Transportation security reports

T

Turancar.cz

turancar.cz

54

Turancar.cz operates as a specialized dealer and service provider for ISUZU buses and related products in the Czech Republic. The company focuses on sales of various ISUZU bus models, warranty and post-warranty servicing, and supplying original spare parts including industrial engines. Their market position is that of a niche transportation sector player catering to bus operators, municipalities, and schools. The website is professionally designed using modern web technologies such as Next.js and React, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with GDPR policies and cookie consent mechanisms in place. However, the absence of WHOIS registration data reduces domain trustworthiness, although the website content and contact information appear legitimate and professional. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response information.

T

TRANSPORT.SK, TRANSPORT-LOGISTIKA.CZ – LUXUR MEDIA SK, S.R.O.

topczechtransport.cz

41

Top Czech Transport is a newly established platform focused on organizing a reader poll for the best commercial vehicle brands in Czechia and Slovakia. It is backed by the magazine TRANSPORT and LOGISTIKA and operated by LUXUR MEDIA SK, S.R.O. The website serves as a hub for voting and industry engagement, targeting transport and logistics professionals and enthusiasts. The platform leverages WordPress CMS with modern UI components such as Smart Slider 3, ensuring a visually appealing and responsive user experience. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Social media integration is present, enhancing outreach and engagement. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

E

ESA logistika s.r.o.

esa-logistics.cz

48

ESA logistika s.r.o. is a well-established logistics service provider founded in 2010, operating primarily in the Central and Eastern European (CEE) region. The company offers a comprehensive range of logistics services including transportation solutions, value-added services (VAS), distribution, warehousing, customs declarations, and outsourcing. Their market position is that of a reputable and recognized player in the logistics sector within the Czech Republic and surrounding countries. The website reflects a professional business model targeting corporate clients requiring integrated logistics solutions. Technically, the website is built on WordPress using the Divi theme, with integration of Facebook Pixel for marketing purposes. The site demonstrates good SEO practices with multilingual support and structured data, but lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with no detected security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is functional, professionally designed, and provides relevant business information, but would benefit from enhanced privacy compliance and security transparency.

I

invoitix ag

invoitix.com

67

Invoitix AG operates as a specialized financial services provider focusing on factoring solutions tailored for road transport companies. Their website emphasizes quick payment turnaround times, aiming to optimize cash flow for their target audience. The company appears to be a small-sized entity founded in 2019, with a niche market position in the transportation sector. The website is built on WordPress using Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and compliance. The technical infrastructure is solid with SSL encryption and Cloudflare DNS, although some security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service policies. No direct contact information is readily available on the homepage, which may affect user trust and engagement. Overall, the site presents a professional image with good design and SEO practices but could enhance transparency and security posture further.

DKV Mobility is a well-established European B2B provider specializing in tank cards, toll services, and fleet management solutions. The company targets fleet operators and businesses with vehicle fleets, offering efficient and comprehensive mobility services across Europe. The website reflects a professional and consistent brand presence with a focus on user experience and compliance with privacy regulations such as GDPR. Technically, the site employs modern JavaScript frameworks including Preact and integrates Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registrant data and lack of explicit security policies or incident response information slightly reduce trustworthiness. Overall, the site is secure, privacy-compliant, and professionally maintained, suitable for its business audience.

D

DAV NORDIC A/S

davnordic.se

63

DAV NORDIC A/S is a medium-sized Nordic company specializing in traffic safety and sustainable steel infrastructure solutions. The company offers project-optimized products focusing on economy, work environment, and quality, targeting infrastructure and transportation sectors primarily in Denmark and Sweden. Their website is professionally designed, multilingual, and provides clear contact information and product categories. Technically, the site is built on WordPress, uses Google Tag Manager and Cookiebot for analytics and consent management, and is hosted on Danish DNS servers. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. No explicit security or incident response policies are published. The domain is well-established since 2016, consistent with the business profile, and shows no suspicious patterns. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience.

Busportal.cz is a well-established Czech transportation news portal operated by ČSAD SVT Praha, s.r.o., focusing on bus and public transport industry news, events, and updates. The website serves a niche audience of transport professionals and enthusiasts, providing timely and relevant content with advertising as a key revenue stream. The domain age and WHOIS data confirm a long-standing presence since 2001, reinforcing its market credibility. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and the Nette framework, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and some best practices, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service pages detected. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced compliance and security measures.

T

Truck1 Sp.z.o.o.

truck1.eu

56

Truck1.eu operates as a well-established European online marketplace specializing in the sale of used trucks, light commercial vehicles, construction, and agricultural machinery. Founded in 2003 and headquartered in Poland, the company connects trusted dealers worldwide with buyers seeking commercial vehicles and related equipment. The platform offers a broad inventory exceeding 300,000 listings and supports multiple languages and currencies, catering to a global audience. Its business model focuses on providing a comprehensive digital marketplace with additional promotional and paid services for sellers. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, TikTok Analytics, and other major advertising and tracking tools. The site is secured with HTTPS and implements standard security headers, ensuring a secure browsing experience. Mobile optimization and SEO practices are well addressed, although accessibility features could be enhanced further. The website is performant with moderate loading speeds and a professional design. From a security perspective, Truck1.eu demonstrates good practices such as enforcing HTTPS, using security headers, and securing user input forms. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving transparency and readiness. The extensive use of third-party tracking scripts indicates a high level of user data collection, which is partially mitigated by a comprehensive privacy and cookie policy compliant with GDPR. Overall, Truck1.eu presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and enhancing accessibility and privacy transparency to further strengthen trust and compliance.

Č

ČESMAD BOHEMIA, z.s.

prodopravce.cz

61

ČESMAD BOHEMIA, z.s. is the largest association of road transport carriers in the Czech Republic, representing over 1,700 companies and nearly 25,000 vehicles. The organization provides a broad range of services including information dissemination, professional training, consulting, and operational support such as ferry reservations and toll payments. It holds a significant position in shaping transport legislation and industry standards in the region. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, it employs modern tracking tools like Google Tag Manager and Facebook Pixel with privacy-conscious consent settings. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and published policies. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

A

ABF Expo Praha spol. s r.o.

tcexpo.cz

54

Truck & Cargo Expo is a professional trade fair event focused on trucks and logistics in Central Europe, organized by ABF Expo Praha spol. s r.o. The website serves as an information hub for visitors, exhibitors, media, and partners, providing news, event details, and partner information. The domain is newly registered in 2024, aligning with the event timeline for 2025. The site uses a variety of web technologies including Bootstrap, jQuery, and tracking tools such as Google Analytics and Facebook Pixel. Cookie consent is implemented, but explicit privacy and terms of service pages are missing. Security posture is moderate with some outdated libraries and lack of visible security headers. Overall, the site is professionally presented with good content quality and consistent branding.

O

OLTIS Group

irfc.eu

66

The International Railway Forum & Conference (IRFC) website represents a well-established event organizer, OLTIS Group, focusing on the European railway and transport sector. The site provides comprehensive information about the conference, including speakers, sponsors, venue, and ticketing. The business is positioned as a key player in the international rail event market, supported by government patronage and European institutions, enhancing its credibility and reach. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Google Maps API. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA for forms, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No critical vulnerabilities or suspicious content were found. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security and privacy compliance. Strategic enhancements in security policies, cookie consent, and security headers would strengthen trust and compliance.

A

ABF Expo Praha spol. s r.o.

energosummit.cz

54

Czechbus is a well-established Central European trade fair specializing in buses, public transport, telematics, and service technology. Organized by ABF Expo Praha spol. s r.o., it targets B2B professionals in the transportation sector and is held at the PVA EXPO PRAHA venue in Letňany. The website presents a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site uses a mix of modern and somewhat outdated technologies, including Bootstrap and jQuery 1.12.4, with multiple analytics tools integrated. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no visible privacy or terms of service pages. Overall, the site is trustworthy and safe for general audiences.

D

DKSV

dksv.cz

48

DKSV.cz is a professional website dedicated to organizing and promoting transportation-related events, specifically the Dopravní konference (Transportation Conference) and Silniční veletrh (Road Trade Fair) held in Pardubice, Czech Republic. The site targets industry professionals, government officials, and companies involved in transportation infrastructure. It offers event information, registration options, and showcases partners and media collaborators. The business operates primarily as an event organizer with a regional focus and a small organizational size, founded in 2022. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO tools like Yoast and analytics platforms including Matomo and Google Analytics via Google Tag Manager. The site demonstrates good mobile optimization, structured data usage, and moderate performance. Hosting is provided by hosting90, a Czech hosting provider. From a security perspective, the site enforces HTTPS and employs a GDPR-compliant cookie consent mechanism with detailed user controls. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, DKSV.cz presents a trustworthy and professional online presence for its niche event business. Strategic improvements in security headers, incident response transparency, and visible contact information would enhance its security posture and user trust. The site is safe for general audiences and complies well with privacy regulations.

Z

Z-Group bus a.s.

karierazavolantem.cz

42

Z-Group bus a.s. is a well-established transportation company in the Czech Republic, operating since 1992. It provides a wide range of bus transportation services including regional, urban, and international routes, serving millions of passengers annually. The company also focuses on recruitment and career opportunities for bus drivers across multiple regions. The website reflects a professional and consistent brand image with clear business information and partner affiliations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie management and Google Analytics integration. Security posture is strong with HTTPS and reCAPTCHA, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, adding a terms of service page, and publishing a security.txt file for vulnerability disclosures.

S

SR-Gruppen – sinusrumleriller – kalkstabilisering – cementstabilisering – specialfræsning

sr-gruppen.dk

43

SR-Gruppen is a specialized Danish company focused on road construction and maintenance, offering niche services such as sinusrumleriller, cement and lime stabilization, BSM, Remix, and soil treatment. Their website presents a professional image with clear service offerings and a focus on industry-specific solutions. The company targets businesses and professionals in the transportation and infrastructure sectors. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern CMS with SEO considerations. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy page found. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

D

DAV NORDIC A/S

davnordic.dk

61

DAV NORDIC A/S is a Danish company specializing in traffic safety, noise reduction, poles, and steel infrastructure solutions. Established in 2016, it holds a leading position in the Danish transportation infrastructure sector, offering project-optimized solutions focusing on economy, work environment, and quality. The company targets businesses and public sector entities involved in infrastructure and traffic safety. The website is professionally designed using WordPress CMS, enhanced with performance tools like WP Rocket, and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the website reflects a trustworthy and credible business presence with good technical maturity and compliance practices.

I

ITS Teknik

its-teknik.dk

53

ITS Teknik is a Danish company specializing in traffic safety, traffic planning, and traffic registration. They provide advanced traffic technology solutions including traffic signals, ITS systems, and various traffic monitoring and control equipment. The company targets municipalities and transportation authorities in Denmark, positioning itself as a trusted specialist in the traffic technology sector. Their website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress using modern themes and plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and incident response information. Privacy and cookie policies are present, though cookie consent mechanisms could be improved. WHOIS data is unavailable, limiting domain trust analysis, but the overall site and business presentation suggest legitimacy.

S

Saferoad Services Danmark

saferoad-services.dk

54

Saferoad Services Danmark is a medium-sized company specializing in road safety and infrastructure solutions in Denmark. The company offers a range of products including road markings, traffic safety equipment, and consulting services aimed at improving traffic safety and infrastructure robustness. The website reflects a professional and consistent brand presence targeting businesses and public sector entities involved in road infrastructure. Technically, the site uses modern JavaScript frameworks, Tailwind CSS, and integrates analytics tools such as Piwik PRO and Microsoft Application Insights. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint suggests a legitimate and professional business. Recommendations include adding privacy and cookie policies, security headers, and vulnerability disclosure information to enhance compliance and trust.

S

SPVI

spvi.dk

51

SPVI is a Danish engineering consultancy specializing in traffic management, road marking, traffic planning, project design, and occupational health and safety. The company targets professional clients in the transportation and infrastructure sectors. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills, and is optimized for mobile devices with a moderate performance profile. Security measures include HTTPS usage and JavaScript-based hardening of fetch and XHR requests, but lack comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS data limits domain trust verification. Overall, the website presents a professional image but would benefit from enhanced privacy compliance and clearer contact information.

D

DTL - Danske Vognmænd

dtl.eu

64

DTL - Danske Vognmænd is a Danish transport association providing news, political advocacy, member benefits, consulting, and training services to transport companies and truck owners in Denmark. The website is professionally designed with clear navigation and is targeted at transport professionals and companies. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, FontAwesome icons, and tracking tools like Google Analytics and Facebook Pixel. Cookie consent is managed via CookieHub, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found in the provided content. Security posture is moderate with HTTPS enabled and no visible security headers, suggesting room for improvement in security best practices. Overall, the website is trustworthy and serves its business purpose effectively, but could enhance compliance and security transparency.

Geveko Markings Denmark A/S is a well-established company specializing in the development, production, and distribution of road marking materials and traffic safety solutions. With over 100 years of experience, the company serves a broad range of sectors including public traffic, parking, decorative surfaces, and accessibility. Their market position is strong within Denmark and internationally, supported by a consistent brand presence and comprehensive product offerings. The website reflects a professional and mature digital presence with clear navigation and relevant content tailored to business customers and public sector clients. Technically, the website is built on a modern CMS platform (Swift CMS) and employs contemporary web technologies such as Bootstrap, Swiffy Slider, and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, indicating a good level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes important security headers, and manages cookie consent appropriately. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and business demonstrate a solid security posture and compliance with privacy regulations such as GDPR. The absence of WHOIS data limits domain trust analysis, but the professional presentation and certifications like ISO9001 support legitimacy. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to further strengthen security and trust.

N

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o.

nanlitomerice.cz

44

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o. is a Czech Republic-based medium-sized company specializing in construction and infrastructure projects, particularly railway construction, bridge and wall structures, and civil engineering works. Established in 2001, the company has a solid market presence and offers comprehensive project documentation and construction services. The website reflects a professional and consistent brand image, targeting construction industry clients and infrastructure developers. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Slider Revolution, and Complianz GDPR for compliance. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The hosting is provided by cesky-hosting.eu, and the site shows moderate performance with good mobile optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but it lacks explicit security headers and uses an outdated jQuery version, which could pose risks. No exposed sensitive data or vulnerabilities were detected in the HTML content. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. Overall, the website is trustworthy and professionally maintained, with recommendations to update JavaScript libraries and enhance security headers to improve the security posture further.

C

Chládek & Tintěra, a.s.

cht.cz

48

Chládek & Tintěra, a.s. is a well-established Czech construction company specializing in railway, bridge, civil engineering, and related construction services. With over 35 years of experience and a workforce of approximately 380 professionals, the company holds a leading position in the Czech construction market. Their website showcases a comprehensive portfolio of projects, career opportunities, and detailed company information, reflecting a mature and professional business model focused on transportation and infrastructure sectors. Technically, the website is built on WordPress using the Mioweb3 theme, enhanced with SEO and GDPR compliance plugins such as Yoast SEO and Complianz. The site integrates modern analytics tools including Google Analytics 4 and Facebook Pixel, and employs Google Consent Mode to manage user privacy preferences effectively. The site is mobile-optimized and demonstrates good performance and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent management, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable gap, reducing the overall trust score and suggesting a need for further domain registration verification. Overall, the website presents a secure, compliant, and professional digital presence for a large construction firm. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

Č

ČD-DUSS Terminál, a.s.

cdduss.com

43

ČD-DUSS Terminál, a.s. operates an intermodal terminal in Lovosice, Czech Republic, specializing in handling various container types and providing forwarding, logistics, and customs services. The company targets businesses requiring combined rail and road transport solutions. The website reflects a medium-sized logistics operator with a consistent brand and references from known industry players. Technically, the site is built on WordPress with standard technologies and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the domain registration data supports the legitimacy of the business, with consistent WHOIS information and appropriate domain age.

D

Deutsches Maritime Zentrum e.V.

dmz-maritim.de

51

The Deutsches Maritime Zentrum e.V. operates as an important non-profit think tank dedicated to strengthening the maritime sector in Germany. The organization focuses on innovation and future-oriented topics to maintain the maritime industry's competitive edge internationally. Their services include providing tools such as an interactive maritime map, funding compass, and educational pathfinder, alongside organizing events and workshops. The website reflects a professional and consistent brand presence with clear targeting of maritime stakeholders and government entities. Technically, the website is built on a modern WordPress platform using the Divi theme and several plugins for SEO, job postings, and cookie management. Hosting is provided by planet-ocean-hosting, and the site employs HTTPS with good SSL configuration. The site is mobile optimized and includes structured data for SEO enhancement. Analytics and tracking are implemented via Google Tag Manager and Borlabs Cookie for consent management. From a security perspective, the site enforces HTTPS and uses reCAPTCHA v3 to protect forms. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a low-risk profile with good technical and business credibility. Strategic improvements include adding comprehensive privacy and security policies, enhancing security headers, and publishing contact information to improve transparency and compliance.

W

WP Holding GmbH

wphgroup.de

53

WP Holding GmbH is a large, well-established logistics, transport, production, and recycling company based in Zwickau, Germany. With over 1,000 employees and a substantial fleet and warehouse capacity, it serves customers across Europe. The company maintains a strong regional market position supported by certifications and partnerships. The website reflects a professional business presence with clear service offerings and contact channels. Technically, the site is built on the cm4all platform hosted by Strato, using legacy JavaScript libraries but maintaining good mobile responsiveness and accessibility. Security posture is adequate with HTTPS and GDPR compliance, though security headers and incident response information are lacking. Overall, the site is trustworthy and business-focused with minimal tracking and good privacy practices.

Aktepe is a Turkish company specializing in luxury automotive vehicle transformations and systems, offering a wide range of services including VIP vehicle conversions, marine yacht interior design, and jet interior refits. The company positions itself as a premium provider in the transportation sector with a focus on craftsmanship, quality, and innovation. Their digital presence is built on a modern Next.js framework, providing a responsive and visually appealing website experience. The site includes detailed product catalogs, news updates, and a configurator tool, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit privacy and security policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, Aktepe demonstrates a strong market position in luxury vehicle customization with a professional online presence.

Karsan is a well-established Turkish automotive manufacturer specializing in commercial vehicles such as minibuses, buses, and electric minibuses. With over 50 years of experience, the company positions itself as a key player in the Turkish transportation manufacturing sector, targeting commercial vehicle buyers and industry partners. The website reflects a professional and consistent brand image with multilingual support, indicating an international market focus. Technically, the site employs modern frameworks like Bootstrap and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and standard security headers, though there is a lack of publicly available security policies or incident response information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information. Strategic recommendations include publishing security policies and incident response contacts to enhance trust and compliance.

INSTRAN is an Indonesian online platform dedicated to providing inspiration and information on sustainable transportation development. The website offers a variety of content including news articles, research reports, opinion pieces, campaigns, and discussion forums, targeting a general audience interested in transportation and sustainability. The platform positions itself as a niche media outlet within Indonesia's transportation sector, founded in 2020 and maintained with consistent branding and regularly updated content. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Tiny Slider, and Google Translate integration. It is hosted on Niagahoster servers and employs HTTPS for secure communication. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and important security headers like Content-Security-Policy. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security best practices. The site uses Google AdSense and Google Tag Manager for advertising and analytics, indicating moderate user tracking without explicit privacy disclosures. Overall, INSTRAN presents a professional and trustworthy platform within its niche but would benefit from enhanced security measures, privacy compliance, and clearer contact information to improve user trust and regulatory adherence.

B

Bismania Community

bismaniacommunity.org

47

Bismania Community is an Indonesian community organization focused on bus enthusiasts, primarily in Java and other Indonesian regions. The website serves as a hub for community engagement, event announcements, merchandise sales, and information sharing related to buses and transportation. The organization aims to unite bus fans and contribute to the advancement of transportation infrastructure and automotive business activities in Indonesia. The website is built on WordPress using Elementor and Yoast SEO, hosted by HOSTINGER operations, UAB. It features a moderate technical infrastructure with good mobile optimization and SEO practices but lacks some advanced security headers and privacy compliance elements. Security posture is adequate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and no explicit security policies are published. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

I

Interrijn

interrijn.com

65

Interrijn is a well-established European water logistics and transportation company with over 50 years of experience, specializing in port logistics, floating storage, inland shipping, and project cargo including RoRo services. The company positions itself as a smart, green, and reliable partner for European supply chains, focusing on sustainable water-based transportation solutions. Their website reflects a professional and consistent brand image, targeting businesses requiring efficient cargo transport and storage solutions across European inland and seaports. Technically, the website is built on WordPress using the Enfold theme and integrates modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers, which could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not overshadow the professional presentation and active business presence. Overall, Interrijn demonstrates a mature digital presence aligned with its business operations.

B

Binnenlloyd Maastricht B.V.

binnenlloyd.nl

60

Binnenlloyd Maastricht B.V. is a Dutch logistics company specializing in the total logistics of powder substances. They operate a modern and flexible fleet of specialized self-discharging silo ships and provide multi-modal transport solutions including silo bulk trucks. The company serves various sectors and offers consulting on logistics solutions. The website is professionally designed, multilingual, and provides clear contact information, reflecting a medium-sized established business with a domain age dating back to 1998. Technically, the site is built on WordPress with Elementor and Astra theme, showing good mobile optimization and SEO practices. Security posture is good with HTTPS and DNSSEC enabled, but lacks explicit security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the website is trustworthy and business credible but could improve in privacy and security transparency.

A

AHLMANN-ZERSSEN GMBH

ahlmann-zerssen.com

67

AHLMANN-ZERSSEN GMBH is a well-established maritime shipping and logistics service provider based in Germany, with a domain age dating back to 2008 supporting its claim of decades of experience. The company offers a comprehensive range of services including chartering, shipowners services, port agency, transshipment and warehousing, customs services, and heavy load/project logistics. Their market position is that of a trusted maritime service provider with multiple certifications such as ISO 9001, GMP+, and AEO, which enhance their credibility and trustworthiness in the transportation sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Font Awesome. It is hosted via Cloudflare, ensuring good SSL configuration and domain security, although DNSSEC is not enabled. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is well addressed with a cookie consent mechanism and a GDPR-compliant privacy policy. From a security perspective, the site benefits from HTTPS and Cloudflare protection but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and security maturity. Overall, the website presents a professional and trustworthy digital presence with solid business credibility and compliance. The main risks relate to enhancing security best practices and publishing more comprehensive security and incident response information to align with industry standards and regulatory expectations.

P

Peterson Global

peterson.nl

65

Peterson Global is a consultancy and logistics company specializing in sustainability, technology, and innovative supply chain solutions. The company positions itself as an expert in helping clients achieve sustainable sourcing commitments and creating sustainable logistics solutions. The website reflects a professional and modern digital presence built on WordPress with a focus on user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and active external domains. Security posture is solid with HTTPS and error monitoring via WP Sentry, but lacks published security policies and incident response information. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is trustworthy and well-designed but would benefit from improved transparency and compliance documentation.

V

VEJ-EU

vej-eu.dk

64

VEJ-EU is a Danish organization focused on developing and transforming the road sector through educational courses, conferences, and workplace initiatives. The website positions itself as a key resource for professionals in the transportation sector in Denmark, offering sector-specific knowledge and networking opportunities. The domain has been active since 1999, indicating a well-established presence in the market. Technically, the website is built on a modern Next.js framework with React, ensuring a responsive and user-friendly experience. The use of Cookiebot for consent management and integration of analytics tools like Google Analytics and Hotjar demonstrate a mature digital infrastructure with attention to privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit contact information and detailed security policies.

Hermes Traffic Intelligence ApS is a Denmark-based company specializing in traffic data analytics and bicycle movement data ecosystems. They provide advanced algorithms and tools to assist road administrators in making informed decisions to improve traffic infrastructure. Their BIKE™ ecosystem aggregates anonymized bicycle data from multiple suppliers to enhance bicycle infrastructure planning. The company operates a professional website with clear contact information and a newsletter subscription service, targeting government and regional traffic planners. Technically, the website is built on the One.com Web Editor platform, uses modern JavaScript libraries like Swiper.js and jQuery, and integrates Mailchimp for marketing. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism, reflecting basic GDPR compliance. Security posture is adequate but could be improved by adding security headers and publishing a security policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

N

NaboGO

nabogo.com

57

NaboGO operates the Nabogo platform, facilitating local carpooling primarily in Denmark and three other countries. The company partners with provinces and public transport authorities to promote sustainable shared transportation solutions. Their business model centers on enabling daily shared rides for commuting, schooling, and leisure, leveraging a mobile app and local partnerships. The website reflects a medium-sized, professional organization with a clear focus on transportation and mobility services. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare for CDN and security. The site is mobile-optimized and includes modern tracking and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and Cloudflare protections, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is present. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency around security policies and incident response.

SFMCON.dk is a professional consultancy specializing in smart ticketing and Mobility as a Service (MaaS) solutions primarily targeting public transport stakeholders. Founded by Søren H. Sørensen in 1998 and based in Copenhagen, Denmark, the company offers expert consulting and program management services to facilitate integrated mobility solutions combining public and private shared vehicles. The website reflects a niche market position with clear service offerings and a professional presentation. Technically, the website is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which lowers its security posture. There are no visible privacy, cookie, or incident response policies, which impacts compliance and user trust. The domain WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and improved technical optimization to strengthen trust and user experience.

W

WATERBORNE Technology Platform V.Z.W.

waterborne.eu

10

WATERBORNE Technology Platform is a European maritime research and innovation coordination entity that facilitates dialogue among key stakeholders including shipbuilders, shipowners, research organizations, and EU institutions. The platform focuses on advancing sustainable, competitive, and safe waterborne transport through strategic research agendas and project coordination. The website reflects a professional and well-structured digital presence, leveraging Joomla CMS and integrating Google Analytics, reCAPTCHA, and Google Maps for enhanced user experience and security. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the platform demonstrates high legitimacy and trustworthiness, serving a niche but essential role in European maritime innovation.

E

European Rail Research Advisory Council

errac.org

56

ERRAC (European Rail Research Advisory Council) is an established advisory organization focused on European rail research and policy guidance. The website presents professional content targeted at stakeholders in the rail transportation sector, including researchers and policymakers. The domain has been registered since 2001, indicating a mature presence in its field. The site uses WordPress with the Divi theme and several plugins to deliver content and manage user interactions, including cookie consent and forms. Technical infrastructure is moderate in performance and mobile optimization is good. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of explicit privacy and terms policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance documentation.

F

Filip Vlček

vlcoun.cz

44

Vlčoun.cz is a Czech Republic-based informational portal focused on transportation news, including public transit, railways, and infrastructure updates. Founded in 2011 and operated by Filip Vlček, it serves a niche audience of commuters, transport enthusiasts, and professionals. The site offers news articles, schedules, special reports, and advertising opportunities, positioning itself as a trusted source within the Czech transportation sector. The portal maintains active social media profiles on Facebook and Instagram, enhancing community engagement. Technically, the website runs on an outdated Joomla 1.5 CMS platform, which poses security and maintenance challenges. It uses common web technologies such as jQuery and MooTools, along with Google Analytics and Tag Manager for tracking. The presence of deprecated Flash content and lack of modern security headers indicate technical debt and potential vulnerabilities. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism compliant with EU regulations. However, the absence of a privacy policy, terms of service, and security headers reduces its compliance posture. The outdated CMS and Flash usage increase risk exposure. WHOIS data is consistent and legitimate, supporting the site's credibility. Overall, the security posture is moderate but requires upgrades to meet modern standards. Strategically, Vlčoun.cz should prioritize upgrading its CMS to a supported version, removing deprecated technologies, and implementing comprehensive security headers. Enhancing privacy documentation and improving mobile and accessibility features will boost user trust and compliance. These steps will strengthen the portal's position as a reliable transportation information source in the Czech Republic.

T

Transport-logistika.cz

transport-logistika.cz

53

Transport-logistika.cz is a Czech online magazine and news portal specializing in transport, logistics, and automotive sectors. Established in 2011, it offers regularly updated news articles, vehicle and equipment tests, and magazine issues targeting professionals and enthusiasts in the transportation industry. The website uses WordPress CMS with a modern tech stack including Yoast SEO, Google Analytics, and Google reCAPTCHA, hosted on Websupport servers. Security posture is good with HTTPS and CAPTCHA protections, though explicit privacy and cookie policies are not found on the homepage. The site maintains a consistent brand presence with active social media channels on Instagram, YouTube, and Facebook. Advertising is managed via the AdRotate plugin, and the site integrates Google Analytics for traffic monitoring.

Č

České dopravní vydavatelství, s.r.o.

dnoviny.cz

42

České dopravní vydavatelství, s.r.o. operates the website www.dnoviny.cz, a professional Czech-language transport and logistics news portal providing weekly publications, industry news, and advertising services. The site targets business professionals, managers, and government officials in the transportation sector. The business model centers on publishing and advertising with additional offerings such as seminars. The website is well-branded, content-rich, and updated regularly, reflecting a medium-sized established media entity in the Czech Republic. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and CSS3, with good mobile optimization and SEO practices. The site uses HTTPS with a secure SSL configuration but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. The WHOIS data is unavailable, which limits domain registration trust assessment but the website content and business information appear legitimate. Security posture is moderate with secure forms and no visible vulnerabilities, but improvements are needed in security headers and privacy compliance. No incident response or vulnerability disclosure policies are published. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency. The overall risk is moderate with no critical issues detected. Strategic improvements in security headers, cookie consent, and domain registration transparency will strengthen trust and compliance.

M

MHD86.cz • Dopravní magazín

mhd86.cz

51

MHD86.cz is a Czech transportation-focused online magazine providing news, opinions, podcasts, and travel tips related to public transport and mobility. The site targets Czech-speaking audiences interested in transportation developments and commentary. It operates on a WordPress platform with a moderate technical infrastructure including common plugins for polls, forms, and advertising. The website is professionally designed with consistent branding and good content quality, regularly updated with relevant articles and multimedia content. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some improvements are recommended such as updating outdated JavaScript libraries and adding explicit security headers. Privacy compliance is basic, lacking explicit privacy policy and terms of service pages. Overall, the domain registration is consistent and legitimate, supporting the website's credibility. Strategic recommendations include enhancing privacy disclosures, improving security headers, and providing clear contact information for incident response.

O

Objedname.cz

buspress.eu

44

BusPress.cz is a specialized online magazine focused on buses and public transportation, primarily serving the Czech Republic and European markets. It provides news, articles, and industry updates related to bus manufacturers, transportation policies, and events. The website is built on WordPress and uses common plugins to enhance user experience and SEO. The content is well-structured and relevant to its niche audience, with a consistent branding approach. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Technically, the site uses HTTPS and standard web technologies but could improve security headers and update some libraries. No signs of WAF or content blocking were detected, and the site is accessible with no adult or questionable content.

D

Dopraváček Informační portál o veřejné dopravě

dopravacek.eu

53

Dopraváček is a Czech language informational portal focused on public transportation news and updates across various sectors including buses, trams, metro, aviation, shipping, and railways. The website targets a general audience interested in transportation developments primarily within the Czech Republic, offering regularly updated news articles and regional transportation information. The business model centers on content publishing with monetization through advertising, primarily Google AdSense. The site maintains an active presence on major social media platforms, enhancing its reach and engagement.

I

Inspekce silniční dopravy

cspsd.cz

57

Inspekce silniční dopravy (INSID) is a Czech government agency established in 2025 to enhance road safety by conducting rigorous inspections of freight transport. The agency operates independently with authority to stop vehicles, perform technical inspections, and enforce driver rest regulations. The website reflects a professional government presence with multi-language support and compliance with privacy regulations. Technically, the site is built on WordPress with modern SEO and performance optimizations, ensuring good user experience and accessibility. Security posture is strong with HTTPS, cookie consent, and no evident vulnerabilities, though explicit security headers and incident response contacts could be improved. Overall, the domain and website appear legitimate and trustworthy, serving an essential public safety function.

M

Mennyacht Group

mennyacht.com

48

MennYacht is an established exclusive dealer specializing in luxury yachts from the Ferretti Group brands, offering a comprehensive range of services including new and used yacht sales, charter, service, and consulting. With over 30 years of experience, the company targets affluent clients seeking premium yachting experiences primarily in the Adriatic region and Europe. The website reflects a professional and consistent brand image with rich multimedia content and multilingual support, enhancing user engagement and accessibility. Technically, the site is built on WordPress with modern libraries and tracking tools, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is trustworthy and professional but would benefit from improved domain registration clarity and enhanced security disclosures.

B

Business Travel News Europe

businesstravelnewseurope.com

68

Business Travel News Europe is a specialized media outlet providing news, analysis, and research focused on the European managed business travel and meetings market. It targets travel management professionals across multinational and various sized corporations, offering insights to optimize corporate travel and meetings. The website demonstrates a mature digital infrastructure with modern analytics, advertising technologies, and a responsive design, supporting a professional user experience. However, the absence of publicly accessible WHOIS data and privacy policy pages introduces some trust concerns. Security posture is generally good with HTTPS and cookie consent mechanisms in place, but improvements in transparency and compliance documentation are recommended. Overall, the site is a credible and valuable resource within its niche but should enhance privacy and security disclosures to strengthen trust and compliance.

C

CruiseWorld

cruiseworldshow.com

64

CruiseWorld is a niche event promotion website focused on the cruise travel industry, providing information and networking opportunities related to cruise shows. The website is built on the Squarespace platform, leveraging modern web technologies and third-party analytics tools such as Google Tag Manager and RudderStack. The site is visually consistent and mobile-optimized, offering a professional user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security-wise, the site benefits from HTTPS and HSTS but lacks comprehensive security headers and visible privacy or cookie policies. Contact information and incident response details are not provided, limiting trust and compliance visibility. Overall, the website is functional and professionally presented but requires improvements in privacy compliance and transparency to enhance trustworthiness.