Transportation security reports

H

HOME OF LOGISTICS

home-of-intralogistics.de

45

HOME OF LOGISTICS is a German-language industry portal focused on logistics, intralogistics, and autonomous transport. Operated by DVS Media, it provides news, event information, and advertising services targeted at logistics professionals and companies. The website demonstrates a solid market position as a niche media platform with consistent branding and a professional content offering. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections, though security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

M

Militzer & Münch Group

mumnet.com

53

Militzer & Münch Group is a well-established global logistics and transportation company specializing in freight forwarding, warehousing, and supply chain management services. The company targets businesses requiring comprehensive logistics solutions and maintains a professional online presence with multilingual support. Their market position is that of a large, international logistics provider headquartered in Germany. The website is built on WordPress using modern page builder technologies, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and security headers implemented, but lacks dedicated security and incident response documentation. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. Overall, the website is professional and trustworthy, but the absence of WHOIS data raises some concerns about domain registration legitimacy.

M

Militzer & Münch Group

mumnet.at

53

Militzer & Münch Group is a well-established international logistics and transportation company specializing in freight forwarding, warehousing, and supply chain management. The company targets businesses requiring comprehensive logistics solutions and maintains a strong market presence primarily in Europe and Asia. Their website reflects a professional and consistent brand image with multilingual support, catering to a global audience. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a published security policy and vulnerability disclosure reduces transparency. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the overall business credibility and website professionalism mitigate some of these concerns. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is reliable and professional but would benefit from improved transparency in domain registration and security disclosures.

V

VHBS

vhbs.de

54

VHBS is a specialized organization operating in the maritime transportation sector, focusing on container charter market indices such as New ConTex, industry news, and event organization like the EISBEIN dinners. The website targets shipping professionals and partners in the maritime industry, providing market data, news, and networking opportunities. Technically, the site is built on TYPO3 CMS with legacy jQuery libraries and uses CanvasJS for charting. The site is moderately optimized for performance and mobile use but could benefit from modernization and enhanced accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and uses outdated JavaScript libraries, which could pose risks. Privacy compliance is basic but present, with a privacy policy and cookie banner. Contact information is limited to a login form and partner emails referenced in news content. Overall, the site is professional and trustworthy within its niche but could improve technical and security aspects to enhance user trust and compliance.

H

Hamburger Verkehrsverbund

hvv.de

68

Hamburger Verkehrsverbund (hvv) operates as the primary public transportation network for Hamburg and its surrounding areas, providing comprehensive services including timetable information, ticket sales, and mobility consulting. The website serves as a digital portal for users to access schedules, purchase tickets, and stay informed about service updates. The platform targets public transit users in the Hamburg region and positions itself as a leading transportation provider with a strong regional presence. Technically, the website employs a modern JavaScript stack with libraries such as jQuery UI, GSAP, and Moment.js to enhance user experience and performance. It features responsive design and accessibility considerations, including keyboard navigation and ARIA roles. The site integrates tracking via etracker for analytics while maintaining GDPR compliance through cookie consent mechanisms and a detailed privacy policy. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, explicit security headers and a published security policy or vulnerability disclosure are absent, representing areas for improvement. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a solid balance of usability, compliance, and security suitable for a public transportation entity. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

E

Evangelisch-Lutherische Kirche in Bayern

motorrad-evangelisch.de

10

Motorrad-Evangelisch.de is a niche community website operated under the Evangelisch-Lutherische Kirche in Bayern, targeting motorcycle enthusiasts interested in evangelical Christian faith and community events in Bavaria and neighboring regions. The site offers event listings, spiritual gatherings, regional contacts, and multimedia content to engage its audience. Technically, the site is built on Drupal 10, leveraging modern web technologies and includes GDPR-compliant privacy and cookie consent mechanisms. Hosting is provided by kunde24.de, a professional hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers could be improved. Contact information is clearly presented with church-affiliated emails and phone numbers, enhancing trust and credibility. Overall, the website is well-structured, accessible, and professionally maintained, serving its community effectively.

Autohaus Winter is a regional automotive dealership and service provider operating in the Lausitz region of Germany with multiple physical locations. The company offers a broad range of automotive services including new and used car sales, vehicle rental, automotive servicing, and e-mobility solutions. Their partnerships with major automotive brands such as Opel, Peugeot, Fiat, Hyundai, and Mazda position them as a comprehensive mobility partner for consumers and businesses alike. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution, supported by a reputable hosting provider (Heitech). The site demonstrates good mobile optimization and basic accessibility features. Cookie consent and privacy policies are implemented in compliance with GDPR, indicating a mature approach to privacy and user data protection. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, which supports the legitimacy of the domain. Overall, Autohaus Winter presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic improvements in security headers and ongoing vulnerability management would further enhance their security posture.

Ihr Taxi 8088 is a small local transportation service based in Hof, Germany, specializing in patient transport such as Kranken- and Dialysefahrten, courier and errands, school bus services, and airport and train station transfers. The company also offers advertising space on their taxis. The website presents a basic but consistent brand image with limited content focused on service offerings and contact information. The target audience is general local customers needing transportation services. Technically, the website uses a simple stack including Bootstrap for responsive design, jQuery, and Slick Carousel for UI elements. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the content. Security features such as HTTPS and security headers are not confirmed, and no privacy or cookie policies are published, indicating compliance gaps. From a security perspective, the site shows minimal security posture with no detected security headers or vulnerability disclosures. Contact information is provided but no incident response or data protection officer details are found. The WHOIS data is minimal but consistent with a small business using agency hosting servers. No WAF or blocking mechanisms are detected, and the content is safe with no adult or questionable material. Overall, the website is functional for its purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and improving accessibility and SEO to better serve customers and comply with regulations.

L

Landkreisentsorgung Schwarzenberg GmbH

landkreisentsorgung.eu

52

Landkreisentsorgung Schwarzenberg GmbH operates as a regional waste disposal and recycling service provider primarily serving the Schwarzenberg/Erzgebirge area in Germany. The company offers a comprehensive range of services including municipal waste collection, bulky waste disposal, hazardous waste handling, wastewater services, document destruction, container rental, and city cleaning. Their market position is that of a trusted local service provider with a focus on environmental sustainability and compliance. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and Ultimate VC Addons. The technology stack includes jQuery, Bootstrap, and Font Awesome, hosted likely via Variomedia AG. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism via Borlabs Cookie. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is supported by a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website is professional, trustworthy, and well-aligned with the business's regional service model. The absence of critical security issues and the presence of trust indicators such as certifications and clear contact information contribute to a strong credibility profile. Strategic improvements could focus on enhancing security headers and publishing explicit security policies to further strengthen the security posture.

W

Willy Böhme GmbH & Co. KG

willy-boehme.eu

47

Willy Böhme GmbH & Co. KG is a regional German company specializing in waste disposal, sewage services, and environmental cleaning. The company offers a broad range of services including waste recycling, document destruction, container rental, sewer cleaning, and street cleaning. Their website reflects a well-established business with a clear focus on environmental sustainability and service reliability. The target audience primarily includes regional businesses and municipalities in Germany. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and Borlabs Cookie for privacy compliance. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

M

MMcom GmbH

mm-com.de

54

MMcom GmbH is a medium-sized IT service provider based in Hof, Germany, operating as a subsidiary of the M&M Militzer & Münch Gruppe, a large logistics company. The company specializes in IT projects, consulting, support, security, system integration, and hosting services, serving both the parent group and external clients. Their website reflects a professional and consistent brand image with clear contact information and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with modern plugins and frameworks, including reCAPTCHA for spam protection. Security posture is good with HTTPS enforced, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. Overall, the domain registration is consistent with the business claims, though WHOIS data is limited due to DENIC privacy policies. The website is accessible without WAF blocking and contains no suspicious or adult content.

A

AGA Service GmbH

dasjobticket.de

63

Dasjobticket.de is a professionally designed website operated by AGA Service GmbH, offering digital job ticket solutions for German SMEs. The platform enables employers to provide their employees with affordable, nationwide public transport tickets (Deutschlandticket) with benefits such as tax advantages and digital convenience. The website demonstrates a mature digital infrastructure using WordPress, Avada theme, and integrates Google Analytics with GDPR-compliant consent management. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-branded, and targets medium-sized enterprises in the transportation sector.

H

HERING Group

heringinternational.eu

47

HERING Group is a medium-sized, well-established company specializing in systemized construction solutions primarily for the transportation and infrastructure sectors. Founded in 1892 and based in Germany, the company offers a broad portfolio including architectural concrete façades, railway construction, public toilet facilities, noise protection, modular platforms, and sustainable technologies such as organic photovoltaics. Their market position is strong with a focus on quality, sustainability, and innovation, supported by approximately 700 employees and international project experience. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and Swiper.js, and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and clear navigation. However, some technical improvements are recommended, such as adding security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. The absence of security headers and a formal incident response or vulnerability disclosure policy are areas for improvement. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency, although the website content and social media presence strongly indicate a legitimate business. Overall, the website presents a professional and trustworthy image with minor compliance and security gaps. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust and compliance.

O

Outdooractive

outdooractive.in

66

Outdooractive.in is a well-established online platform catering to outdoor enthusiasts in India, offering a comprehensive suite of services including route planning, GPS trails, travel guides, and community engagement. The website is professionally designed with good content quality, clear navigation, and mobile optimization, targeting Hindi-speaking users interested in hiking, cycling, skiing, and other outdoor activities. The platform leverages modern JavaScript libraries such as Leaflet.js and Mapbox GL for interactive maps and route visualization. Technically, the site demonstrates a mature digital infrastructure with proper use of HTTPS, security headers, and structured data for SEO. However, there is room for improvement in privacy compliance, particularly in implementing a cookie consent mechanism and publishing explicit security policies. The absence of direct contact information and incident response channels limits transparency in user support and security communication. From a security perspective, the website maintains a good posture with HTTPS enforcement and standard security headers, but lacks a vulnerability disclosure program and visible incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's business claims, indicating legitimacy and trustworthiness. Overall, Outdooractive.in presents a reliable and user-friendly platform for outdoor activities in India, with strong technical foundations and good business credibility. Strategic enhancements in privacy and security transparency would further strengthen user trust and compliance.

D

Deutsche Post AG

deutschepost.de

71

Deutsche Post AG operates as the leading postal and logistics service provider in Germany, offering a wide range of services including letter and parcel delivery, express shipping, and online postage solutions. The company targets both private individuals and business customers, maintaining a strong market position supported by its parent company Deutsche Post DHL Group and its subsidiary DHL. The website reflects a mature digital presence with comprehensive service information and customer support features. Technically, the site employs modern JavaScript frameworks, Adobe Launch for tag management, and OneTrust for consent management, ensuring compliance with privacy regulations. Security measures include HTTPS enforcement and multiple security headers, contributing to a robust security posture. However, the absence of a dedicated security policy and incident response contact information suggests areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting Deutsche Post's reputation as a reliable service provider.

Hanauer Straßenbahn GmbH is a medium-sized public transportation company operating tram and bus services in Hanau, Germany. The company provides comprehensive passenger information, ticketing options including mobile tickets, and integrates with the regional transport association RMV. The website is professionally designed with consistent branding and targets local commuters and visitors. Technically, the site uses modern frameworks such as Bootstrap and jQuery, is powered by the Imperia CMS, and integrates third-party widgets for transport schedules. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and functional, supporting the company's business objectives effectively.

V

vanRaam

vanraam.com

68

vanRaam is a specialized manufacturer of custom bicycles tailored for special needs, including electric tricycles, tandem bikes, wheelchair bikes, and low-entry bikes. With over 110 years of Dutch quality craftsmanship, the company targets individuals and organizations requiring adaptive cycling solutions. The website reflects a well-established niche business with a clear focus on accessibility and customization. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates reputable third-party services for analytics, marketing, and payment processing. The site is performant, mobile-optimized, and includes a comprehensive cookie consent mechanism, demonstrating good digital maturity. Security posture is strong with HTTPS enforced and use of Cloudflare for protection, though explicit security headers and incident response policies are not clearly published. The absence of WHOIS data limits domain trust verification, but the professional presentation and use of trusted services support legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and transparency.

P

PIERER Mobility AG

pierermobility.com

75

PIERER Mobility AG is a prominent holding company headquartered in Austria, overseeing several leading premium motorcycle and bicycle brands including KTM, GASGAS, Husqvarna, MV Agusta, WP, and Felt. The company focuses on the premium segment of the two-wheeler market and also includes high-performance components and sports cars in its portfolio. The website reflects a mature digital presence with comprehensive investor relations, sustainability initiatives, and corporate governance information, targeting investors, partners, and enthusiasts. Technically, the site leverages modern frameworks such as Next.js and Storyblok CMS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data warrants further verification.

A

ahaus.bike

ahaus.bike

64

ahaus.bike is a small, technology-driven eBike rental service operating in Ahaus, Germany, leveraging the Tobit.Labs chayns platform to provide a fully digital bike sharing experience. The business focuses on environmentally friendly transportation solutions using modern VanMoof eBikes, targeting local residents and visitors who seek flexible, app-based bike rentals. The platform supports group bookings and offers maintenance services for VanMoof bikes, positioning itself as a local showcase for digital bike rental technology. Technically, the website is built on modern web technologies including React and the chayns framework, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, but lacks some security headers and formal privacy or cookie policies, which impacts compliance. The WHOIS data is privacy-protected due to TLD restrictions, but the domain appears legitimate and consistent with the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

CTS Composite Technologie

gfk-bahnsteig.de

42

CTS Composite Technologie operates a professional website focused on innovative railway platform solutions made from glass fiber reinforced plastic (GFK). The company offers consulting, design, production, and turnkey assembly services targeting transportation infrastructure clients primarily in Germany. The website content is well-structured, relevant, and consistent with the company's niche market position. Technically, the site runs on Drupal 7 with common JavaScript libraries such as jQuery and Bootstrap, hosted on servers linked to kasserver.com. While the site is accessible and uses HTTPS, it lacks advanced security headers and uses an outdated jQuery version, which could pose security risks. Privacy compliance is addressed with a cookie consent banner and linked privacy and terms pages, but no explicit security or incident response policies are published. Overall, the site demonstrates a moderate to good security posture with room for improvement in security best practices and contact transparency.

H

HERING Gruppe

heringinternational.com

10

HERING Gruppe is a well-established German company specializing in innovative construction solutions and infrastructure products, particularly for public spaces and transportation sectors. With a history dating back to 1892 and a workforce of approximately 700 employees, the company offers a broad portfolio including architectural concrete facades, public sanitary facilities, railway construction, noise protection, and photovoltaic technologies. The website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver a user-friendly experience. Security posture is generally good with HTTPS and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, HERING presents as a credible and mature business with strong market positioning in the transportation and construction industries.

Transport-Logistik Oberhessen GmbH (TLO) is a German logistics and transport company specializing in modern, flexible, and punctual transport solutions, including special transports such as oversized and heavy loads. With over 20 years of experience, TLO serves a growing customer base, including notable clients in the rail construction sector, offering comprehensive logistics and vehicle services supported by an in-house fleet and workshops. The website reflects a professional and consistent brand presence with clear service descriptions and contact channels. Technically, the site is built on WordPress with modern plugins for performance and cookie consent, hosted on Strato servers, and secured with HTTPS. Security posture is solid with room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence aligned with business operations and regulatory requirements.

The website airserbia.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which prevents access to actual website content. This limits the ability to analyze the site's privacy policies, contact information, business descriptions, and other critical data. The domain is registered with NameCheap, Inc. since 2004, indicating a long-standing presence consistent with an established airline business. The use of Cloudflare as a security and performance provider is standard for high-profile websites. Due to the blocking, no direct evidence of privacy compliance, security policies, or business details could be extracted. The site appears to be well-protected but inaccessible for detailed analysis.

H

Hannover Airport

haj-azubi.de

52

The website haj-azubi.de serves as the official platform for apprenticeship and vocational training opportunities at Hannover Airport. It targets young individuals seeking career paths in various airport-related trades such as logistics, office management, and fire services. The site is well-branded with Hannover Airport's identity and provides detailed information on available programs, benefits, and contact persons. Technically, the site is built on WordPress with a modern theme and uses reputable plugins for cookie consent and analytics. Hosting is provided by Hetzner, a reliable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

HAJ Reisen

haj.de

51

HAJ Reisen operates as a regional travel agency closely affiliated with Hannover Airport, offering a broad range of travel services including flight tickets, package tours, cruises, and city trips. The website targets travelers primarily from the Hannover region, providing curated travel offers with partner agencies and reputable travel brands. The business model leverages the airport's infrastructure and regional presence to serve customers seeking convenient travel options. Technically, the website is built on TYPO3 CMS, hosted on Hetzner servers, and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is moderate with HTTPS usage but lacks visible security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is comprehensive with numerous partner agency addresses and phone numbers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

D

DEKRA

dekra.de

73

DEKRA is a globally recognized expert organization specializing in vehicle inspection, expert reports, and various technical services related to transportation. With over 47,000 employees operating in more than 50 countries, DEKRA holds a strong market position as a leading service provider in the transportation sector. The website reflects a professional and consistent brand image targeting both private and business customers. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience. Analytics are handled via Matomo, indicating a moderate level of user tracking. Security posture is adequate with HTTPS enabled and strict referrer policies, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, suitable for its enterprise scale and industry.

G

Gesamtverband Verkehrsgewerbe Niedersachsen (GVN) e. V.

gvn.de

46

Gesamtverband Verkehrsgewerbe Niedersachsen (GVN) e. V. is a regional non-profit association serving the transport and logistics industry in Niedersachsen, Germany. The website acts as a service and information portal for its members, offering legal advice, training, news, and networking opportunities. The organization targets transport companies and professionals within the region, positioning itself as a key industry representative with a focus on member services and sector-specific expertise. The site is professionally designed, with consistent branding and clear navigation, supporting a positive user experience.

V

VYSPLAN s.r.o

vysplan.cz

41

VYSPLAN s.r.o is a Czech consulting and project company specializing in technical supervision of builders, safety coordination (BOZP), engineering activities, and comprehensive processing of all stages of construction project documentation. Established in 2006, the company serves primarily the construction and transportation sectors with a focus on technical oversight and engineering consulting. Their market position is that of a specialized small business with a stable presence in the Czech Republic. The website is professionally designed using WordPress and Elementor, with multilingual support and structured data for SEO. The technical infrastructure is modern and well-maintained, hosted likely by WEDOS, a Czech hosting provider. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. Contact information is clearly provided, including physical addresses and a company email, but no phone numbers are explicitly listed. Overall, the website is trustworthy and business credible but would benefit from enhanced privacy compliance and security best practices.

P

fordskladom.sk

prevereneauto.sk

43

Fordskladom.sk is a Slovakian online platform specializing in the sale of used Ford vehicles. Established in 2019, the website targets consumers interested in purchasing pre-owned Ford cars within Slovakia. The business operates a niche retail model focusing on vehicle listings, comparisons, and filtering to facilitate customer decision-making. The website demonstrates consistent branding and a professional design tailored to its target audience. Technically, the site is built on a modern JavaScript framework (likely Vue.js/Nuxt.js) and integrates common marketing and tracking tools such as Google Tag Manager and Facebook Pixel. Cookie consent is managed via Usercentrics, indicating some level of privacy compliance. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy and terms of service documentation. Overall, the site presents a moderate risk profile with room for improvement in compliance and security best practices.

The website www.leteckezazitky.sk offers aviation experience services across Slovakia, including hot air balloon flights, acrobatic flights, and pilot training experiences. It targets a general audience interested in unique aviation activities and gifts. The site uses modern web technologies such as Vue.js and Bootstrap, with Google Tag Manager integrated for analytics and marketing purposes. Hosting assets are served via DigitalOcean Spaces CDN, indicating a cloud-based infrastructure. Security posture is moderate but lacks critical elements such as security headers and explicit privacy and cookie policies. No contact information or incident response details are provided, which may impact user trust and compliance. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices.

V

Vitesco Technologies GmbH

vitesco-technologies.com

64

Vitesco Technologies GmbH is a leading automotive technology company specializing in electrification and powertrain solutions. Recently merged into the Schaeffler Group as of October 1, 2024, the company focuses on sustainable mobility technologies including electric drives, battery management, and hybrid systems. The website reflects this corporate transition and provides comprehensive information for suppliers, investors, and customers. The business model centers on manufacturing and supplying innovative drivetrain components and systems for various vehicle types, positioning itself as a key player in the evolving automotive market. The company leverages its parent Schaeffler Group's global presence and resources to strengthen its market position. Technically, the website is built on modern frameworks including Angular and Kentico CMS, with a responsive design and good SEO practices. It uses TailwindCSS for styling and integrates video content and interactive menus. Analytics are handled via Piwik (Matomo), indicating a moderate level of user tracking balanced with privacy compliance. The site is well-structured and professionally designed, offering a good user experience across devices. From a security perspective, the site enforces HTTPS and shows good SSL configuration. While explicit security headers like Content-Security-Policy are not evident, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit incident response or security policy pages were detected. The absence of WHOIS data reduces some trust but is mitigated by the corporate nature and transparency of the site. Overall, the website presents a professional and trustworthy digital presence for Vitesco Technologies within the automotive electrification sector. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen security posture and compliance.

Č

České dráhy, a.s.

ceskedrahy.cz

53

České dráhy, a.s. is the largest Czech railway carrier with a nearly 200-year tradition, providing passenger and freight transport services along with related services such as certification, testing, repairs, education, and IT solutions. The company holds a strong market position in the Czech Republic and is expanding its presence internationally. The website reflects a mature digital infrastructure built on Drupal 10, with modern web technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and user tracking is conducted responsibly with IP anonymization. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with the company's business profile.

A

ARTAL-Reisen GmbH

artal-reisen.de

45

ARTAL-Reisen GmbH is a well-established German bus travel company founded in 1972, specializing in group travel, wheelchair accessible trips, and bus rentals primarily serving the Hannover and Bremen regions. The company operates a professional website built on WordPress with modern plugins and a clear focus on user experience and accessibility. The site includes comprehensive privacy and cookie policies with GDPR-compliant consent mechanisms, reflecting a mature approach to data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website projects trustworthiness and professionalism suitable for its target audience.

I

Individual Hannover

individual-as.com

63

Individual Hannover is a specialized small business based in Germany focused on providing barrier-free mobility solutions, including vehicle adaptations and specialized bicycles for people with disabilities and seniors. The company operates under the parent company European Van Service GmbH and holds ISO 9001:2015 certification, indicating a commitment to quality management. Their website is well-structured, professionally designed, and provides comprehensive information about their services, target audience, and contact details. Technically, the site uses the Contao CMS platform with modern JavaScript libraries and includes cookie consent mechanisms and Google Analytics for visitor tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. The absence of WHOIS registration data is a concern, but the business information and certifications support legitimacy. Overall, the website is trustworthy, accessible, and compliant with GDPR requirements.

F

Flughafen Hannover-Langenhagen GmbH

hannover-airport.de

54

Flughafen Hannover-Langenhagen GmbH operates Hannover Airport, providing a wide range of passenger and visitor services including flight information, check-in, baggage handling, parking, and airport experiences. The airport serves as a regional transportation hub with a strong market position in northern Germany. The website is professionally designed, multilingual, and offers comprehensive information tailored to travelers and business clients. Technically, the site is built on TYPO3 CMS, hosted on Hetzner infrastructure, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

G

Gessner & Jacobi GmbH & Co.KG

gessner-jacobi.de

56

Gessner & Jacobi GmbH & Co.KG is a medium-sized automotive dealership based in Hannover, Germany, specializing in new and used Volkswagen, Audi, Skoda, and Volkswagen Nutzfahrzeuge vehicles. The company offers a comprehensive range of services including vehicle sales, servicing, repairs, parts supply, financial services, and fleet solutions for large customers. Their website reflects a professional and modern digital presence, leveraging Next.js and React frameworks with a WordPress backend, hosted by Goneo. The site is well-optimized for mobile and SEO, providing clear navigation and rich content relevant to their target audience. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects like cookie consent and terms of service could be improved. Overall, the website supports the company's market position as a trusted regional automotive service provider with strong brand partnerships and active social media engagement.

M

MTB GmbH

mtb-bau.de

61

MTB GmbH is a modern, medium-sized construction company specializing in complex infrastructure projects in Germany, particularly in railway construction and civil engineering. They serve as a general contractor for Deutsche Bahn AG and offer services including platform construction, cable civil engineering, track superstructure, and structural engineering. The company emphasizes digital planning, precision, and fair communication, positioning itself as an innovative and reliable partner in the transportation and construction sectors. Their website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies with a consent mechanism. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no exposed sensitive data detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, MTB GmbH presents a credible and professional online presence with a strong business focus on transportation infrastructure. Strategic improvements in security practices and transparency could further enhance trust and compliance.

A

Amber Aero, SIA

amber.aero

39

Amber Aero, SIA is a Latvian-based technology company specializing in providing an NDC-based Passenger Service System (PSS) designed to enable digital transformation and enhance retailing capabilities for airlines, including network, low-cost, and hybrid carriers. Their offerings include bespoke distribution solutions such as NDC API, customizable IBE and mobile applications, agent B2B portals, and GDS EDIFACT links, positioning them as an innovative player in the airline technology sector. The company emphasizes cloud and AI-based technologies to modernize airline retailing and distribution. Technically, the website is built on WordPress 6.8.3 with jQuery and integrates Google Fonts, Google Tag Manager, Google Ads conversion tracking, and AmoCRM forms for lead capture. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. While HTTPS is enabled and domain registration is consistent and transparent, the site lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. From a security perspective, Amber Aero demonstrates a moderate security posture with HTTPS and domain transfer protection but should improve by enabling DNSSEC, implementing security headers, and publishing security policies. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service pages found. Contact information is available via corporate email and contact form, but no phone numbers or social media links are provided. Overall, Amber Aero presents as a legitimate, small-sized technology provider with a professional web presence and clear business focus. To enhance trust and compliance, the company should address privacy policy publication, security best practices, and incident response transparency. These improvements will strengthen their security posture and regulatory compliance, supporting their growth in the competitive airline technology market.

C

Cyklokáva

cyklokava.sk

53

Cyklokáva is a small Slovakian business specializing in mobile coffee services delivered via a unique three-wheeled bicycle, targeting event organizers and attendees. The website presents a professional and consistent brand image, emphasizing mobility, ecological operation, and quality coffee service at events. Technically, the site is built on WordPress using modern block editor technology, hosted likely by WebSupport, with HTTPS and DNSSEC enabled, reflecting a good security baseline. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is solid but could be improved with additional headers and incident response information. Overall, the website is trustworthy, well-designed, and serves its niche effectively.

The website scramblerducati.pl serves as the official Polish brand portal for Ducati Scrambler motorcycles, offering detailed product information, media content, and interactive tools such as a configurator and dealer locator. It targets motorcycle enthusiasts and potential buyers in Poland, positioning itself as a key regional presence for the Ducati brand. The site is professionally designed with consistent branding and provides essential services including test ride bookings and access to accessories. Technically, the site employs modern analytics and tracking technologies like Google Analytics, Facebook Pixel, and Google reCAPTCHA v3, ensuring user interaction data is collected responsibly. The site is mobile-optimized and performs moderately well, though some SEO and accessibility enhancements could be made. Security-wise, the site uses HTTPS and bot protection but lacks some advanced security headers and explicit incident response information. Privacy compliance is basic, with privacy and cookie policies present but no active cookie consent mechanism. Overall, the domain registration aligns well with the Ducati brand, confirming legitimacy and trustworthiness.

M

Männer GmbH & Co. KG

maenner-containerdienst.de

56

Männer GmbH & Co. KG is a certified German waste disposal and logistics company specializing in container services and tailored waste management solutions. The company targets commercial clients requiring professional disposal and transport of various waste types. Their website reflects a regional market position with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and includes consent management and Matomo analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS and CSRF protections, though additional security headers and explicit policies could enhance it. Overall, the site is professional, GDPR compliant, and trustworthy with no blocking or suspicious indicators.

V

Volkswagen AG

vw.de

69

Volkswagen AG is a leading automotive manufacturer headquartered in Germany, offering a broad portfolio of vehicles including electric and hybrid models, alongside financing, leasing, and mobility services. The company holds a strong market position in the transportation sector, targeting both consumer and business customers within Germany and internationally. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring a fast, accessible, and SEO-optimized user experience. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious WHOIS data were detected, supporting a high trust level. Overall, the website and domain demonstrate strong business credibility and technical maturity.

M

Martin Liesel

parking-sneznik.cz

45

Parking Sněžník is a small local parking service provider operating in the Czech Republic, offering parking spaces for personal vehicles with a clear pricing model and operational rules. The website is professionally designed with good content quality and clear navigation, targeting drivers needing parking near Sněžník. The technical infrastructure is based on standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted on SuperHosting.cz with Google Fonts integration. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance. Contact information is complete and transparent, enhancing business credibility. No tracking or advertising scripts were detected, indicating minimal user data collection.

P

Parkum s.r.o.

parkum.cz

56

Parkum s.r.o. operates a professional online parking payment platform primarily serving drivers, municipalities, and parking operators in the Czech Republic and Slovakia. The website offers a modern, user-friendly interface enabling online payment of parking fees without the need for physical tickets or cash. The platform integrates with various parking infrastructures including parking houses, open parking lots, and virtual parking areas. The company positions itself as a digital innovator in the transportation sector, collaborating with municipalities and commercial centers to streamline parking management. Technically, the website employs modern JavaScript frameworks, responsive design, and reputable third-party services such as Pays.cz for secure payment processing. Privacy and cookie policies are clearly presented with consent mechanisms in place, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and use of trusted payment gateways, though explicit security headers and incident response information could be improved. The absence of WHOIS registration data slightly impacts trust but the overall professional presentation and business model indicate a legitimate and credible operation.

carVertical is a professional automotive data provider specializing in vehicle history reports that help users detect mileage fraud, accident history, and other critical vehicle information. The company positions itself as a leading European player with multiple awards and a broad international presence. Their website is well-designed, mobile-optimized, and uses modern web technologies such as Next.js and React, supported by analytics and marketing tools like Google Tag Manager and Visual Website Optimizer. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable, possibly due to privacy protection, but the website's professional content and trust signals support legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy compliance, suitable for its business model and audience.

C

Cebia.cz

cebia.cz

75

Cebia.cz is a leading Czech company specializing in vehicle verification and security services. The website positions itself as the market leader in the Czech Republic, offering services that assist motorists and companies in the safe purchase, operation, and sale of vehicles. The business targets both individual consumers and corporate clients within the automotive sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements a comprehensive cookie consent mechanism, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and technology usage suggest a legitimate and professional operation. Overall, the site demonstrates a solid security posture with room for enhancements in transparency and compliance documentation.

A

AutoScout24

autoscout24.cz

69

AutoScout24.cz is a leading European online marketplace specializing in the sale and purchase of new and used vehicles, including cars, motorcycles, trucks, and trailers. The platform offers extensive search filters and a dealer cockpit for professional sellers. The website is well-established with a strong market position as the largest European automotive marketplace, targeting consumers and dealers across multiple countries with localized versions. Technically, the site employs modern web technologies such as React, service workers, and integrates major analytics and advertising platforms like Google Tag Manager, Facebook Pixel, and Bing Ads. It demonstrates good digital maturity with mobile optimization, accessibility features, and GDPR-compliant consent management. Security posture is strong with HTTPS enforcement, security headers, and reCaptcha Enterprise integration, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high legitimacy score despite the absence of public WHOIS data due to privacy protection.

A

Dovoz aut z Německa | Auto na mí­ru

auto-na-miru.cz

53

Auto na míru is a Czech-based specialist company focused on importing cars from Germany, operating since 2008. The website promotes verified vehicles from brands such as VW, Škoda, and Ford, and offers financing options. The business targets consumers interested in purchasing German cars with convenient financing. The domain age and WHOIS data confirm a stable and legitimate presence in the transportation sector. Technically, the website is built on WordPress with modern plugins and tools, including WPBakery Page Builder, Slider Revolution, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

T

Technikboerse

technikboerse.com

58

Technikboerse.com operates as a specialized online marketplace focused on new and used agricultural machinery, forestry, construction, municipal, and viticulture equipment. The platform targets professionals and businesses in the agricultural and related sectors primarily in Germany and Europe. It offers a comprehensive search and listing service for machinery buyers and sellers, including dealers and private individuals. The website is multilingual, supporting a broad European audience, and positions itself as a trusted marketplace in its niche. From a technical perspective, the website employs modern web technologies including Vue.js for frontend interactivity, Google Tag Manager and Google Analytics for analytics, and a Consent Management Platform to ensure GDPR compliance. The site is well-structured with SEO best practices, mobile optimization, and accessibility considerations, although some accessibility features could be enhanced. Performance is moderate, with preloading and asynchronous script loading implemented. Security-wise, the site enforces HTTPS with good SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. However, there is no publicly available security policy or incident response contact, and no vulnerability disclosure mechanism is found, which are areas for improvement. Overall, Technikboerse.com presents a professional and trustworthy online marketplace with solid technical infrastructure and privacy compliance. The main risk factor is the lack of publicly available WHOIS data, which slightly reduces domain trustworthiness. Strategic recommendations include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure page to enhance transparency and security posture.

Ducati Polska operates as the exclusive importer and distributor of Ducati motorcycles and related accessories in Poland. The website serves as a comprehensive platform for showcasing Ducati's motorcycle models, offering configurators, dealer locators, and test ride booking services. The business targets motorcycle enthusiasts and potential buyers within the Polish market, positioning itself as a key player in the transportation sector with a medium-sized operational scale and a founding date consistent with the domain registration in 2011. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager, ensuring effective marketing and user tracking. The site is hosted by a reputable Polish hosting provider and demonstrates good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and reCAPTCHA, but lacks advanced security headers and publicly available security policies or incident response information, indicating room for improvement in security posture. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements, though it could enhance transparency by publishing privacy and security policies.