Transportation security reports

V

Vlantana

vlantana.lt

58

Vlantana is a European logistics company specializing in transportation and warehousing services, with established subsidiaries in Germany, Spain, and Poland. The company targets businesses requiring logistics solutions across Europe, positioning itself as a medium-sized player in the transportation sector. The website is professionally designed using WordPress CMS, incorporating modern technologies such as jQuery, Yoast SEO, Cookiebot for cookie consent, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the website enforces HTTPS and implements a comprehensive cookie consent mechanism, demonstrating good privacy compliance. However, there is room for improvement in security headers and incident response transparency, as no explicit security policies or contact channels for security incidents were found. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business claims. The domain registration data is consistent with the business location and registrar, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

V

ViaCon

viacon.lt

56

ViaCon LT is a well-established company specializing in civil engineering infrastructure solutions, including bridges, culverts, geotechnical, and stormwater management products. With over 35 years of experience and a parent company ViaCon Group, it holds a strong market position in Lithuania and surrounding regions. The website reflects a professional digital presence built on WordPress with modern plugins and a responsive design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response contacts could be improved. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and business details.

W

Western Shipyard Group

wsy.lt

60

Western Shipyard Group is a leading marine engineering corporation based in Lithuania, with a history spanning over five decades. The group comprises 21 companies specializing in shipbuilding, repair, design, manufacturing of metal structures, and port logistics services. It is a major employer in Western Lithuania, serving maritime industry clients with comprehensive ship lifecycle services. The website reflects a mature business with consistent branding and a clear focus on its core industrial and transportation sectors. Technically, the website is built on WordPress with a modern plugin ecosystem including multilingual support, photo galleries, and cookie consent mechanisms. It uses Cloudflare DNS and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents good SEO and accessibility features, though some advanced security headers are not explicitly detected. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business's Lithuanian identity and domain age supports legitimacy. Overall, the website is professional and trustworthy with room for improvement in privacy policy publication, security policy transparency, and incident response readiness. Strategic enhancements in these areas would strengthen compliance and security posture.

A

Avis automobilių nuoma

avis.lt

59

Avis.lt is the Lithuanian localized website for Avis automobilių nuoma, a major car rental company operating in Lithuania and globally. The company offers a wide range of vehicle rental services including short-term and long-term rentals, leasing, microbus rentals, and chauffeur services. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, booking, and customer support. It integrates modern JavaScript libraries and APIs to enhance user experience and booking functionality. Security posture is good with HTTPS enforced and secure form handling, though some advanced security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting user data protection. However, the WHOIS data for the domain is unavailable or invalid, which raises concerns about domain registration transparency. Overall, the site is trustworthy and functional but would benefit from improved domain registration clarity and enhanced security headers.

U

UAB Kautra

kautra.lt

48

UAB Kautra is a well-established Lithuanian transportation company operating since 1934, specializing in passenger transport services including city, intercity, and international routes, as well as bus rental services. The company positions itself as one of the most experienced passenger carriers in Lithuania, targeting travelers within Lithuania and abroad. The website reflects a professional business presence with clear service offerings and structured data to enhance search engine visibility. Technically, the website is built on WordPress, utilizing common technologies such as jQuery, Google reCAPTCHA for bot protection, and Cookiebot for cookie consent management. The site demonstrates moderate performance and good mobile optimization, with SEO best practices like meta tags and Open Graph data implemented. However, some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. The cookie consent mechanism is comprehensive and transparent, but the absence of a clear privacy policy and terms of service pages is a compliance gap. The WHOIS data for the domain is unavailable or invalid, which limits the ability to fully verify domain legitimacy. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security hardening. The lack of WHOIS data is a concern but does not necessarily indicate malicious intent given the business maturity and content quality.

W

Wielton S.A.

wielton.com.pl

36

Wielton S.A. is a well-established Polish manufacturer specializing in the production of truck semi-trailers, construction trailers, agricultural trailers, and dump trucks. The company operates a broad product portfolio targeting transport, construction, and agricultural sectors, supported by a network of subsidiaries and partners across Europe. Their website reflects a mature digital presence with comprehensive product information and service offerings, including telematics and refurbishment services. Technically, the website is built on WordPress with modern integrations such as Google Maps API, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a moderate to advanced digital maturity. The site is mobile-optimized and employs cookie consent mechanisms, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks DNSSEC and some recommended security headers, which could be improved. No critical vulnerabilities or blocking WAF mechanisms were detected, suggesting a stable security posture. Overall, the website demonstrates good business credibility and technical implementation, with room for enhanced privacy compliance and security hardening.

M

Magnetic Leasing

magneticleasing.com

67

Magnetic Leasing is a specialized company focused on aircraft leasing, trading, and asset management, primarily targeting mature Airbus A320 and Boeing 737 aircraft families. Founded in 2019, the company serves airlines and maintenance organizations worldwide, leveraging technical expertise and synergy with its MRO operations. The website reflects a professional and consistent brand presence with clear service offerings and a strong partner ecosystem. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes advanced marketing and analytics tools such as Google Tag Manager and LinkedIn Insight Tag, complemented by a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and reCAPTCHA Enterprise protecting forms, though explicit security headers and incident response policies are not evident. Overall, the domain registration is privacy-protected but consistent with the business profile, and no suspicious patterns were detected. The site offers a good user experience with clear navigation and mobile optimization.

B

Baltic transline

baltictransline.lt

51

Baltic transline is a well-established Lithuanian logistics and transportation company with over 25 years of experience. The company offers a broad range of services including international cargo transportation, cargo forwarding, trailer rental and sales, ferry ticketing for cargo transport, cargo insurance, and intermodal transportation solutions. The website reflects a mature business with a large transport fleet and a significant client base, supported by a professional online presence and active recruitment efforts. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and reCAPTCHA, hosted behind Cloudflare DNS services, ensuring good performance and security. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's market position.

A

AB „Kelių priežiūra“

keliuprieziura.lt

51

AB „Kelių priežiūra“ is a Lithuanian company specializing in the maintenance and repair of state roads, providing a wide range of services including road upkeep, material production, and technical equipment rental. The company serves government entities, municipalities, and the public, positioning itself as a large and established player in the transportation infrastructure sector with over 2,000 employees and extensive operational coverage. The website reflects a professional and consistent brand image with clear navigation and relevant content primarily in Lithuanian. Technically, the site uses modern web technologies such as AngularJS and EasyWeb4 CMS, with Google Analytics integrated for traffic analysis. Security measures include HTTPS enforcement, anti-CSRF tokens, and a detailed cookie consent mechanism, although formal security policies and incident response contacts are not explicitly published. Overall, the website is well-maintained, secure, and compliant with GDPR requirements, providing multiple contact channels and transparency about data protection.

Equinox Europe is a medium-sized Lithuanian company specializing in comprehensive logistics process optimization and warehouse automation solutions, including technological design and full robotization. The company employs about 100 specialists in logistics, automation, robotics, and IT, positioning itself as a leader in the Lithuanian logistics sector with a strong professional team and a focus on innovation and employee development. The website reflects a professional digital presence with good content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies such as Bootstrap, FontAwesome, Google Fonts, Cookiebot for cookie consent, Google Tag Manager, and Google reCAPTCHA for security. Security posture is good with HTTPS enforced and bot protection mechanisms, though some security headers are not explicitly detected and could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is unavailable due to an invalid domain name error, which reduces trust in domain registration transparency. No explicit company contact emails or phone numbers are found on the homepage, which slightly impacts business credibility. Overall, the website is professional, secure, and compliant, but domain registration opacity and limited contact information are areas for improvement.

T

Transocean Lietuva UAB

transocean.lt

46

Transocean Lietuva UAB is a well-established maritime logistics company founded in 2005, specializing in container, RoRo, road, air, project cargo transport, and tank-container logistics primarily in the Baltic States, CIS, and Central Asia. The company maintains partnerships and official representation agreements with major international shipping lines such as ONE, NYK Ro-ro, ACL RoRo, and Yusen Logistics, positioning itself as a reliable regional logistics provider. The website reflects a professional digital presence built on WordPress with modern technologies including Google Maps integration and Google Analytics for user tracking. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though security headers and explicit security policies are absent. Privacy compliance is limited due to the lack of a published privacy policy and terms of service, which should be addressed to improve regulatory adherence and user trust. The absence of WHOIS data for the domain limits domain registration trust verification, but the website content and business information appear consistent and credible. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and providing incident response information to strengthen overall security and compliance.

G

Girteka - Cold Chain Logistics - Responsible Logistics

girteka.eu

59

Girteka is a leading European asset-based road transportation company specializing in cold chain logistics services, delivering over 700,000 full truck loads annually. The company targets businesses requiring reliable and responsible logistics solutions across Europe. The website reflects a professional and consistent brand image, with clear descriptions of services and a focus on cold chain logistics. Technically, the site is built on WordPress using Elementor, incorporating modern web technologies such as Google Tag Manager and Facebook SDK for marketing and analytics. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies and incident response information, and WHOIS data is privacy protected, limiting registrant transparency. Overall, the site demonstrates a mature digital presence with moderate to strong security posture and privacy compliance.

M

Montvega

montvega.eu

30

Montvega is a Lithuanian-based company specializing in warehouse storage equipment and logistics solutions, representing BITO-Lagertechnik in the Baltic region. The company offers a range of services including design, inspection, assembly, and sales of warehouse shelving and safety elements. Their website is professionally designed using WordPress with modern plugins and provides clear contact channels and GDPR-compliant privacy and cookie policies. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is basic with HTTPS enabled but lacks advanced security headers and public security policies. WHOIS data is privacy protected as per EURid policy, which is standard for .eu domains, and does not raise immediate concerns. Overall, Montvega presents a credible and professional business presence online.

F

Flightradar.live

smallplanet.aero

62

Flightradar.live is a medium-sized online aviation information platform specializing in real-time flight tracking and detailed airline histories, such as the comprehensive coverage of Small Planet Airlines. The website targets aviation enthusiasts, travelers, and industry analysts, offering services including flight tracking, airport info, travel booking affiliates, and merchandise sales. The business model relies on advertising and affiliate partnerships, positioning itself as a niche player in the transportation sector with a consistent brand presence and good content quality. Technically, the site runs on WordPress with modern ad and consent management technologies, leveraging Cloudflare DNS and Google services for analytics and advertising. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and some security headers but lacks DNSSEC and explicit security policies. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms. No WAF or blocking mechanisms were detected, and WHOIS data shows privacy protection consistent with legitimate business practices. Overall, the site is professional and trustworthy but could improve in security transparency and contact availability.

G

Getjet Airlines

getjet.aero

64

GetJet Airlines is a Lithuanian-based airline specializing in ACMI leasing, charter flights, and aircraft management services. Established in 2014 and headquartered in Vilnius, the company holds IOSA certification and serves a regional market with a fleet of Airbus and Boeing aircraft. The website reflects a professional and consistent brand image targeting both business clients and passengers, providing detailed service information and active news updates. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.

R

Reno-Tahoe International Airport

renoairport.com

62

Reno-Tahoe International Airport operates as a regional airport authority serving the Reno-Tahoe region with a focus on passenger transportation, flight services, parking, and airport amenities. The website reflects a well-established entity with a strong market position, offering over 130 daily flights and 20+ nonstop destinations through 11 airlines. The digital infrastructure is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience across devices. Security measures include HTTPS, Google reCAPTCHA Enterprise, and standard best practices, though some security headers could be more explicitly implemented. The absence of WHOIS data raises questions about domain registration transparency but does not detract from the professional presentation and trustworthiness of the site. Overall, the airport authority demonstrates a mature digital presence with good compliance and user engagement features.

C

Clark County Department of Aviation

harryreidairport.com

54

Harry Reid International Airport, operated by the Clark County Department of Aviation, serves as the primary commercial airport for Las Vegas and Southern Nevada. The website provides comprehensive information on flights, terminals, transportation, parking, security, and special assistance services, targeting travelers, airlines, and business partners. The airport holds a strong market position as a major transportation hub in the region. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Azure hosting, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. However, some accessibility features are basic and could be enhanced. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and a public security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific indicators. Contact information is limited on the site, which may impact user trust. Overall, the website is professional and trustworthy, supported by consistent WHOIS data and a long domain age. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the security posture and user confidence.

Z

Zero Fatalities

zerofatalitiesnv.com

53

Zero Fatalities Nevada is a state-level traffic safety education program aimed at achieving zero traffic fatalities by 2050 through a multi-disciplinary approach involving education, engineering, EMS, enforcement, and equity. The website serves as an informational platform targeting Nevada residents and stakeholders involved in traffic safety. The digital infrastructure is built on WordPress with Bootstrap and integrates multiple analytics and advertising pixels including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain registration protections in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

A

Arizona Department of Transportation

az511.gov

58

AZ 511 is an official Arizona Department of Transportation service providing real-time traffic and transit information to residents and travelers in Arizona. The website offers comprehensive traffic maps, travel times, camera feeds, message boards, and route planning tools, positioning itself as a critical resource for transportation information in the state. The site integrates modern technologies such as Google Maps API and uses a responsive design to cater to desktop and mobile users. Security posture is adequate with HTTPS enabled and anonymized analytics tracking, though improvements are recommended in DNS security and security headers. Privacy compliance is basic, lacking a cookie consent mechanism and explicit privacy policies. Overall, the site is trustworthy, professional, and well-aligned with its government service mission.

O

Oregon Department of Transportation

tripcheck.com

56

TripCheck is an official Oregon Department of Transportation website providing comprehensive traveler information including road conditions, weather forecasts, traffic cameras, and commercial vehicle restrictions. The site serves as a critical resource for travelers and commercial operators within Oregon, offering real-time data and various travel-related services. The business model is government-operated, focusing on public service and transportation safety. The website is well-branded and consistent with state government standards, targeting a broad audience of Oregon travelers and transport professionals. Technically, the site employs modern JavaScript frameworks such as Dojo Toolkit and jQuery, along with Esri's ArcGIS API for mapping functionalities. The infrastructure appears to be hosted on state government servers, ensuring reliability and alignment with public sector standards. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the domain is well-protected with registrar-level domain status locks, but lacks DNSSEC implementation and visible security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. There is no exposed sensitive data or vulnerable libraries detected, but the absence of incident response contacts and security policies reduces the overall security posture. Overall, the website is trustworthy and professional, serving its public service mission effectively. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance user trust and regulatory adherence.

A

Aviapros

aviapros.com

63

Aviapros is a specialized aviation software company offering a flight management platform designed to enhance efficiency and compliance for Fixed Base Operators (FBOs). The platform focuses on streamlining communication, reducing reliance on emails, and improving operational management through features such as flight management, analytics, user management, auditing, and real-time insights. The website presents a professional and consistent brand image targeting aviation operators and service providers. Technically, the website leverages modern frameworks including Astro and React, with hosting and DNS services involving Cloudflare and GoDaddy. The site is mobile optimized and includes SEO best practices, though accessibility features are basic. Google Tag Manager is used for analytics and tracking, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and employs domain locking with multiple EPP status flags, enhancing domain security. However, DNSSEC is not enabled, and no Content Security Policy or cookie consent mechanism is present, which are areas for improvement. No explicit security or incident response policies are published, limiting transparency in security governance. Overall, Aviapros demonstrates a solid business and technical foundation with room to enhance privacy compliance and security posture. The domain registration and website content align well, supporting legitimacy and trustworthiness.

E

EMPTYLEGSPRO

emptylegspro.com

59

Empty Legs Pro Malta operates as a niche online platform specializing in the promotion and discovery of private jet empty leg flights. The website serves as a marketplace connecting business jet operators offering empty legs with potential travelers seeking cost-effective private jet travel options. The business targets private jet travelers and operators primarily in Malta and surrounding regions, leveraging a straightforward business model centered on listings and promotions. The platform is relatively young, founded in 2021, and maintains a small business scale with focused service offerings.

S

Safran Group

safran-group.com

62

Safran Group is a leading multinational enterprise specializing in aerospace, defense, and transportation technologies. The company offers a broad portfolio of products and services including aircraft propulsion, equipment, and defense systems, serving a global customer base. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Drupal 10, hosted likely on AWS infrastructure, and employs modern analytics and marketing tools such as Matomo and Google Tag Manager. Security posture is strong with HTTPS enforced and anti-CSRF protections, though explicit security headers and incident response contacts could be improved. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR-aligned policies. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional presentation and corporate transparency. Strategic recommendations include enhancing security header disclosures, publishing a security policy, and establishing a vulnerability disclosure program.

V

Vend

vend.com

73

Vend is a well-established marketplace operator primarily serving the Nordic region with platforms in mobility, real estate, recommerce, and jobs. The company positions itself as a trusted provider enabling smarter choices for consumers and professional partners. The website reflects a mature digital presence with strong branding, comprehensive content, and a focus on user experience. Technically, the site leverages modern JavaScript frameworks, Contentful CMS, and integrates advanced consent management and analytics tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting Vend's credibility as a leading Nordic marketplace operator.

Bychl Yacht Centrum is a specialized yacht dealer and service provider based in the Czech Republic, established since 1999. The company offers motor yachts from well-known brands such as Sunseeker, Williams, Hydrolift, and Marex, targeting yacht buyers and enthusiasts primarily in the Czech market. Their services include yacht sales, current yacht offers docked in Prague and Croatia, and comprehensive yacht servicing and maintenance. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. The presence of multiple social media channels enhances their market reach and brand visibility. Technically, the website employs modern web technologies including jQuery, Bootstrap, Font Awesome, and Cookiebot for consent management. While the site loads external scripts from reputable CDNs and uses HTTPS, some scripts are loaded with non-standard types which may affect performance. SEO and accessibility are adequately addressed, though there is room for improvement in security headers and structured data implementation. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages. No forms or data collection beyond analytics and consent scripts were detected. WHOIS data confirms a long-standing domain registration consistent with the business profile, enhancing trustworthiness. No blocking or WAF mechanisms interfere with content access. Overall, the website presents a moderate to good security posture and business credibility, with recommendations to improve privacy disclosures, security headers, and vulnerability disclosure policies to enhance compliance and trust.

J

Jefferson Beach Yacht Sales

jbys.com

61

Jefferson Beach Yacht Sales (JBYS) is a well-established yacht sales and brokerage company with over 50 years of experience, specializing in new and used boat sales, servicing, financing, and insurance. The company targets boating enthusiasts primarily in the Great Lakes region and beyond, offering a comprehensive range of marine services. The website reflects a professional and consistent brand presence, showcasing multiple world-leading yacht brands and providing a user-friendly experience with clear navigation and responsive design. Technically, the website is built on WordPress with the Gravity Forms plugin, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and ClickDimensions. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status clientTransferProhibited, indicating domain transfer protection. However, DNSSEC is not enabled, and there is a lack of explicit security headers and published security or incident response policies. No privacy or cookie policies were found, which impacts privacy compliance ratings. Overall, JBYS presents a trustworthy and credible online presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, implementing security headers, and enhancing accessibility to strengthen the website's security posture and compliance.

Marinepalvelu Oy is a Finnish company registered since 2001, operating in the transportation sector. The domain marinepalvelu.fi is registered under this company with consistent WHOIS data indicating legitimacy. However, the website is currently inaccessible, returning a 404 Not Found error with no visible content, metadata, or interactive elements. This severely limits the ability to assess the company's online presence and digital maturity. The lack of accessible content also means no privacy, cookie, or security policies are available, which is a significant compliance and trust concern. From a technical perspective, no information about the technology stack, hosting provider, or security headers is available due to the minimal HTML content. There is no indication of HTTPS usage or modern web practices. The absence of contact information and business details on the website further reduces the company's online credibility. Security posture is weak or unknown due to lack of data. No security headers or HTTPS confirmation is present, and no vulnerability disclosures or incident response information is found. The WHOIS data is consistent and shows no privacy protection, which aligns with a transparent business registration. Overall, the website's current state poses a risk to user trust and compliance with data protection regulations. Strategic recommendations include restoring website accessibility with proper HTTPS implementation, publishing comprehensive privacy and cookie policies, adding clear contact information, and implementing standard security headers to improve security posture and user trust.

ס

סטרים יאכטות

streamyachts.com

52

Stream Yachts (סטרים יאכטות) is a well-established Israeli company specializing in the sale, rental, management, and maintenance of new and used yachts and boats. With nearly two decades of experience, they represent leading international brands and provide comprehensive maritime services to customers domestically and internationally. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress, Elementor, and various analytics and marketing tools. SEO is well implemented with structured data and meta tags. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Contact information is clearly presented, including phone, email, and a contact form, supporting good business credibility.

S

SUNSEEKER NIGERIA

sunseekernigeria.co.uk

68

Sunseeker Nigeria presents a professional and comprehensive website showcasing the world-leading luxury motor yacht brand Sunseeker. The company offers a diverse portfolio of yachts ranging from performance to superyachts, targeting affluent customers seeking premium maritime experiences. The website is built on modern technologies including React and Next.js, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and consent management implemented. However, a critical concern arises from the WHOIS data indicating the domain www.sunseekernigeria.co.uk is not validly registered under Nominet UK rules, which may impact trust and legitimacy perceptions. Overall, the site is well-designed and content-rich, but domain registration issues require urgent attention to ensure full business credibility and trust.

S

SUNSEEKER CHANNEL ISLANDS

sunseekerchannelislands.com

57

Sunseeker Channel Islands operates as a luxury motor yacht brand distributor, positioning itself as a leading provider of high-end yachts with a focus on design and engineering excellence. The website reflects a professional and consistent brand image targeting affluent yacht buyers and enthusiasts. The technical infrastructure leverages modern web technologies including React-based Next.js framework, Chakra UI for styling, and integrates Google Analytics and Tag Manager for tracking, alongside OneTrust for cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers, indicating a mature security posture. However, the absence of a publicly accessible privacy policy, terms of service, and explicit contact information limits full compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a solid digital presence with room for improvement in privacy compliance and user contact transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence, complementing the existing robust technical and security foundations.

S

SUNSEEKER MALLORCA

sunseekermallorca.es

70

Sunseeker Mallorca operates as a luxury motor yacht brand specializing in the sale and servicing of high-end yachts. The company positions itself as a world leader in luxury motor yachts, targeting affluent customers seeking premium marine vessels. The website reflects a strong brand identity with professional design and multilingual support, indicating a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and Chakra UI, integrates Google Analytics and Tag Manager for marketing insights, and employs OneTrust for privacy compliance. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness, though the lack of accessible WHOIS data limits full domain legitimacy verification.

S

SUNSEEKER IBIZA

sunseekeribiza.com

67

Sunseeker Ibiza operates as a luxury motor yacht brand specializing in the sale and service of high-end yachts. The company positions itself as a world leader in luxury motor yachts, targeting affluent customers seeking premium yachting experiences. The website reflects a strong brand identity with professional design and comprehensive content that highlights their engineering excellence and product offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrating Google Tag Manager and OneTrust for analytics and privacy compliance. The site is well-optimized for mobile and accessibility, with good SEO practices in place. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data is a notable anomaly that impacts business credibility and trustworthiness. Overall, the site demonstrates a mature digital presence but would benefit from enhanced transparency in security and domain registration details.

S

SUNSEEKER SWITZERLAND

sunseekerswitzerland.com

57

Sunseeker Switzerland operates as a premier luxury motor yacht brand, offering a diverse portfolio of yachts ranging from performance models to superyachts. Established in 1969, the company has built a strong market position as a world-leading luxury yacht manufacturer and broker, targeting affluent customers seeking high-end yachting experiences. The website reflects a mature digital presence with multi-language support, comprehensive product information, and professional branding. Technically, the website leverages modern frameworks such as React and Next.js, combined with Chakra UI for styling, ensuring a responsive and accessible user experience across devices. Integration with Google Tag Manager and OneTrust indicates a mature approach to analytics and privacy compliance. Performance is moderate with good SEO and accessibility practices in place. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, there is no explicit public security policy or incident response information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting the brand's luxury market positioning. Strategic enhancements in security transparency and incident response readiness would further strengthen trust and resilience.

S

SUNSEEKER POOLE

sunseekerpoole.com

59

Sunseeker Poole is a prominent luxury motor yacht brand specializing in the design, engineering, and sales of high-end motor yachts. Positioned as a world leader in the luxury yacht market, the company targets affluent customers seeking premium marine vessels. The website reflects a professional and consistent brand image, leveraging modern web technologies such as Next.js and Chakra UI to deliver a responsive and visually appealing user experience. The digital infrastructure includes integrations with Google Tag Manager, OneTrust for cookie consent, and Google Maps API, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service documentation are absent. Overall, the site demonstrates good technical and business credibility but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

S

SUNSEEKER NEUSTADT

sunseekerneustadt.de

62

SUNSEEKER NEUSTADT operates as a luxury motor yacht distributor, representing the world-leading Sunseeker brand known for its uncompromising design and engineering excellence. The website targets affluent yacht buyers and enthusiasts, positioning itself strongly in the luxury transportation sector. The business model focuses on high-end yacht sales and related services, with a medium-sized operation based in Germany. The site branding is consistent and professional, reinforcing its market position. Technically, the website is built on modern frameworks such as Next.js and Chakra UI, leveraging Cloudflare for DNS and CDN services. It integrates Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare, but lacks explicit security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy. Contact information is limited, with a phone number via WhatsApp and social media links but no direct email or physical address found. Overall, the website presents a professional and trustworthy front with room for improvement in privacy transparency and security best practices. The risk level is moderate, with recommendations to enhance security headers, publish privacy and security policies, and provide clearer contact channels for incident response.

S

SUNSEEKER TURKEY

sunseekerturkey.com

69

Sunseeker Turkey represents a luxury motor yacht brand targeting affluent customers interested in high-end marine vessels. The website showcases the brand's commitment to design and engineering excellence, positioning itself as a leading distributor in Turkey. The technical infrastructure is modern, leveraging React and Next.js frameworks, with integration of Google Tag Manager and OneTrust for analytics and cookie consent respectively. The site is mobile optimized and provides a professional user experience with clear navigation and branding consistency. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Contact information is available primarily via phone and social media channels, but no verified company emails were found. Overall, the website is functional and professional but requires improvements in domain legitimacy verification, privacy policy transparency, and security best practices to enhance trust and compliance.

S

SUNSEEKER ITALY

sunseeker-italy.com

57

Sunseeker Italy operates as a luxury motor yacht distributor, representing the world-leading Sunseeker brand in Italy. The company targets affluent customers interested in high-end motor yachts, emphasizing design and engineering excellence. The website reflects a professional and polished digital presence, leveraging modern web technologies such as React and Next.js, and integrates consent management tools to comply with privacy regulations. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies, indicating a mature approach to user data protection. However, the absence of WHOIS domain registration data raises concerns about domain transparency, which slightly impacts the overall trustworthiness from a security perspective. No web application firewall or blocking mechanisms were detected, and the site appears free from obvious vulnerabilities or exposed sensitive information.

N

Nautikos

nautikos.com.mx

37

Nautikos is a well-established yacht sales company operating primarily in Mexico and Latin America, specializing in luxury yachts from prestigious brands such as Sunseeker, Pardo, and Nautor Swan. The company positions itself as a market leader with over 25 years of experience, targeting affluent clientele seeking high-end vessels. The website is built on a modern WordPress platform using the Divi theme and integrates specialized yacht sales plugins, reflecting a mature digital infrastructure. Security measures include HTTPS with a valid SSL certificate and Google reCAPTCHA for form protection, although the absence of security headers and privacy policies indicates room for improvement. Overall, the website presents a professional and trustworthy front but lacks some compliance and security best practices.

D

DCH Marine

dch-marine.com

57

DCH Marine operates as a premier yacht distributor in the Asia Pacific region, representing prestigious brands such as Sunseeker and Saxdor Yachts. Their business model focuses on new yacht sales, brokerage, and aftercare services, catering to a luxury clientele seeking nautical excellence. The website reflects a professional and consistent brand image, targeting affluent customers interested in high-end marine vessels. Technically, the site is built on the Wix platform utilizing modern JavaScript frameworks and includes standard marketing and analytics integrations. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to strengthen trust and regulatory adherence.

F

Fincantieri S.p.A.

fincantieri.com

68

Fincantieri S.p.A. is a leading global shipbuilding group headquartered in Italy, specializing in the design, construction, and repair of a wide range of vessels including cruise ships, naval vessels, ferries, mega yachts, and offshore platforms. The company holds a strong market position as one of the largest diversified shipbuilders worldwide, supported by numerous subsidiaries and a comprehensive investor relations program. The website reflects a mature enterprise with extensive content targeting investors, partners, suppliers, and customers in the maritime and defense sectors. Technically, the website employs modern web technologies including JavaScript, Google Maps API, and Akamai CDN for content delivery, ensuring moderate performance and good mobile optimization. The site is well-structured with clear navigation and professional design, although accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes some security headers, but lacks explicit Content-Security-Policy and other advanced headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy and GDPR adherence, but the absence of a cookie consent mechanism and visible contact information for security or incident response are notable gaps. Overall, the website presents a trustworthy and professional digital presence for a large enterprise, though improvements in privacy compliance and security header implementation are recommended. The missing WHOIS data reduces transparency but does not detract significantly from the site's credibility given the extensive corporate disclosures and investor information available.

V

Viktor Lenac Shipyard

lenac.hr

58

Viktor Lenac Shipyard is a well-established maritime service provider based in Croatia, specializing in ship repair, conversions, and offshore services. Positioned as one of the leading shipyards in the Mediterranean, it serves a diverse clientele including ship owners and offshore companies. The website reflects a professional and consistent brand image, supported by its affiliation with the Palumbo Group. Technically, the site employs modern JavaScript libraries and frameworks, hosted on reliable AWS infrastructure, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and business legitimacy.

Etihad Airways operates as a major international airline headquartered in the United Arab Emirates, offering premium passenger flight services globally. The website serves as a comprehensive platform for booking flights, managing reservations, and accessing loyalty programs. The digital infrastructure leverages modern web technologies including React and Adobe Experience Manager, supported by robust analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site demonstrates strong mobile optimization and accessibility features, ensuring a high-quality user experience. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly disclosed. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than suspicious activity. Overall, the website reflects a mature digital presence consistent with a large enterprise airline brand.

B

BRT

brt.it

77

BRT is a well-established Italian courier and logistics company operating under the parent company DPDgroup. The company offers a broad range of services including express courier, international shipping, logistics solutions, and specialized services such as temperature-controlled shipping (BRT fresh). The website targets both private individuals and business clients, providing comprehensive service information and customer support channels. The digital presence is professional, with a clear structure and multilingual support, primarily in Italian and English. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various plugins for enhanced functionality including form management and cookie consent. The site employs HTTPS with strong security headers, indicating a mature security posture. Tracking and analytics are implemented via Google Tag Manager and TrustCommander, with appropriate cookie consent mechanisms in place. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks publicly available dedicated security policies or incident response information. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. The domain registration is consistent with the business identity, reinforcing trustworthiness. Overall, BRT's website reflects a mature logistics business with solid technical infrastructure and good security hygiene. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

D

DPD

dpdgroup.com

71

DPD is a major international parcel delivery and logistics company operating under the Geopost group umbrella. The company provides parcel delivery services across more than 50 countries, leveraging a network of 57,000 delivery experts and multiple subsidiary brands such as Chronopost, SEUR, and BRT. The website reflects a professional and consistent brand image, targeting both business and consumer customers seeking reliable shipping solutions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses a variety of custom plugins to support its services. The site is mobile optimized and includes accessibility features, though these could be enhanced further. Security posture is solid with HTTPS enforced and some security best practices observed, but additional HTTP security headers could improve protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trustworthiness. Overall, the website is professional, functional, and trustworthy, supporting DPD's position as a leading logistics provider.

L

Leth

lethsuez.com

61

Leth Agencies is a well-established maritime agency founded in 2002, specializing in providing comprehensive services in key maritime hotspots including transit handling, port calls, husbandry, and Suez Canal rebates. The company operates internationally with offices in multiple countries, targeting shipping companies and maritime operators. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern frameworks such as Bootstrap and integrates third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Soul Garages

souls.co.uk

49

Soul Garages is a well-established independent automotive service and repair business located in Olney, Buckinghamshire, UK, with over 100 years of local presence. The company offers a comprehensive range of services including servicing for all makes and models, MOT testing, and specialized repairs for electric and hybrid vehicles. Their market position is strong locally, being the only MOT testing station in town and holding prestigious accreditations such as the Motor Ombudsman. The website reflects a professional and customer-focused business model targeting vehicle owners in the region. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms, reflecting good digital maturity. Performance is moderate with room for optimization, and accessibility features are basic but present. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection, with a cookie consent banner supporting GDPR compliance. However, explicit HTTP security headers are not detected in the provided data, and no dedicated security or incident response policies are found on the site. The absence of WHOIS data due to domain registration issues lowers the overall trust score, though the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional front for a local automotive service business, but the domain registration anomaly should be investigated further to ensure full legitimacy and ownership clarity.

P

proveo, Quantum Aviation Solutions GmbH

proveo.com

71

proveo, operated by Quantum Aviation Solutions GmbH, is a specialized provider of Ground Support Equipment (GSE) Fleet Telematics Solutions based in Germany. Established in 2011, the company focuses on delivering IoT-enabled fleet management services that optimize safety, streamline maintenance, and enhance operational efficiency for aviation ground support and transportation sectors. Their market position is that of an industry leader in GSE telematics, targeting B2B customers requiring advanced fleet and asset management solutions. Technically, the website is built on a modern WordPress platform using Elementor for design and Yoast SEO for search optimization. The presence of a comprehensive cookie consent mechanism and SSL encryption indicates a mature digital infrastructure with attention to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security standpoint, the site enforces HTTPS and employs a cookie consent banner that documents user consent in compliance with GDPR. However, there is room for improvement by enabling DNSSEC, adding more security headers, and conducting regular audits of third-party scripts. No critical vulnerabilities or exposed sensitive data were detected. Overall, proveo demonstrates a solid business and technical foundation with good privacy and security practices. The domain registration data aligns well with the business history, enhancing trustworthiness. Strategic recommendations include enhancing security headers, enabling DNSSEC, and expanding transparency with terms of service and vulnerability disclosure policies.

D

DANX A/S

danx.dk

62

DANX A/S is a Denmark-based logistics and distribution company specializing in the rapid delivery of spare parts across the Nordic and Baltic regions. The company operates a network of regional distribution centers (RDCs), forward stocking locations (FSLs), and pick-up/drop-off points (PUDOs) to ensure efficient and timely delivery services. Their business model focuses on tailored transport solutions, by-night distribution, and warehousing services, positioning them as a key player in the regional transportation sector. The website reflects a professional and consistent brand image with comprehensive service descriptions and regional contact information. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates advanced analytics tools like Piwik PRO and Google Tag Manager, and implements cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be enhanced. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices including secure login forms and cookie consent management. However, the absence of explicit security headers and lack of published incident response or vulnerability disclosure information represent areas for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness despite the professional website presentation. Overall, DANX A/S presents a credible and professional online presence with strong business and technical foundations. Addressing WHOIS transparency and enhancing security headers would further strengthen their security posture and trust profile.

N

Naboma

naboma.co

47

Naboma is a Danish company specializing in the manufacture and supply of maritime specialized seating solutions, including bridge chairs and 24-hour chairs. The company targets maritime industry professionals and shipbuilders, positioning itself as a niche supplier within the transportation sector. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure is modern and optimized for mobile devices, with caching and performance enhancements via WPRocket. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional business with room for security improvements.

W

Weilbach A/S

weilbach.dk

67

Weilbach A/S is a specialized provider of nautical software, services, data, and products tailored for the maritime industry. The company emphasizes improving workflows onboard ships and offers 24/7 support, positioning itself as a niche B2B service provider within the transportation sector. The website reflects a professional and consistent brand image, targeting maritime professionals and ship operators primarily in Denmark. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates Google Tag Manager for analytics, and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly, raising questions about domain legitimacy despite the professional online presence. Overall, the website is functional, well-designed, and trustworthy but would benefit from enhanced transparency and security practices.