Transportation security reports

K

Kuhn Ladetechnik

kuhn-mt.cz

61

Kuhn Ladetechnik operates as a specialist provider of cranes and lifting technology, targeting businesses and professionals in the transportation and industrial sectors. The website presents a professional and well-structured digital presence, emphasizing their product range and services. The technical infrastructure leverages modern frameworks such as Bootstrap and integrates Cookiebot for cookie consent management, alongside Google Tag Manager for analytics. The site is served over HTTPS with a service worker registered, indicating a commitment to modern web standards and security. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and trust signals. Security posture is generally good with HTTPS and cookie consent, but lacks advanced security headers and incident response disclosures. Overall, the website is legitimate and functional but would benefit from enhanced transparency and security documentation.

G

Gebrüder Weiss

euroexpress.at

59

EuroExpress, operated under the parent company Gebrüder Weiss, is a well-established European logistics cooperative founded in 1982. The company specializes in express delivery, special transport services, and distribution logistics across Europe, supported by a network of over 600 depots. Their website reflects a professional and consistent brand presence targeting business customers requiring fast and reliable transport solutions. Technically, the site is built on TYPO3 CMS, uses modern consent management via Usercentrics, and analytics through Piwik PRO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with GDPR requirements.

X

Xvise

xvise.com

8

Xvise is a logistics consulting company specializing in independent automation planning and implementation support. The website presents a professional image with clear business focus on logistics and technology integration, targeting businesses seeking to optimize their logistics processes. The technical infrastructure is based on WordPress CMS with modern plugins for SEO, analytics, and consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks some advanced security headers and explicit privacy/security policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include improving transparency with privacy and terms policies, securing domain registration details, and enhancing security headers to strengthen trust and compliance.

S

Suzuki

suzuki.hr

49

Suzuki.hr is the official Croatian website representing Suzuki automobiles and motorcycles. The site provides information about Suzuki vehicles with a focus on affordability and quality, targeting general consumers interested in transportation solutions. The website is built on WordPress with modern SEO practices, including structured data and social media integration, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy compliance requirements. However, the absence of a privacy policy and contact information limits full compliance and user trust. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response contacts. Overall, the site is legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures.

H

Hrvatske autoceste d.o.o.

hac.hr

57

Hrvatske autoceste d.o.o. is a Croatian state-owned company responsible for the management, construction, and maintenance of highways in Croatia. The website serves as an information portal for motorway users, offering details on tolls, traffic conditions, and related services. It targets both individual drivers and commercial transport operators, positioning itself as the primary authority for highway infrastructure in Croatia. The company provides electronic toll collection services and real-time traffic updates through dedicated mobile applications. Technically, the website is built using modern web technologies including Vue.js, with a responsive design optimized for mobile devices. Security measures include HTTPS enforcement and CSRF token implementation, alongside a comprehensive cookie consent mechanism. However, some security headers are not evident, and no explicit security or incident response policies are published. Overall, the site demonstrates a good balance of usability, compliance, and professionalism, supporting the company's role as a trusted public infrastructure provider.

F

Förderverein Siegerland Flughafen Dreiländereck e.V.

foerderverein-flughafen.de

10

Förderverein Siegerland Flughafen Dreiländereck e.V. is a small, regionally focused non-profit organization established in 2017 to support the Siegerland Regional Airport financially and promote its services within the tri-border economic region. The website is built on WordPress, utilizing popular plugins and themes, and demonstrates a moderate level of technical maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. Contact information is clearly presented, and privacy compliance is well addressed through a comprehensive privacy and cookie policy. Overall, the website is professional, trustworthy, and serves its target audience effectively.

P

Partnerství, o.p.s.

stezky.cz

55

Cyklisté vítáni is a Czech nationwide certification system focused on promoting cyclist-friendly accommodations, dining, campsites, and tourist destinations. Managed by Partnerství, o.p.s., the organization supports sustainable cycling tourism by certifying and promoting quality services tailored to cyclists. The website serves as an information hub with maps, tips, events, and partner listings, targeting cycling tourists and service providers. Technically, the site is built using modern frameworks like Astro, integrates Google Analytics, Facebook Pixel, and uses Google reCAPTCHA for form security. It is well-optimized for mobile and SEO, providing a fast and accessible user experience. Security posture is solid with HTTPS and privacy compliance, though it lacks explicit security policy and incident response details. Overall, the site is trustworthy, professional, and aligned with its business goals.

F

flyondo GmbH

flyondo.de

56

flyondo GmbH operates as a specialized fulfillment service provider and call center focused on the tourism sector, offering comprehensive handling of tourist services through trained travel agents. The company emphasizes multilingual support and advanced booking technologies, positioning itself as a reliable partner for online travel portals, tour operators, and travel agencies. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced, though security headers and explicit policies could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's market position in Germany's tourism fulfillment niche.

A

Ameropa-Reisen

ameropa.de

72

Ameropa-Reisen is a German travel company specializing in train travel and city vacation packages, targeting travelers interested in rail-based tourism. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for consent management, hosted on Colt infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit contact information slightly reduces the security maturity. The site extensively uses third-party analytics and marketing tools, reflecting a mature digital marketing strategy but requiring ongoing privacy compliance vigilance. Overall, the website is trustworthy and well-positioned in its niche, with room for improvement in security policies and transparency.

E

EUROEXPO Messe- und Kongress-GmbH

logimat-messe.de

54

LogiMAT is a leading international trade show focused on intralogistics solutions and process management, organized by EUROEXPO Messe- und Kongress-GmbH in Germany. The website presents a professional and comprehensive platform for industry professionals, offering detailed event information, expert forums, and international expansions. The technical infrastructure is based on Drupal 7 with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site is well-structured, accessible, and trustworthy, supporting a medium-sized enterprise with a strong market position in the transportation and logistics sector.

E

EUROEXPO Messe- und Kongress-GmbH

euroexpo.de

52

EUROEXPO Messe- und Kongress-GmbH is a well-established event organizer specializing in logistics and intralogistics trade fairs, notably the LogiMAT series held in Stuttgart and internationally. The company operates under the HUSS-Verlagsgruppe umbrella and has a strong market position as a leading organizer of logistics industry events. Their website reflects a professional and business-focused presence targeting industry professionals and companies seeking innovative logistics solutions. Technically, the site runs on Drupal 7 with legacy jQuery but maintains good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and partner links. Recommendations include updating legacy libraries, enhancing security headers, and publishing a security policy and incident response contacts.

P

Promet d.o.o.

promet-split.hr

56

Promet d.o.o. is a municipal public transportation company based in Split, Croatia, providing city and suburban passenger transport services. The company operates primarily within the Split agglomeration, serving local residents and visitors. The website reflects a medium-sized municipal entity with a focus on transportation services. The business model is centered on public transit organization and operation, positioning Promet d.o.o. as a key local transport provider. Technically, the website is built on the DNN (DotNetNuke) CMS platform, utilizing jQuery and related libraries for frontend functionality. Google Analytics is integrated for traffic monitoring. The site is served over HTTPS with a good SSL configuration, indicating a secure connection. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and modern JavaScript libraries but lacks explicit security headers and published security policies such as privacy, cookie, or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms a consistent and legitimate domain registration aligned with the company's municipal nature. Overall, the website is professional and trustworthy but has compliance gaps regarding privacy and cookie policies and lacks transparency on security incident handling. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

LPS, letecké práce a služby, s.r.o. operates the website vrtulniknaprodej.cz, specializing in the sale of helicopters in the Czech Republic. The company offers well-maintained helicopters suitable for training, recreational, and commercial purposes. The website positions itself as a niche provider with a focus on quality and reliability, targeting individuals and businesses interested in helicopter acquisition. The business model centers on direct sales supported by thorough maintenance checks. Technically, the website employs modern web technologies including Google Fonts and Flickity for carousel functionality, with custom CSS and JavaScript bundles. The site is mobile-optimized and presents good SEO practices, although no major CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented with user choice options, supporting GDPR compliance to some extent. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS registration data, represent gaps in compliance and trustworthiness. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is professionally presented and functional but would benefit from enhanced transparency in privacy and security policies, improved WHOIS data availability, and implementation of security best practices. These improvements would strengthen trust and compliance, reducing risk for both the business and its customers.

Fly Heli is a small Czech Republic-based helicopter tour service provider specializing in sightseeing flights, action flights, and special occasion flights such as weddings and anniversaries. The website is professionally designed with clear navigation and offers multiple flight routes and gift vouchers targeting tourists and local customers interested in unique aerial experiences. Technically, the site uses modern web technologies including Google Fonts and Flickity carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are missing. The absence of WHOIS data reduces domain trustworthiness but the website content and contact information appear legitimate and professional. Overall, the site presents a trustworthy and user-friendly experience with room for security and transparency improvements.

C

CSG Aerospace

csgaerospace.cz

64

CSG Aerospace is a division of the Czechoslovak Group specializing in the development and manufacturing of advanced aerospace technologies including radars, air traffic control systems, and air defense solutions. The company serves government, defense, and aviation industry clients, positioning itself as a European leader in radar technology. The website reflects a mature and professional business with comprehensive product and service offerings, targeting primarily B2B customers in aerospace and defense sectors. Technically, the site uses modern frameworks such as Next.js and integrates analytics and consent management tools, indicating a digitally mature infrastructure. Security posture is strong with HTTPS enforcement, security headers, and bot management cookies, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the site is well-designed, accessible, and compliant with privacy regulations, supporting a high trustworthiness rating.

SkyDemon, operated by Divelements Limited, is a specialized software provider focused on VFR flight planning and GPS navigation for pilots. The company offers a multi-platform solution supporting iPad, Android, iPhone, and PC users, positioning itself as a leading provider in the general aviation software market. The website content is professional and well-structured, targeting pilots seeking efficient and safe flight planning tools. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. Hosting is provided by EnCirca, Inc., and the domain is well-established since 2009. However, there is room for improvement in accessibility and SEO optimization. No advanced frameworks or CMS were detected. From a security perspective, the website benefits from domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance security posture. No explicit privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. The absence of vulnerability disclosure or incident response information suggests limited transparency in security practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

F

Flying Revue

flying-revue.com

9

Flying Revue is a specialized aviation media platform targeting pilots and aviation enthusiasts, primarily serving the Czech and international aviation community. The website offers aviation news, event coverage, and aviation-related apps, positioning itself as a niche media outlet with a focus on quality content and community engagement. The business model relies on content publishing, app offerings, and advertising revenue. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.8.3, Google Analytics, Facebook Pixel, and Google AdSense, hosted on a CMS platform identified as Fonio. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enforced and consent mechanisms for cookies, but the use of outdated JavaScript libraries and lack of security headers are areas for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, although the website content and social media presence support its authenticity. Overall, the site scores moderately high in content quality and security but should address domain registration transparency and update technical components to enhance trust and security.

H

HUSS-VERLAG GmbH

logistik-heute.de

54

LOGISTIK HEUTE is a well-established German logistics magazine operated by HUSS-VERLAG GmbH, targeting decision-makers in industry, trade, and logistics services. The website offers comprehensive logistics news, expert articles, event information, and industry guides, positioning itself as a key media player in the German transportation and supply chain sector. The business model revolves around media publishing, advertising, and event hosting, supported by a professional and consistent brand presence. Technically, the site is built on Drupal 9, leveraging modern web technologies including Google reCAPTCHA, Matomo analytics, and a robust consent management system to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience.

T

TTA Personal GmbH

tta-personaltransport.de

52

TTA Personal GmbH is a German-Spanish personnel recruitment company specializing in the placement of Spanish professional bus and truck drivers in Germany. Established in 2011, the company positions itself as a market leader with a large database of over 20,000 drivers and offices in Berlin, Munich, Granada, and Valencia. Their services include recruitment, language training, and placement of various transport-related professions. The website is professionally designed using WordPress and Elementor, with good SEO practices including structured data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the company appears credible and trustworthy with a solid digital presence but should enhance privacy and security transparency.

K

l❶Iᐅ Kfz Versicherung trotz Schufa ▶️ Bonitätsprüfung ❷⓿❷❺

kfz-versicherung-trotz-schufa.com

50

The website www.kfz-versicherung-trotz-schufa.com operates as a niche comparison and informational platform focused on providing car insurance options for individuals with negative Schufa credit entries in Germany. It offers tariff comparisons, advice, and links to insurance providers that accept customers despite credit challenges. The site targets consumers seeking affordable and accessible car insurance solutions despite credit issues. Technically, the site is built on WordPress with a modern theme and SEO plugins, integrating Google Tag Manager and Borlabs Cookie for analytics and consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and structure appear professional and trustworthy. Overall, the site presents moderate risk with room for improvement in transparency and security practices.

E

eurotransport

eurotransport.de

55

Eurotransport is a well-established German media portal specializing in commercial vehicles and logistics. The website offers a broad range of content including news articles, vehicle tests, industry reports, videos, podcasts, and an e-commerce shop targeting professionals in the transport and logistics sectors. The business model revolves around media publishing and product sales, supported by subscription services and advertising partnerships. The site is hosted on AWS infrastructure and leverages modern web technologies such as React and Next.js, with integration to Shopify for e-commerce functionalities. Social media presence is active on Facebook, Twitter, and YouTube, enhancing audience engagement. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is professional, trustworthy, and serves a niche market effectively.

H

HUSS-VERLAG GmbH

logistra.de

54

LOGISTRA is a specialized German logistics industry magazine operated by HUSS-VERLAG GmbH, targeting logistics, warehouse, and fleet management professionals. The website offers news, expert articles, event information, product recommendations, and job listings, positioning itself as a reputable media source in the transportation and logistics sector. The digital infrastructure is built on Drupal 9, integrating modern web technologies including Google reCAPTCHA, Google Publisher Tags for advertising, and a GDPR-compliant consent management platform. Analytics are handled via Matomo, ensuring moderate user tracking with privacy considerations. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and policies are not fully documented. The absence of a visible privacy policy and terms of service is a notable gap. Overall, the site is professional, content-rich, and well-branded, serving a medium-sized enterprise audience in Germany.

H

HUSS VERLAG GmbH

transport-online.de

55

Transport-online.de is a professional German-language media portal operated by HUSS VERLAG GmbH, specializing in transport and logistics industry news, analysis, and resources. The website targets transport entrepreneurs, freight forwarders, and logistics service providers, offering biweekly publications, newsletters, job listings, and event information. The platform holds a strong market position within its niche, supported by a consistent brand presence and comprehensive industry coverage. Technically, the website is built on Drupal 9 CMS, utilizing modern web technologies including Matomo analytics for privacy-conscious tracking, Google reCAPTCHA for form security, and a Consent Management Platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security measures but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service pages. Overall, the website is trustworthy and professional with a solid business model and technical foundation. Strategic improvements in privacy transparency, security headers, and contact information would enhance compliance and user trust.

S

SIXT

sixt.de

72

SIXT is a well-established global car rental and mobility service provider headquartered in Germany, offering premium vehicles and a wide range of services including car rental, car subscription, car sharing, and chauffeur services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses modern frameworks such as React and integrates a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partially addressed via cookie consent but lacks visible privacy policy and terms of service links in the provided content. Overall, the site is trustworthy and professional, serving a broad audience including business and leisure customers worldwide.

O

OPEL Automobile GmbH

opel.de

10

Opel Automobile GmbH operates a professional and comprehensive automotive website targeting both private and business customers in Germany. The site offers vehicle configuration, test drive booking, and sales of new and used vehicles, including electric and hybrid models. The company is positioned as a major player in the transportation sector, supported by its parent company Stellantis. Technically, the website leverages Adobe Experience Manager, Google Tag Manager, and Dynamic Yield for content management, analytics, and personalization, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR consent mechanisms in place, although explicit security headers and detailed security policies are not evident. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in privacy policy visibility and security disclosures.

BODOS Czechia a.s. is a well-established logistics and transportation company based in the Czech Republic, with a history dating back to 1945. The company operates a large fleet of 200 trucks and offers extensive storage facilities exceeding 7,500 square meters. Their services include freight transport, transport outsourcing, storage, vehicle washing, fuel station services, and vehicle servicing. The website reflects a professional and consistent brand image targeting businesses requiring logistics solutions. Technically, the site uses modern web technologies including JavaScript libraries like GLightbox and a spam protection tool called Mailguard. The hosting is managed through websupport.cz, a Czech hosting provider, and the site is accessible via HTTPS, indicating basic security measures. However, no explicit security headers or advanced security policies are published.

M

MYD Sailing

myd-sailing.com

48

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

LETOV AIR s.r.o. is a small, dynamically growing private aviation company based in the Czech Republic, offering a broad range of aviation services including air transport, pilot training, aircraft maintenance, and sales. The company emphasizes compliance with aviation regulations such as PART 145 and CAMO management, positioning itself as a professional service provider in the regional aviation market. The website content is relevant and informative, targeting general aviation clients and enthusiasts. Technically, the website employs legacy JavaScript libraries like jQuery and Fancybox, with Google Analytics integrated for user tracking. The site shows basic mobile optimization and accessibility but lacks modern responsive design and advanced SEO features. Security measures are minimal, with no visible HTTPS enforcement or security headers, though a cookie consent banner and email obfuscation are implemented to enhance privacy. From a security perspective, the absence of WHOIS data limits domain trust verification, and the lack of HTTPS and security headers presents vulnerabilities. No privacy policy or terms of service pages are published, which may impact compliance with GDPR and other regulations. The overall risk is moderate, with recommendations to improve security posture, privacy compliance, and technical modernization to enhance trust and user experience.

T

Textron Aviation

txtav.com

68

Textron Aviation is a leading manufacturer of general aviation aircraft, operating iconic brands such as Beechcraft and Cessna. The company holds a significant market position, delivering over half of all general aviation aircraft worldwide. The website reflects a professional corporate presence with a focus on aviation manufacturing and sales. The technical infrastructure includes modern web technologies such as Foundation CSS, VideoJS for media, and OneTrust for cookie consent management, hosted likely on AT&T infrastructure. Google Tag Manager is used for analytics and marketing purposes. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

LPS Letecké práce a služby s.r.o. is a Czech Republic-based aviation company specializing in helicopter pilot training, helicopter maintenance, aerial surveying, and monitoring services. Established in 1996, the company holds multiple certifications and operates primarily in the transportation and energy sectors. Their website presents a professional image with clear service offerings and contact information, targeting individuals and businesses interested in helicopter-related services. Technically, the website uses modern front-end technologies including Bootstrap, Swiper.js, and Google Analytics, with responsive design and moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. The domain WHOIS data is consistent with the business claims, indicating legitimacy and long-term operation. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

J

JOB AIR Technic a.s.

jobair.eu

59

JOB AIR Technic a.s. is a Czech Republic-based company specializing in aircraft maintenance, repair, and overhaul (MRO) services, along with training, logistics, and painting facilities. Established in 1993, the company has grown to become a recognized regional MRO provider with certifications including EASA Part 145, Part 147, AS 9100:D, and ISO 14001. It operates under the umbrella of the Czechoslovak Group (CSG), a large industrial conglomerate, enhancing its market position and credibility. The website targets aviation industry professionals, aircraft operators, and potential employees, offering detailed service descriptions and career opportunities.

C

Czech Airlines Technics, a.s.

csatechnics.com

55

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

The website www.wir-bewegen-alle.de serves as a comprehensive career portal for the Karlsruher Verkehrsverbund (KVV) and its associated companies VBK and AVG, which are key players in regional public transportation in Karlsruhe, Germany. It offers detailed job listings, career information, and multimedia content to attract a diverse range of candidates including professionals, students, and career changers. The site is well-structured, mobile-optimized, and incorporates accessibility features to enhance user experience. Technically, it is built on Silverstripe CMS with modern JavaScript libraries such as Swiper.js and HTMX, hosted on rzone.de infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and explicit security policies are absent. Overall, the site reflects a mature digital presence aligned with the business's public transportation focus.

S

Siegerland-Flughafen GmbH

siegerland-airport.de

47

Siegerland-Flughafen GmbH operates a regional airport in Germany, providing aviation services including pilot training, charter flights, business facilities, and community engagement. The website targets pilots, business partners, and local travelers, positioning itself as a key regional transportation hub. The digital infrastructure is built on WordPress with modern plugins and themes, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

M

Marina Flensburg GmbH & Co. KG

marinaflensburg.de

48

Marina Flensburg GmbH & Co. KG operates a marina located in Flensburg, Germany, providing essential yachting services such as berth rental, winter storage, boat fueling, crane access, and harbor amenities. The website positions itself as a local, customer-focused marina with a strong emphasis on comfort and convenience for boat owners. The target audience includes yachting enthusiasts and visitors to the Flensburg harbor area. The business model revolves around providing marina infrastructure and services to boat owners and seasonal residents. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging Leaflet.js for interactive maps and Google reCAPTCHA for form security. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with modern technologies and proper meta tags implemented. From a security perspective, the site enforces HTTPS, includes security headers, and uses reCAPTCHA to protect forms from spam. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-maintained, reflecting a legitimate and customer-oriented business. Strategic recommendations include adding explicit security and incident response policies, publishing a vulnerability disclosure statement, and providing data protection officer contact details if applicable.

F

Flugplatz Oldenburg-Hatten

edwh.de

10

Flugplatz Oldenburg-Hatten operates as a small regional aviation and leisure business located between Oldenburg and Bremen, Germany. The website offers services including a flight school, sightseeing flights, and a café with event booking options. The business targets aviation enthusiasts and local visitors seeking recreational activities. The website is built on WordPress with a custom theme and uses standard plugins for contact forms and cookie consent management. Hosting is provided by Schlund Technologies, consistent with the German domain and regional focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Contact information is available, but no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-suited for its niche audience.

C

Croatia Rally

rally-croatia.com

10

Croatia Rally is a prominent sporting event organizer focused on the ERC Croatia Rally 2025, a major motorsport event that attracts global spectators and promotes Croatia as a tourist destination. The website effectively communicates the event's details, hospitality packages, merchandising, and calendar, targeting motorsport fans, tourists, media, and competitors. The business operates in the transportation and tourism sectors with a medium-sized footprint and a founding date consistent with the domain registration in 2015. Technically, the website employs modern web technologies including JavaScript libraries, analytics, and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements in security headers and DNSSEC are recommended. Privacy compliance is addressed with clear policies and consent mechanisms. Overall, the site presents a professional and trustworthy digital presence with strong business credibility.

B

Bajkazyl Olomouc

bajkazylolomouc.cz

48

Bajkazyl Olomouc is a small local business specializing in bicycle recycling, repair, custom bike building, and sales, serving the Olomouc community in the Czech Republic. The website presents a clear description of their services and target audience, positioning itself as a community hub for cycling enthusiasts. Technically, the site is built using modern React and Gatsby frameworks, with Google Analytics integrated for visitor tracking. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data suggests privacy protection on domain registration, which is common for small businesses. Overall, the site is professional and trustworthy but could enhance compliance and security posture.

C

Cyklus Trails

cyklustrails.com

42

Cyklus Trails is a small, specialized travel agency offering self-guided and guided cycling tours primarily in the Czech Republic and neighboring countries. Established in 2002, it targets active travelers seeking authentic outdoor adventure experiences along well-known bike paths and cultural sites. The website is built on Drupal 7 and incorporates common web technologies such as jQuery, Google Analytics, and Facebook SDK for social integration and tracking. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance with GDPR and other privacy regulations. Security measures include the use of Google reCAPTCHA on contact forms, but the absence of security headers and use of outdated libraries present potential vulnerabilities. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy, although the website content and contact details appear genuine. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

I

IBB Wörn Ingenieure GmbH

ibb-woern.de

58

IBB Wörn Ingenieure GmbH is a small, established engineering firm based in Germany specializing in infrastructure planning and project execution in the sectors of transportation and energy. Founded in 1996, the company offers comprehensive services including planning, construction supervision, and project management primarily in road construction, civil engineering, and water management. Their website reflects a professional and regionally focused business with detailed project references and industry memberships, indicating a solid market position within their niche. Technically, the website is built with standard modern web technologies (HTML5, CSS3, JavaScript) and hosted via INWX. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses HTTPS with excellent SSL configuration but lacks some advanced security headers. Analytics are handled via Plausible, indicating a privacy-conscious approach with minimal user tracking. From a security perspective, the site is well-configured with no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

K

Karlsruher Verkehrsverbund

kvv.de

63

Karlsruher Verkehrsverbund (KVV) operates as a major public transportation provider in Baden-Württemberg, Germany, serving over 170 million passengers annually. The website offers comprehensive information on bus and train services, ticketing options including the Deutschlandticket, and mobility solutions such as KVV.MyShuttle and KVV.nextbike. The site targets a broad audience including commuters, students, and senior citizens, positioning itself as the third largest transport association in the region. The business model centers on providing accessible, reliable public transit and related services.

Ilse Bus is a regional demand-responsive public transportation service operating in rural areas of Mecklenburg-Vorpommern, Germany. It provides flexible bus rides connecting rural locations to cities, bookable via phone, internet, or smartphone apps. The service operates primarily on weekdays with some weekend availability under VVG. The website is built on WordPress using Elementor and Yoast SEO, hosted by Schlundtech, and includes accessibility and privacy compliance features. While security policies and incident response contacts are not explicitly provided, the site uses HTTPS and privacy plugins to ensure GDPR compliance. The digital infrastructure supports app-based booking and integrates Google Maps for location services. Overall, the site presents a professional and trustworthy interface for its target audience.

O

Owasco Careers

owascocareers.ca

51

Owasco Careers operates a professional, family-owned automotive dealership group in Canada, focusing on recruitment and career opportunities within their dealerships. The website presents a clear business description emphasizing culture and growth, targeting job seekers interested in automotive retail careers. The technical infrastructure is based on WordPress with modern analytics and monitoring tools such as Google Analytics, Microsoft Clarity, and New Relic, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with reCAPTCHA for form security, reflecting a good security posture. However, the absence of publicly available WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and privacy compliance. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers to improve trust and compliance.

O

Owasco RV Rentals

owascorvrentals.com

59

Owasco RV Rentals is a small Canadian business specializing in recreational vehicle rentals, including vans, motorhomes, and trailers. The company targets both Canadian and international customers, offering various rental options, specials, and loyalty programs. The website is professionally designed with clear navigation and comprehensive service information, supporting a positive user experience. Technically, the site uses a combination of legacy and modern web technologies, including jQuery, Bootstrap, and multiple analytics and tag management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. Overall, the website presents a credible business front with room for security and transparency improvements.

P

Pneu Drnec

pneudrnec.cz

7

Pneu Drnec is a local automotive service provider specializing in tire and auto repair services in Plzeň, Czech Republic. The business focuses on servicing personal vehicle tires, motorcycle tires, off-road tires, and light truck tires, with a specialization in high-speed large-dimension tires. The website presents a professional and consistent brand image targeting vehicle owners in the local area. However, the absence of WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and compliance. Technically, the site uses modern JavaScript and CSS technologies, integrates Facebook SDK and Google Tag Manager, but lacks proper analytics setup and security headers. The security posture is moderate but could be improved with better SSL configuration and security best practices. Overall, the site is functional and informative but requires enhancements in privacy compliance and security to improve trustworthiness.

I

ilogs

parkinghq.com

55

ParkingHQ is an established online platform founded in 2006 that provides users with access to over 13,000 parking units worldwide. The service enables searching, viewing detailed information, and prebooking parking spaces, targeting drivers and vehicle owners seeking convenient parking solutions. The platform leverages Google Maps API for geolocation and mapping services and integrates prebooking links for select parking units. Technically, the website is built likely on Ruby on Rails, uses modern JavaScript libraries, and is hosted on Conova infrastructure. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO features. Security-wise, the site uses HTTPS and includes CSRF protection in forms but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the domain is legitimate and long-standing, with no signs of malicious activity or content safety concerns.

M

MGS Motor Gruppe Sticht GmbH & Co. KG

auto-hensel.de

60

MGS Motor Gruppe Sticht GmbH & Co. KG is a well-established automotive dealership group operating nine locations in Bavaria, Germany. The company offers a wide range of vehicles including new and used cars, commercial vehicles, and campers, representing multiple well-known brands such as Ford, Fiat, Mazda, and Jaguar. Their business model focuses on vehicle sales, leasing, servicing, and customer support, targeting both private and commercial customers in the region. The website reflects a professional and comprehensive digital presence with clear navigation and detailed service offerings. Technically, the website employs modern web technologies including jQuery, Owl Carousel, and a proprietary CMS platform by Audaris. It is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured content. Google Analytics is used with consent management configured to deny tracking by default, indicating privacy awareness. From a security perspective, the site uses HTTPS with secure cookie flags and basic security best practices. However, it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements, providing a trustworthy platform for customers. Strategic improvements could include enhanced security headers and published security policies to further strengthen trust and compliance.

ILONEXS is a small German courier and express delivery service specializing in personalized overnight express shipments. Their offerings include niche services such as animal transport, print and picture express services, phone and collect, bicycle transport, and contract cancellations. The website targets businesses and individuals seeking reliable courier solutions with a focus on personal and transparent service. Technically, the website uses legacy JavaScript libraries like jQuery and jQuery UI, hosted on servers indicated by the nameservers your-server.de. The site shows moderate performance and basic mobile optimization but suffers from a critical PHP fatal error that breaks page functionality. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status was confirmed from the data provided. Overall, the site lacks contact information and privacy compliance indicators, reducing trustworthiness and professionalism.

Austria Terminfracht GmbH operates as a small-sized logistics and transport service provider based in Austria, specializing in express and overnight delivery services across Central and Southeast Europe. The company emphasizes punctuality, reliability, and quality, supported by its ISO 9001 certification since 2008. The website targets both corporate and private customers, offering tailored transport solutions from documents to pallets. Technically, the website uses legacy jQuery and mediabox.js scripts, likely running on Contao CMS, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and updated libraries. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved compliance and security practices.

The website www.kep-together.eu serves as the official platform for the 6th European KEP-Tage 2019, an established industry event focused on courier, express, and parcel logistics in Europe, particularly Germany. It targets logistics SMEs, start-ups, associations, and industry journalists, providing a networking and conference platform. The event is co-organized by IG KEP-together and BdKEP, Germany's largest KEP association, indicating strong industry ties and credibility. The site content is primarily in German with some English sections, reflecting its European audience. The business model centers on event organization and industry networking, supported by media partnerships and government participation.