Transportation security reports

A

adibus a/s

adibus.dk

59

Adibus a/s is a Danish company specializing in innovative IT and display solutions for public transportation providers and operators. Their offerings include real-time information systems, passenger information and infotainment systems, next stop announcements, station screens, automatic passenger counting, lane management, destination signage, Wi-Fi, driver applications, and various operational optimization tools. The company targets public transport operators primarily in Denmark and the Nordic region, positioning itself as a key technology provider in this niche market. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery, FontAwesome, Google Fonts, and FancyBox, with a CMS likely based on Dynamicweb. The site is mobile optimized and integrates Cookiebot for cookie consent management, alongside Google Analytics for visitor tracking. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent. However, no advanced security headers were detected, and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the website content and professional presentation support legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and security posture but would benefit from enhanced security headers, clearer contact information, and published security policies to strengthen trust and compliance.

Africa Automotive is a Denmark-based company specializing in supplying project vehicles and transport solutions primarily to international commercial companies, government organizations, and NGOs operating in Sub Saharan Africa. The company holds a strong market position as the sole appointed supplier of MAN trucks and spare parts to UN organizations and the US government, highlighting its trusted status in the humanitarian and aid sectors. Their offerings include a large stock of new vehicles, special conversions, and comprehensive shipment services worldwide. Technically, the website is built on WordPress using the X Theme and several plugins, with moderate performance and good mobile optimization. However, privacy compliance is lacking, with no visible privacy or cookie policies and no consent mechanisms, which poses compliance risks. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Overall, the site presents a professional business front with moderate trustworthiness but requires improvements in privacy and security transparency to enhance compliance and user trust.

S

Shipwaves

shipwaves.com

59

Shipwaves operates as a digital freight forwarding and logistics solutions provider, targeting businesses requiring international shipping and supply chain optimization. The company offers a comprehensive suite of services including ocean and air freight, land transport, trade finance, warehousing, and customs clearance, supported by a digital platform with real-time tracking and online booking capabilities. Their market position emphasizes technology-enabled, cost-efficient, and integrated logistics solutions primarily serving the Indian and UAE markets. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates third-party services like Zoho SalesIQ and Google Maps API. The site demonstrates good performance, mobile optimization, and accessibility, with secure HTTPS connections and validated forms. However, some security best practices like security headers are missing, and no explicit cookie consent mechanism is implemented. From a security perspective, the site maintains a good posture with HTTPS and secure form handling but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Privacy compliance is basic, with a privacy policy present but no clear GDPR consent mechanisms. Overall, Shipwaves presents a professional and functional digital logistics platform with solid technical foundations but requires improvements in transparency, privacy compliance, and domain legitimacy verification to enhance trust and security assurance.

J. Lauritzen's Eftf. is a well-established Danish family-owned transport and logistics company with over 140 years of experience, specializing in freight transport across Europe and Scandinavia, with particular expertise in Italy and Spain. The company offers a broad range of services including rail transport, road transport, intermodal solutions, logistics, and port services through its sister company. The website reflects a mature digital presence built on the SilverStripe CMS, integrating modern analytics and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust verification but the professional presentation and detailed business information support legitimacy. Overall, the company demonstrates strong market positioning and a customer-focused approach with clear contact channels and social media engagement.

C

Citroën Danmark

citroen.dk

50

Citroën Danmark operates as the official national website for the Citroën automotive brand in Denmark, providing comprehensive information on new cars, commercial vehicles, leasing options, and aftersales services. The site targets Danish consumers interested in Citroën's range of vehicles including electric and hybrid models. The business model focuses on vehicle sales, leasing, and service offerings, supported by a strong brand presence under the Stellantis parent company. Technically, the website leverages Adobe Experience Manager CMS, integrates advanced marketing and analytics tools such as Google Tag Manager, Facebook SDK, and Dynamic Yield, and complies with GDPR through a consent management system. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for compliance and transparency. Overall, the website is professional, trustworthy, and well-positioned to serve its market segment effectively.

C

Connected Cars

connectedcars.io

67

Connected Cars is a Denmark-based company founded in 2016 specializing in telematics solutions for the automotive industry. Their platform provides real-time vehicle data compatible with all car brands and models, targeting importers, dealers, and leasing companies. The website positions the company as a comprehensive B2B SaaS provider in the transportation sector, focusing on increasing profitability through connected car data services. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted on Google Cloud DNS infrastructure, and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and LinkedIn Insight. The website is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, indicating room for improvement. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR compliance indicators. Contact information is not explicitly provided, which may impact user trust. Overall, the site is functional and professional but requires enhancements in privacy, security, and transparency to improve trust and compliance.

Yokohama Tire operates a comprehensive and professionally designed website focused on providing detailed information about their tire products for cars, SUVs, trucks, and specialty vehicles. The company positions itself as a leading tire manufacturer with a strong emphasis on performance, durability, and innovation. The website targets vehicle owners and buyers seeking high-quality tires and related services, including dealer location and warranty information. Technically, the site leverages modern web technologies such as React and Next.js, integrates multiple analytics and advertising platforms, and is optimized for mobile and accessibility. Security posture is generally good with HTTPS and privacy scripts in place, but lacks explicit security headers and vulnerability disclosure information. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness. Overall, the site is professional and user-friendly but would benefit from enhanced privacy compliance and clearer contact information.

A

AutoBranchen Danmark

autobranchendanmark.dk

63

AutoBranchen Danmark is a well-established Danish industry organization founded in 2012, serving new and used car dealers, auto body shops, workshops, and leasing companies. It holds a strong market position with approximately 1200 members, offering legal and business advisory services, training, industry news, and member benefits. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to its target audience in the automotive sector. Technically, the site is built on WordPress with modern technologies including React and Google Tag Manager, optimized for mobile and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it could benefit from additional security headers and published incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Terra Navtica

terranavtica.com

53

Terra Navtica is a specialized transportation and marine engineering company established in 2000 and based in Denmark. They provide integrated heavy lift, transport, handling, installation, and removal services supported by a skilled workforce including naval architects and engineers. Their market position is that of a niche service provider with a portfolio of international projects and reputable clients in the energy and transportation sectors. The website showcases their services, project portfolio, and contact information but lacks formal privacy, cookie, and security policies. Technically, the site uses a modern but basic stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is moderate; the domain is protected against unauthorized transfer but lacks DNSSEC and security headers. No WAF or blocking mechanisms were detected, and the site is fully accessible.

C

Conveyor Technique A/S

ctas.dk

45

Conveyor Technique A/S is a Danish company specializing in the design, calculation, supply, and installation of innovative conveyor solutions worldwide. Their offerings range from small manual systems to large PLC-controlled robotic conveyor lines, with a focus on industrial painting applications and internal transport solutions. The company serves a global market with over 1,000 installations, targeting industrial manufacturers including automotive and motorcycle sectors. The website reflects a professional B2B business model with clear contact information and multilingual support via WPML. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Easy Video Player and Cookie Law Info for video content and cookie consent management respectively. The site is mobile-optimized and moderately performant, though some media playback issues were noted. SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit security or privacy policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The domain uses privacy protection for WHOIS data, which is common but reduces transparency. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security best practices and privacy compliance. Strategic enhancements in security headers, policy disclosures, and media content quality would strengthen the site's trustworthiness and compliance posture.

F

Falcon Maritime A/S

falcon-maritime.com

47

Falcon Maritime A/S is a Danish maritime transportation company specializing in dry bulk shipping across Atlantic markets. The company operates through three subsidiaries and emphasizes personal service, operational excellence, and strong customer relationships. Their website reflects a professional maritime business with clear branding and relevant content targeting customers and suppliers in the shipping industry. Technically, the site is built on WordPress with modern frameworks and includes multimedia elements such as embedded videos and social media integration. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and published privacy or security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

G

Grieg Shipbrokers KS

griegshipbrokers.com

62

Grieg Shipbrokers KS is a Norwegian maritime shipbroking company with a long history dating back to 1884. The company offers expert advice and comprehensive market coverage to maritime industry clients. The website reflects a professional and consistent brand image, targeting maritime professionals and companies. Technically, the site is built on WordPress with modern technologies such as jQuery and Google Tag Manager, and it implements SEO best practices. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service. Overall, the site is trustworthy and credible, but could improve in privacy and security transparency.

S

ShipCon

shipcon.dk

45

ShipCon is a specialized Danish marine engineering advisory firm focused on ship design, conversions, and safety inspections for the maritime industry. The company targets shipowners, banks, insurance companies, and maritime professionals, offering consulting services based on solid craft traditions and modern technology. The website reflects a professional small business with consistent branding and clear service offerings. Technically, the site is built on WordPress with Elementor and Yoast SEO, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The presence of Google Analytics and Tag Manager indicates moderate user tracking without explicit cookie consent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

A

ALCAR DANMARK A/S

alcar.dk

59

ALCAR DANMARK A/S operates as a distributor and retailer specializing in automotive wheels, including alloy and steel wheels, as well as TPMS products and vehicle care items. The company targets vehicle owners and enthusiasts in Denmark, offering a range of branded wheel products and a 3D configurator tool to enhance customer experience. The website reflects a medium-sized business with a professional and consistent brand presence in the transportation sector. Technically, the website leverages modern JavaScript libraries, a content delivery network (Azure CDN), and a CMS platform (Umbraco) to deliver a responsive and visually appealing user experience. Cookie consent is managed through Usercentrics CMP, demonstrating awareness of GDPR compliance requirements. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are integrated for user tracking and advertising purposes. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and visible security or incident response policies. The absence of WHOIS data limits domain trust verification, though the website content and branding suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a solid business and technical foundation with room for improvement in privacy policy transparency, security header implementation, and domain registration transparency to enhance trust and compliance.

D

Dometic Group AB (publ)

dometicgroup.com

69

Dometic Group AB (publ) operates as a global leader in manufacturing and distributing innovative products for land vehicles, boats, outdoor markets, and professional/residential applications. The company serves consumers in over 100 countries through a combination of direct sales and a worldwide distribution network. Their strong brand portfolio and commitment to enhancing mobility and comfort position them as a significant player in the transportation sector. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, the site leverages modern JavaScript frameworks, Episerver CMS, and cloud hosting on Microsoft Azure, supported by analytics and error monitoring tools such as Google Tag Manager and Raygun. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and incident response policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in domain registration and explicit security disclosures.

N

Nordco, Inc.

nordco.com

62

Nordco, Inc. is a well-established company specializing in railway maintenance equipment and inspection technologies, serving the global rail industry and related sectors such as energy, mining, and agriculture. The company operates under the parent company Wabtec Corporation and includes subsidiaries like Shuttlewagon. The website presents a professional and content-rich digital presence with clear navigation and relevant business information. Technically, the site uses a Titan CMS platform with legacy JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Pardot. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the use of outdated libraries and lack of advanced security headers are areas for improvement. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further domain verification. Overall, the website scores well in content quality, privacy compliance, and business credibility but should address technical and security updates to enhance its posture.

CarDirect ApS operates the Danish e-commerce website cardirect.dk, specializing in the sale of high-quality tires and alloy wheels for a variety of car brands, with a focus on electric and plug-in hybrid vehicles. The company positions itself as a niche player offering competitive pricing, expert advice, and fast delivery to the Danish market. The website is professionally designed, mobile-optimized, and uses modern WordPress technologies and SEO best practices to enhance user experience and search visibility. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism, reflecting adherence to GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the business presents a trustworthy and professional online presence with clear contact information and transparent business details.

N

NEQ

neq.dk

41

NEQ is a Danish company founded in 2023, specializing in IoT-based diagnostics and optimization solutions for HVAC systems in the transportation sector, with a focus on electric vehicles. Leveraging over 60 years of automotive industry experience from its parent company Christonik, NEQ aims to improve customer experience, reduce carbon footprint, and enable predictive maintenance through innovative technology. The website is professionally designed using WordPress and common plugins, providing clear service descriptions and a contact form for inquiries. However, it lacks direct contact emails or phone numbers and does not publish privacy or cookie policies, which are important for GDPR compliance. Technically, the site uses HTTPS with good SSL configuration but lacks DNSSEC and security headers, representing areas for security improvement. The domain registration is consistent with the business claims and is publicly available, enhancing trustworthiness. Overall, NEQ presents a credible and professional digital presence but should address privacy compliance and security best practices to strengthen its security posture and regulatory adherence.

E

e-l-m Kragelund A/S

e-l-m.com

66

e-l-m Kragelund A/S is a Danish company specializing in handling equipment and attachments for forklifts, targeting professional and business customers in the transportation sector. The website presents a professional image with clear branding and offers product catalogues and a capacity calculator to support customer needs. The digital infrastructure is built on WordPress with Elementor and WooCommerce, indicating a mature e-commerce presence. The site employs modern technologies including Cookiebot for cookie consent management and Google Analytics for traffic analysis, with consent-based tracking to comply with privacy regulations. Security posture is solid with HTTPS enabled and no immediate vulnerabilities detected, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially met with a cookie policy and consent mechanism, but lacks a clearly accessible privacy policy and terms of service. Overall, the website is functional, professional, and trustworthy, with room for enhanced transparency and security hardening.

B

Brenderup Group

brenderupgroup.com

72

Brenderup Group is a leading Scandinavian manufacturer and provider of trailers, holding a strong market position in Scandinavia and notable presence in Europe. The company operates a professional website built on the Litium CMS platform, featuring modern technologies such as Google Tag Manager and a comprehensive cookie consent mechanism. The website content is well-structured, targeting both B2B and B2C customers, with clear navigation and branding consistency. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, despite the professional appearance and active business operations. Security posture is generally good with HTTPS enforced and privacy compliance evident, though explicit security policies and incident response information are lacking. Overall, the website demonstrates a mature digital presence but would benefit from improved transparency in domain registration and enhanced security disclosures.

Q

Qant

qant.dk

51

Qant is a Danish consultancy specializing in infrastructure expertise, particularly in the railway sector, along with organizational and leadership development services. The company appears to be a small-sized business founded in 2011, with a focused market position serving organizations involved in transportation infrastructure. The website is built on WordPress using the Divi theme, indicating a standard and widely used CMS platform. The technical infrastructure is moderate with basic mobile optimization and SEO features. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact information and social media presence are not evident in the provided content, which limits direct communication channels and trust signals. Overall, the website reflects a functional but basic digital presence with room for improvement in security, privacy, and business transparency.

D

Danish Aerospace Company

danishaerospace.com

48

Danish Aerospace Company is a specialized technology developer focused on innovative aerospace technologies that support human presence in space and applications in extreme environments on Earth. Founded in 2013, the company maintains a professional web presence with investor relations, product information, and partnership details. Their market position is that of a niche aerospace technology innovator with a clear focus on space and transportation sectors. The website content is well-structured and professionally designed, targeting aerospace professionals, investors, and partners. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Swiper. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Hosting and domain registration are stable and consistent with the business profile, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with detailed categories. However, it lacks visible security headers and a published security policy or vulnerability disclosure. No explicit contact information or incident response channels are provided, which limits transparency. The domain registration is legitimate and consistent with the company’s history, enhancing trust. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, privacy policy publication, and contact transparency would strengthen the site’s trustworthiness and compliance posture.

A

Audi Danmark

audi.dk

61

Audi Danmark operates as the official Danish portal for Audi vehicles, offering a comprehensive range of new and used cars, including electric and hybrid models. The website serves as a digital showroom and sales platform, providing detailed model information, pricing, financing options, and after-sales services. Audi Danmark is positioned as a premium automotive brand within the Danish market, supported by a strong dealer network and extensive customer support resources. The site is well-structured, mobile-optimized, and integrates advanced technologies to enhance user experience and engagement. From a technical perspective, the website leverages modern frameworks such as Adobe Experience Manager Headless CMS and Audi's proprietary Falcon platform. It employs multiple third-party services for analytics, advertising, and cookie management, ensuring compliance with GDPR and other privacy regulations. The site demonstrates excellent performance, accessibility, and SEO optimization, reflecting a mature digital infrastructure. Security posture is robust, with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. The presence of cookie consent mechanisms and detailed privacy policies further strengthens compliance and user trust. However, the absence of publicly available WHOIS data limits domain registration transparency, though this is common for large brands employing privacy protections. Overall, Audi Danmark presents a secure, professional, and user-friendly online presence aligned with its premium brand image. Strategic recommendations include enhancing transparency around incident response and vulnerability disclosure, and continuous monitoring of third-party scripts to mitigate emerging risks.

L

LGT Logistics

lgtlogistics.dk

62

LGT Logistics is a well-established Nordic specialist in furniture logistics, providing a range of tailored transport and supply chain services across Europe. The company positions itself as a leader in the Nordic market, serving furniture companies with high-quality logistics solutions. The website is built on Drupal 10 and integrates modern UI libraries and a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers could enhance resilience. Privacy compliance is addressed through Cookiebot consent management, but explicit privacy and security policies are not found on the analyzed page. Overall, the site demonstrates good professionalism and trustworthiness, with moderate tracking via Google Analytics and clear user consent controls.

S

Scaletronic

scaletronicglobal.com

55

Scaletronic is a Denmark-based company specializing in scalable logistics automation solutions, including dimensioning, weighing, scanning, and sorting systems tailored for courier, express, and parcel providers as well as logistics hubs and fulfillment centers. With over 45 years of industry experience, the company positions itself as a trusted provider offering modular and expandable automation technologies backed by excellent service and global presence. Their website reflects a professional and modern digital infrastructure built on WordPress, enhanced with SEO and multilingual capabilities, and integrated with Google Analytics for performance monitoring. Security posture is solid with HTTPS and secure form handling, though there is room for improvement in security headers and explicit incident response policies. Privacy compliance is addressed with clear privacy and cookie policies, albeit lacking an explicit consent mechanism. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Scaletronic's market position as a reliable automation partner in the transportation sector.

C

Caljan

caljan.com

62

Caljan is a well-established company specializing in logistics automation technology since 1963. They serve parcel carriers, retailers, and manufacturers worldwide by providing custom-built logistics equipment and solutions to optimize supply chains, increase throughput, reduce costs, and improve workplace ergonomics and safety. The company operates globally with multiple production facilities and an international organizational structure. Their website reflects a professional B2B business model focused on transportation and manufacturing sectors. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for privacy compliance. The site is hosted via GoDaddy and uses HTTPS with good SSL configuration. The site is mobile optimized and has good SEO and accessibility features, although no CMS or specific frameworks were detected. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS, uses secure cookies including CSRF tokens, and implements a comprehensive cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, Caljan's website demonstrates a strong security posture and privacy compliance aligned with industry standards. The business credibility is supported by a long domain age and consistent registration data. Recommendations include enabling DNSSEC, publishing terms of service and security policies, and adding a vulnerability disclosure mechanism to further enhance trust and compliance.

T

Thermo King

thermoking.com

69

Thermo King is a globally recognized leader in transport refrigeration and heating solutions, serving a broad range of transportation sectors including trailers, trucks, buses, rail cars, and shipboard containers. The company operates as a subsidiary of Trane Technologies and offers a comprehensive portfolio of products and services including telematics, auxiliary power units, parts, accessories, and certified pre-owned programs. The website reflects a mature enterprise with a strong market position and a clear commitment to sustainability and customer service. Technically, the website is built on Adobe Experience Manager, leveraging modern marketing and analytics tools such as Marketo, Google Tag Manager, Facebook Pixel, and Hotjar. The site demonstrates good performance, mobile optimization, and accessibility, with a professional and consistent branding approach. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is partial, with a comprehensive privacy policy but lacking explicit cookie consent mechanisms. The security evaluation reveals no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS data for the domain is unusual and warrants attention. Overall, the site is trustworthy and professionally maintained, supporting Thermo King's reputation as a leader in its industry. Strategic improvements in privacy compliance and security headers would further enhance the site's security and regulatory posture.

S

Selandia Automobiler A/S

selandia-auto.dk

44

Selandia Automobiler A/S is a well-established automotive dealership group in Denmark with over 80 years of history, operating multiple locations primarily selling Ford and Suzuki vehicles. The company offers a comprehensive range of services including new and used car sales, leasing, and vehicle servicing. Their market position is strong regionally with a focus on customer service and brand partnerships. Technically, the website is built on WordPress using the Avada theme, with integrations such as Matomo for analytics and Instagram feeds for social engagement. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS, security headers, and no critical vulnerabilities detected, although formal security and incident response policies are not publicly documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and good digital presence.

The website daniashipmanagement.com represents a company likely operating in the maritime transportation sector, specializing in ship management services. However, direct access to the website content is blocked by a security mechanism involving a proof-of-work captcha challenge, preventing detailed content analysis. The domain is registered since 2017 with transparent WHOIS data, indicating a legitimate business presence. The lack of accessible content limits the ability to assess market position, detailed services, or customer engagement. Technically, the site uses advanced client-side JavaScript and Cloudfront CDN for content delivery and security challenge enforcement. Security posture is difficult to evaluate fully due to content blocking, but no immediate vulnerabilities are visible in the challenge page itself. Privacy and compliance policies are absent or inaccessible, which is a concern for GDPR and general data protection compliance. Overall, the site appears legitimate but lacks publicly accessible content and transparency in privacy and contact information, which impacts trust and usability.

A

Alstom

alstom.com

80

Alstom is a global leader in sustainable and smart mobility solutions, specializing in integrated rail transport systems and services. The company targets transportation stakeholders worldwide, offering a broad portfolio including rolling stock, rail infrastructure, and digital mobility innovations. Their market position is strong, supported by a legacy of innovation and commitment to environmental sustainability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content aligned with their business objectives. Technically, the site uses Drupal CMS, modern web technologies, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. WHOIS data is missing, which slightly impacts trust but is likely due to privacy or registry policies. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility.

The website www.bukkehave.com is currently inaccessible, returning a 404 error page indicating the requested page could not be found. The WHOIS lookup failed to retrieve any registration data, suggesting the domain may be unregistered, expired, or inactive. The website's metadata indicates it is intended to represent Bukkehave, a company providing fleet solutions for emerging markets in Africa, but no substantive content or contact information is available to verify this. Technically, the site appears to be built with Next.js and React, but the lack of accessible content and absence of security headers or SSL information indicate a low level of digital maturity. Security posture is weak due to missing HTTPS verification and lack of security best practices. Overall, the site presents a high risk due to its inaccessibility and lack of verifiable business or security information.

P

Peab

peabasfalt.dk

66

Peab Asfalt is a regional construction and infrastructure company specializing in asphalt production and laying services for roads, motorways, bridges, and specialized industrial applications. Operating across Nordic countries with a workforce of approximately 16,000, the company emphasizes local resource utilization and sustainability initiatives such as eco-asphalt and certified biogas. The website reflects a mature digital presence with comprehensive service descriptions and a clear focus on sustainability and social responsibility. Technically, the site employs modern web technologies including asynchronous loading of marketing and tracking scripts, cookie consent management via OneTrust, and uses HTTPS with good SSL configuration. Security posture is solid though could be improved with enhanced security headers and explicit incident response policies. The domain registration is consistent with the business profile, showing no suspicious patterns and appropriate domain age. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

D

Dansk Avis Omdeling A/S

bladkompagniet.dk

62

Dansk Avis Omdeling A/S (dao) is a well-established Danish delivery company specializing in parcel, letter, magazine, and newspaper distribution services. Founded in 1920, dao operates nationwide with a strong focus on sustainability and customer convenience, offering services such as daoSHOP retail partnerships and flexible delivery options. The company maintains a professional and user-friendly website with comprehensive information tailored to business customers in Denmark. Technically, the website is built on WordPress with modern tools like Yoast SEO, Matomo analytics, and Google Tag Manager, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS enforced and a detailed cookie consent mechanism, although explicit security policies and incident response contacts are not publicly visible. Overall, dao demonstrates a high level of digital maturity and business credibility, supported by transparent WHOIS data and consistent branding.

S

Shipmondo

shipmondo.com

69

Shipmondo is a Denmark-based technology company specializing in providing an all-in-one shipping and logistics platform for businesses of all sizes, particularly targeting e-commerce and enterprise customers. The platform integrates multiple carriers, automates freight booking, order management, customs documentation, and offers personalized customer communication and return management. The company has a strong market presence in Northern Europe with over 50,000 companies using its services daily and is recognized as an award-winning solution in the shipping industry. Technically, Shipmondo's website is built on modern web technologies including Jekyll, Bootstrap, and uses various third-party services such as Intercom for customer engagement and Cookiebot for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security headers were detected in the HTML content. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Shipmondo demonstrates a mature digital infrastructure and a professional online presence with good privacy and security practices.

NAVICON A/S is a specialized software company providing maritime surveillance and navigation system software, serving professional users including the Royal Danish Navy and international maritime operators. The company has a long-standing market presence since 1997, focusing on AIS, VTS, command and control, and maritime data analysis solutions. Their niche expertise positions them as a trusted provider in the transportation and technology sectors. Technically, the website uses legacy technologies such as jQuery 1.3.2 and Cufon font replacement, indicating an outdated technical infrastructure with moderate performance and limited mobile optimization. Security posture is moderate with no visible HTTPS enforcement or security headers and use of outdated libraries, posing potential risks. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism or GDPR indicators. Business credibility is supported by the domain age, professional content, and known contracts with the Royal Danish Navy. Overall, the website is functional but would benefit from modernization and enhanced security and privacy practices.

A

A/S BEVOLA

bevola.dk

70

A/S BEVOLA operates a Danish e-commerce platform specializing in components and accessories for truck and trailer building. The company targets businesses and professionals in the transportation sector, offering a broad product range with next-day delivery for stocked items. The website demonstrates a mature market presence with consistent branding and a professional design. Technically, the site is built on Magento 1.9.4.0, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a GDPR-compliant cookie consent mechanism via Cookiebot. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the visible content, though the Magento version suggests a need for ongoing patch management. Overall, the site is accessible, well-structured, and compliant with privacy regulations, though explicit privacy and terms of service pages were not found in the provided content.

V

Vága Floghavn

floghavn.fo

67

Vága Floghavn operates the main airport in the Faroe Islands, providing essential airport services including flight schedules, parking, duty-free shopping, and passenger amenities. The website targets travelers, airlines, and visitors, offering clear and relevant information about airport operations and services. The business is positioned as the primary transportation hub in the region with a small organizational size and focused service offerings. Technically, the website uses legacy JavaScript frameworks such as AngularJS 1.5.7 and jQuery 1.11.3, indicating a need for modernization to improve security and performance. The site is moderately optimized for mobile devices and SEO, with good navigation and content quality. However, no advanced CMS or hosting details are evident. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated libraries that may expose vulnerabilities. There is no explicit security or incident response policy published, and no dedicated security contact channels are provided. Privacy compliance is basic, with a privacy policy and cookie policy present but no active consent mechanism. Overall, the website is functional and professional but would benefit from technical and security upgrades to enhance trust and compliance. Strategic improvements in security posture and privacy mechanisms are recommended to align with best practices and regulatory requirements.

The website www.icelandair.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents extraction of meaningful metadata, business information, or security policies. The domain WHOIS data is unavailable, indicating either the domain is not registered, privacy protected, or there is a misconfiguration. Icelandair is a well-known airline company based in Iceland, providing passenger and cargo air transportation services. However, the lack of accessible website content and missing WHOIS data significantly limits the ability to assess the company's digital presence and security posture. The technical infrastructure relies on Cloudflare for security and content delivery, but no further technology stack details are available. Security posture cannot be fully evaluated due to blocked content, but the presence of a WAF indicates some level of protection. Overall, the risk assessment is elevated due to lack of transparency and accessibility, and strategic recommendations focus on improving website accessibility, transparency, and security disclosures.

T

Tmap Mobility Co., Ltd.

tmapmobility.com

57

Tmap Mobility Co., Ltd. operates a comprehensive integrated mobility platform primarily serving the South Korean market. The company offers a wide range of services including navigation, driving assistance, public transportation options, corporate mobility solutions, and data services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs Google Analytics for user tracking. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR-specific indicators. Business credibility is high, supported by clear company registration details and consistent branding. Overall, the site is well-positioned in the transportation sector with strong ties to the SK Group.

Á

Ávoris

avoristravel.pt

68

Ávoris is a large, established tourism ecosystem headquartered in Portugal, operating multiple specialized brands that cater to a wide range of travelers including corporate clients. The company offers a comprehensive suite of services including travel agency networks, hotel distribution platforms, corporate travel and event management, tour operation, and passenger transportation. Their global presence spans 23 countries with over 6,300 employees and a significant annual turnover, positioning them as a major player in the travel and transportation industry. Technically, the website is built using modern technologies such as Astro and leverages Amazon Cloudfront for content delivery, ensuring moderate performance and good mobile optimization. The site includes standard tracking and consent mechanisms, notably Google Tag Manager and a cookie consent script, indicating a baseline level of digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks advanced security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the website demonstrates a solid business credibility and technical foundation, though improvements in privacy policy transparency, security headers, and accessibility would enhance compliance and user trust. The risk profile is moderate with no immediate critical issues, but strategic enhancements are recommended to maintain and improve security and compliance posture.

Á

Ávoris Corporación Empresarial

avoristravel.uk

63

Ávoris Corporación Empresarial is a well-established tourism corporation with over 90 years of experience in the national and international travel sector. The company operates a consolidated tourism ecosystem comprising multiple specialized brands that cater to various traveler segments and services including travel agencies, tour operators, airline services, and corporate travel management. Their market position is strong with a global presence across 23 countries and over 160 destinations. The website content reflects a professional and consistent brand image, targeting travelers and tourism industry clients. Technically, the website uses modern technologies such as the Astro framework and is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, and no explicit contact information is found in the provided content. Security posture is moderate with no detected advanced security headers or policies, and WHOIS data for the .uk domain is unavailable due to domain registration issues, which impacts trustworthiness.

Compararcoche.com is a Spanish online platform specializing in new car price comparison and personalized offers from official dealerships. Founded in 2022, it targets consumers in Spain seeking to purchase or rent new vehicles efficiently. The website provides detailed guides, comparisons, and facilitates lead generation for car dealerships. Technically, the site is built on WordPress using Elementor and Jet Engine plugins, hosted via GoDaddy, and employs Google Tag Manager for analytics. The site is well-structured with good SEO practices and mobile optimization. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms policies. Overall, the site is professional and trustworthy but could improve transparency and security measures.

M

Mapillary

mapillary.com

78

Mapillary is a collaborative platform specializing in street-level imagery and mapping data, leveraging computer vision to enhance map accuracy and detail. Owned by Meta, it serves a diverse audience including GIS professionals, developers, and autonomous driving sectors. The platform offers tools for imagery hosting, traffic sign recognition, and integration with major GIS systems like ArcGIS. Technically, the website is built on modern web technologies including React and is hosted on Meta's infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but likely due to privacy or registry issues rather than malicious intent. Overall, Mapillary presents a professional, trustworthy, and technically mature web presence aligned with its business objectives.

(

(주)카카오엔터프라이즈

kakaoilaas.com

61

Kakao i LaaS is a logistics ecosystem platform operated by Kakao Enterprise, focused on connecting shippers and member companies through AI-driven warehouse matching and logistics management systems. The platform offers key services including warehouse sharing, AI-based order and logistics management (OM), and warehouse management (WM) systems, targeting sellers and logistics service providers in South Korea. The website demonstrates a modern technical infrastructure using Nuxt.js and AWS hosting, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the site reflects a professional and trustworthy enterprise-grade platform with room for enhanced security and privacy practices.

A

Athlon

athlon.com

74

Athlon is an established international provider of mobility solutions and car leasing services, targeting businesses and fleet managers across multiple European countries. The company offers a broad portfolio including full-service leasing, van leasing, rental, and innovative mobility options such as sharing, flexible leasing, e-mobility, and subscription models. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site leverages modern web technologies including Google Tag Manager, Google Analytics, Microsoft Clarity, and Oracle Eloqua for analytics and marketing automation, integrated within a CMS environment identified as Umbraco. The site is mobile-optimized, fast-loading, and implements a detailed cookie consent mechanism aligned with GDPR requirements. From a security perspective, the website enforces HTTPS and uses secure third-party services with transparent privacy disclosures. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable anomaly, potentially indicating privacy protection or registration issues, which slightly impacts the trustworthiness assessment. Overall, Athlon's website demonstrates a strong business and technical foundation with good privacy compliance and user experience. The main risk lies in the lack of visible domain registration data and limited direct contact information such as phone numbers, which should be addressed to enhance credibility and trust.

C

CHECK24 Comparador S.L.U.

check24.es

64

CHECK24.es is the Spanish branch of CHECK24, Europe's largest price comparison platform founded in 1999 in Germany. The company offers a wide range of comparison services including car insurance, hotel bookings, car rentals, and other insurance products. It serves millions of customers seeking transparent, objective, and expert-assisted price comparisons to save time and money. The website is professionally designed, mobile-optimized, and integrates advanced tracking and analytics tools while maintaining strong privacy compliance with GDPR. Contact options and customer support are clearly presented, enhancing user trust. The absence of publicly accessible WHOIS data is due to registry restrictions for .es domains and does not detract from the site's legitimacy. Overall, CHECK24.es demonstrates a mature digital presence with robust business and technical infrastructure.

Á

Ávoris Corporación Empresarial

avoristravel.com

68

Ávoris Corporación Empresarial is a well-established Spanish tourism ecosystem with 90 years of experience, offering a wide range of travel-related services including travel agencies, corporate travel management, airline services, and technology solutions. The website is professionally designed, mobile-optimized, and hosted on a modern infrastructure leveraging Astro framework and Amazon Cloudfront CDN. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects such as privacy policy and terms of service are missing. The domain WHOIS data is not publicly available, which raises concerns about domain registration legitimacy despite the professional appearance and extensive content of the site. Overall, the website presents a mature business with good technical and security practices but would benefit from enhanced transparency and compliance documentation.

H

HOPSAA SIA

fotofiniss.lv

41

Fotofinišs, operated by HOPSAA SIA, is a Latvian small business specializing in sports event timing, results processing, and photo finish services, primarily serving cycling, running, and other sports communities. The website presents a professional and consistent brand image with clear contact details and a focus on event results and scheduling. Technically, the site uses October CMS with a modern tech stack including jQuery, Bootstrap, and various plugins, and it is served over HTTPS with Google Analytics integrated for user tracking. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, but the business information on the site appears consistent and credible. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

D

DPD

dpd.lv

71

DPD Latvija operates as a key parcel delivery and logistics provider in Latvia, serving both private individuals and business clients. The website reflects a mature digital presence with localized content, multiple language support, and integration with the broader DPD group ecosystem. The company offers a range of services including parcel shipping, pickup networks, contactless delivery, and e-commerce logistics solutions, positioning itself as a leading player in the Latvian transportation sector. Technically, the website is built on WordPress with Bootstrap and jQuery, leveraging custom plugins tailored for DPD's operational needs. The site demonstrates good mobile optimization, SEO practices, and user experience design. Analytics and marketing tools such as Google Tag Manager and TagCommander are implemented with consent mechanisms, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs secure form handling with nonce tokens. While explicit security headers are not detected, no critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent banners are present and comprehensive, supporting GDPR compliance. However, incident response and vulnerability disclosure information are absent, representing an area for improvement. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. The missing WHOIS data for the exact subdomain is due to querying a subdomain rather than the main domain, which is well-known and reputable. Strategic recommendations include enhancing security headers, publishing incident response details, and improving accessibility features to further strengthen the security posture and compliance.

D

Drive REVEL S.L.

driverevel.com

71

Drive REVEL S.L. operates a leading online car renting service for individuals in Spain, offering flexible subscription models with all-inclusive monthly fees covering insurance, maintenance, and assistance. The company positions itself as the number one renting service for private customers in Spain, leveraging a fully digital platform with home delivery and mobile app management. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates analytics and marketing tools like Google Tag Manager and HubSpot. Security posture is strong with HTTPS enforced and domain locking, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is adequate with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.