Transportation security reports

A

ATR International AG

atr.de

45

ATR International AG operates as a global trade cooperation entity for leading distributors in the independent automotive aftermarket. Founded in 1967 and headquartered in Denkendorf, Germany, ATR facilitates collaboration among automotive spare parts distributors, manufacturers, suppliers, and independent multi-brand garages. The company focuses on purchasing coordination, digital transformation, workshop concepts, sustainable aftermarket initiatives, and steering committees to strengthen the independent aftermarket and drive collective growth. The website reflects a mature organization with a consistent brand presence and a clear business model centered on trade cooperation rather than direct retail. Technically, the website is built on TYPO3 CMS with Bootstrap 5 and incorporates modern JavaScript libraries such as jQuery and Photoswipe. It uses Matomo for analytics, demonstrating a preference for privacy-conscious tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism that complies with GDPR requirements. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in and revocation capabilities. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, ATR International AG presents a professional, trustworthy online presence aligned with its business objectives. Strategic improvements include publishing a dedicated security policy, incident response contacts, and implementing additional security headers to further strengthen its security posture.

T

Tokić

autocheckcenter.hr

47

Auto Check Center - Tokić is a well-established automotive service network operating multiple service centers across Croatia. The company offers comprehensive vehicle servicing, repairs, diagnostics, and related automotive services, targeting vehicle owners seeking professional and reliable maintenance solutions. The website reflects a mature digital presence with detailed service descriptions, multiple locations, and integration of modern web technologies such as WordPress, Yoast SEO, and Google Maps API. Security posture is strong with HTTPS, security headers, and use of reCAPTCHA for forms, though privacy and cookie policies are missing, representing a compliance gap. Overall, the business demonstrates high credibility and trustworthiness in its sector.

S

SESAR Deployment Manager

sesardeploymentmanager.eu

70

SESAR Deployment Manager is a European intergovernmental entity responsible for coordinating the deployment of SESAR (Single European Sky ATM Research) solutions to modernize air traffic management across Europe. The organization serves a critical role in harmonizing efforts among various aviation stakeholders, including air navigation service providers and regulatory bodies, to improve efficiency and safety in European airspace. The website reflects a professional and authoritative presence consistent with its governmental affiliation, featuring comprehensive information about its mission, projects, and stakeholder engagement. Technically, the website is built using modern web technologies such as React and Gatsby, ensuring fast performance, mobile responsiveness, and good accessibility. The use of OpenLayers indicates interactive map features relevant to its domain. Security posture is strong with HTTPS enforced and appropriate security headers present, although there is room for improvement by adding a public security policy and vulnerability disclosure information. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is readily available, including official emails, phone numbers, and physical address, enhancing business credibility. No suspicious or malicious content was detected, and the site is free from advertising or affiliate marketing, focusing solely on its core mission. Overall, SESAR Deployment Manager's website demonstrates a high level of professionalism, security, and compliance suitable for a European governmental entity. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure channel, and enhancing incident response transparency to further strengthen trust and security posture.

A

AUTO IN

autoin.cz

46

AUTO IN is a well-established automotive business based in the Czech Republic, founded in 2001. The company specializes in the sale and servicing of new and used vehicles, offering a broad portfolio of automotive brands including Ford, Hyundai, Volvo, Kia, Škoda, Peugeot, and Mazda. Their services extend to authorized servicing, vehicle buyback, car rental, and operational leasing, positioning them as a comprehensive automotive provider in their market. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to their target audience of consumers and businesses seeking automotive solutions. From a technical perspective, the website employs modern JavaScript technologies and integrates multiple analytics and marketing tools such as Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, and Piwik PRO. The site is mobile-optimized and demonstrates moderate performance, although some accessibility features could be improved. Hosting appears to be managed by a Czech provider consistent with the domain registration data. Security-wise, the website enforces HTTPS and uses asynchronous loading of tracking scripts, which is positive. However, there is a lack of visible security headers and no published privacy policy or terms of service, which are critical for compliance and user trust. The cookie consent mechanism is implemented, indicating some level of privacy compliance. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details matching the business claims. Overall, AUTO IN's website is professional and trustworthy but would benefit from enhanced privacy disclosures, security header implementation, and clearer contact information to improve compliance and user confidence. Strategic improvements in these areas will strengthen their security posture and regulatory adherence.

Ř

Řízení letového provozu České republiky, s. p.

rlp.cz

61

Řízení letového provozu České republiky, s. p. is a state enterprise responsible for providing air traffic management services in the Czech Republic. The organization offers a broad range of services including aeronautical information management, drone safety information, free route airspace management, ATM training through CANI, flight inspection services, and pilot training via the Czech Aviation Training Centre (CATC). The website serves as a comprehensive portal for information, news, career opportunities, and service offerings targeted at aviation professionals, airspace users, and the general public interested in Czech aviation. The company holds recognized certifications such as EFQM and maintains partnerships with key European and international aviation organizations.

Galileo training, s.r.o. operates the website www.vfrkommunikation.de, providing a specialized web-based learning application focused on English VFR (Visual Flight Rules) communication for pilots. The platform targets private pilots, ultralight pilots, flight schools, and aviation enthusiasts, offering multimedia content including audio recordings of real flight communications, videos, animations, and knowledge tests. The business positions itself as a niche educational provider in the aviation training sector, primarily serving the European market with content in German and Czech languages. The company leverages partnerships with aviation authorities and media outlets to enhance credibility and reach. Technically, the website employs a mix of legacy and modern web technologies including jQuery, Bootstrap, FontAwesome, and several analytics and tracking tools such as Google Analytics, Yandex Metrika, Facebook Pixel, and Smartlook. The site is built on a CMS platform likely Fonio, with moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though some technical debt is evident due to outdated libraries. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms to mitigate spam. However, it lacks modern security headers and uses an outdated jQuery version with known vulnerabilities, which could expose it to risks. Privacy compliance is basic, with cookie consent implemented but no detailed privacy or security policies explicitly found. Contact information is available, but no dedicated security or incident response contacts are provided. Overall, the website is professionally designed and content-rich, serving its educational purpose well. The security posture is moderate but could be improved by updating libraries and implementing stronger security headers. Privacy compliance should be enhanced to meet GDPR standards fully. The domain registration aligns with the business claims, supporting legitimacy. Strategic improvements in security and privacy will strengthen trust and reduce risk exposure.

Galileo training, s.r.o. operates the website www.vfrcom.com, offering an educational application focused on English VFR (Visual Flight Rules) communication for pilots. The business targets pilots, aviation schools, and enthusiasts seeking to improve their international flight communication skills. The website is professionally designed with rich multimedia content including audio recordings, videos, and interactive tests. Technically, the site uses a mix of legacy and modern web technologies such as jQuery, Bootstrap, and FontAwesome, with analytics and tracking via Google Analytics, Facebook Pixel, and Smartlook. Security posture is moderate with HTTPS enforced but lacking some recommended security headers and using older JavaScript libraries. Privacy compliance is basic with cookie consent and a privacy policy present but no advanced GDPR indicators. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, though the website content and contact information appear credible and professional.

U

UAB "Interneto vizija"

esuatsakingas.lt

9

The website 'Esu atsakingas' is an informational platform focused on promoting responsible automotive waste management and environmental awareness in Lithuania. It targets drivers and companies involved in automotive services, providing educational content, news, and resources to encourage environmentally friendly practices. The site is operated by UAB "Interneto vizija", a Lithuanian company, with domain registration consistent with the business profile and location. Technically, the site is built on Drupal 8, uses HTTPS, and integrates Google Analytics and Tag Manager for user tracking. The design and navigation are professional and user-friendly, optimized for mobile devices. However, the site lacks explicit privacy and cookie policies, contact information, and security or incident response disclosures, which are areas for improvement.

FOFR is a Czech logistics and transportation company specializing in parcel and freight delivery services across the Czech Republic and internationally. The company offers a broad range of services including express delivery, oversized cargo transport, ADR transport for dangerous goods, warehousing, and logistics solutions. Their market position is that of a national provider with extensive coverage and a focus on reliability and speed. The website is professionally designed with clear navigation and good content quality, targeting businesses and individuals needing transportation services. Technically, the website uses a custom CMS platform with a technology stack including jQuery, Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA. The site is mobile responsive and uses HTTPS with good SSL configuration. However, some JavaScript libraries are outdated, and accessibility features are basic. The site employs cookie consent mechanisms and tracking scripts with opt-out capabilities. From a security perspective, the website enforces HTTPS and uses CAPTCHA on forms, but lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information support legitimacy. Overall, FOFR presents a solid business and digital presence with room for improvement in privacy policy transparency, security documentation, and WHOIS data availability. Strategic enhancements in these areas would strengthen trust and compliance.

E

ELREC AG

elrec.net

49

ELREC AG is a well-established recycling and waste management company operating primarily in Liechtenstein and adjacent Swiss regions such as Graubünden and St.Gallen. With over 80 years of history, the company offers services including recycling, disposal, and destruction of waste materials. Their market position is that of a trusted regional service provider with certified partnerships in the waste disposal sector. The website targets businesses and organizations seeking professional recycling and disposal solutions. Technically, the website is built on WordPress with modern plugins and analytics tools, hosted by Infomaniak Network SA. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the company's identity, supporting legitimacy and trustworthiness.

N

Nova Find by RUBICON

nova-find.eu

59

Nova Find by RUBICON operates a leading lost and found service network across Europe, targeting public sector entities and transportation companies. The company offers software and digital platforms to streamline lost and found management, serving over 2,500 customers in seven European countries including Germany, Austria, Switzerland, and Italy. The website reflects a professional and consistent brand presence with strong references to major clients such as Hamburg Airport, Deutsche Bahn, and S-Bahn Berlin. Technically, the site is built on WordPress with Elementor and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable due to EURid privacy policies, which is common and justified for this business type. Overall, the website is trustworthy and well-positioned in its niche.

E

Ed. Züblin AG

zueblin-tunnelling.com

65

Ed. Züblin AG is a leading German construction and engineering company specializing in high and civil engineering projects, including tunnel construction, bridge building, and infrastructure development. The company positions itself as the number one in the German market, offering a broad range of services from turnkey construction to sustainable building solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to expert and professional audiences. Technically, the site leverages modern JavaScript libraries, Bootstrap framework, and is hosted on AWS infrastructure, indicating a robust and scalable platform. Security-wise, the website enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses Matomo for analytics, demonstrating a good security posture. However, there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the site is trustworthy, compliant, and well-maintained, supporting the company's enterprise-level stature.

E

Ed. Züblin AG

zueblin-tunnelbau.de

65

Ed. Züblin AG is a leading German construction company specializing in high and civil engineering projects, including tunnel construction, bridge building, and infrastructure development. The company holds a strong market position as the number one in German high and civil engineering construction, offering a comprehensive range of services to its professional and expert target audience. The website reflects a mature digital presence with a professional design, clear navigation, and consistent branding aligned with its enterprise status and industry sector. Technically, the site is built on an IBM Domino backend with modern frontend technologies such as Bootstrap and jQuery, hosted on AWS infrastructure, and integrates privacy-compliant analytics tools like Matomo and eTracker with OneTrust cookie consent management. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response information. Overall, the site demonstrates high professionalism, GDPR compliance, and trustworthy business credibility, making it a reliable digital asset for the company.

K

Kuhn Ladetechnik

kuhn-mt.cz

61

Kuhn Ladetechnik operates as a specialist provider of cranes and lifting technology, targeting businesses and professionals in the transportation and industrial sectors. The website presents a professional and well-structured digital presence, emphasizing their product range and services. The technical infrastructure leverages modern frameworks such as Bootstrap and integrates Cookiebot for cookie consent management, alongside Google Tag Manager for analytics. The site is served over HTTPS with a service worker registered, indicating a commitment to modern web standards and security. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and trust signals. Security posture is generally good with HTTPS and cookie consent, but lacks advanced security headers and incident response disclosures. Overall, the website is legitimate and functional but would benefit from enhanced transparency and security documentation.

G

Gebrüder Weiss

euroexpress.at

59

EuroExpress, operated under the parent company Gebrüder Weiss, is a well-established European logistics cooperative founded in 1982. The company specializes in express delivery, special transport services, and distribution logistics across Europe, supported by a network of over 600 depots. Their website reflects a professional and consistent brand presence targeting business customers requiring fast and reliable transport solutions. Technically, the site is built on TYPO3 CMS, uses modern consent management via Usercentrics, and analytics through Piwik PRO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with GDPR requirements.

X

Xvise

xvise.com

8

Xvise is a logistics consulting company specializing in independent automation planning and implementation support. The website presents a professional image with clear business focus on logistics and technology integration, targeting businesses seeking to optimize their logistics processes. The technical infrastructure is based on WordPress CMS with modern plugins for SEO, analytics, and consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks some advanced security headers and explicit privacy/security policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include improving transparency with privacy and terms policies, securing domain registration details, and enhancing security headers to strengthen trust and compliance.

S

Suzuki

suzuki.hr

49

Suzuki.hr is the official Croatian website representing Suzuki automobiles and motorcycles. The site provides information about Suzuki vehicles with a focus on affordability and quality, targeting general consumers interested in transportation solutions. The website is built on WordPress with modern SEO practices, including structured data and social media integration, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy compliance requirements. However, the absence of a privacy policy and contact information limits full compliance and user trust. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response contacts. Overall, the site is legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures.

H

Hrvatske autoceste d.o.o.

hac.hr

57

Hrvatske autoceste d.o.o. is a Croatian state-owned company responsible for the management, construction, and maintenance of highways in Croatia. The website serves as an information portal for motorway users, offering details on tolls, traffic conditions, and related services. It targets both individual drivers and commercial transport operators, positioning itself as the primary authority for highway infrastructure in Croatia. The company provides electronic toll collection services and real-time traffic updates through dedicated mobile applications. Technically, the website is built using modern web technologies including Vue.js, with a responsive design optimized for mobile devices. Security measures include HTTPS enforcement and CSRF token implementation, alongside a comprehensive cookie consent mechanism. However, some security headers are not evident, and no explicit security or incident response policies are published. Overall, the site demonstrates a good balance of usability, compliance, and professionalism, supporting the company's role as a trusted public infrastructure provider.

F

Förderverein Siegerland Flughafen Dreiländereck e.V.

foerderverein-flughafen.de

10

Förderverein Siegerland Flughafen Dreiländereck e.V. is a small, regionally focused non-profit organization established in 2017 to support the Siegerland Regional Airport financially and promote its services within the tri-border economic region. The website is built on WordPress, utilizing popular plugins and themes, and demonstrates a moderate level of technical maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. Contact information is clearly presented, and privacy compliance is well addressed through a comprehensive privacy and cookie policy. Overall, the website is professional, trustworthy, and serves its target audience effectively.

P

Partnerství, o.p.s.

stezky.cz

55

Cyklisté vítáni is a Czech nationwide certification system focused on promoting cyclist-friendly accommodations, dining, campsites, and tourist destinations. Managed by Partnerství, o.p.s., the organization supports sustainable cycling tourism by certifying and promoting quality services tailored to cyclists. The website serves as an information hub with maps, tips, events, and partner listings, targeting cycling tourists and service providers. Technically, the site is built using modern frameworks like Astro, integrates Google Analytics, Facebook Pixel, and uses Google reCAPTCHA for form security. It is well-optimized for mobile and SEO, providing a fast and accessible user experience. Security posture is solid with HTTPS and privacy compliance, though it lacks explicit security policy and incident response details. Overall, the site is trustworthy, professional, and aligned with its business goals.

F

flyondo GmbH

flyondo.de

56

flyondo GmbH operates as a specialized fulfillment service provider and call center focused on the tourism sector, offering comprehensive handling of tourist services through trained travel agents. The company emphasizes multilingual support and advanced booking technologies, positioning itself as a reliable partner for online travel portals, tour operators, and travel agencies. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced, though security headers and explicit policies could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's market position in Germany's tourism fulfillment niche.

A

Ameropa-Reisen

ameropa.de

72

Ameropa-Reisen is a German travel company specializing in train travel and city vacation packages, targeting travelers interested in rail-based tourism. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for consent management, hosted on Colt infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit contact information slightly reduces the security maturity. The site extensively uses third-party analytics and marketing tools, reflecting a mature digital marketing strategy but requiring ongoing privacy compliance vigilance. Overall, the website is trustworthy and well-positioned in its niche, with room for improvement in security policies and transparency.

E

EUROEXPO Messe- und Kongress-GmbH

logimat-messe.de

54

LogiMAT is a leading international trade show focused on intralogistics solutions and process management, organized by EUROEXPO Messe- und Kongress-GmbH in Germany. The website presents a professional and comprehensive platform for industry professionals, offering detailed event information, expert forums, and international expansions. The technical infrastructure is based on Drupal 7 with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site is well-structured, accessible, and trustworthy, supporting a medium-sized enterprise with a strong market position in the transportation and logistics sector.

E

EUROEXPO Messe- und Kongress-GmbH

euroexpo.de

52

EUROEXPO Messe- und Kongress-GmbH is a well-established event organizer specializing in logistics and intralogistics trade fairs, notably the LogiMAT series held in Stuttgart and internationally. The company operates under the HUSS-Verlagsgruppe umbrella and has a strong market position as a leading organizer of logistics industry events. Their website reflects a professional and business-focused presence targeting industry professionals and companies seeking innovative logistics solutions. Technically, the site runs on Drupal 7 with legacy jQuery but maintains good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and partner links. Recommendations include updating legacy libraries, enhancing security headers, and publishing a security policy and incident response contacts.

P

Promet d.o.o.

promet-split.hr

56

Promet d.o.o. is a municipal public transportation company based in Split, Croatia, providing city and suburban passenger transport services. The company operates primarily within the Split agglomeration, serving local residents and visitors. The website reflects a medium-sized municipal entity with a focus on transportation services. The business model is centered on public transit organization and operation, positioning Promet d.o.o. as a key local transport provider. Technically, the website is built on the DNN (DotNetNuke) CMS platform, utilizing jQuery and related libraries for frontend functionality. Google Analytics is integrated for traffic monitoring. The site is served over HTTPS with a good SSL configuration, indicating a secure connection. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and modern JavaScript libraries but lacks explicit security headers and published security policies such as privacy, cookie, or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms a consistent and legitimate domain registration aligned with the company's municipal nature. Overall, the website is professional and trustworthy but has compliance gaps regarding privacy and cookie policies and lacks transparency on security incident handling. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

LPS, letecké práce a služby, s.r.o. operates the website vrtulniknaprodej.cz, specializing in the sale of helicopters in the Czech Republic. The company offers well-maintained helicopters suitable for training, recreational, and commercial purposes. The website positions itself as a niche provider with a focus on quality and reliability, targeting individuals and businesses interested in helicopter acquisition. The business model centers on direct sales supported by thorough maintenance checks. Technically, the website employs modern web technologies including Google Fonts and Flickity for carousel functionality, with custom CSS and JavaScript bundles. The site is mobile-optimized and presents good SEO practices, although no major CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented with user choice options, supporting GDPR compliance to some extent. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS registration data, represent gaps in compliance and trustworthiness. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is professionally presented and functional but would benefit from enhanced transparency in privacy and security policies, improved WHOIS data availability, and implementation of security best practices. These improvements would strengthen trust and compliance, reducing risk for both the business and its customers.

Fly Heli is a small Czech Republic-based helicopter tour service provider specializing in sightseeing flights, action flights, and special occasion flights such as weddings and anniversaries. The website is professionally designed with clear navigation and offers multiple flight routes and gift vouchers targeting tourists and local customers interested in unique aerial experiences. Technically, the site uses modern web technologies including Google Fonts and Flickity carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are missing. The absence of WHOIS data reduces domain trustworthiness but the website content and contact information appear legitimate and professional. Overall, the site presents a trustworthy and user-friendly experience with room for security and transparency improvements.

C

CSG Aerospace

csgaerospace.cz

64

CSG Aerospace is a division of the Czechoslovak Group specializing in the development and manufacturing of advanced aerospace technologies including radars, air traffic control systems, and air defense solutions. The company serves government, defense, and aviation industry clients, positioning itself as a European leader in radar technology. The website reflects a mature and professional business with comprehensive product and service offerings, targeting primarily B2B customers in aerospace and defense sectors. Technically, the site uses modern frameworks such as Next.js and integrates analytics and consent management tools, indicating a digitally mature infrastructure. Security posture is strong with HTTPS enforcement, security headers, and bot management cookies, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the site is well-designed, accessible, and compliant with privacy regulations, supporting a high trustworthiness rating.

SkyDemon, operated by Divelements Limited, is a specialized software provider focused on VFR flight planning and GPS navigation for pilots. The company offers a multi-platform solution supporting iPad, Android, iPhone, and PC users, positioning itself as a leading provider in the general aviation software market. The website content is professional and well-structured, targeting pilots seeking efficient and safe flight planning tools. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. Hosting is provided by EnCirca, Inc., and the domain is well-established since 2009. However, there is room for improvement in accessibility and SEO optimization. No advanced frameworks or CMS were detected. From a security perspective, the website benefits from domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance security posture. No explicit privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. The absence of vulnerability disclosure or incident response information suggests limited transparency in security practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

F

Flying Revue

flying-revue.com

9

Flying Revue is a specialized aviation media platform targeting pilots and aviation enthusiasts, primarily serving the Czech and international aviation community. The website offers aviation news, event coverage, and aviation-related apps, positioning itself as a niche media outlet with a focus on quality content and community engagement. The business model relies on content publishing, app offerings, and advertising revenue. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.8.3, Google Analytics, Facebook Pixel, and Google AdSense, hosted on a CMS platform identified as Fonio. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enforced and consent mechanisms for cookies, but the use of outdated JavaScript libraries and lack of security headers are areas for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, although the website content and social media presence support its authenticity. Overall, the site scores moderately high in content quality and security but should address domain registration transparency and update technical components to enhance trust and security.

H

HUSS-VERLAG GmbH

logistik-heute.de

54

LOGISTIK HEUTE is a well-established German logistics magazine operated by HUSS-VERLAG GmbH, targeting decision-makers in industry, trade, and logistics services. The website offers comprehensive logistics news, expert articles, event information, and industry guides, positioning itself as a key media player in the German transportation and supply chain sector. The business model revolves around media publishing, advertising, and event hosting, supported by a professional and consistent brand presence. Technically, the site is built on Drupal 9, leveraging modern web technologies including Google reCAPTCHA, Matomo analytics, and a robust consent management system to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience.

T

TTA Personal GmbH

tta-personaltransport.de

52

TTA Personal GmbH is a German-Spanish personnel recruitment company specializing in the placement of Spanish professional bus and truck drivers in Germany. Established in 2011, the company positions itself as a market leader with a large database of over 20,000 drivers and offices in Berlin, Munich, Granada, and Valencia. Their services include recruitment, language training, and placement of various transport-related professions. The website is professionally designed using WordPress and Elementor, with good SEO practices including structured data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the company appears credible and trustworthy with a solid digital presence but should enhance privacy and security transparency.

K

l❶Iᐅ Kfz Versicherung trotz Schufa ▶️ Bonitätsprüfung ❷⓿❷❺

kfz-versicherung-trotz-schufa.com

50

The website www.kfz-versicherung-trotz-schufa.com operates as a niche comparison and informational platform focused on providing car insurance options for individuals with negative Schufa credit entries in Germany. It offers tariff comparisons, advice, and links to insurance providers that accept customers despite credit challenges. The site targets consumers seeking affordable and accessible car insurance solutions despite credit issues. Technically, the site is built on WordPress with a modern theme and SEO plugins, integrating Google Tag Manager and Borlabs Cookie for analytics and consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and structure appear professional and trustworthy. Overall, the site presents moderate risk with room for improvement in transparency and security practices.

E

eurotransport

eurotransport.de

55

Eurotransport is a well-established German media portal specializing in commercial vehicles and logistics. The website offers a broad range of content including news articles, vehicle tests, industry reports, videos, podcasts, and an e-commerce shop targeting professionals in the transport and logistics sectors. The business model revolves around media publishing and product sales, supported by subscription services and advertising partnerships. The site is hosted on AWS infrastructure and leverages modern web technologies such as React and Next.js, with integration to Shopify for e-commerce functionalities. Social media presence is active on Facebook, Twitter, and YouTube, enhancing audience engagement. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is professional, trustworthy, and serves a niche market effectively.

H

HUSS-VERLAG GmbH

logistra.de

54

LOGISTRA is a specialized German logistics industry magazine operated by HUSS-VERLAG GmbH, targeting logistics, warehouse, and fleet management professionals. The website offers news, expert articles, event information, product recommendations, and job listings, positioning itself as a reputable media source in the transportation and logistics sector. The digital infrastructure is built on Drupal 9, integrating modern web technologies including Google reCAPTCHA, Google Publisher Tags for advertising, and a GDPR-compliant consent management platform. Analytics are handled via Matomo, ensuring moderate user tracking with privacy considerations. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and policies are not fully documented. The absence of a visible privacy policy and terms of service is a notable gap. Overall, the site is professional, content-rich, and well-branded, serving a medium-sized enterprise audience in Germany.

H

HUSS VERLAG GmbH

transport-online.de

55

Transport-online.de is a professional German-language media portal operated by HUSS VERLAG GmbH, specializing in transport and logistics industry news, analysis, and resources. The website targets transport entrepreneurs, freight forwarders, and logistics service providers, offering biweekly publications, newsletters, job listings, and event information. The platform holds a strong market position within its niche, supported by a consistent brand presence and comprehensive industry coverage. Technically, the website is built on Drupal 9 CMS, utilizing modern web technologies including Matomo analytics for privacy-conscious tracking, Google reCAPTCHA for form security, and a Consent Management Platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security measures but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service pages. Overall, the website is trustworthy and professional with a solid business model and technical foundation. Strategic improvements in privacy transparency, security headers, and contact information would enhance compliance and user trust.

S

SIXT

sixt.de

72

SIXT is a well-established global car rental and mobility service provider headquartered in Germany, offering premium vehicles and a wide range of services including car rental, car subscription, car sharing, and chauffeur services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses modern frameworks such as React and integrates a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partially addressed via cookie consent but lacks visible privacy policy and terms of service links in the provided content. Overall, the site is trustworthy and professional, serving a broad audience including business and leisure customers worldwide.

O

OPEL Automobile GmbH

opel.de

10

Opel Automobile GmbH operates a professional and comprehensive automotive website targeting both private and business customers in Germany. The site offers vehicle configuration, test drive booking, and sales of new and used vehicles, including electric and hybrid models. The company is positioned as a major player in the transportation sector, supported by its parent company Stellantis. Technically, the website leverages Adobe Experience Manager, Google Tag Manager, and Dynamic Yield for content management, analytics, and personalization, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR consent mechanisms in place, although explicit security headers and detailed security policies are not evident. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in privacy policy visibility and security disclosures.

BODOS Czechia a.s. is a well-established logistics and transportation company based in the Czech Republic, with a history dating back to 1945. The company operates a large fleet of 200 trucks and offers extensive storage facilities exceeding 7,500 square meters. Their services include freight transport, transport outsourcing, storage, vehicle washing, fuel station services, and vehicle servicing. The website reflects a professional and consistent brand image targeting businesses requiring logistics solutions. Technically, the site uses modern web technologies including JavaScript libraries like GLightbox and a spam protection tool called Mailguard. The hosting is managed through websupport.cz, a Czech hosting provider, and the site is accessible via HTTPS, indicating basic security measures. However, no explicit security headers or advanced security policies are published.

M

MYD Sailing

myd-sailing.com

48

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

LETOV AIR s.r.o. is a small, dynamically growing private aviation company based in the Czech Republic, offering a broad range of aviation services including air transport, pilot training, aircraft maintenance, and sales. The company emphasizes compliance with aviation regulations such as PART 145 and CAMO management, positioning itself as a professional service provider in the regional aviation market. The website content is relevant and informative, targeting general aviation clients and enthusiasts. Technically, the website employs legacy JavaScript libraries like jQuery and Fancybox, with Google Analytics integrated for user tracking. The site shows basic mobile optimization and accessibility but lacks modern responsive design and advanced SEO features. Security measures are minimal, with no visible HTTPS enforcement or security headers, though a cookie consent banner and email obfuscation are implemented to enhance privacy. From a security perspective, the absence of WHOIS data limits domain trust verification, and the lack of HTTPS and security headers presents vulnerabilities. No privacy policy or terms of service pages are published, which may impact compliance with GDPR and other regulations. The overall risk is moderate, with recommendations to improve security posture, privacy compliance, and technical modernization to enhance trust and user experience.

T

Textron Aviation

txtav.com

68

Textron Aviation is a leading manufacturer of general aviation aircraft, operating iconic brands such as Beechcraft and Cessna. The company holds a significant market position, delivering over half of all general aviation aircraft worldwide. The website reflects a professional corporate presence with a focus on aviation manufacturing and sales. The technical infrastructure includes modern web technologies such as Foundation CSS, VideoJS for media, and OneTrust for cookie consent management, hosted likely on AT&T infrastructure. Google Tag Manager is used for analytics and marketing purposes. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

LPS Letecké práce a služby s.r.o. is a Czech Republic-based aviation company specializing in helicopter pilot training, helicopter maintenance, aerial surveying, and monitoring services. Established in 1996, the company holds multiple certifications and operates primarily in the transportation and energy sectors. Their website presents a professional image with clear service offerings and contact information, targeting individuals and businesses interested in helicopter-related services. Technically, the website uses modern front-end technologies including Bootstrap, Swiper.js, and Google Analytics, with responsive design and moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. The domain WHOIS data is consistent with the business claims, indicating legitimacy and long-term operation. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

J

JOB AIR Technic a.s.

jobair.eu

59

JOB AIR Technic a.s. is a Czech Republic-based company specializing in aircraft maintenance, repair, and overhaul (MRO) services, along with training, logistics, and painting facilities. Established in 1993, the company has grown to become a recognized regional MRO provider with certifications including EASA Part 145, Part 147, AS 9100:D, and ISO 14001. It operates under the umbrella of the Czechoslovak Group (CSG), a large industrial conglomerate, enhancing its market position and credibility. The website targets aviation industry professionals, aircraft operators, and potential employees, offering detailed service descriptions and career opportunities.

C

Czech Airlines Technics, a.s.

csatechnics.com

55

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

The website www.wir-bewegen-alle.de serves as a comprehensive career portal for the Karlsruher Verkehrsverbund (KVV) and its associated companies VBK and AVG, which are key players in regional public transportation in Karlsruhe, Germany. It offers detailed job listings, career information, and multimedia content to attract a diverse range of candidates including professionals, students, and career changers. The site is well-structured, mobile-optimized, and incorporates accessibility features to enhance user experience. Technically, it is built on Silverstripe CMS with modern JavaScript libraries such as Swiper.js and HTMX, hosted on rzone.de infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and explicit security policies are absent. Overall, the site reflects a mature digital presence aligned with the business's public transportation focus.

S

Siegerland-Flughafen GmbH

siegerland-airport.de

47

Siegerland-Flughafen GmbH operates a regional airport in Germany, providing aviation services including pilot training, charter flights, business facilities, and community engagement. The website targets pilots, business partners, and local travelers, positioning itself as a key regional transportation hub. The digital infrastructure is built on WordPress with modern plugins and themes, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

M

Marina Flensburg GmbH & Co. KG

marinaflensburg.de

48

Marina Flensburg GmbH & Co. KG operates a marina located in Flensburg, Germany, providing essential yachting services such as berth rental, winter storage, boat fueling, crane access, and harbor amenities. The website positions itself as a local, customer-focused marina with a strong emphasis on comfort and convenience for boat owners. The target audience includes yachting enthusiasts and visitors to the Flensburg harbor area. The business model revolves around providing marina infrastructure and services to boat owners and seasonal residents. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging Leaflet.js for interactive maps and Google reCAPTCHA for form security. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with modern technologies and proper meta tags implemented. From a security perspective, the site enforces HTTPS, includes security headers, and uses reCAPTCHA to protect forms from spam. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-maintained, reflecting a legitimate and customer-oriented business. Strategic recommendations include adding explicit security and incident response policies, publishing a vulnerability disclosure statement, and providing data protection officer contact details if applicable.

F

Flugplatz Oldenburg-Hatten

edwh.de

10

Flugplatz Oldenburg-Hatten operates as a small regional aviation and leisure business located between Oldenburg and Bremen, Germany. The website offers services including a flight school, sightseeing flights, and a café with event booking options. The business targets aviation enthusiasts and local visitors seeking recreational activities. The website is built on WordPress with a custom theme and uses standard plugins for contact forms and cookie consent management. Hosting is provided by Schlund Technologies, consistent with the German domain and regional focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Contact information is available, but no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-suited for its niche audience.