Transportation security reports

R

redBus

redbus.pe

70

redBus is a leading global online platform specializing in bus ticket sales, with a strong presence in Peru and five other countries. Founded in 2006, it has sold over 220 million tickets and serves more than 36 million customers worldwide. The company offers a comprehensive service including ticket comparison, booking, and customer support, positioning itself as a market leader in the transportation sector. The website is professionally designed, mobile-optimized, and provides multilingual and multi-currency support to cater to a diverse audience. Technically, the website leverages modern web technologies including React, New Relic for monitoring, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Criteo. The infrastructure appears robust with fast loading times and good SEO practices. Security is well-implemented with HTTPS and SSL encryption, though explicit security headers could be improved. Privacy policies and cookie consent mechanisms are present, indicating a baseline compliance with data protection norms. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a public WHOIS record and lack of explicit security policies or incident response contacts suggest areas for improvement in transparency and trust. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, establishing a vulnerability disclosure program, and improving accessibility compliance to further strengthen trust and compliance.

redBus Malaysia is a leading online platform specializing in bus and ferry ticket bookings across Malaysia and Singapore, supported by a large network of over 130 bus operators and 4,000 routes. The platform offers a seamless user experience through its website and mobile apps, providing features such as QR code boarding passes, cashback offers, and flexible payment options. The company is part of the Ibibo Group Pvt Ltd, a reputable parent organization, enhancing its market credibility. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and is hosted on AWS infrastructure, ensuring scalability and reliability. Security posture is solid with HTTPS enforced and secure cookie practices, though improvements in DNSSEC and security headers are recommended. Privacy policies are present but lack explicit consent mechanisms, indicating room for compliance enhancement. Overall, redBus Malaysia presents a professional, trustworthy, and user-friendly service with a strong market position in the transportation sector.

redBus Singapore is a leading online ticket booking platform specializing in bus and ferry tickets within Singapore and to nearby regions such as Malaysia and Thailand. It operates as part of the Ibibo Group Pvt Ltd, leveraging a strong market position with partnerships across 80+ bus operators and over 800 routes. The platform offers a user-friendly booking experience with multiple payment options and promotional discounts, targeting general travelers and commuters. The website demonstrates a mature digital presence with modern web technologies, mobile optimization, and comprehensive content including FAQs and offers. Technically, the site employs advanced monitoring and analytics tools such as New Relic, Google Tag Manager, and Criteo for performance and marketing insights. It uses SPA frameworks and is hosted on a robust CDN infrastructure (Akamai). The site is well-optimized for SEO and mobile devices, with structured data enhancing search visibility. From a security perspective, the website enforces HTTPS and integrates security monitoring but lacks explicit public security policies or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is evident with privacy and cookie policies and consent mechanisms, aligning with GDPR standards. Overall, redBus Singapore presents a trustworthy and professional online travel service with strong business credibility and technical maturity. Strategic improvements could include publishing detailed security and incident response policies and enhancing accessibility compliance to further strengthen user trust and regulatory adherence.

redBus is a leading online platform specializing in bus and train ticket bookings primarily in India, holding the position as India's No. 1 online bus ticket booking site. The platform caters to a broad audience seeking convenient and affordable travel options, offering services including ticket booking for state government and private bus operators, train ticket bookings as an authorized IRCTC partner, and various promotional offers. The website demonstrates a mature business model focused on transportation services with strong partnerships with government transport corporations, enhancing its market credibility. Technically, the website employs modern web technologies such as React, Google Analytics, Google Tag Manager, and Taboola for advertising and tracking. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features are basic. Performance is moderate, with optimizations like preconnect and font preloading evident. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers in the provided data. There is no visible privacy or cookie policy, nor explicit contact information for security incidents or data protection officers, indicating gaps in privacy compliance and incident response readiness. The use of third-party scripts introduces potential risk vectors that should be regularly audited. Overall, redBus presents a trustworthy and professional online travel booking platform with strong business credibility but could improve its privacy compliance and security posture by implementing comprehensive policies, security headers, and clear incident response contacts.

R

redBus

redbus.vn

71

redBus.vn is a leading online bus ticket booking platform in Vietnam, offering a wide range of bus and limousine ticketing services with competitive pricing and promotional discounts. The platform targets individual travelers and tourists seeking convenient and reliable intercity bus travel options. Owned by Ibibo Group Pvt Ltd and founded in 2006, redBus has established a strong market presence with a professional website, comprehensive service offerings, and customer support channels. Technically, the website employs modern SPA frameworks, integrates advanced monitoring tools like New Relic, and uses CDN services for performance optimization. Security posture is strong with HTTPS enforcement and secure cookie practices, though explicit security policies and incident response details are not publicly disclosed. Overall, redBus.vn demonstrates a mature digital infrastructure and trustworthy business operations suitable for its market segment.

R

redBus

redbus.com

72

redBus is a leading global online bus ticket booking platform operating since 2006 and serving multiple countries including India, Malaysia, Singapore, Indonesia, Peru, and Colombia. It is part of the Ibibo Group Pvt Ltd and offers a comprehensive service for bus travel including ticket booking, schedule comparison, airport transfers, and easy cancellation/refund options. The website is professionally designed with good content quality and clear navigation, targeting general consumers seeking bus travel solutions. Technically, the platform uses modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Riskified for fraud prevention. Security posture is strong with HTTPS enforced and recaptcha integration, though additional security headers could enhance protection. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. WHOIS data is unavailable, possibly due to privacy protection, but the website's business credibility and trust indicators are high. Overall, redBus demonstrates a mature digital presence with a strong market position in transportation ticketing.

redBus Indonesia operates a comprehensive online bus ticket booking platform serving Indonesia and other global markets. The company offers a user-friendly service that enables customers to book bus tickets, select seats, and access multiple payment options securely. The platform is supported by a modern technical infrastructure including SPA frameworks, performance monitoring, and integration with major analytics and advertising networks. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Overall, redBus Indonesia presents a credible and professional online presence with a large user base and extensive operator partnerships.

T

TKT.GE

tkt.ge

64

TKT.GE is a Georgian online ticketing platform established in 2017, offering a wide range of tickets including cinema, concerts, bus, flights, railway, and theatre. It targets Georgian-speaking customers seeking convenient access to entertainment and transportation tickets. The platform is positioned as a leading local service with a medium-sized business footprint. Technically, the website uses modern frameworks such as Next.js and React, hosted behind Cloudflare, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and security headers present, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic with a cookie policy and consent mechanism but no detailed privacy policy or GDPR compliance indicators. Overall, the domain registration data is consistent and supports the legitimacy of the business.

M

ახალი და მეორადი ავტომობილები, მოტოტექნიკა, სპეცტექნიკა | MyAuto

myauto.ge

62

MyAuto.ge is an online Georgian marketplace specializing in new and used automobiles, motor equipment, and special machinery. The website targets Georgian-speaking users interested in vehicle transactions and related equipment. The business model focuses on providing a platform for listings rather than direct sales. The site uses modern web technologies including Vue.js and integrates tracking and advertising tools such as Hotjar and adocean. However, the website lacks visible privacy and cookie policies, contact information, and detailed business credentials, which impacts its trustworthiness and compliance posture. The WHOIS data is incomplete, with no registrar or registrant details, reducing transparency and raising concerns about domain legitimacy. Security measures include Google reCAPTCHA to prevent automated abuse, but no security headers or SSL configuration details were found in the provided data. Overall, the site is functional and accessible but requires improvements in compliance, transparency, and security best practices to enhance user trust and regulatory adherence.

M

Motorkáři.cz

motorkari.cz

42

Motorkáři.cz is a well-established Czech online platform dedicated to motorcycle enthusiasts, providing comprehensive content including news, reviews, motorsport coverage, community forums, and classified ads. It holds a strong market position as the largest motorcycle-related website in the Czech Republic, targeting primarily Czech-speaking motorcycle riders and fans. The business model relies on advertising revenue and premium content subscriptions, supported by a medium-sized operation with a consistent brand presence since 2001. Technically, the website employs a custom CMS with a technology stack that includes MooTools JavaScript framework, JWPlayer for video content, and Google Analytics for user tracking. The site is mobile responsive, well-structured, and optimized for SEO, offering a good user experience with moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and uses secure login forms, with no visible vulnerabilities or exposed sensitive data. However, it lacks several security best practices such as security headers (CSP, X-Frame-Options), explicit privacy and cookie policies, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain trust analysis, though the website content and structure indicate legitimacy. Overall, Motorkáři.cz presents a professional and content-rich platform with moderate security and privacy compliance. Strategic improvements in privacy policy transparency, cookie consent, security headers, and domain registration transparency would enhance trust and compliance, supporting its continued leadership in the Czech motorcycle media space.

H

HEASN Ltd.

thehea.org.uk

44

The Highway Electrical Association (HEA) is a UK-based trade association established in 2011, representing over 100 organizations in the highway electrical sector. It provides membership services, training, registers, and resources to its members, positioning itself as a leading and influential body within the transportation industry. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at industry professionals and organizations. Technically, the site is built on WordPress with modern libraries and plugins, hosted by a reputable UK provider, and employs HTTPS with a valid SSL certificate. Security measures include Google reCAPTCHA and a cookie consent mechanism, though there is room for improvement in security headers and published policies. Overall, the site demonstrates a good security posture and business credibility, with moderate user tracking via Google Analytics and basic privacy compliance.

P

PRESTOL

prestolboats.com

60

PRESTOL is a small Latvian company specializing in the design and manufacture of high-quality racing kayaks, canoes, and stand up paddling boards (SUP). The company targets paddling sports enthusiasts and athletes, offering cutting-edge paddling sports equipment and accessories. The website is professionally designed using the Wix platform, providing a good user experience with clear navigation and mobile optimization. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and privacy policy documentation. Overall, the business presents a credible front but would benefit from improved transparency and security practices.

C

C.H. Robinson

navispherecarrier.com

59

Navisphere Carrier is a digital platform associated with C.H. Robinson, a major global logistics and transportation company. The platform appears designed to serve carriers and logistics partners, facilitating freight management and transportation services. The website is built using modern web technologies such as React and integrates multiple marketing and analytics tools, indicating a mature digital infrastructure. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy or possible proxy/privacy protection issues. The website links to official C.H. Robinson privacy and terms pages, reinforcing its corporate affiliation. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Overall, the site is functional but could improve transparency and compliance aspects.

BMW Latvia operates as the official representative and dealership for BMW vehicles in Latvia, managed by Inchcape Motors Latvia. The website offers comprehensive information on new and used BMW cars, electric vehicles, servicing, accessories, and test drive bookings, targeting Latvian customers interested in premium automotive products. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and performance monitoring tools, ensuring a responsive and professional user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit privacy and terms of service pages are not detected, indicating room for compliance improvement. The absence of WHOIS data limits domain trust verification, but branding and linked partner domains support legitimacy.

D

Die Werkstattkenner GmbH

werkstattkenner.de

51

Die Werkstattkenner GmbH operates a reputable online platform focused on providing verified and trustworthy automotive workshop reviews across Germany. With over 1,000 verified workshops and more than 500,000 customer reviews accumulated over 8 years, the company holds a strong market position in the transportation sector. Their services cater primarily to car owners seeking reliable workshop recommendations and to workshop operators aiming to enhance their online reputation. The website features a modern technical stack including jQuery, Bootstrap, and Swiper.js, hosted on German infrastructure with netcup nameservers. The site is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a professional and trustworthy presence with room for technical and security enhancements.

S

SIXT Leasing

sixt-leasing.lv

56

SIXT Leasing is a well-established automotive leasing and fleet management company operating primarily in Latvia and the Baltic region. The company offers a comprehensive range of services including full-service leasing, fleet management, vehicle sales, and short-term rentals, targeting business clients. It is affiliated with the global Element-Arval alliance and the SIXT brand, which enhances its market credibility and reach. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on an older TYPO3 CMS version but integrates modern tracking and consent management tools such as Cookiebot and Google Tag Manager. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a detailed privacy policy and cookie management. Overall, the site presents a trustworthy and professional image suitable for its B2B audience.

The website www.mini.lv is an official localized digital presence for the MINI automotive brand in Latvia, operated under the BMW Group umbrella. It offers comprehensive information and services related to new and used MINI cars, including model details, accessories, connected services, and financial offerings. The site targets car buyers and enthusiasts in Latvia, positioning itself as a key regional brand portal. Technically, the site leverages modern web technologies including Adobe Experience Manager CMS, Akamai CDN, and advanced JavaScript libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are not detected in the provided content. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, the site demonstrates a professional and trustworthy brand presence with room for improvement in privacy compliance and explicit security policy disclosures.

F

Ferrari

ferraridealers.com

64

The website ferraridealers.com serves as the official global portal for Ferrari's authorized dealerships, workshops, and service centers. It provides comprehensive information about Ferrari's dealer network, including showrooms, workshops, Classiche certification, and body shops worldwide. The site targets Ferrari enthusiasts, prospective buyers, and current owners seeking official Ferrari services and support. The business model revolves around facilitating access to Ferrari's premium automotive products and services through a trusted dealer network. Technically, the site employs modern web technologies such as React, Next.js, and Redux, with integrations for analytics and marketing via Google Tag Manager and Adobe DTM. Hosting and DNS are managed through Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency and compliance in privacy and security disclosures.

P

Porsche

porsche.lv

62

The website dealer.porsche.com/lv/riga/lv-LV serves as the official Porsche dealership portal for the Riga region in Latvia. It offers comprehensive information about new and used Porsche vehicles, services including maintenance and test drives, and direct contact options. The site leverages Porsche's official branding and design system, ensuring a consistent and premium user experience targeted at prospective Porsche customers in Latvia. The business model focuses on automotive sales and after-sales services, positioning itself as a key regional player within Porsche's global network. Technically, the website employs modern web technologies including ES modules, lazy loading, responsive images, and a dedicated Porsche Design System framework. It integrates Google Tag Manager for analytics and uses Usercentrics for consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Hosting details are not explicit, but the performance and technical implementation indicate a well-maintained platform. From a security perspective, the site uses HTTPS and implements consent mechanisms for privacy compliance. However, explicit security headers and detailed privacy policies or terms of service pages are not evident in the provided content. No vulnerabilities or exposed sensitive data were detected, and no incident response or vulnerability disclosure information is published. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the domain is a legitimate part of Porsche's web infrastructure. Overall, the website presents a professional, secure, and user-friendly platform for Porsche customers in Latvia. Strategic improvements include publishing comprehensive privacy and security policies, adding explicit security headers, and providing incident response contacts to enhance trust and compliance.

M

Moller Auto

mollerauto.lv

71

Moller Auto is a prominent automotive dealership operating in Latvia, serving as the official dealer for Volkswagen and Audi brands. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, spare parts, accessories, leasing, insurance, and trade-in options. The website reflects a well-established business with a focus on the Latvian market and a professional brand presence. Technically, the site is built on Magento with a ScandiPWA frontend, leveraging modern web technologies and third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and OneTrust for cookie consent management. Security posture is solid with HTTPS enforced and appropriate security headers, although explicit privacy and terms of service pages are not clearly detected in the provided content. The absence of WHOIS data limits full domain legitimacy verification, but the site’s branding and content suggest a legitimate and trusted business entity. Overall, the website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content for its target audience.

BMW-inchcape.lv is the official BMW representative website for Latvia, operated by Inchcape Motors Latvia. The site offers comprehensive information on new and used BMW vehicles, special offers, servicing, accessories, financing options, and test drive bookings. The business is positioned as a medium-sized automotive dealership with strong branding and a clear focus on the Latvian market. The website demonstrates a professional design with consistent branding and clear navigation, targeting BMW customers and prospects in Latvia. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and various analytics and tracking tools such as Microsoft Application Insights, Hotjar, and Google Tag Manager. It uses Google reCAPTCHA v3 for form security and Usercentrics for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like CSP or HSTS were not detected in the provided data, and no dedicated security or incident response pages were found. No vulnerabilities or exposed sensitive data were observed. Privacy compliance is well addressed with clear privacy and cookie policies linked to reputable domains, and GDPR compliance is evident. Overall, the website presents a low-risk profile with strong business credibility and good technical and security posture. The lack of WHOIS data limits domain registration trust analysis, but the site’s content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen the security and compliance posture.

A

Audi Latvija

audi.lv

69

Audi Latvija operates as the official regional website for Audi in Latvia, providing comprehensive information about the latest Audi models, brand news, and services such as test drive bookings. The site targets Latvian consumers interested in premium automotive products, emphasizing electric and hybrid vehicle offerings. The business is positioned as a medium-sized entity under the global Audi AG brand, focusing on automotive sales and brand engagement within the Latvian market. Technically, the website leverages modern web technologies including React-based components, GraphQL APIs, and a proprietary CMS platform (Falcon), ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a professional and trustworthy digital presence aligned with Audi's global standards.

STATS Rent is a Latvian company specializing in the rental of construction machinery and equipment, offering a broad range of products including tractor machinery with operators, lifting equipment, scaffolding, and various construction tools. The company operates multiple physical locations across Latvia, providing 24/7 customer support and additional services such as transport and equipment repair. Their website is built using modern web technologies, primarily React and Material-UI, and includes essential business information and partner affiliations. Technically, the website demonstrates a moderate level of digital maturity with responsive design, basic SEO, and integration of Google Tag Manager for analytics. However, there is room for improvement in security headers and accessibility features. The site uses HTTPS, but explicit security policies and vulnerability disclosure mechanisms are absent. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is addressed with visible cookie consent and privacy policy pages, indicating awareness of GDPR requirements. Overall, STATS Rent presents a professional and trustworthy online presence suitable for its market segment, though enhancing security practices and transparency would strengthen its risk posture and customer trust.

SIA eMobility is a Latvian company specializing in the design and manufacture of electric vehicles, including electric minibuses and panel vans. The company emphasizes eco-friendly and efficient transportation solutions, supported by European Union regional development funds and business incubator programs. Their product offerings include opportunity charge electric minibuses and electric panel vans with detailed technical specifications. The website targets public transport operators and environmentally conscious organizations in Latvia and the Baltic region. Technically, the website is built on WordPress 5.3.18 with jQuery 2.1.4 and integrates Google Maps API for location display. SEO is basic with canonical and alternate language links present. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS. Forms do not show anti-CSRF tokens or advanced input sanitization. No privacy or cookie policies are present, which is a compliance gap. WHOIS data could not be retrieved due to query limits, but no suspicious indicators were found on the site. Contact information is clearly provided, enhancing trust. Overall, the website is functional and professional but could improve in privacy compliance and security hardening. The business appears legitimate with EU funding and physical presence in Riga. Strategic improvements in security headers, privacy policies, and technology updates would enhance trust and compliance.

D

Drive eO

driveeo.com

49

Drive eO is a specialized engineering and consulting company focused on the design and manufacture of prototype electric and hybrid vehicles, particularly in the high-performance and racing sectors. Their services include integration of electric drive systems, motor controllers, custom battery packs, and supervisory controllers. The company targets electric vehicle enthusiasts, racing teams, and prototype developers, positioning itself as a niche provider in sustainable transportation technology. The website reflects a small but professional operation with consistent branding and good content quality. Technically, the website is built on WordPress with modern SEO tools like Yoast and integrates social media platforms such as Twitter and Facebook. Hosting and DNS services are provided via Cloudflare, ensuring good performance and HTTPS security. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. Analytics usage is moderate with Google Analytics tracking but lacks clear privacy and cookie policies. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit privacy, cookie, and security policies, as well as incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is functional, professional, and secure at a basic level but would benefit from enhanced privacy compliance, security headers, and transparency around data protection and incident response to improve trust and compliance posture.

S

Shiperone

shiperone.com

63

Shiperone is a supply chain orchestration platform focused on streamlining supply chain operations through data instrumentation, accountability, and workflow automation. The company targets businesses seeking to optimize logistics, inventory planning, and order tracking. The website presents a professional and modern interface built on Webflow, leveraging technologies such as Google Tag Manager and Splide.js for enhanced user experience. While the site is well-designed and mobile-optimized, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which may impact user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and content-rich website mitigates some risk. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies.

A

Arcon

arconcontainer.com

57

ARCON Container is a technology-driven logistics company specializing in shipping container leasing, trading, and one-way container movement services primarily in India. It operates as part of the Saksham Group of Companies, a large logistics conglomerate. The website is professionally designed using WordPress with modern technologies including Google Analytics, Microsoft Clarity, and Zoho SalesIQ for customer engagement and analytics. Security measures such as HTTPS, reCAPTCHA, and anti-spam plugins are implemented, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data is a notable concern but the website's content and business information appear consistent and credible. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and security posture.

S

Sharp Logistics

vrsharp.com

48

Sharp Logistics, operating under the brand Vsharp, is a well-established Indian logistics company with a history dating back to 1996. They provide integrated project logistics services including road and ocean transport, customs clearance, and packaging. Their digital platform facilitates easy quote requests and service management, targeting businesses requiring comprehensive logistics solutions. The company maintains a strong market position with a presence in 190 port cities and a network of agents and offices. Technically, the website employs modern frontend technologies such as Bootstrap 5.3.1, AOS animations, and uses AWS Cloudfront CDN for asset delivery. The site is mobile-optimized and provides a professional user experience, though SEO and accessibility features are basic. Forms are integrated via LeadSquared for lead capture but lack visible privacy or cookie consent mechanisms. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks visible security headers and DNSSEC is not enabled. No privacy, cookie, or security policies are published, and there is no incident response contact information. These gaps represent compliance and security risks. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency to improve trust and regulatory adherence.

S

Saksham Group

sakshamgroup.in

47

Saksham Group is a well-established global logistics conglomerate headquartered in Mumbai, India, with over 27 years of experience and operations spanning more than 275 port cities across 84 countries. The company offers a broad range of integrated logistics services including project cargo, liquid and chemical transportation, freight forwarding, container leasing, shipping services, and vessel operations. Their business model leverages multiple specialized subsidiaries and brands to provide comprehensive solutions to their clients worldwide. The website reflects a professional and consistent brand image targeting businesses requiring complex logistics and shipping services. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good navigation and content quality, although SEO and accessibility features are basic. No CMS or hosting provider details were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks visible security headers and incident response contacts. No privacy or cookie policies were found, indicating gaps in compliance with privacy regulations such as GDPR. The absence of forms on the homepage reduces immediate attack surface, but overall security posture could be enhanced by implementing standard security headers, privacy policies, and incident response mechanisms. Overall, the website is functional and professional but would benefit from improved privacy compliance and security best practices to enhance trust and reduce risk.

S

Sarjak Container Lines

sebertshipping.com

55

Sarjak Container Lines is an established project logistics company based in India, founded in 2003, specializing in freight forwarding and global shipping solutions. The company positions itself as a leading provider in the Indian logistics sector, offering key services such as odd dimensional containerized cargo, breakbulk and chartering, heavylift on container vessels, and end-to-end project logistics. Their target audience primarily includes businesses requiring specialized logistics and freight forwarding services both domestically and internationally. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Google Tag Manager, supporting data-driven decision making. The website is mobile optimized with good SEO practices and a clear navigation structure, providing a positive user experience. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protection enabled. Cookie consent mechanisms are implemented with granular user controls, supporting GDPR compliance. However, there is room for improvement in security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid business credibility and technical maturity with a good security posture. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

S

Stena Line Freight

stenalinefreight.com

62

Stena Line Freight is a well-established European freight ferry and shipping logistics provider with a large route network connecting key ports across Europe. The company offers a range of services including shipping logistics, intermodal solutions, customer support systems, and customs services, positioning itself as a major player in the transportation sector. The website reflects a mature digital presence built on WordPress, leveraging modern tracking and marketing tools with appropriate privacy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company’s credibility and market position.

D

DFDS A/S

dfdsseaways.com

78

DFDS A/S operates a comprehensive European ferry and cruise service network, positioning itself as a leading ferry operator with multiple routes connecting the UK, Scandinavia, the Baltics, and other European destinations. The website offers detailed information on passenger and freight ferry services, mini cruises, package holidays, and onboard amenities, targeting travelers and logistics customers. The company demonstrates strong market presence and brand consistency, supported by industry recognition such as the World’s Leading Ferry Operator nomination for 2025. Technically, the website is built on modern frameworks including React and Gatsby, leveraging Contentful CMS and integrating Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data limits domain trust analysis; however, the professional site content, comprehensive privacy and cookie policies, and active social media presence strongly indicate a legitimate and credible business. Overall, the site reflects a mature digital infrastructure aligned with business goals and compliance requirements.

V

Viking Line

vikingline.ee

58

Viking Line is a well-established transportation company specializing in ferry and cruise services across the Baltic Sea region, including routes to Helsinki, Stockholm, and Åland. The website reflects a mature digital presence with multi-language support targeting Nordic and Baltic markets. Key services include line ferry trips, cruises, hotel packages, and group travel, positioning Viking Line as a major regional player in maritime passenger transport. The website content is professionally structured and relevant to its target audience of travelers and business clients. Technically, the site uses modern web technologies such as Cookiebot for cookie consent management and Google Tag Manager for analytics, with a custom or proprietary CMS. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business's long history. Overall, Viking Line's website is professional, secure, and compliant, supporting its business credibility and customer trust.

S

Sarjak Container Lines

sarjak.com

54

Sarjak Container Lines is a well-established project logistics company founded in 2003 in India, specializing in oversized and out-of-gauge cargo transport, freight forwarding, and global shipping solutions. The company has grown to become a leader in end-to-end project logistics with a specialized fleet and a global footprint. Their website reflects a mature digital presence built on WordPress with Elementor, incorporating SEO best practices and modern tracking tools. Security posture is good with HTTPS and client transfer protection on the domain, though improvements such as DNSSEC and CSP headers are recommended. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Contact information is primarily via web forms, with social media presence on LinkedIn. Overall, the website and domain data indicate a legitimate, professional business with moderate to good technical and security maturity.

O

Ocean Network Express Pte. Ltd.

one-line.com

70

Ocean Network Express Pte. Ltd. (ONE) operates as a leading global container liner shipping company, providing comprehensive ocean and intermodal freight services. The company maintains a large fleet and extensive port network, targeting businesses requiring reliable global logistics solutions. The website demonstrates a mature digital presence built on Drupal 10, integrating modern analytics and marketing tools such as Google Analytics, Heap Analytics, and Salesforce Live Chat. The site is well-structured, mobile-optimized, and professionally designed, reflecting the company's market position and service offerings. Security posture is solid with HTTPS enforced and secure forms, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for enterprises. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting ONE's business credibility and customer engagement.

C

CityBee

citybee.lv

73

CityBee is a Latvian car-sharing service offering vehicle rental solutions primarily targeting local residents and visitors. The website presents a professional and consistent brand image with a clear focus on transportation services. The business operates in the transportation sector with a medium market presence and was founded around 2021. The website is built on WordPress and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism via Cookiebot, indicating a moderate level of digital maturity. From a security perspective, the website uses HTTPS, which is mandatory for secure communications. However, no explicit security headers were detected in the HTML content, and there is a lack of visible contact information for incident response or security policies. The absence of a published privacy policy and terms of service reduces the privacy compliance score, although the cookie consent banner suggests some GDPR awareness. No WHOIS data was available due to query limits, limiting the ability to fully verify domain legitimacy and registration details. Overall, the website is functional, well-designed, and provides relevant content for its target audience. The security posture is moderate but could be improved by implementing additional security headers, publishing privacy and terms documents, and providing clear contact information. The risk assessment indicates a generally trustworthy site with room for compliance and security enhancements.

S

SIA Electrify

electricbus.lv

44

SIA Electrify is a Latvian-based company specializing in electric mobility solutions for public transport, focusing on retrofitting electric buses, minibuses, and vans, along with providing charging infrastructure and maintenance services. The company positions itself as a niche player in the European electric transportation retrofit market, supported by ISO certifications and public funding. Their website is built on WordPress with Elementor, featuring professional design and clear navigation, targeting transport operators and municipalities interested in sustainable transport solutions. Technically, the site uses modern web technologies and SEO tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy compliance is partial, missing explicit privacy and cookie policies. Contact information is clearly presented, including emails, phone numbers, and physical address, enhancing business credibility. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the website reflects a professional and credible business with room for improvement in privacy and security transparency.

Y

Yodel Delivery Network Limited

yodeldriver.co.uk

66

Yodel Delivery Network Limited operates a UK-focused platform recruiting self-employed delivery drivers offering flexible work and competitive pay. The website presents a professional and well-structured digital presence with clear calls to action and detailed driver role descriptions. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and October CMS, with embedded analytics and marketing tools such as Google Analytics and Trustpilot widgets. Security posture is strong with HTTPS and Content Security Policy in place, complemented by GDPR-compliant cookie consent mechanisms. However, the domain WHOIS data is unavailable due to domain naming rules violations, which introduces some uncertainty about domain registration legitimacy. Overall, the site reflects a mature business with a solid market position in parcel delivery services.

Philippine Airlines Inc. operates as the flag carrier airline of the Philippines, offering passenger and cargo air transportation services both domestically and internationally. The company targets a broad audience including leisure travelers, business clients, and cargo customers. It holds a significant market position as the largest airline in the Philippines, providing key services such as flight bookings, cargo logistics, and loyalty programs. The website reflects a mature digital presence with professional design and comprehensive content tailored to its audience. Technically, the website is built on a modern stack including Angular and Adobe Experience Manager, supported by various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security measures include HTTPS enforcement and standard security headers, although explicit incident response and vulnerability disclosure information are not publicly available. The security posture is generally strong with no obvious vulnerabilities detected in the content or scripts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a major airline and warrants further verification. Overall, the website demonstrates a high level of professionalism and trustworthiness, though improvements in transparency around security policies and domain registration details are recommended. Strategic recommendations include publishing an incident response policy, establishing a vulnerability disclosure program, enhancing accessibility, and regularly auditing third-party scripts to maintain security and compliance. These steps will strengthen the company's security culture and enhance user trust.

D

deSter

dester.com

71

deSter is a well-established company specializing in innovative and sustainable food packaging and serviceware solutions primarily for the aviation and food service industries. With over 40 years of experience, the company positions itself as a leader in sustainable product innovation, supported by recognized certifications such as the EcoVadis Platinum rating. The website reflects a mature business with a professional design, clear navigation, and a focus on sustainability and market growth through an online shop targeting small and medium enterprises. Technically, the site is built on WordPress with Elementor and employs modern analytics and cookie consent tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and enhancing security headers. Overall, the website is trustworthy and professional but would benefit from adding privacy and security policy documents to improve compliance and transparency.

G

gategroup

gategroup.com

75

gategroup is a global leader in airline catering and hospitality services, connecting people worldwide through culinary experiences. The company operates multiple brands and subsidiaries, serving airlines and airports with a comprehensive portfolio of food and hospitality solutions. The website reflects a mature enterprise with a strong market position and a clear focus on sustainability and corporate governance. Technically, the site is built on WordPress with modern tools like Elementor and integrates advanced analytics while maintaining good privacy compliance. Security posture is strong with HTTPS, security headers, and domain protections, though DNSSEC is not enabled. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

Tachostar is a specialized B2B platform operated by Intelligent Systems SIA, focused on providing digital tachograph data management and compliance solutions primarily for fleet operators and transport companies. The website offers features such as real-time fleet tracking, driver activity monitoring, automated infringement checking, and comprehensive reporting. The company positions itself as a niche provider in the transportation sector with a small company size and a business history dating back to 2015. Technically, the website uses a moderately modern tech stack including jQuery, Bootstrap, and OpenLayers for mapping, but relies on older JavaScript libraries that may pose security risks. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting and domain registration are stable and consistent with the business profile. From a security perspective, the site lacks advanced security headers and DNSSEC, and uses outdated libraries, which lowers its security posture. Privacy and cookie policies are present but basic, with no visible terms of service or incident response information. Contact information is transparent and comprehensive, enhancing business credibility. Overall, the website is functional and professional but would benefit from security and compliance improvements to enhance trust and reduce risk.

I

Intelligent Systems

skyfms.com

52

Intelligent Systems is a Latvian-based company specializing in full cycle telemetry solutions, focusing on GPS fleet management, fuel control, routing, and task management. The company serves over 2500 customers internationally and locally, providing hardware and software solutions tailored for fleet control and monitoring. Their website reflects a mature business with a clear market position in the transportation sector, offering a range of services including online tracking, alerts, safety systems, and driver behavior analysis. Technically, the website employs a variety of JavaScript libraries and frameworks such as jQuery, Galleria, and OpenLayers for mapping, indicating a moderately modern tech stack. However, some libraries like jQuery are outdated, which could pose security risks. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features implemented. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and uses outdated libraries, which lowers its security posture. Privacy and cookie policies are present, indicating some compliance with GDPR, but no explicit security or incident response policies are published. WHOIS data could not be retrieved, limiting domain trust verification. Overall, the site is functional and professional but would benefit from technical updates and enhanced security measures to improve trust and compliance.

Veho Group is a company specializing in sustainable mobility solutions, operating primarily in the Nordic and Baltic regions. The company positions itself as a sustainability leader in the automotive industry, focusing on delivering superior customer experiences and environmentally responsible products and services. Their website reflects a professional corporate presence with clear messaging about sustainability and customer-centric values. Technically, the website is built on the Crasman Stage CMS platform, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting and DNS services are managed via Cloudflare, providing good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and a comprehensive cookie consent mechanism. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it suitable for its target audience and business goals.

V

Veho SIA

veho.lv

64

Veho SIA is the sole official representative of Mercedes-Benz AG and Daimler Truck AG in Latvia, providing a comprehensive range of automotive services including new and used vehicle sales, servicing, parts, and financial services. The company holds a strong market position as the exclusive dealer and service provider for these prestigious brands, targeting both private and commercial customers within Latvia. The website reflects a mature digital presence with modern technologies such as Next.js and React, integrated consent management, and analytics tools, supporting a professional and user-friendly experience. Security posture is solid with HTTPS enforcement and consent-based data collection, though there is room for improvement in security headers and accessibility compliance. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data limitations restrict full domain registration verification.

Fits Traffic is a Latvia-based technology company specializing in computer vision solutions tailored for transportation sectors including tolling, road safety, and traffic management. The company positions itself as a pioneer in the Baltic region, offering advanced cloud and machine learning powered platforms to public authorities, traffic police, toll-road operators, and traffic management centers. Their business model focuses on providing integrated, cost-efficient, and reliable intelligent transportation systems. Technically, the website is built on WordPress with Elementor, leveraging Google Analytics and Tag Manager for tracking, and hosted via GoDaddy. The site demonstrates good SEO and mobile optimization, with comprehensive privacy and cookie policies indicating GDPR compliance. Security posture is solid with HTTPS enforced and domain locking, though additional HTTP security headers and explicit security policies could enhance trust. Overall, Fits Traffic presents a professional and credible digital presence aligned with its business objectives.

V

VECOSYS

vecosys.hu

55

VECOSYS is a Hungarian technology company specializing in parking technologies, access control systems, queue management, and smart city solutions. Established in 2010, it serves primarily B2B clients such as municipalities and businesses requiring advanced access and parking management solutions. The company positions itself as a niche provider in the smart city and transportation technology sectors, offering tailored real-world solutions. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on WordPress using the GeneratePress theme and Elementor page builder, enhanced with Yoast SEO and Cookiebot for compliance and analytics. The site uses HTTPS with good SSL configuration and integrates Google Analytics with IP anonymization, demonstrating a moderate level of digital maturity. Mobile optimization and SEO practices are good, though accessibility is basic. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, including detailed cookie categorization and user controls. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious patterns were found, indicating a solid security posture but with room for improvement in formal policies and header implementation. Overall, the website is trustworthy and professional with good privacy compliance. The absence of direct contact information and terms of service pages slightly limits transparency. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

A

ASYAD

asyadcareers.om

68

ASYAD Careers website serves as the official job portal for ASYAD Group, a major logistics and transportation conglomerate in Oman. The site provides detailed job listings primarily in maritime, shipping, and production control sectors, targeting professionals seeking employment within Oman’s logistics industry. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience for job seekers. The technical infrastructure is based on ASP.NET Web Forms with Bootstrap and jQuery, hosted by Ooredoo, indicating a stable and enterprise-grade environment. However, the site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. Security posture is moderate with HTTPS usage and CSRF tokens but missing security headers and advanced protections. Overall, the site is legitimate, well-branded, and functional but would benefit from enhanced privacy and security measures to align with best practices and regulatory requirements.

M

Fly High for Less | Military Discount Flights

militaryfares.com

63

Militaryfares.com is an online travel booking platform specializing in providing discounted flights, hotels, car rentals, and vacation packages targeted primarily at military personnel and their families. The website offers a user-friendly interface with multiple booking options including one-way, round trip, multi-city flights, and vacation packages. The platform positions itself as a niche service provider catering to the military community with competitive pricing and live agent support. Technically, the website employs modern frontend technologies such as Bootstrap, Swiper.js, and tracking tools like Hotjar and Riskified, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, suggesting the need for further verification. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

L

Loxam

loxam.nl

65

Loxam is a leading equipment rental company specializing in construction, infrastructure, and industrial tools and machinery. The company operates extensively in the Netherlands with nearly 50 branches and offers a broad range of rental equipment including aerial work platforms, excavators, generators, and safety equipment. Their business model focuses on rental services complemented by value-added services such as training, safety programs, and loyalty memberships. The website reflects a strong market position with consistent branding and comprehensive service offerings. Technically, the website is built on a modern e-commerce platform (SAP Hybris Commerce) with responsive design and integration of advanced search capabilities via Algolia. The site uses modern web technologies and is optimized for mobile devices, though accessibility features are basic. Performance is moderate with good SEO and structured data implementation. From a security perspective, the site employs HTTPS and cookie consent mechanisms, and includes CSRF tokens in forms, indicating a reasonable security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent. Certifications such as ISO 9001, ISO 14001, ISO 45001, and Ecovadis ratings enhance trust. No critical vulnerabilities or blocking mechanisms were detected. Overall, Loxam's website demonstrates a professional, secure, and privacy-compliant digital presence suitable for its business scale and sector. Strategic improvements in security transparency and accessibility could further strengthen its posture.