus, trolleybus, tram, and boat services to tens of thousands of daily passengers. The company maintains a professional and comprehensive website built on Drupal 10, offering detailed transport information, ticketing options, and service updates. The site is well-branded, mobile-optimized, and accessible, targeting residents and visitors of Brno. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to privacy protection, which is common and justified for this type of public entity. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance with privacy regulations.

A

AUTO POKORNÝ, s.r.o.

autopokorny.cz

51

AUTO POKORNÝ, s.r.o. is a well-established Czech automobile dealership and service provider specializing in Hyundai, Renault, and Dacia vehicles. With over 30 years of experience and multiple branches in Brno and Velké Meziříčí, the company offers new and used car sales, rentals, and comprehensive authorized servicing including warranty repairs. The website reflects a professional and consistent brand presence targeting general consumers interested in these automotive brands. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and lazy loading. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements standard best practices like reCAPTCHA on forms and cookie consent management. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The domain registration data supports the legitimacy and longevity of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the security posture and user trust.

MARTA is a small-scale business focused on autonomous and sustainable maritime transportation technologies, positioning itself as a future-oriented player in the transportation sector. The website serves primarily as an informational and promotional platform with minimal content and no e-commerce or interactive features. Technically, the site is built using the Publii Open-Source CMS, a static site generator, which contributes to a low attack surface and moderate performance. The site uses HTTPS with a valid SSL certificate but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Contact information is limited to a single company email address with no phone or physical address details provided. Overall, the website demonstrates basic digital maturity with room for improvement in content richness, security posture, and compliance.

T

Top Rent A Car

toprentacar.bg

46

Top Rent A Car is a leading national car rental company in Bulgaria, offering a broad range of vehicles including passenger cars, vans, cargo vehicles, and electric cars. The company targets travelers and residents in Bulgaria, providing competitive pricing and additional services such as operational leasing and special event vehicles. The website is professionally designed with multi-language support and strong trust indicators including industry awards and high customer ratings. Technically, the site uses a mix of modern and legacy technologies, with Cloudflare DNS and CDN services enhancing availability and performance. Security posture is generally good with HTTPS and reCAPTCHA integration, though some security headers and updates to libraries could improve resilience. Privacy compliance is basic, with GDPR adherence claimed but no explicit privacy policy page found. Overall, the site is trustworthy and well-positioned in its market segment.

C

Caravaning Informations GmbH

caravaning-info.de

57

Caravaning Informations GmbH operates the website caravaning.info, a German-language online portal dedicated to caravaning enthusiasts and newcomers. The site offers a variety of content including travel reports, vehicle presentations, dealer and rental searches, checklists, and contests, positioning itself as a niche information and service provider in the transportation sector focused on caravaning. The business targets a specialized audience interested in caravan travel and related services within Germany. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, jQuery, Flickity carousel, and Select2 for enhanced UI components. The site is served over HTTPS with a valid SSL certificate and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. Security best practices are partially implemented, with room for improvement in HTTP security headers and HSTS enforcement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected or unavailable, which is typical for small businesses, but the website's content and technical setup indicate a legitimate and trustworthy operation. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, making it a reliable resource for its target audience.

B

Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI)

bdli.de

61

The Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI) is a prominent German aerospace industry association representing a broad spectrum of companies from engineering service providers to international system manufacturers. The website serves as the official digital presence, providing industry news, campaigns, event information, and member services. It targets industry stakeholders, policymakers, and professionals interested in aerospace and defense sectors. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and consent management (Usercentrics), ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative market position.

A

ASA Verband

asa-verband.de

58

The ASA Verband is a well-established German industry association representing manufacturers and importers of automotive service equipment. With over 50 years of history and nearly 100 specialized member companies, it plays a key role in political lobbying, technical standardization, and market transparency within the automotive service sector. The website reflects a professional and consistent brand presence, targeting workshop equipment companies and related stakeholders. Technically, the site is built on WordPress with modern plugins for SEO and privacy compliance, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its niche.

D

DummyTicket247

dummyticket247.com

59

DummyTicket247 is a niche e-commerce website specializing in providing dummy flight tickets primarily used for visa applications or as proof of onward travel. The business operates a WordPress-based platform with integrations for payment processing via Stripe and PayPal, and uses Gravity Forms for data collection. The website targets travelers needing quick and affordable proof of travel arrangements, positioning itself as a fast and valid service provider in this specialized market. The company appears to be recently established in 2023, aligning with the domain registration date. From a technical perspective, the website employs modern web technologies including Elementor for page building, Google Tag Manager for analytics, and Google reCAPTCHA for bot protection. Hosting and domain registration are managed through Cloudflare, providing a reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in speed and security headers. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and explicit security headers such as Content-Security-Policy. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. Contact information and incident response details are absent, which may affect user trust and regulatory compliance. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance, improved security configurations, and clearer contact and policy disclosures to strengthen trust and regulatory adherence.

K

KRON Robert Lewandowski

kron-lewandowski.pl

46

KRON Robert Lewandowski is a well-established Polish company specializing in the purchase, storage, sale, and transportation of scrap metal and secondary raw materials. With over 30 years of experience, the company holds a strong market position in the Płock region, serving both businesses and individuals. Their services include buying colored metals, scrap metal, and waste paper, supported by a modern fleet and machinery. The website reflects a professional business presence with clear contact information and multiple physical locations. Technically, the site is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Overall, the website is trustworthy and compliant with basic privacy regulations, though it could improve in security transparency and incident response readiness.

R

Romexpo

romexpo.ro

41

Romexpo is a leading Romanian exhibition and event center with over 30 years of experience, offering a wide range of services including trade fairs, conferences, concerts, and festivals. The company positions itself as a strategic partner in the industry, providing modern infrastructure and professional event management services. The website reflects a mature digital presence built on WordPress with popular plugins and a moderate performance profile. Security posture is adequate with HTTPS enforced but could be enhanced by implementing additional security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no explicit cookie consent mechanism detected. Contact information is clearly provided, including phone, email, and social media channels, supporting business credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.

L

Lift24

lift24.pl

58

Lift24 is a Polish company specializing in the rental, sale, and servicing of mini construction cranes, targeting construction professionals primarily in Warsaw and Poznań. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site includes SEO optimizations and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and security headers in place, but lacks published security policies or incident response information. Overall, the website is professional and trustworthy but could improve privacy and contact transparency to enhance compliance and user trust.

SOSNOWSKI Sp. z o.o. Sp. k. is a well-established Polish company founded in 1992, specializing in comprehensive equipment solutions for automotive workshops, vehicle inspection stations, electric vehicle service centers, rail transport, and municipal transport depots. The company offers a broad range of products including lifts, diagnostic lines, tire service equipment, and turnkey project execution for automotive facilities. Their market position is strong within Poland, supported by decades of experience and exclusive distribution partnerships. Technically, the website employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA usage, though security headers are lacking and could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website reflects a professional and trustworthy business presence.

T

TEXA Poland

texapoland.pl

64

TEXA Poland is a specialized company serving automotive professionals with multi-brand diagnostic tools, exhaust gas analyzers, air conditioning service stations, and telediagnostics solutions. The company positions itself as a key player in the automotive diagnostics sector within Poland, targeting professional workshops and service providers. The website reflects a medium-sized business with a clear focus on B2B services in the transportation industry. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the website uses HTTPS with a good SSL configuration and implements cookie consent via Cookiebot, indicating GDPR awareness. However, it lacks explicit privacy policies, terms of service, security headers, and incident response information, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

M

Mobility

mobility.ch

61

Mobility.ch is a well-established Swiss transportation service provider specializing in car subscription and carsharing solutions. The website presents a professional and user-friendly interface with comprehensive cookie consent management powered by Cookiebot, ensuring GDPR compliance. The business targets general urban commuters seeking flexible vehicle access. Technically, the site employs modern JavaScript frameworks and integrates multiple third-party analytics and marketing services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high trustworthiness and business credibility with no signs of blocking or WAF interference.

G

Grupa MTP

parkingpwk.pl

64

Parking PWK is a major underground parking facility located in the center of Poznań, Poland, operated under the umbrella of Grupa MTP. It serves a diverse audience including event attendees at the International Poznań Fair, tourists, business travelers, and local residents. The parking offers 650 spaces across three levels and provides daily and weekly parking options with promotional offers. The website is professionally designed, mobile-optimized, and integrates modern technologies such as AngularJS and Google Analytics for user tracking and marketing. Social media presence is active and linked to official channels. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Privacy compliance is basic but present, with room for improvement in GDPR adherence documentation. Overall, the website reflects a trustworthy and established business with a strong market position in transportation and hospitality sectors.

F

Flotis

flotis.pl

64

Flotis.pl is a Polish-based GPS fleet monitoring service provider offering real-time vehicle tracking and fleet management solutions primarily targeting small to large companies with vehicle fleets. The website presents a professional and content-rich platform with clear navigation, updated blog content, and multiple contact channels. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and a consent management system, hosted on the Shoper e-commerce platform. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Y

YU! - Pay How YU Drive

payhowyudrive.pl

59

YU! - Pay How YU Drive is a Polish insurance service offering usage-based car insurance that adjusts premiums based on the user's driving style, monitored via the Yanosik mobile application. The website presents a clear business model targeting safe drivers who use mobile devices, emphasizing personalized insurance offers and rewarding good driving behavior. The site is professionally designed with consistent branding and partner endorsements from ERGO Hestia and Yanosik, positioning it as an innovative player in the transportation and insurance sectors. Technically, the website uses modern frontend frameworks like Bootstrap and jQuery, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and employs a comprehensive cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and no explicit security policy or incident response information is provided. Overall, the site is accessible, trustworthy, and well-structured, with room for improvement in security best practices and direct contact information availability.

L

Lufthansa City Center

lufthansa-city-center.com

58

Lufthansa City Center operates as a well-established travel agency network specializing in vacation and business travel services worldwide. The company leverages its affiliation with Lufthansa to provide comprehensive travel booking, consulting, and management solutions. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support targeting German and English-speaking travelers. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNS security and security headers. Privacy compliance is currently weak due to missing explicit privacy and cookie policies. Overall, the business credibility is high, supported by consistent WHOIS data and trust signals.

N

nazwa.pl sp. z o.o.

automarket.pl

57

Automarket.pl is an established Polish online platform specializing in automotive leasing and long-term rental services, offering a wide selection of new and used vehicles to both individual and corporate customers. The website presents a professional and user-friendly interface built on modern technologies such as Nuxt.js and Vue.js, ensuring good mobile optimization and SEO practices. The platform emphasizes flexible financing options including leasing, long-term rental, and cash loans, positioning itself as a comprehensive automotive financial service provider in Poland. Security-wise, the site benefits from HTTPS and DNSSEC, but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Contact information is limited to a phone number, with no visible email or physical address in the provided content. Overall, the website is trustworthy and well-established, but could enhance its compliance and security posture by adding privacy policies, cookie consent mechanisms, and incident response disclosures.

P

PORSCHE HUNGARIA KERESKEDELMI KFT.

cupraofficial.hu

57

The website www.cupraofficial.hu represents the CUPRA automotive brand in Hungary, operated by Porsche Hungaria Kereskedelmi Kft. It focuses on promoting high-performance and electric vehicles, offering configurators, dealership information, and business fleet solutions. The site is well-positioned in the premium automotive market segment in Hungary, leveraging Porsche Holding's infrastructure and APIs. Technically, the site uses modern web technologies including Next.js and React, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

PEUGEOT

peugeot.ch

63

PEUGEOT Switzerland operates a professional and comprehensive website showcasing its range of vehicles including electric, hybrid, and plug-in hybrid models. The site targets general consumers in Switzerland interested in automotive products and services. It offers vehicle configuration, financing options, after-sales services, and dealer locators, reflecting a mature business model under the Stellantis group. Technically, the website leverages Adobe Experience Manager CMS, integrates advanced analytics and marketing tools such as Google Tag Manager and Dynamic Yield, and employs modern JavaScript libraries and responsive design techniques. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although explicit privacy and security policies are not prominently linked. Overall, the site is well-structured, performant, and trustworthy, with no signs of blocking or WAF interference.

E

Eurostar

eurostar.com

79

Eurostar is a prominent transportation company specializing in high-speed train services connecting major European cities such as London, Paris, Brussels, Amsterdam, and Cologne. The website serves as the official platform for booking train tickets and holiday packages, targeting general travelers across Europe. The business model focuses on providing efficient and convenient rail travel options, positioning Eurostar as a leading player in the European transportation sector. The website's content and branding are professional and consistent, reinforcing its market position and trustworthiness. Technically, the website employs modern web technologies including React and Next.js, with a CMS powered by Sanity. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by structured data and social media integration. Despite the lack of explicit hosting provider information, the infrastructure appears robust and well-maintained. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information. The absence of privacy and cookie policies, as well as WHOIS data, presents compliance and trust concerns that should be addressed to enhance transparency and user confidence. Overall, Eurostar's website is a high-quality, professional platform with strong business credibility and technical maturity. Addressing privacy compliance and security transparency will further strengthen its security posture and regulatory adherence.

C

carQ.pl - auto z historią & historia auta

carq.pl

67

carQ.pl is a Polish website offering free vehicle history reports, providing users with technical data, inspection records, insurance status, and ownership information. The service targets vehicle owners and prospective buyers in Poland, positioning itself as a niche provider in the automotive data sector. The website employs modern web technologies including Ruby on Rails, Cookiebot for cookie consent, Google Tag Manager, and Facebook Pixel for marketing and analytics. Structured data is used effectively to enhance SEO and display user ratings. Security posture is adequate with HTTPS and CSRF protections, but lacks some security headers and published policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service policies. Overall, the website is functional, professionally designed, and trustworthy, though it would benefit from enhanced transparency and contact information.

A

Autostrada Wielkopolska SA

aesa.pl

54

Autostrada Wielkopolska SA operates as a key toll road operator managing the A2 highway segment in Poland, providing essential infrastructure services and toll collection. The company maintains a professional web presence with multilingual support, targeting drivers and transport companies. Their website offers comprehensive travel information, toll calculators, and customer support channels. Technically, the site is built on WordPress with modern libraries and includes performance and mobile optimization features. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized transportation sector entity in Poland.

Y

Yanosik

yanosik.pl

65

Yanosik is a well-established Polish driver assistance platform that provides real-time road hazard alerts, free navigation, and driver devices to a large community of over 2 million monthly users. The business operates primarily in the transportation and technology sectors, offering a community-driven model supported by product sales and subscription services. The website is professionally designed using modern Angular technology, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent management. Overall, Yanosik presents a credible and trustworthy digital presence with a clear market position in Poland.

H

Honda Motor Co.,Ltd.

global.honda

63

Honda Motor Co., Ltd. is a globally recognized automotive manufacturer with a strong market position in the transportation sector. The corporate website serves as a comprehensive platform for company information, investor relations, sustainability initiatives, newsroom updates, and career opportunities. The site targets a broad audience including investors, job seekers, media, and general consumers. Technically, the website employs modern web technologies such as jQuery and Slick Carousel, hosted on Amazon AWS infrastructure, and integrates a robust cookie consent mechanism via Cookiebot to comply with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website uses HTTPS and provides granular cookie consent options, but lacks explicit security headers and a published security policy or incident response contact. WHOIS data confirms the domain's legitimacy and consistency with the corporate identity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and header implementation are recommended.

A

Autostrada Wielkopolska SA

autostrada-a2.pl

54

Autostrada Wielkopolska SA operates and manages toll highways in Poland, specifically the A2 route connecting Poland and Germany. The company provides toll collection services, traveler information, and infrastructure management. The website is professionally designed, multilingual, and targets drivers and transport companies. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

AAA AUTO

aaaauto.pl

69

AAA AUTO is the largest used car seller in Central Europe, operating a comprehensive platform for buying, selling, and financing used vehicles primarily in Poland. The website offers a professional and user-friendly experience with extensive filtering options, online purchase capabilities, and a network of physical locations. The technical infrastructure leverages modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates a mature digital presence aligned with its market position.

Ś

Śląski Klaster Lotniczy

aerosilesia.eu

46

Śląski Klaster Lotniczy is a Polish aviation cluster organization dedicated to supporting and promoting aviation-related businesses and projects primarily in the Silesian region. The website serves as a hub for news, projects, events, and member information, targeting industry professionals and cluster members. The organization emphasizes internationalization, innovation, and collaboration within the aerospace sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Analytics, and social media integrations, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and basic security practices observed, though additional security headers and incident response information could enhance protection. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website is professional, trustworthy, and well-positioned within its niche.