Transportation security reports

R

Ramirent

ramirent.no

68

Ramirent is Norway's largest provider of machinery and equipment rental services, targeting primarily business customers across the country. Their website offers a comprehensive catalog of rental products, services, and customer support centers nationwide, reflecting a strong market position in the construction and equipment rental sector. The company emphasizes ease of rental through online registration and offers discounts for registered customers. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. The presence of Cookiebot indicates attention to privacy compliance, although no explicit privacy policy page was detected in the provided content. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but the absence of explicit security headers and incident response information suggests room for improvement. Overall, the site is professional and trustworthy, though the lack of WHOIS data reduces domain registration transparency.

T

Piletid sinu teekonnale

tpilet.ee

60

Tpilet.ee is an Estonian online platform specializing in the sale of bus tickets and providing bus timetable information. It serves primarily bus travelers within Estonia, offering services such as one-way and return ticket purchases, ticket returns, and corporate client agreements. The website is positioned as a key player in the Estonian transportation ticketing market, leveraging e-commerce to facilitate travel planning and ticketing. Technically, the website is built using modern web technologies including React and JavaScript, with integration of analytics tools such as Amplitude and Google Analytics. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. The use of HTTPS ensures secure communications, and cookie consent mechanisms are in place to comply with basic privacy requirements. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business, indicating a legitimate and consistent domain registration. Overall, the website presents a professional and functional platform with room for improvement in privacy compliance, security best practices, and accessibility. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

C

Coopalsa + Nadal

bus.ad

55

Coopalsa + Nadal operates as a primary public transportation service provider in Andorra, offering regular bus lines and related services. The website serves residents and visitors by providing schedules, ticket sales information, and route details. The company maintains a consistent brand presence and engages users through social media platforms such as Facebook, Twitter, and Instagram. The business model focuses on essential transportation services within the country, positioning itself as a key local operator.

R

RAMIRENT BALTIC AS

ramirent.ee

62

Ramirent Baltic AS operates as the largest tool and construction equipment rental service provider in the Baltic region, offering a comprehensive range of rental products and services including 24-hour technical support and modular factory solutions. The company is part of the Loxam Group, a recognized leader in equipment rental, which enhances its market position and credibility. The website reflects a professional and user-friendly digital presence with clear navigation and localized content tailored for Estonian customers. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries such as jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with a GDPR-compliant cookie consent mechanism and structured data enhancing SEO and user experience. From a security perspective, the site enforces HTTPS and uses Cloudflare bot management cookies, indicating a proactive approach to security. However, some security headers are not explicitly detected, and there is no publicly available security policy or incident response contact, which could be improved to strengthen trust and compliance. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic improvements in security policy transparency and enhanced accessibility could further elevate the site's maturity and user trust.

J

Jazz Pesulad OÜ

jazzpesulad.ee

51

Jazz Pesulad OÜ operates a well-established car wash chain in Estonia, providing a variety of vehicle cleaning services including self-service, hand wash, and drive-through options. The company has a strong market presence with 23 locations across multiple cities and serves thousands of customers daily. Their business model includes loyalty and prepaid card programs to enhance customer retention and convenience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and standard security headers, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive digital maturity profile.

T

Toyota Eesti

toyota.ee

72

Toyota Eesti operates as the official Toyota brand presence in Estonia, offering a comprehensive range of automotive products including hybrid and electric vehicles, SUVs, commercial vehicles, and special offers. The website serves as a digital storefront and information hub for Estonian consumers and businesses interested in Toyota's mobility solutions. It reflects Toyota's global brand standards and local market adaptation. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies such as Adobe Launch for tag management, Datadog for real user monitoring, and OneTrust for cookie consent management. The infrastructure is robust, with CDN usage and integration with Toyota Europe services. Security posture is strong, with HTTPS enforced, privacy-conscious tracking, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service documents are not detected in the provided content, which is a compliance gap. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

C

CoreIT

cuponline.se

50

CupOnline is a well-established Swedish online platform specializing in the administration of sports cups, tournaments, and series, primarily focused on youth hockey. Operating since 2003 and managed by Abion AB with technology support from CoreIT, it serves a large user base with over 1.5 million participants and thousands of events annually. The platform offers comprehensive services including registration, live reporting, statistics, and integration with third-party services for referees and streaming. The website content is rich and relevant, targeting sports organizers and participants, with a business model supported by partnerships and advertising revenue. Technically, the site is built on ASP.NET WebForms with CoreCMS, featuring moderate performance and basic mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is credible and functional but would benefit from enhanced security and privacy practices.

A

Avis Budget UK Limited

budget.co.uk

71

Budget.co.uk represents the UK branch of Avis Budget UK Limited, a major player in the global car rental industry. The website offers a comprehensive car rental booking platform with a wide range of services including additional drivers, one-way hires, roadside assistance, and long-term rentals. The company operates across 165 countries with over 11,000 locations, positioning itself as a large and reputable transportation service provider. The site targets consumers and businesses seeking affordable and convenient car rental solutions in the UK and internationally. From a technical perspective, the website employs modern JavaScript libraries such as Handlebars.js and Globalize.js, integrates Google Tag Manager and Tealium for analytics and marketing, and uses Bing Maps API for location services. The site is mobile-optimized with good navigation and content quality, although accessibility features could be enhanced. Performance is moderate with room for improvement in loading speed and technical SEO. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and input validation on forms. However, explicit security headers are not detected, and no public security or incident response policies are found on the site. The WHOIS lookup failed due to domain registration rules, but the website content and branding strongly indicate legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Budget.co.uk is a professional, trustworthy, and functional car rental website with strong business credibility and good privacy compliance. Strategic improvements in security headers, accessibility, and public security policies would further enhance its security posture and user trust.

B

Budget Truck Rental

budgettruck.ca

68

Budget Truck Rental Canada operates a professional and well-structured website offering moving truck rentals and related services primarily targeting Canadian customers. The site is built on a modern technology stack including AngularJS and Adobe Experience Manager, integrating multiple analytics and marketing tools to optimize user engagement and business insights. The business is positioned as a large transportation service provider with a strong brand presence in Canada. Security posture is moderate with HTTPS usage and secure analytics scripts, but lacks visible security headers and explicit privacy or incident response policies. WHOIS data is unavailable, likely due to privacy protection, which limits domain trust verification but is common for commercial entities. Overall, the website is functional, professional, and trustworthy with room for improvement in privacy compliance and security transparency.

Lost Returns, Inc. operates a specialized lost property management platform that leverages AI for inventory matching and integrates with major shipping carriers to facilitate efficient return of lost items. The company targets businesses across various industries, particularly transportation and rental sectors, providing a SaaS-based solution to streamline lost and found operations and improve customer satisfaction. The website demonstrates a professional and modern digital presence built on Next.js and React, with good mobile optimization and performance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response information are lacking. Privacy compliance is supported by a comprehensive privacy policy but lacks a cookie consent mechanism. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business credibility is supported by client testimonials and recognized brand partnerships.

T

The Hertz Corporation

hertz.ie

70

The website www.hertz.ie is the Irish regional portal for The Hertz Corporation, a globally recognized car rental company. It offers car and van rental services across Ireland with a focus on quality and convenience, including electric vehicle options. The site supports multiple languages and internationalization, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks, asynchronous script loading, and integrates Google services such as Tag Manager and Analytics, alongside Stripe for payments and reCAPTCHA for bot protection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not evident. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. Business credibility is supported by consistent branding and professional content, though direct contact details are not prominently displayed on the analyzed page. Overall, the site is professionally designed, functional, and secure, suitable for enterprise-level operations in the transportation sector.

T

The Hertz Corporation

dollar.co.uk

64

Dollar Car Rental UK, operated under The Hertz Corporation, provides car hire and rental services across Europe with over 400 locations. The website offers a user-friendly booking platform, special offers, and comprehensive customer support. The brand is well-established since 1965 and targets travelers seeking budget-friendly and flexible car rental options. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF tokens, and cookie consent mechanisms, though some security headers could be improved. The WHOIS data for the domain 'www.dollar.co.uk' is unavailable or invalid, but the website content and branding strongly indicate legitimacy as part of the Hertz group. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

T

The Hertz Corporation

thrifty.lu

67

Thrifty Car Rental, a brand under The Hertz Corporation, operates a comprehensive car rental service across Europe with over 400 locations. The website offers a user-friendly booking platform, extensive fleet options including electric vehicles, and promotional offers targeting cost-conscious travelers. The company leverages its strong brand recognition and parent company backing to maintain a competitive market position. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and functional user experience. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR and related regulations. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers and explicit vulnerability disclosures are absent. Overall, the site presents a professional and trustworthy digital presence aligned with an established transportation business.

T

The Hertz Corporation

thrifty.be

67

Thrifty Belgium is a car rental service website operated under The Hertz Corporation, a well-established global transportation company founded in 1958. The website offers a comprehensive range of rental vehicles targeting cost-conscious travelers and business clients in Belgium and Europe. The business model focuses on providing flexible, affordable car rental options with a strong online booking platform and physical locations across Europe. The site is well-branded, consistent, and provides clear service offerings with multiple language and location options. Technically, the website uses modern web technologies including Bootstrap 5, jQuery, and Google Tag Manager, with a cookie consent mechanism powered by Securiti.ai. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Performance is moderate with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and a published security.txt file. The WHOIS data is restricted due to DNS Belgium policies, limiting domain registration transparency, which slightly impacts trust. However, the overall digital maturity and security practices align with industry standards for a large transportation company. Overall, the website presents a trustworthy and professional front for Thrifty Car Rental in Belgium, with recommendations to improve security headers, publish vulnerability disclosure information, and enhance accessibility to further strengthen its security and compliance posture.

T

The Hertz Corporation

thrifty.nl

64

Thrifty.nl is the Dutch localized website of Thrifty Car Rental, a well-established car rental brand operating under The Hertz Corporation. The company offers affordable and flexible car rental services across the Netherlands and Europe, targeting cost-conscious travelers and business clients. The website provides a comprehensive booking platform, detailed fleet information, and localized content in Dutch, supported by a strong brand presence and social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent mechanisms, and CSRF protections, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies, and incident response information is publicly available. Overall, the site reflects a mature digital presence aligned with a large transportation company.

T

The Hertz Corporation

thrifty.it

66

Thrifty, operated by The Hertz Corporation, is a well-established car rental service provider founded in 1958, targeting cost-conscious travelers primarily in Italy and Europe. The website offers a comprehensive range of rental vehicles including electric and hybrid options, supported by a network of over 1000 locations. The digital platform is modern, mobile-optimized, and integrates advanced tracking and consent management tools, reflecting a mature technical infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protections, though some security headers could be enhanced. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site projects a professional and trustworthy image aligned with its parent company's reputation.

T

The Hertz Corporation

thrifty.de

64

Thrifty.de is the German localized website of Thrifty Car Rental, a well-established car rental brand founded in 1958 and a subsidiary of The Hertz Corporation. The website offers comprehensive car rental services across Germany and Europe, targeting price-conscious business and leisure travelers. It provides a user-friendly booking interface, detailed fleet information, and multiple language and country options, reflecting a mature digital presence. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and slick-carousel, combined with a robust cookie consent mechanism powered by securiti.ai and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and CSRF protections, though explicit security headers and a dedicated security policy page are absent. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The domain registration aligns with the brand's legitimacy and history, reinforcing trust. Overall, the website demonstrates a professional, secure, and user-centric platform suitable for an enterprise-level transportation service provider.

T

The Hertz Corporation

hertz.es

71

The website www.hertz.es is the official Spanish portal for The Hertz Corporation, a globally recognized car and van rental company. It offers online reservation services tailored to the Spanish market and integrates with a broad international network of Hertz websites. The site targets consumers and businesses seeking vehicle rentals in Spain and worldwide, providing a professional and localized user experience. The business model centers on vehicle rental services supported by a loyalty program and business rental solutions. Technically, the site employs modern JavaScript frameworks, Google analytics and tag management, and security tools such as reCAPTCHA Enterprise, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with a comprehensive privacy policy and GDPR-aligned cookie consent. However, WHOIS data is restricted due to .es registry policies, limiting public domain registration transparency. Overall, the site is professional, secure, and trustworthy, suitable for enterprise-level operations.

T

The Hertz Corporation

thrifty.es

67

Thrifty.es is the Spanish localized website for Thrifty Car Rental, a well-established car rental brand operating under The Hertz Corporation. The website offers comprehensive car rental services across Spain and Europe, targeting travelers seeking affordable and flexible vehicle rentals. The site is professionally designed with a clear focus on user experience, featuring booking forms, promotional offers, and multilingual support. Technically, the website employs modern web technologies including jQuery, Bootstrap 5, and Google Tag Manager, ensuring a responsive and functional user interface. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements, although some security headers could be improved. The WHOIS data is unavailable due to .es domain restrictions but the domain and branding strongly align with the parent company, indicating legitimacy. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its large-scale commercial operations.

T

Thrifty Car Rental

thrifty.ie

69

Thrifty Car Rental operates a professional and user-friendly website focused on providing car rental services primarily in Ireland with global reach. The company offers a broad range of vehicles and emphasizes competitive pricing and convenience. The website integrates modern technologies such as jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and accessible user experience. Privacy and cookie policies are clearly presented with a consent mechanism, reflecting compliance with GDPR standards. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security practices are generally sound with HTTPS and CSRF protections, though additional security headers could enhance the posture. Overall, the site represents a credible and established business in the transportation sector with room for technical and security improvements.

T

The Hertz Corporation

thrifty.fr

70

Thrifty.fr is the French localized website of Thrifty Car Rental, a brand under The Hertz Corporation, a major player in the global car rental industry. The website offers car rental services primarily in France and Europe, targeting both leisure and business travelers. It provides a comprehensive booking system, special offers, and a diverse fleet including electric vehicles. The site is well-branded, consistent with corporate identity, and includes multilingual support and regional targeting. Technically, the site uses modern frontend frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Visual Website Optimizer for analytics and marketing, and implements cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS, CSRF tokens, and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by strong brand presence and content quality. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

T

Thrifty Car Rental

thriftycanada.ca

74

Thrifty Car Rental operates as a major car rental service provider primarily targeting consumers in Canada and the United States. It is a subsidiary of The Hertz Corporation, a well-established brand founded in 1965. The website offers online car rental reservations, location finders, and promotional deals, positioning itself as a competitive player in the transportation sector. The brand maintains consistent and professional digital branding with a focus on user-friendly design and clear service offerings. Technically, the website leverages modern web technologies including React, Adobe Experience Manager CMS, and advanced analytics tools such as Dynatrace and Google Tag Manager. The site is mobile-optimized and incorporates cookie consent mechanisms aligned with GDPR requirements. Security posture is generally strong with HTTPS enforced and privacy policies clearly presented, though explicit security headers are not evident in the HTML content. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the overall trustworthiness is supported by consistent branding and external references. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance to further strengthen the security and compliance posture.

B

Budget Car Rental Canada

budget.ca

67

Budget Car Rental Canada operates a comprehensive online platform for car rental services targeting Canadian consumers and businesses. The website offers reservation capabilities, promotional deals, loyalty programs, and additional services such as moving truck rentals. The company positions itself as a major player in the Canadian transportation rental market with strong branding and partner integrations. Technically, the site leverages modern web technologies including AngularJS, Adobe Experience Manager CMS, and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS enforcement and bot protection via reCAPTCHA Enterprise, though some security headers are not explicitly detected. Privacy compliance is moderate due to lack of visible privacy and cookie policies in the provided content. WHOIS data is unavailable, likely due to privacy protection, but the site content and branding indicate legitimacy. Overall, the site is professional, user-friendly, and well-optimized for mobile users.

A

AS Kihnu Veeteed

veeteed.com

56

AS Kihnu Veeteed operates as a regional ferry transportation service provider in Estonia, specializing in ferry routes connecting several islands including Kihnu, Vormsi, Hiiumaa, Saaremaa, and others. The company offers online ticket sales through a modern React-based single-page application, targeting residents and visitors requiring reliable ferry transport. The website is professionally designed with consistent branding and provides essential information such as schedules, routes, and news updates. Technical infrastructure leverages modern web technologies including React, Material-UI, service workers for offline capabilities, and Google Analytics for user behavior tracking. Hosting and DNS services are managed via Google Cloud infrastructure, ensuring reliable uptime and performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility, with recommendations to enhance security headers, DNSSEC, and incident response disclosures to strengthen trust and compliance.

The website elron.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to the actual content. This prevents a full analysis of the business, security, and compliance posture. Based on the WHOIS data, the domain is registered since 2013 with Zone Media OÜ, a known registrar, indicating a legitimate domain age and registration consistency. The website appears to be related to the transportation sector in Estonia, likely a medium-sized entity given the domain age and sector. The technical infrastructure includes Cloudflare services for CDN, security, and bot mitigation, but no CMS or other frameworks are detectable due to the blocked content. Security posture cannot be fully assessed, but the presence of Cloudflare WAF and Turnstile indicates a baseline security measure. No privacy, cookie, or terms of service policies are visible, nor are there any contact details or business information on the landing page. Overall, the site is protected by strong bot mitigation but lacks publicly accessible content for deeper analysis.

P

Peatus

peatus.ee

51

Peatus.ee is a digital journey planning user interface focused on public transportation in Estonia, leveraging the Digitransit platform. The website targets public transport users seeking route planning and transit information. Technically, it employs modern web technologies including React, JavaScript, and integrates analytics tools such as Matomo and Google Tag Manager. The site demonstrates good security practices with HTTPS and security headers, but lacks explicit privacy and cookie policies, as well as contact information, which impacts privacy compliance and user trust. Overall, the domain registration data aligns well with the website's purpose, indicating legitimacy. Strategic improvements in privacy disclosures and user contact options would enhance compliance and trust.

I

Ida-Viru Ühistranspordikeskus

ivytk.ee

47

Ida-Viru Ühistranspordikeskus is a non-profit organization dedicated to coordinating and providing public transportation services in the Ida-Viru region of Estonia. The website serves as an information hub for passengers and transport providers, offering schedules, route maps, contact details, and ticket purchasing options. The organization is small-sized, regionally focused, and operates transparently with clear contact information and official registration details. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and Yoast SEO for optimization. It employs Google reCAPTCHA v3 for form security and uses privacy-conscious analytics tools like Plausible. The site is hosted by Elkdata OÜ, consistent with the domain registration data, and uses HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and spam protection on forms. However, it lacks published security policies, security headers, and cookie consent mechanisms, which are important for compliance and enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is professional, trustworthy, and functional, but it would benefit from improved privacy compliance and enhanced security policies to better protect users and meet regulatory requirements.

Skepast & Puhkim OÜ is a leading Estonian consultancy specializing in infrastructure, environmental, and spatial planning services with over 15 years of experience. The company offers expert engineering and consulting services including infrastructure design, environmental impact assessments, and spatial planning solutions. Their market position is strong within Estonia, supported by a medium-sized team of 40 experts and a professional digital presence. The website is well-structured, multilingual, and provides clear contact channels and business information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and cookie consent banner. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and business operation.

T

The Hertz Corporation

hertz.co.uk

67

The Hertz Corporation operates a comprehensive car and van rental service platform targeting customers primarily in the UK and worldwide. The website offers a broad range of services including daily car hire, electric vehicles, long-term business rentals, and van hire, supported by loyalty programs such as Gold Plus Rewards. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the platform leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Stripe for payments, alongside security tools like Google reCAPTCHA Enterprise and a cookie consent mechanism powered by Securiti.ai. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. WHOIS data for the subdomain queried is unavailable due to Nominet rules, but the main domain is legitimate and consistent with the business. Overall, the website demonstrates a mature digital presence with robust security and privacy practices.

G

Goldcar Spain S.L.

goldcar.es

63

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Southern Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental sector. The website offers multilingual support, currency selection, and a comprehensive booking system, targeting travelers seeking affordable car rentals. Technically, the site uses modern frameworks such as Bootstrap and integrates performance and consent management tools like Akamai Boomerang and Didomi SDK. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be verified further. The absence of WHOIS domain registration data is a transparency concern but does not detract from the overall legitimacy indicated by the brand presence and structured data. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

G

Goldcar

ongoldroad.com

63

Goldcar is a large car rental company operating over 115 offices primarily in Europe and the United States, targeting travelers and tourists. The company is part of the Europcar Mobility Group, which enhances its market credibility and operational scale. The website is professionally designed, mobile-optimized, and provides comprehensive information about office locations and services. Technically, the site uses modern frameworks such as Bootstrap, integrates Google Tag Manager and Akamai Boomerang for analytics and performance monitoring, and employs Didomi for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and association with Europcar support its legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

G

Goldcar

goldcarhelp.com

54

Goldcar is a well-established car rental company operating primarily in Spain with a strong presence in major tourist destinations. The company offers a variety of car rental services, including innovative features like the Key'n Go automatic key pickup system and a loyalty program called GO Club. The website serves as a comprehensive help center supporting customers with FAQs, booking assistance, and contact options. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a CDN likely provided by Akamai, ensuring moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

G

Green Motion

greenmotion.com

70

Green Motion is a UK-based car and van rental company established in 2007, specializing in low CO2 emission vehicles and sustainable travel solutions. The company operates a global franchise model offering eco-friendly vehicle rental services, including electric vehicles. Their website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the site employs modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a data-driven approach to customer engagement. Security-wise, the website enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though it lacks DNSSEC and a public security policy or incident response contacts. Overall, the site demonstrates good security hygiene and privacy compliance, with room for improvement in transparency and DNS security. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Goldcar Spain S.L.

goldcar.com

63

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental industry. The website is professionally designed, mobile-optimized, and provides comprehensive content including offers, destinations, and customer reviews. Technically, the site uses modern frameworks like Bootstrap and integrates third-party services such as Google Tag Manager and Didomi for consent management, hosted likely on Akamai infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and corporate affiliations. Privacy compliance is well addressed with GDPR-consistent cookie policies and consent banners.

B

Budget Rent a Car

budget.com

75

Budget is a globally recognized car rental company operating under the Avis Budget Group umbrella. The website provides vehicle rental services including cars, trucks, and vans, targeting both leisure and business travelers. The brand maintains a strong market position with a professional online presence and comprehensive service offerings. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and implements accessibility and privacy compliance features effectively. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data is notable but does not detract from the overall legitimacy of the site given the brand's prominence. Strategic recommendations include publishing detailed security policies and incident response information to enhance trust and compliance.

D

Dollar Car Rental

dollar.com

66

Dollar Car Rental operates a professional and user-friendly website offering car rental services across Europe with over 400 locations. The company targets budget-conscious travelers and provides flexible rental options with an emphasis on ease of booking and management. The website demonstrates a mature digital presence with modern technologies and compliance mechanisms such as cookie consent and privacy policies. However, the domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional branding and content. The site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published incident response policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency on domain registration and enhanced security practices.

T

Thrifty Car Rental

thrifty.com

66

Thrifty Car Rental operates a professional and user-friendly website offering car rental services primarily across Europe. The company targets both business and leisure travelers with a broad fleet including electric and economy vehicles. The website demonstrates a mature digital presence with responsive design, clear navigation, and integration of modern technologies such as Google Tag Manager and cookie consent management via Securiti.ai. However, the absence of WHOIS registration data for the domain www.thriftycars4rent.com raises concerns about domain legitimacy, despite the website's strong branding alignment with the parent company Hertz. Security posture is generally good with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhancement of security transparency.

E

Europcar

europcar.com

67

Europcar is a globally recognized leader in the vehicle rental industry, offering a wide range of car and van rental services across more than 140 countries with over 3835 locations. The company caters to both business and leisure travelers, providing flexible rental options, loyalty programs, and digital conveniences such as online check-in and mobile app bookings. The website reflects a mature digital presence with modern technologies and comprehensive content supporting its market position. Technically, the site uses advanced frameworks like Nuxt.js and integrates monitoring tools such as Dynatrace for performance and security insights. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with detailed privacy and cookie policies and consent mechanisms. Overall, Europcar's website demonstrates a high level of professionalism, trustworthiness, and digital maturity, supporting its enterprise-scale operations.

A

AS PASAŽIERU VILCIENS

vivi.lv

54

AS Pasažieru Vilciens operates as the primary passenger rail service provider in Latvia, offering scheduled train routes including international connections such as Vilnius-Riga-Tallinn. The website serves as a portal for ticket purchases, route schedules, passenger information, and tourism-related content, targeting travelers and commuters in Latvia and neighboring countries. The business model centers on public transportation services with a focus on passenger convenience and digital ticketing via a mobile app. Technically, the website employs modern JavaScript libraries and UI components, ensuring good mobile optimization, accessibility, and SEO practices. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and form validation scripts, though explicit security headers and incident response policies are not publicly visible. Overall, the website is professional, trustworthy, and well-aligned with the business's public transportation mission.

H

Havaş

havas.net

64

Havaş is a well-established Turkish transportation and ground services company, founded in 1999, specializing in airport ground handling, bus services, and cargo warehousing. The website reflects a professional and modern digital presence with a focus on service offerings relevant to airlines, airports, and passengers. The technical infrastructure leverages popular front-end frameworks like Bootstrap and integrates multiple analytics tools such as Google Analytics and Yandex Metrika, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security (DNSSEC) and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the website is functional and credible but would benefit from improvements in privacy transparency and security hardening.

T

ThePackengers

thepackengers.com

57

ThePackengers is a specialized digital platform offering instant pricing, booking, and e-logistics services for packing and transporting art and luxury goods. The website presents a professional and user-friendly interface, targeting individuals and dealers who require secure and efficient shipping solutions. The platform emphasizes instant quotes, online payments, and real-time shipment tracking, positioning itself as a niche player in the transportation sector. Technically, the website leverages modern JavaScript frameworks, including StimulusJS and Turbo Frames, and employs New Relic for performance monitoring. The presence of CSRF tokens and HTTPS URLs indicates basic security hygiene, although explicit security headers and policies are not evident. The site is mobile-optimized and demonstrates good SEO practices but lacks comprehensive privacy and cookie policies. From a security standpoint, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and design suggest a legitimate business. No critical vulnerabilities or exposed sensitive data were detected. However, the lack of vulnerability disclosure and incident response information indicates room for improvement in security transparency. Overall, the website scores moderately well in content quality, technical implementation, and security posture but falls short in privacy compliance and domain registration transparency. Strategic recommendations include publishing clear privacy and cookie policies, enhancing security headers, and verifying domain registration to improve trustworthiness.

M

Moniteur des Ventes

moniteurdesventes.com

65

Moniteur des Ventes operates a professional online auction platform specializing in live, online, and catalogued auctions of professional equipment, vehicles, and industrial materials primarily targeting French-speaking markets. The platform connects auction houses, public entities, and businesses with buyers, offering a comprehensive auction calendar and account-based bidding services. The website demonstrates a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and various UI and analytics libraries. It integrates secure payment gateways such as Ingenico and Lemonway, and uses Google Analytics and Tag Manager for traffic analysis. The site is mobile-optimized and shows good SEO practices, though accessibility features are basic. Hosting includes Azure Blob Storage for some assets. From a security perspective, the site enforces HTTPS and uses secure payment processors, with a cookie consent mechanism supporting GDPR compliance. However, no explicit security headers or incident response policies are evident, and no direct contact information is provided on the main site. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the platform presents a solid business and technical foundation but would benefit from enhanced transparency in security policies and domain registration details to improve trust and compliance posture.

Parkimine.ee is an Estonian online platform operated by AS Ühisteenused, providing parking information and electronic parking permit services primarily for Tallinn and other Estonian cities. The website integrates Google Maps API for location services and offers a user-friendly interface for searching parking spots and purchasing permits. The business targets residents and visitors needing parking solutions, positioning itself as a key service provider in the transportation sector within Estonia. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Select2, ensuring good SEO and usability. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, the site enforces HTTPS, uses standard security headers, and validates form inputs, reflecting a good security posture. However, it lacks dedicated security and incident response policies publicly available. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for enhancements in security transparency and analytics configuration.

E

Economybookings

economybookings.com

72

Economybookings is an established online car rental aggregator platform offering price comparison and booking services for over 175,000 vehicles across 20,000 locations worldwide. The company targets global consumers seeking affordable and convenient car rental options, supported by multilingual customer service and a large network of trusted suppliers. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and compliance tools like Cookiebot for privacy management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies. Overall, the platform presents a professional and trustworthy user experience with room for improvement in transparency and contactability.

A

Autoosta

autoosta.lv

55

Autoosta.lv is a Latvian transportation information website focused on providing bus schedules, news, and related information to the public. The site targets local travelers and residents seeking timely and accurate public transport data. The business operates as a small-scale information service platform with a niche focus on Latvian transportation. Technically, the website is built on WordPress using the Divi theme and leverages Jetpack for additional functionality and analytics. The infrastructure is modern and uses HTTPS with appropriate security headers, ensuring a secure browsing experience. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is solid with no detected vulnerabilities or blocking mechanisms, but incident response and vulnerability disclosure information are absent. Overall, the website is functional, moderately optimized for mobile, and provides relevant content for its audience, but could improve in privacy compliance and contact transparency.

A

AS PASAŽIERU VILCIENS

pv.lv

54

AS Pasažieru Vilciens operates as the primary passenger rail service provider in Latvia, offering train schedules, ticketing (including mobile e-tickets), and real-time train tracking. The website www.vivi.lv serves as a comprehensive portal for passengers, providing timely updates, accessibility options, and multilingual support (Latvian and English). The company targets local commuters and tourists, positioning itself as a key player in Latvia's transportation sector. Technically, the website employs modern JavaScript frameworks and UI libraries such as jQuery UI and Slick Carousel, ensuring a responsive and accessible user experience. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, HTTPS is enforced, and client-side form validations are implemented. However, the absence of explicit security headers and a published security policy or incident response contact indicates room for improvement. No critical vulnerabilities or suspicious activities were detected, and WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting the company's credibility and trustworthiness. Strategic enhancements in security transparency and policy publication would further strengthen its risk management and user trust.

R

Rīgas lidosta

riga-airport.com

58

Rīgas lidosta operates as the official website for Riga International Airport, providing comprehensive information about flights, passenger services, baggage handling, transport options, and business partnerships. The site targets passengers, visitors, and business partners, positioning itself as the primary gateway for air travel in Latvia. The website is built on Drupal CMS with modern web technologies, offering good mobile optimization and accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness despite the professional and consistent branding. Strategic recommendations include verifying domain registration details, publishing privacy and security policies, and enhancing security headers to improve overall trust and compliance.

P

Pärnu Sadam AS

parnusadam.eu

47

Pärnu Sadam AS operates as a regional port authority and service provider located in southwestern Estonia, specifically at the mouth of the Pärnu River. The company offers essential harbor services including vessel scheduling, access permit management, and related maritime services. The website positions Pärnu Sadam as a key regional player in transportation and port services, targeting shipping companies, local businesses, and visitors. The business model revolves around providing port infrastructure and administrative services to facilitate maritime traffic and regional commerce. Technically, the website is built on WordPress 6.7.2 with a modern tech stack including Yoast SEO for search optimization, WPML for multilingual support, and integration of Google Analytics and Google Maps APIs. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, enhancing user trust and legal compliance. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics and provides a cookie consent banner with opt-in/out options. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analyzed content, indicating a generally sound security posture. Overall, Pärnu Sadam's website reflects a credible and professional digital presence consistent with its business operations. The site is accessible without WAF or blocking mechanisms, includes comprehensive privacy and cookie policies, and provides clear contact information. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

A

AirProxy AS

airproxy.eu

46

AirProxy AS is a specialized General Sales and Service Agent (GSSA) company with 30 years of experience serving passenger and cargo airlines in the Baltic region through offices in Tallinn, Riga, and Vilnius. The company focuses on providing representation and support services to airlines, positioning itself as a trusted partner in the transportation sector. The website is built on WordPress and employs standard web technologies, offering a professional and consistent user experience with good mobile optimization and navigation clarity. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security posture and privacy compliance. HTTPS is properly implemented, ensuring secure communication. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy best practices. Overall, the website reflects a credible small business with room for improvement in security and compliance documentation.

C

Cargo Handling AS

ch.ee

43

Cargo Handling AS is an Estonian-based small transportation and logistics company specializing in cargo handling and storage services for international air and road carriers, freight forwarders, and companies engaged in international trade. The company also offers customs warehouse and excise warehouse services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on clear presentation and multilingual support (Estonian and English). Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but could improve in privacy and security transparency to enhance trust and compliance.