Transportation security reports

P

Prof. Dr. Martin Maslaton

qmvcheck.com

10

Quarter Mike 4 is a specialized aviation expertise website representing Prof. Dr. Martin Maslaton, a highly qualified pilot and legal expert in aviation. The business offers consulting services in aviation transactions, pilot language training and testing, UAV operations, flight simulation, and aviation infrastructure regulatory support. The website targets aviation professionals and entities requiring expert aviation legal and technical advice. Technically, the site is built on WordPress with Elementor, featuring modern web technologies and moderate performance. Security posture is good with HTTPS enabled but lacks advanced security headers and formal privacy/cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and content-rich, but could improve compliance and security transparency.

D

DTM Reifenservice GmbH

dtm-reifen.de

46

DTM Reifenservice GmbH is a regional German company specializing in tire and rim sales, service, and storage, targeting both private and corporate customers primarily in Hamburg and Reinbek. The company offers a comprehensive range of automotive tire-related services including tire mounting, balancing, repair, and storage, as well as additional vehicle services such as TÜV inspections and chassis tuning. Their business model focuses on direct service provision with dedicated divisions for private and large customers. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the website is built on WordPress using the Enfold theme and Avia Framework, incorporating common technologies like jQuery and Yoast SEO for optimization. Hosting is provided by rzone.de, consistent with the German market focus. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Google Analytics is implemented with user consent mechanisms in place, reflecting GDPR compliance. From a security perspective, the site enforces HTTPS and includes cookie consent banners with granular controls. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the hosting and business location, supporting legitimacy. Overall, the website presents a trustworthy and professional front for a small regional business with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and legal completeness (terms of service) would enhance their security posture and business credibility.

PEENE TRANS GmbH is a German logistics company specializing in bulk material transport for construction sites, including mixing plants, concrete industry, and large-scale projects. The company positions itself as a reliable partner offering just-in-time delivery with a modern fleet of tractor-trailers. Their website is built on TYPO3 CMS and uses a variety of modern front-end libraries to provide a responsive and user-friendly experience. The content is professionally presented in German, targeting construction industry clients and logistics partners. Contact information is comprehensive, including multiple emails and phone numbers for key personnel. The website includes a cookie consent mechanism and a privacy policy, indicating awareness of GDPR compliance. However, no explicit terms of service or security policies are published.

U

Uprent

uprent.hr

56

Uprent is a Croatian company specializing in the rental, sale, servicing, and transport of machinery and work platforms, primarily targeting the construction and industrial sectors. The company has established partnerships with multiple well-known machinery brands and offers additional services such as training and a Click2Rent platform. Their website is professionally designed, mobile-optimized, and provides clear contact information, including a prominently displayed phone number and social media links. The presence of a downloadable catalog and a mobile app enhances their customer engagement and service accessibility. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, hosted on Hetzner servers, ensuring a reliable and performant infrastructure. Security-wise, the site uses HTTPS and shows no signs of vulnerabilities or exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website reflects a medium-sized, legitimate business with a good market position in Croatia, but could improve in compliance and security transparency.

R

RALU Logistika d.d.

ralulogistics.com

60

RALU Logistika d.d. is a well-established third-party logistics provider specializing in integrated cold chain services, including international and national transport, warehousing, and distribution across Croatia, Serbia, and Europe. The company has a strong market position supported by over 30 years of experience and a large fleet and infrastructure. Their website reflects a professional digital presence built on WordPress with Elementor, incorporating modern analytics and cookie consent mechanisms. Security posture is solid with HTTPS, domain transfer lock, and no detected vulnerabilities, though some security policies and disclosures could be improved. Overall, the company demonstrates transparency and compliance with GDPR, enhancing trustworthiness.

K

Kuehne+Nagel

kuehne-nagel.com

11

Kuehne+Nagel is a leading global logistics provider with a vast network of over 82,000 employees across nearly 1,300 sites in close to 100 countries. The company offers comprehensive freight forwarding and supply chain management services, including sea, air, and road transport, warehousing, customs clearance, cargo insurance, and digital logistics solutions. Their market position is strong, serving approximately 400,000 customers worldwide across diverse industries. The website reflects a mature digital infrastructure leveraging modern web technologies such as Nuxt.js and Storyblok CMS, with excellent mobile optimization and SEO practices. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit incident response contacts and vulnerability disclosure pages are not found. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of public WHOIS data introduces a moderate uncertainty in domain registration transparency.

O

OX LOGISTIC LTD.

ox-logistic.de

56

OX LOGISTIC LTD. is a specialized logistics and transport company based in Germany, offering a wide range of services including express shipping, value shipping, weapons transport, weekend shipping, direct drives, and more. The company operates primarily in Germany with international reach, leveraging partnerships such as with KEP GmbH to provide efficient and reliable courier services. Their website is professionally designed, mobile-optimized, and provides comprehensive service information and contact options. Technically, the site is built on WordPress with common plugins for forms, cookies, and animations, and uses HTTPS for secure communication. Security posture is adequate but could be improved with additional security headers and policies. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the company presents a trustworthy and professional online presence suitable for business clients seeking logistics solutions.

P

PACCAR Financial

paccarfinancial.com.br

63

PACCAR Financial is the financial services division of PACCAR, dedicated exclusively to the transportation industry in Brazil. The company offers customized financial products and services to support customers in acquiring new DAF trucks, backed by a dedicated team of regional business managers. The website reflects a professional corporate presence with clear branding and relevant content tailored to its target audience in the transport sector. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, hosted on a reputable domain registrar platform (MarkMonitor). Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and business credibility, with room for improvement in security transparency and direct contact information availability.

P

PacLease Australia

paclease.com.au

66

PacLease Australia is a medium-sized transportation service provider specializing in truck rental, leasing, and contract maintenance with a national presence across Australia. Established in 2015, the company emphasizes premium quality, customized solutions, and personalized service to support business operations. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting businesses in need of fleet services. Technically, the site is built on WordPress using the Divi theme and incorporates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet regulatory requirements. Overall, the domain WHOIS data is privacy protected, which is typical and justified for this business type, though it limits direct verification of registrant details.

T

TRP

trpparts.com

9

TRP operates an e-commerce platform specializing in automotive parts and accessories, targeting vehicle owners and automotive professionals primarily in the United Kingdom and Europe. The website is professionally designed with multi-language support, indicating a broad international audience. The technical infrastructure leverages modern web technologies such as React.js and is hosted on Microsoft Azure, ensuring scalability and reliability. Google Tag Manager is used for analytics and marketing tracking, reflecting a standard digital maturity level. Security posture is adequate with HTTPS enforced; however, the absence of visible privacy and cookie policies, security headers, and incident response information indicates areas for improvement. Overall, the website is legitimate and professionally managed, but enhancements in privacy compliance and security transparency are recommended to strengthen trust and regulatory adherence.

H

HKF FUARCILIK AŞ

hkf-fairs.com

42

HKF FUARCILIK AŞ is a Turkish company specializing in organizing international specialized trade fairs primarily in transportation, food processing, and poultry sectors. The company holds a reputable market position with memberships and sponsorships in global industry organizations such as UFI and EURASCO. Their website showcases multiple trade fairs and industry events, targeting trade professionals and exhibitors. Technically, the website is built on a modern React framework with Bootstrap and Font Awesome, providing a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and WHOIS transparency, which impacts its security posture and compliance standing. Overall, the website is professional and content-rich but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.

I

IBE.DE GmbH

ibe.de

61

IBE.DE GmbH operates a specialized online booking portal for business travel, targeting small and medium-sized enterprises in Germany. The platform offers integrated booking and management services for flights, trains, hotels, and rental cars, emphasizing ease of use, no online booking fees, and centralized travel management. The company leverages over 15 years of experience and positions itself as a reliable, local provider with technology developed in Augsburg. The website is professionally designed, mobile-optimized, and provides clear navigation and social media presence, enhancing its market credibility. Technically, the website is built on WordPress 6.4.2 using the Uncode theme and custom child themes, hosted via SchlundTech. It uses modern JavaScript libraries like jQuery and MediaElement.js for media handling. The site demonstrates moderate performance and basic accessibility features. However, explicit security headers and cookie consent mechanisms are absent, indicating room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and includes a login form with password fields, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. No exposed sensitive data or vulnerabilities were detected in the HTML content. The domain WHOIS data aligns with the hosting and business claims, supporting legitimacy. The site holds an IATA accreditation badge, reinforcing trust. Overall, the website presents a trustworthy and professional business travel service with solid business credibility and technical foundation. Enhancements in security headers, privacy consent, and incident response transparency would further strengthen its security posture and compliance standing.

M

MIS Recycling

mis.dk

45

MIS Recycling is Denmark's largest crushing contractor specializing in mobile crushing, sorting, shredding, and stacking of construction and demolition materials across Denmark and Southern Sweden. The company operates a large fleet of mobile crushing plants with significant daily capacity and has a strong market position supported by over 25 years of operational history. Their website reflects a mature digital presence built on WordPress with Elementor, featuring rich multimedia content and clear service descriptions. The technical infrastructure is modern and optimized for performance and mobile devices, with good SEO practices in place. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. The absence of explicit privacy and terms of service policies is a compliance gap. Overall, the website and domain data indicate a legitimate, professional business with a strong market presence and good digital maturity.

I

ilogs information logistics GmbH

ilogs.com

10

ilogs information logistics GmbH is a medium-sized Austrian company specializing in trade and IT services with a focus on sectors such as Mobility & Parking, Financials, Healthcare, and Cross Industries. The company maintains a professional online presence with clear branding and multiple social media channels, targeting business clients in these industries. Their business model centers on providing specialized IT solutions and logistics services tailored to industry needs. Technically, the website is built on WordPress with modern plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and a published privacy policy indicates room for improvement. WHOIS data is missing, which slightly impacts trust but is mitigated by the professional site and valid contact information. Overall, the company presents a credible and professional digital footprint with opportunities to enhance compliance and security transparency.

P

PratiMe

pratime.rs

44

PratiMe is a Serbian-based company specializing in GPS satellite vehicle tracking and fleet management solutions. Their platform offers real-time vehicle monitoring, fuel consumption control, driver behavior analytics, and comprehensive fleet management tools. The company targets businesses and fleet operators seeking to optimize operational efficiency and reduce costs through advanced telematics. The website is professionally designed, mobile-optimized, and provides clear navigation and contact channels, reflecting a mature digital presence for a company founded in 2020. Technically, the website employs modern web technologies including Bootstrap, jQuery, GSAP animations, and a 3D globe visualization library (Cobe). It integrates Google Fonts and uses a cookie consent mechanism to comply with privacy regulations. While the site is performant and accessible, there is room for improvement in security hardening, particularly in enabling DNSSEC and implementing security headers such as CSP and HSTS. From a security perspective, the site uses HTTPS and has a contact form with client-side validation, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of a privacy policy and terms of service is a notable compliance gap. WHOIS data shows transparent and consistent domain registration aligned with the business location and sector, supporting legitimacy. Overall, PratiMe presents a trustworthy and professional online presence with strong business credibility and technical implementation. Enhancing security policies, privacy compliance documentation, and DNS security would further strengthen their posture and trustworthiness.

O

Owasco RV Centre

owascorv.com

58

Owasco RV Centre is a medium-sized recreational vehicle dealership located in Clarington, Ontario, Canada. The company offers a wide range of RV sales including new and used units, rentals, parts, service, financing, and storage solutions. Recognized as a top 50 RV dealer in 2024 and 2025, it holds a strong market position locally with a professional and well-structured website that targets consumers interested in RVs across Canada. The business model focuses on retail and service offerings within the transportation sector, leveraging partnerships with parts suppliers and rental services to enhance its value proposition. Technically, the website is built on a custom dealer platform (InteractCP) using Bootstrap and jQuery, integrated with multiple analytics and advertising tools such as Google Analytics, Bing Ads, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. However, some third-party scripts like Facebook Pixel are blocked, which may affect tracking accuracy. The site employs HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. From a security perspective, the website maintains a moderate security posture with HTTPS enforcement and consent management for cookies. There is no visible security.txt or vulnerability disclosure, and incident response information is absent. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and trustworthiness, although the website content and business information appear legitimate and professional. Overall, the website is functional, professional, and serves its business purpose well, but improvements in security transparency, domain registration clarity, and enhanced security headers would strengthen its trust and compliance posture. Strategic recommendations include publishing security policies, implementing security headers, and clarifying domain registration details to improve legitimacy and user trust.

M

Michelin

michelin.ca

72

Michelin Canada operates a comprehensive website offering a wide range of tires and related products for automotive, motorcycle, and bicycle markets. The site reflects Michelin's position as a leading global tire manufacturer with a strong brand presence and extensive product catalog tailored to Canadian consumers and businesses. The website employs modern web technologies including the Astro framework and Svelte components, integrated with advanced consent management and analytics tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service pages are not clearly identified in the provided content. Overall, the site is professional, well-branded, and trustworthy, with moderate user tracking balanced by consent mechanisms.

C

Chevrolet Canada

chevrolet.ca

67

Chevrolet Canada operates a comprehensive and professionally designed website serving as the official Canadian portal for Chevrolet vehicles. The site offers detailed product information, promotional offers, build and price tools, and dealer locator services, targeting Canadian consumers interested in Chevrolet's automotive lineup. The business is a subsidiary of General Motors Canada Corporation, reflecting a strong market position in the automotive transportation sector. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager CMS and a robust marketing and analytics technology stack including Adobe Launch, Google Tag Manager, Facebook Pixel, and Datadog RUM. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR and Canadian privacy standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and well-optimized for performance and user experience.

O

OneTicket.cz

oneticket.cz

67

OneTicket.cz is a Czech Republic-based transportation ticketing platform offering a unified railway ticketing system across multiple carriers. Operated by the state enterprise CENDIS under the Ministry of Transport, it provides various ticket types including single, route, and network passes, as well as family and corporate accounts. The platform targets railway passengers seeking convenient and flexible travel options within the Czech rail network. The website is professionally designed, mobile-optimized, and provides comprehensive service information and user support. Technically, it leverages modern web technologies such as React and Google Fonts, with a moderate performance profile and good SEO and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates high business credibility and trustworthiness with official backing and transparent contact information.

N

Nový Hlavák

novyhlavak.com

10

Nový Hlavák is a Czech public infrastructure project focused on revitalizing the Vrchlického sady park, constructing a new tramway line, and reconstructing the main railway station's new hall in Prague. The project is led by the Danish architectural studio Henning Larsen Architects, which won the competitive dialogue with their design 'Šťastný Hlavák'. The website serves as an informational platform showcasing the project vision, visual comparisons, and virtual tours, targeting city residents, visitors, and stakeholders. Technically, the site is built on WordPress with Elementor and integrates Google Analytics for visitor tracking. The site is well-structured and mobile-optimized but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC.

S

Správa železnic, státní organizace

novymostvyton.cz

10

The website novymostvyton.cz serves as an official information portal for the new Výtoň railway bridge project managed by Správa železnic, a Czech government transportation authority. It provides detailed project descriptions, visualizations, news updates, and public engagement resources, targeting commuters, urban planners, and the general public interested in Prague's infrastructure development. The site is well-branded, professionally designed, and consistent with government standards. Technically, the site is built on the Liferay CMS platform and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing purposes. The site is mobile-optimized with good accessibility and SEO practices, although some advanced security headers are not explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Cookie consent is implemented in compliance with GDPR, and contact information is clearly provided. Overall, the website demonstrates a solid digital presence for a government infrastructure project with good content quality, technical implementation, and business credibility. Strategic improvements in security policy publication and advanced security headers would further strengthen its posture.

Ž

Železničná spoločnosť Slovensko

zssk.sk

56

Železničná spoločnosť Slovensko (ZSSK) operates as the national railway carrier in Slovakia, providing comprehensive passenger rail services domestically and internationally. The website serves as a primary portal for ticket sales, travel information, and customer support, targeting train travelers in Slovakia and neighboring countries. The company holds a strong market position as the national transport provider with a broad portfolio of services including seat reservations, baggage transport, and special accommodations for disabled passengers. The site is professionally designed with clear navigation and multilingual support, enhancing user experience and accessibility. Technically, the website is built on WordPress with modern technologies such as React and integrates advanced SEO and accessibility plugins. It employs a cookie consent mechanism compliant with GDPR, uses secure HTTPS connections, and integrates third-party marketing and analytics tools like Facebook Pixel and Google Tag Manager. The site demonstrates good mobile optimization and performance, although hosting details are not explicitly identified. From a security perspective, the website enforces HTTPS and uses secure login portals. While explicit security policies and incident response contacts are not published, no vulnerabilities or exposed sensitive data were detected. The site uses cookie consent and privacy policies that align with GDPR requirements. Recommendations include publishing a dedicated security policy and incident response information, and implementing a security.txt file for vulnerability disclosures. Overall, the website presents a low-risk profile with high trustworthiness, professional content, and strong compliance with privacy regulations. Strategic improvements in transparency around security policies and incident response would further enhance its security posture and user trust.

D

Dopravný podnik mesta Žiliny s.r.o.

dpmz.sk

41

Dopravný podnik mesta Žiliny s.r.o. operates as the official public transportation provider for the city of Žilina, Slovakia. The website serves as a comprehensive portal offering schedules, ticketing information, news updates, and additional services such as charter transport and a tourist hostel. The company targets local residents and visitors, positioning itself as a key municipal service provider with a medium-sized operational footprint. The business model focuses on public transit services supported by digital tools like electronic ticketing and journey planning subdomains. Technically, the website employs a traditional web stack with jQuery and Nivo Slider for UI elements, alongside CookieYes for cookie consent management. While the site is functional and moderately optimized for mobile, it lacks advanced CMS indicators and modern frameworks. SEO and accessibility are basic but adequate for the target audience. Analytics integration includes Google Analytics and smartemailing.cz for newsletter management, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism, supporting GDPR compliance. However, it lacks visible HTTP security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of a terms of service page and limited mobile optimization are minor gaps. Overall, the security posture is moderate but could benefit from enhancements in header policies and formal security disclosures. The overall risk assessment is low, with the website demonstrating legitimacy, consistent business information, and a trustworthy digital presence. Strategic recommendations include implementing security headers, publishing security and incident response policies, improving mobile and accessibility features, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

I

Integrovaná doprava Žilinského a Trenčianskeho kraja, s.r.o.

idsplus.sk

56

Integrovaná doprava Žilinského a Trenčianskeho kraja, s.r.o. operates as a regional integrated public transportation provider in Slovakia, focusing on the Žilina and Trenčín regions. The company aims to increase public transport usage by offering coordinated services, ticketing, and information through digital platforms such as the IDS PLUS mobile application. The website reflects a professional and consistent brand presence with clear communication of services and partnerships with regional transport operators and EU projects. Technically, the website employs a modern technology stack including Bootstrap, jQuery, DataTables, and Google services such as reCAPTCHA and Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security measures include HTTPS enforcement and CAPTCHA integration, though some security headers and explicit policies could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of a terms of service page and incident response information suggests room for enhancement in governance and transparency. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements in security headers, incident response disclosure, and vulnerability disclosure policies would further strengthen its security and compliance posture.

I

Integrovaný dopravný systém Banskobystrického samosprávneho kraja (IDS BBSK)

idsbbsk.sk

63

The website idsbbsk.sk serves as the official portal for the Integrovaný dopravný systém Banskobystrického samosprávneho kraja (IDS BBSK), a regional integrated transport system in Slovakia. It provides comprehensive information about regional bus services, ticketing options, schedules, and passenger information targeted primarily at residents and travelers within the Banskobystrický region, including seniors and students. The site also supports multilingual access and offers an e-shop for purchasing tickets, reflecting a mature digital presence for a regional public service entity. Technically, the site is built on WordPress CMS with popular plugins such as Yoast SEO and WPBakery Page Builder, leveraging Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is provided by WebSupport, with DNSSEC enabled and HTTPS enforced, indicating a secure and reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility could be further improved. From a security perspective, the website employs HTTPS and DNSSEC, uses a cookie consent mechanism compliant with GDPR, and does not expose sensitive data or show signs of vulnerabilities. However, it lacks some advanced security headers and does not provide explicit incident response or vulnerability disclosure information, which could be areas for enhancement. Overall, idsbbsk.sk is a professionally maintained, trustworthy regional government service website with good content quality and technical implementation. It effectively balances user experience, privacy compliance, and security, making it a reliable resource for its target audience.

I

Integrovaná doprava Žilinského a Trenčianskeho kraja, s.r.o.

idzk.sk

46

Integrovaná doprava Žilinského a Trenčianskeho kraja, s.r.o. operates as a regional integrated public transportation service provider in Slovakia, focusing on the Žilinský and Trenčiansky regions. The company aims to increase public transport usage by offering integrated ticketing, transport information, and a mobile application (IDS PLUS) to facilitate travel. The website reflects a professional and consistent brand presence with clear communication targeting the general public and transport users in the region. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google services, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with its business objectives.

B

Bratislavská integrovaná doprava, a.s.

bid.sk

52

Bratislavská integrovaná doprava, a.s. is a regional public transportation integrator and coordinator serving the Bratislava region in Slovakia. The company focuses on coordinating transport activities, lines, tariffs, marketing, and quality control to provide a seamless and efficient public transport system. Their market position is that of a key regional transportation authority, supporting integrated transport services and collaborating with partners such as the Integrated Transport System of Bratislava Region (IDSBK) and the Slovak Association of Public Transport Organizers (SAOVD). The website reflects a professional and transparent organization with extensive publication of official documents and reports. Technically, the website uses standard web technologies including jQuery and Font Awesome, with moderate performance and basic mobile optimization. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit incident response policies. Privacy compliance is good with a clear GDPR policy and cookie consent mechanism. Overall, the website is trustworthy and well-aligned with the company's business objectives.

Stiftelsen Norsk Maritim Kompetanse is a Norwegian foundation dedicated to maritime competence development and recruitment initiatives for Norwegian seafarers. The organization provides grants for training positions and project support, positioning itself as a specialized non-profit entity within the Norwegian maritime sector. The website content is primarily in Norwegian and targets maritime stakeholders including shipping companies and seafarers. Technically, the website is built on the CustomPublish CMS platform, utilizing common JavaScript libraries such as jQuery, LightGallery, and LightSlider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with no visible security headers or explicit HTTPS enforcement details, and no vulnerability disclosures or incident response policies are published. The WHOIS data for the domain is not publicly available, which is typical for .no domains, but the website content and domain usage align with a legitimate maritime foundation. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

F

FELBERMAYR SLOVAKIA, s.r.o.

felbermayr.sk

50

FELBERMAYR SLOVAKIA, s.r.o. is a large Slovakian business specializing in heavy lifting, crane services, special transport, and lifting platforms. The company operates a substantial fleet of equipment and serves industrial clients across Slovakia and Europe, positioning itself as a regional leader in transportation and lifting solutions. The website reflects a professional business presence with clear service offerings and multiple regional contact points. Technically, the site uses modern front-end technologies including Bootstrap, jQuery, and OwlCarousel, supported by analytics and tracking tools such as Google Analytics and Hotjar with proper cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and dedicated security policies published. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements. The domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

D

DRF Luftrettung

drf-luftrettung-shop.de

54

DRF Luftrettung Shop is an e-commerce website dedicated to selling branded merchandise related to the DRF Luftrettung air rescue organization. The site offers a variety of products including patches, clothing, gift items, and helicopter models, targeting supporters and the general public interested in the organization. The website is built on the Shopware 6 platform, integrating PayPal for payment processing and featuring accessibility tools to enhance user experience. While the site demonstrates good technical infrastructure and a consistent brand presence, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is solid with HTTPS and CAPTCHA usage, but could be improved by adding security headers and a vulnerability disclosure policy.

D

DRF Luftrettung

drf-luftrettung.de

11

DRF Luftrettung is a prominent German non-profit organization specializing in emergency air rescue and patient transport using helicopters and ambulance aircraft. The organization operates a comprehensive digital presence with a well-structured website hosted on HubSpot CMS, featuring extensive information about their services, training academy, maintenance, and career opportunities. The website demonstrates strong digital maturity with modern technologies, consent management via Usercentrics, and integration of analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a trustworthy and professional entity with a clear mission to save lives through air rescue services.

MARIAH is a cloud-based platform focused on marina business management and empowering recreational boat owners through integrated internet and mobile applications. The platform integrates with the established MarinaOffice software by Scribble Software, Inc., positioning itself as a niche provider in the marina and boating industry. The website presents a professional and clear business proposition targeting marina operators and boat owners, with additional services like wireless vessel monitoring via MyBoatStatus. Technically, the website uses a traditional web stack including jQuery, Bootstrap, and custom scripts, hosted on StableTransit infrastructure. While the site is functional and moderately optimized, mobile responsiveness and accessibility are basic and could be improved. No major CMS is detected, indicating a custom or proprietary platform. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No cookie consent or privacy compliance mechanisms are present, which may expose the business to regulatory risks. The WHOIS data is consistent with the business profile, showing a stable domain with no privacy protection, enhancing trustworthiness. Overall, the website is moderately mature with good business credibility but requires improvements in security best practices and privacy compliance to strengthen its posture and regulatory alignment.

N

NHO Transport

transport.no

63

NHO Transport is a well-established Norwegian industry and employer association representing transport companies including bus, taxi, rail passenger, and freight operators. The organization focuses on political advocacy, improving contractual and labor conditions, and providing member services such as training and industry information. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at Norwegian transport sector stakeholders. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Cookiebot for privacy compliance. Analytics are implemented via Microsoft Application Insights and Siteimprove, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not published. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

N

NHO Sjøfart

nhosjofart.no

61

NHO Sjøfart is a Norwegian maritime employer and industry association representing member shipping companies. The organization advocates for its members' interests with unions, authorities, and other organizations. The website presents a professional and well-structured digital presence with relevant content including news, events, tariff agreements, and industry standards. It targets maritime companies and stakeholders in Norway, positioning itself as a key player in the Norwegian shipping sector under the larger NHO federation umbrella. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Microsoft Application Insights for monitoring. The site is fully accessible, mobile-optimized, and employs HTTPS with strong security headers. However, the absence of WHOIS data limits domain trust verification. Overall, the site demonstrates a mature digital infrastructure and a strong security posture with minor gaps in privacy transparency.

N

NHO Luftfart

nholuftfart.no

63

NHO Luftfart is a Norwegian employer association representing airlines and other aviation-related businesses in Norway. With over 50 member companies and more than 12,000 employees, it serves as a key industry organization working to develop a competitive aviation sector. The website reflects a professional organizational presence with clear business information, member services, and industry news. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise, and Microsoft Application Insights for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are lacking. Overall, the site is trustworthy and well-maintained, supporting the organization's mission and member engagement effectively.

N

NHO Logistikk og Transport

nholt.no

61

NHO Logistikk og Transport is a Norwegian industry association representing transport, logistics, and forwarding companies, including those involved in port and terminal operations. The organization provides services such as advocacy, training, events, and legal assistance to its members. The website reflects a professional and well-structured digital presence with clear navigation and relevant content targeting industry stakeholders in Norway. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Microsoft Application Insights for analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy and aligns with the business's professional image.

N

Norges Bilbransjeforbund

nbf.no

60

Norges Bilbransjeforbund (NBF) is a Norwegian national interest organization representing companies engaged in automotive and related businesses. Affiliated with the Confederation of Norwegian Enterprise (NHO), NBF provides its members with legal advice, industry guidance, digital tools, and organizes events and training. The website reflects a professional and consistent brand presence targeting Norwegian automotive businesses. Technically, the site uses modern analytics and marketing technologies including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for consent management. The CMS appears to be Episerver (Optimizely), supporting good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and bot protection via reCAPTCHA Enterprise, though security headers are not visibly implemented, representing an area for improvement. WHOIS data is unavailable, limiting domain registration trust verification, but the website's professional content and affiliations support legitimacy. Overall, the site is well-structured, secure, and compliant with privacy regulations.

S

Správa a údržba ciest Prešovského samosprávneho kraja

zjazdnostpsk.sk

42

Správa a údržba ciest Prešovského samosprávneho kraja operates a website providing meteorological station data and road maintenance information for the Prešov region in Slovakia. The site serves as a public service platform offering real-time weather data and coverage maps to residents and authorities. The company is a regional governmental entity established in 2004, with a medium-sized operational scope focused on transportation infrastructure and weather monitoring. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as jQuery, Bootstrap, and Google Maps API for interactive features. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. Security measures include HTTPS with a valid SSL certificate and DNSSEC enabled, alongside Google reCAPTCHA v3 to mitigate automated abuse. Security posture is solid but could be improved by adding explicit security headers and publishing a security policy or incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. No vulnerabilities or suspicious content were detected, and the domain's WHOIS data confirms legitimacy and consistency with the business purpose. Overall, the website is a trustworthy and functional public service portal with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

Steko s.r.o.

stekovranov.sk

43

Steko s.r.o. is a Slovakian company specializing in vehicle technical inspections, emission controls, originality checks, and car wash services primarily serving motorists in the Vranov nad Topľou region. The company has been operational since 2010, positioning itself as a trusted regional provider with a focus on quality and customer satisfaction. The website reflects this with clear service offerings, contact information, and relevant business documentation such as pricing and certifications. Technically, the website employs modern web technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and DNSSEC enabled, complemented by a GDPR-compliant cookie consent mechanism and privacy policy. However, there is room for improvement in implementing additional security headers and formal incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Autaprozeny.cz

autaprozeny.cz

45

Autaprozeny.cz is a Czech online media platform focused on automotive news, reviews, and content tailored specifically for women and girls. The website offers a variety of content including magazine articles, tests, competitions, and multimedia galleries. It operates on a WordPress CMS with a moderate technical infrastructure that includes common plugins for SEO and analytics. The site is hosted likely by REG-ZONER, a Czech hosting provider, and uses HTTPS with proper SSL configuration. Security posture is adequate but could be improved by adding security headers and publishing formal security and privacy policies. The site lacks explicit privacy and terms of service pages, which impacts privacy compliance. Overall, the website is professional, content-rich, and targets a niche audience effectively.

M

Magna International Inc.

magna.com

73

Magna International Inc. is a leading global mobility technology company with over 65 years of expertise in automotive manufacturing and innovation. The company offers a broad portfolio of products and complete vehicle engineering services, positioning itself as a key player in the transportation sector. Their website reflects a mature digital presence with comprehensive investor relations, ESG initiatives, and career opportunities, targeting automotive industry professionals, investors, and potential employees. Technically, the website is built on the Sitefinity CMS platform and employs modern web technologies including jQuery, Google Tag Manager, and CookiePro for consent management. The site is mobile-optimized, accessible, and SEO-friendly, delivering a professional user experience with multimedia content and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policy disclosures and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a large public company, but the website's content and external references strongly support its legitimacy. Overall, Magna's website demonstrates a strong business and technical foundation with good security hygiene, though improvements in transparency around security policies and incident response are recommended for enhanced trust and compliance.

MARIAH is a cloud-based platform focused on marina management and empowering boat owners through integrated internet and mobile applications. The platform offers services such as marina business management, wireless vessel monitoring via MyBoatStatus, online billing, and mobile apps for multiple platforms. The business is positioned as a niche provider in the marina and boating industry, leveraging integration with the established MarinaOffice software by Scribble Software, Inc. The website content is professional and targeted primarily at marina operators and recreational boat owners. Technically, the website uses a moderately dated but functional technology stack including jQuery, Bootstrap, and GridMVC. Hosting appears stable with DNS servers from StableTransit. The site has basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. No CMS is detected, and no analytics or tracking scripts are present in the provided HTML. From a security perspective, the site lacks DNSSEC and security headers, which are recommended to improve domain and web application security. HTTPS usage is implied but not confirmed in the data. Privacy compliance is partial with privacy and terms policies present but no cookie policy or consent mechanism. No contact emails or phone numbers are explicitly provided, which may impact user trust and support accessibility. Overall, the website is functional and professional with moderate trustworthiness. Security and privacy practices could be improved to enhance compliance and user confidence. The domain registration is consistent with the business timeline and shows no suspicious patterns.

The website onebusaway.org currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. The domain is registered since 2008 with Cloudflare, Inc. as the registrar and hosting provider, but no business-specific information, contact details, or policies are accessible on the site. The lack of accessible content prevents a full assessment of the business operations or services. Technically, the site uses Cloudflare DNS and hosting but lacks DNSSEC and security headers, which are recommended for improved security. The absence of privacy and cookie policies, contact information, and security disclosures indicates a low level of transparency and compliance. Overall, the site appears to be either under maintenance, restricted, or misconfigured, limiting the ability to evaluate its business and security posture comprehensively.

H

HART 2026 Proposed Service Changes

hartserviceinput.com

47

HART 2026 Proposed Service Changes website serves as the official platform for Hillsborough Area Regional Transit to communicate upcoming transit route adjustments and gather public feedback. The site targets local residents and transit users in Tampa, Florida, providing detailed route changes, public meeting schedules, and bilingual content to ensure accessibility. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and translation plugins to enhance user experience. Security measures include HTTPS and Google reCAPTCHA v3 integration on forms, though some security headers are not explicitly detected. The absence of privacy and cookie policies represents a compliance gap. WHOIS data shows an unusual future domain creation date, which slightly impacts trust but does not negate the site's legitimacy. Overall, the website is professional, informative, and trustworthy with room for improvement in privacy compliance and security hardening.

K

Kombiverkehr Deutsche Gesellschaft für kombinierten Güterverkehr mbH & Co. KG

einfach-intermodal.de

56

Kombiverkehr Deutsche Gesellschaft für kombinierten Güterverkehr mbH & Co. KG operates a professional blog website 'Einfach intermodal' focused on intermodal freight transport in Germany. The site provides industry news, project updates, and insights targeted at logistics professionals and transport stakeholders. The company is positioned as a significant player in the German intermodal transport sector, offering digital services such as customer portals and data platforms. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and user experience enhancements. Hosting is provided by Hetzner, a reputable German hosting provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, compliant with GDPR, and trustworthy, serving as a credible information source for its target audience.

P

Pluton Logistics

plutonlogistics.com

43

Pluton Logistics is a Serbian-based logistics and transportation information platform established in 2013. The website provides news, insights, and updates related to logistics, freight forwarding, transport, and warehousing sectors, targeting professionals and businesses in the regional transportation industry. It maintains a consistent brand presence with regularly updated content and a professional design. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Font Awesome, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. While HTTPS is properly implemented, DNSSEC is not enabled, and advanced security headers are not explicitly detected. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Contact information is minimal on the main site, with no explicit emails or phone numbers found. Overall, the site demonstrates a moderate to good security posture but could improve in privacy compliance and security policy transparency.

ZF Friedrichshafen AG is a global technology leader specializing in advanced mobility products and systems for passenger cars, commercial vehicles, and industrial technology. The company serves vehicle manufacturers, mobility providers, and startups, focusing on electrification and sustainable mobility solutions. Their extensive product portfolio and global presence position them strongly in the transportation and technology sectors. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, supporting their market leadership. Technically, the website employs modern web technologies including JavaScript frameworks, Piwik PRO analytics, and responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with structured data enhancing search engine understanding. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, though additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact and compliance information is readily available, supporting transparency. Overall, the website presents a low-risk profile with strong business credibility and professional digital infrastructure. The absence of WHOIS data reduces transparency but does not detract from the site's legitimacy given the extensive corporate content and recent press activity.

I

IT BŘECLAV s.r.o.

cistenimotoru.cz

41

The website www.cistenimotoru.cz represents a small local business, IT BŘECLAV s.r.o., specializing in engine cleaning and dekarbonization services primarily in the Břeclav and Brno regions of the Czech Republic. The business offers services aimed at improving engine performance, reducing fuel consumption, and extending engine life. The website is professionally designed using WordPress and popular plugins such as Elementor and Yoast SEO, providing a good user experience with clear navigation and mobile optimization. However, the absence of privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security best practices. The WHOIS data is unavailable, which reduces domain trustworthiness but does not necessarily indicate malicious intent given the local service nature. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and security hardening.

Č

ČD Cargo

cdcargo.cz

55

ČD Cargo is a prominent Czech rail freight transport company offering a wide range of logistics and transport services domestically and internationally. The website reflects a mature digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with Elementor and uses modern plugins for multilingual content, downloads, and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response information is published. WHOIS data is not publicly available, which limits domain trust assessment, but the professional site and business information support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.