Transportation security reports

S

Schüttflix Group

schuettflix.com

64

Schüttflix Group operates a comprehensive digital platform focused on sustainable logistics and circular economy solutions for the construction sector in Germany. The platform connects construction companies, material suppliers, waste disposal services, and transport providers to streamline ordering, transport, and disposal processes digitally. The company positions itself as Europe's largest platform for circular economy in construction, emphasizing sustainability and efficiency. Technically, the website is built on modern frameworks such as Next.js and React, with mobile optimization and fast performance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy. WHOIS data is missing, raising some legitimacy concerns, but the professional website content and business focus mitigate this risk. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and compliance documentation.

S

Sdružení pro dopravní telematiku

sdt.cz

43

Sdružení pro dopravní telematiku is a Czech non-profit association established in 2002, dedicated to promoting and supporting the development of new technologies in transportation across road, rail, water, and air sectors. The organization focuses on enhancing mobility efficiency through intelligent transport systems and telematics. Their market position is that of a well-established, trusted entity within the Czech transportation technology sector, offering services such as networking, publications, and event coordination. The website reflects a professional and consistent brand image with clear business information and a LinkedIn presence. Technically, the site is built on WordPress with Elementor and related plugins, hosted likely by Active24, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced, though it lacks some security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the site is safe, trustworthy, and well-aligned with its business purpose.

D

Dopravní stavby Brno, s.r.o.

dsbrno.cz

40

Dopravní stavby Brno, s.r.o. is a Czech Republic-based medium-sized company specializing in transportation infrastructure construction, including tramway tracks, engineering networks, road construction, and bridge repairs. The company positions itself as a professional service provider targeting municipalities and businesses requiring civil engineering solutions. The website is built on WordPress using modern plugins and themes, indicating a moderate level of digital maturity. It features good SEO practices and mobile optimization, although some accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks some security headers and a cookie consent mechanism. The absence of WHOIS data slightly impacts trust but is mitigated by detailed company information and official registration references on the site.

D

Dieci srl

dieci.com

51

Dieci srl is a manufacturer specializing in telehandlers, forklifts, concrete mixers, and dumpers primarily serving the agriculture and construction sectors. The company offers a broad product range including stationary, articulated, and rotating machinery, targeting professional users in farming, construction, mining, and emergency services. The website is multilingual, professionally designed, and includes resources such as downloadable brochures, dealer networks, newsletters, and digital service portals (DTS and DCS). Technically, the site uses modern web technologies including Bootstrap, jQuery, and various UI libraries, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional, professional, and trustworthy from a business perspective but could improve security and transparency aspects.

B

Brantner Fahrzeugbau

hb-brantner.at

50

Brantner Fahrzeugbau is a medium-sized Austrian manufacturer specializing in tipping trailers, dump trailers, push-off vehicles, spreading technology, and special vehicles primarily serving agriculture, construction, and municipal sectors in Western Europe. The company holds a leading market position as one of Western Europe's largest tipping trailer manufacturers. Their website is built on Joomla CMS with modern frontend technologies, offering multilingual support and comprehensive product catalogs. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is good with HTTPS, CSRF protection, and cookie consent mechanisms, though improvements in security headers are recommended. Overall, the website reflects a professional and trustworthy business with clear contact channels and compliance with GDPR.

K

KEGEL

kegel.net

65

KEGEL is a company specializing in bowling solutions, including smart lane machines and bowling equipment, targeting bowling centers and industry professionals. The website is professionally designed using the Squarespace platform, featuring modern web technologies and a consistent brand presence across social media channels. The technical infrastructure is solid with HTTPS and HSTS enabled, ensuring secure communications. However, the absence of a publicly accessible WHOIS record raises questions about domain registration transparency. The site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Overall, the security posture is good with no evident vulnerabilities, but improvements in privacy compliance and contact transparency are recommended.

I

Impel AI

impel.ai

68

Impel AI is a medium-sized technology company specializing in AI-powered customer lifecycle management solutions tailored for the automotive industry. Their platform integrates multiple AI modules such as Sales AI, Chat AI, Service AI, and Marketing AI to streamline automotive retail operations and enhance customer engagement. The company positions itself as an industry leader with a strong focus on innovation and customer-centric AI solutions. Technically, the website is built on WordPress, hosted on AWS infrastructure, and leverages modern analytics and marketing technologies including Google Analytics, Hotjar, Drift, and Facebook Pixel. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is strong with HTTPS enforced, bot management, and consent management mechanisms in place, although DNSSEC is not enabled and no public vulnerability disclosure policy was found. Overall, the website reflects a mature digital presence with good compliance to privacy regulations and a clear business focus on automotive AI solutions.

The website www.usedtrucksneva.cz serves as a commercial platform specializing in the sale of used DAF trucks and trailers, targeting businesses in the transportation and logistics sectors primarily in the Czech Republic. It is affiliated with the NEVA Group and prominently features DAF branding, indicating a focused niche market presence. The site offers detailed vehicle listings with specifications, pricing, and related services such as financing and vehicle buyback programs. Technically, the website employs a traditional tech stack including jQuery 1.9.1, Bootstrap, and Google Analytics, with a moderate performance profile and good mobile optimization. Security-wise, the site lacks visible HTTP security headers and uses an outdated jQuery version, which could pose risks. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found, indicating partial privacy compliance. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer compliance documentation.

The website www.tatra-nevagroup.cz represents a commercial entity focused on the sales, demo leasing, and servicing of TATRA heavy vehicles primarily in the Czech Republic. It serves as an authorized distributor and service partner, targeting businesses in the transportation sector. The site provides vehicle listings, event updates, and a demo vehicle inquiry form, reflecting a business-to-business model with a medium-sized market presence. The parent company appears to be NEVA Group, with official ties to the TATRA manufacturer. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and Google Analytics, with a moderate level of mobile optimization and user experience. Security posture is moderate but could be improved by adding security headers and explicit HTTPS enforcement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. The absence of WHOIS data limits domain trust analysis, but displayed ISO certifications and professional content support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

D

DAF Trucks CZ, s.r.o.

daftrucks.cz

69

DAF Trucks CZ, s.r.o. operates as a subsidiary of PACCAR Inc., specializing in the manufacturing and distribution of light, medium, and heavy trucks in the Czech Republic. The company holds a strong market position as a leading truck manufacturer, offering a broad range of vehicles including electric mobility solutions and connected services such as PACCAR Connect. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting transportation industry professionals and fleet operators. Technically, the website employs modern JavaScript libraries including jQuery and Google Tag Manager, alongside a cookie consent mechanism powered by OneTrust, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security headers are missing, and explicit contact or security policy information is not readily available. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy consent management, but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data reduces trust signals, though the overall content and branding strongly support legitimacy. Overall, the website is well-constructed with good content quality and security posture, but could improve transparency by publishing security policies, incident response contacts, and enhancing security headers. The domain WHOIS data should be verified through alternative sources to confirm registration legitimacy.

S

Správa železnic

konferenceszt.cz

40

The website konferenceszt.cz serves as the official platform for the 12th annual conference on communication and security technologies in the railway sector, organized primarily by Správa železnic and supported by regional and industry partners. It provides detailed event information, registration options, advertising opportunities, and multimedia content to engage industry professionals. The site is well-branded and targets railway technology experts and stakeholders. Technically, it is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google Fonts, hosted likely by WEDOS, a Czech provider. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented with professional emails and phone numbers. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

P

Pražská paroplavební společnost a.s.

praguesteamboats.com

59

The Prague Steamboat Company, operating under the domain www.praguesteamboats.com, is a historic transportation service provider specializing in river cruises on the Vltava River in Prague. Founded in 1865, the company offers sightseeing cruises, restaurant cruises, private event hosting, and boat rentals using culturally significant paddle steamers. The website presents a professional and consistent brand image targeting tourists and locals interested in unique river experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking, with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data for the domain introduce some concerns. Security posture is moderate with cookie consent implemented but lacking visible security headers. Overall, the site is functional, trustworthy, and content-rich but would benefit from enhanced compliance and security measures.

A

Autoslužba TAXI Plzeň

autosluzba-taxi.cz

60

Autoslužba TAXI Plzeň is a small, established taxi service provider operating since 1990 in Plzeň and across the Czech Republic. The company offers a variety of transport services including 24/7 taxi rides, drink service for safe transport after alcohol consumption, courier deliveries, event transportation, minibus services, and car towing. The website presents clear contact information, including phone numbers and an email address, and emphasizes reliability and local presence. The business model focuses on direct customer engagement via phone orders and partnerships with local hotels and businesses. Technically, the website uses common web technologies such as jQuery and Google Tag Manager, and implements a cookie consent banner to comply with basic privacy requirements. However, no dedicated privacy policy or terms of service pages were found, which limits full GDPR compliance. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear consistent and professional. Overall, the site is well designed, mobile-optimized, and trustworthy for its target audience.

A

Autodoprava OMstavby

autodoprava-omstavby.cz

45

Autodoprava OMstavby is a small Czech transportation and construction logistics company based in Plzeň, offering services such as earthworks, demolition, domestic freight transport, vehicle rental with drivers, and material removal. The company emphasizes reliability and has been operating for over two decades, supported by customer testimonials and a clear local presence. The website is built on WordPress using the Divi theme, with standard technologies like jQuery and Google Analytics integrated. It features a GDPR-compliant contact form and cookie consent banner, reflecting basic privacy awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, professional, and suitable for its target audience but would benefit from enhanced security and transparency measures.

NEVA Group s.r.o. is an established authorized dealer and service provider specializing in DAF and TATRA commercial vehicles in the Czech Republic. The company offers a comprehensive range of services including new and used truck sales, vehicle servicing, driver training, financing, and spare parts supply. With a domain age dating back to 2008 and certifications such as ISO 9001 and ISO 14001, NEVA Group demonstrates a solid market presence and commitment to quality and environmental standards. The target audience primarily consists of commercial vehicle operators and transport companies seeking reliable vehicle solutions and support. Technically, the website employs a traditional tech stack featuring jQuery 1.9.1, Bootstrap, and Google Analytics, with a moderate performance profile and basic mobile optimization. While the site includes cookie consent mechanisms and integrates marketing tools like Google Tag Manager and Google Ads, it lacks modern security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is partial, with no explicit privacy policy page detected, though cookie consent is implemented. From a security perspective, the site benefits from HTTPS but lacks visible security headers and explicit security policies. The use of outdated libraries and absence of a vulnerability disclosure or incident response contact reduce its security maturity. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, NEVA Group's website is professional and functional, with good business credibility and moderate technical and security posture. Improvements in privacy policy transparency, security header implementation, and updating legacy scripts would enhance its compliance and security standing.

C

Czechocar CZ, spol. s.r.o.

czechocar.cz

46

Czechocar CZ, spol. s.r.o. operates a professional car rental and carsharing service in the Czech Republic, offering a wide range of vehicles from economy to luxury models. The company is an independent franchisee of Enterprise Rent-a-Car, which strengthens its market position and trustworthiness. The website is well designed, mobile optimized, and provides clear navigation and relevant business information including multiple physical office locations and a phone contact. Privacy and cookie compliance are well implemented with a dedicated GDPR policy document and cookie consent mechanism. Technically, the site uses modern frontend technologies such as Svelte and Bootstrap, and integrates Google Analytics via Google Tag Manager for user behavior insights. Security posture is good with HTTPS enforced and secure forms, though there is room for improvement by adding explicit security policies and incident response contacts. Overall, the website reflects a mature business with a solid digital presence and trustworthy operations.

D

Docker and WordPress

jhmd.cz

56

The website uzkokolejky.cz serves as an informational and e-commerce platform dedicated to the Jindřichohradecké narrow-gauge railways in the Czech Republic. It targets railway enthusiasts and tourists interested in this niche transportation sector. The site uses WordPress with WooCommerce and Amelia Booking plugins, indicating a moderate level of digital maturity with integrated booking and sales capabilities. The technical infrastructure is solid, leveraging modern CMS and SEO tools, hosted likely with Microsoft Online DNS services. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though it lacks published privacy and terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

R

Roman Kreuziger Cycling Academy z.s.

rkca.cz

44

Roman Kreuziger Cycling Academy z.s. is a Czech non-profit organization focused on cycling training and team management. The website serves as a platform to showcase the cycling academy's activities, sponsors, and equipment, targeting cycling enthusiasts and sports professionals. The business operates in the transportation sector with a niche focus on sports cycling. Technically, the website is built on WordPress using Elementor and several plugins for SEO, social media integration, and marketing. The site is hosted by Wedos, a Czech hosting provider, and uses HTTPS with Google Analytics for traffic monitoring. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, the website is professional, well-branded, and trustworthy but could improve compliance and security transparency.

A

APB - PLZEŇ a.s.

apb-plzen.cz

58

APB - PLZEŇ a.s. is a Czech company specializing in earthworks, demolition, construction, transport, and crane services, operating since 1991. The company positions itself as a leading regional provider with a strong portfolio of projects and a focus on technological capabilities. The website is professionally designed, primarily targeting business clients in the construction and transportation sectors within the Czech Republic. Technically, the site uses a custom CMS by BARTON STUDIO, with legacy JavaScript libraries and integration of Google services such as Analytics and reCAPTCHA. Security posture is moderate with HTTPS enabled and cookie consent implemented, but outdated libraries and missing security headers present areas for improvement. The absence of WHOIS data reduces domain trust, though the website content and business information appear legitimate and comprehensive. Contact details and certifications are clearly presented, supporting business credibility.

I

Impel AI

impel.io

65

Impel AI is a leading enterprise-grade AI Operating System designed specifically for the automotive industry, enabling dealerships and OEMs to unify and automate the entire customer lifecycle. The platform offers modular AI services including Sales AI, Chat AI, Service AI, Marketing AI, and Merchandising AI, aimed at improving operational efficiency, customer experience, and sales conversions. With a strong market position supported by OEM partnerships and a global customer base, Impel AI targets automotive retailers seeking to leverage AI for competitive advantage. Technically, the website is built on WordPress and integrates a modern tech stack including Google Tag Manager, Google Analytics, Hotjar, Facebook Pixel, and Auth0 for authentication. Hosting is inferred to be on AWS, with DNS managed via AWS Route 53. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses enterprise-grade authentication services. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the website presents a professional, trustworthy, and technically mature digital presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further enhance security posture and trust.

S

Správa železnic, státní organizace

szdc.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, carriers, and contractors, providing comprehensive information about projects, services, and organizational structure. It holds a significant market position as the primary railway infrastructure manager in the Czech Republic. The site is well-branded and professionally maintained, reflecting its government entity status. Technically, the website is built on the Liferay CMS platform and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics tools including Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes important security headers. It publicly documents its cybersecurity policies and incident response capabilities, including a CSIRT team. However, the absence of a vulnerability disclosure policy and security.txt file is noted. WHOIS data is unavailable, which limits domain registration trust analysis, but the official domain and content suggest legitimacy. Overall, the website demonstrates a solid security posture and compliance with GDPR, with clear contact and privacy information. The risk level is moderate due to missing WHOIS transparency and minor technical improvements needed. Strategic recommendations include implementing a vulnerability disclosure program, enhancing accessibility, and maintaining updated domain registration information.

A

All Traffic Solutions

alltrafficsolutions.com

68

All Traffic Solutions is a specialized provider of traffic management solutions, focusing on portable radar speed signs, variable message signs, and cloud-based traffic data management software. The company positions itself as a leading provider in the transportation sector, serving a diverse audience including public institutions, municipalities, law enforcement, and private entities. Their products emphasize durability, remote management, and data collection capabilities, supported by a strong warranty and made in the USA branding. Technically, the website is built on WordPress with a modern tech stack including LayerSlider, Yoast SEO, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but would benefit from improved transparency and security documentation.

T

Traffic Logix

trafficlogix.com

51

Traffic Logix is an established company specializing in traffic calming and intelligent transportation system solutions, including radar speed signs, speed camera systems, and rubber traffic calming products. Founded in 2002 and based in the United States, the company targets municipalities, military bases, private communities, and industrial sectors, positioning itself as a comprehensive provider of smart traffic solutions. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and domain locks in place, though improvements such as enabling DNSSEC and adding security headers like Content-Security-Policy are recommended. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR indicators. Overall, the site demonstrates high business credibility and professionalism.

S

Smart4City

smart4city.cz

59

Smart4City operates a mobile application platform enabling cashless parking payments across multiple Czech cities. The service targets drivers seeking convenient, paperless parking solutions, leveraging modern payment methods such as Apple Pay and Google Pay. The company has established a solid regional presence since its domain registration in 2016, reflecting a mature and stable business model focused on transportation technology. Technically, the website is built on a modern stack including Next.js and React, with integration of Google Maps API for location services, hosted and secured via Cloudflare. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and published security policies. Overall, the website and business exhibit high professionalism and trustworthiness, with clear service offerings and user-friendly design.

U

Mapa uzavírek v Benešově – Uzavírky, havárie,…

uzavirky-city.cz

53

The website www.uzavirky-city.cz serves as a local informational platform focused on providing real-time and planned road closure and traffic incident data for the city of Benešov, Czech Republic. It targets residents and visitors who need up-to-date traffic information to navigate the city effectively. The site leverages Google Maps API to deliver an interactive map experience, enhancing usability and engagement. The business model appears to be a public or municipal service, offering essential transportation-related updates without commercial intent. From a technical perspective, the site is built on WordPress with custom theming and uses modern web technologies including JavaScript and CSS. The integration of Google Maps API is a key feature, though no advanced frameworks or analytics tools are detected. The site performs moderately well with good mobile optimization and basic accessibility features, but lacks comprehensive SEO and privacy compliance elements. Security posture is adequate with HTTPS enabled, but the absence of security headers and privacy policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were found, but the lack of WHOIS data and registrant information reduces domain trustworthiness. The site does not display contact information or incident response details, which could impact user trust and compliance with data protection regulations. Overall, the website is a functional and useful local service with a safe content profile. However, it would benefit from enhanced privacy compliance, improved security headers, and clearer business and contact information to strengthen trust and regulatory adherence.

The website vykup-aut.cz operates as a service provider specializing in the purchase of used cars for cash across the Czech Republic. It positions itself as an experienced player with over 10 years in the market, targeting individuals and businesses seeking to sell their vehicles quickly and professionally. The business model is straightforward, focusing on offering competitive prices and a professional approach to car buying. The website content is primarily in Czech and tailored to the local market. Technically, the site is built on WordPress, utilizing common plugins such as Contact Form 7, Cookie Notice, and Slider Revolution. The site is served over HTTPS with a good SSL configuration, but lacks some advanced security headers. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is supported by the All in One SEO plugin, and cookie consent mechanisms are in place, indicating some level of privacy compliance. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and detailed privacy policies. No direct contact information or incident response contacts are found, which could impact user trust and compliance. The WHOIS data is unavailable, suggesting privacy protection or lack of public registration details, which reduces transparency and trustworthiness. Overall, the website presents a professional and functional platform for used car buying in the Czech Republic but would benefit from enhanced transparency, security policies, and contact information to improve trust and compliance.

Půjčovna RK, operated by Autocentrum RK cb s.r.o., is a small vehicle rental business based in České Budějovice, Czech Republic. The company specializes in renting personal cars and motorhomes for both business and recreational purposes. Their offerings include short-term and long-term rentals with additional customer benefits such as free parking during rental periods. The website is professionally designed, providing clear vehicle listings and contact information, targeting local customers seeking reliable vehicle rental services. Technically, the website is built on WordPress CMS using common plugins such as Contact Form 7 and Responsive Lightbox, styled with the Foundation CSS framework. It employs Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and loads with moderate performance. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes CAPTCHA protection on its contact form, indicating basic security awareness. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a trustworthy and professional front for a local vehicle rental business but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and customer trust.

AUTO Kralovice s.r.o. operates a professional used vehicle dealership in the Czech Republic, offering a broad range of automotive services including sales of cars, motorcycles, utility vehicles, trailers, financing options, insurance, servicing, and ecological vehicle disposal. The company targets consumers seeking quality used vehicles and related services, positioning itself as a reliable local provider with a comprehensive service portfolio. The website is built on WordPress with modern technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and professional. Overall, the site demonstrates moderate digital maturity with opportunities to enhance compliance and security posture.

P

Pražská paroplavební společnost a.s.

paroplavba.cz

63

Pražská paroplavební společnost a.s. is a historic Czech company established in 1865, specializing in passenger water transport and leisure cruises on the Vltava river in Prague and surrounding areas. The company operates two culturally significant paddle steamers and offers a range of services including sightseeing cruises, gastronomic events, and boat rentals for private and corporate occasions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with HTTPS enforced and cookie consent mechanisms in place. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. The absence of WHOIS data limits domain trust assessment, but the business information and content quality strongly indicate legitimacy. Overall, the site is well-positioned for its target audience of tourists and event clients, with a strong brand and consistent messaging.

P

PRAGUE BOATS s.r.o.

prague-boats.cz

61

Prague Boats s.r.o. is a well-established company specializing in river cruises and boat rental services on the Vltava River in Prague. With over 30 years of experience, the company emphasizes sustainable and eco-friendly boating, operating a modern fleet including fully electric boats. Their market position is strong locally, targeting tourists and event organizers seeking sightseeing, dining, and private event cruises. The website is professionally designed, mobile-optimized, and offers multilingual support with online booking capabilities. Technically, the website employs modern JavaScript libraries such as Swiper.js and Glide.js for interactive content, integrates multiple marketing and analytics tools including Facebook Pixel and Bing UET, and uses Google Tag Manager for tag management. The site is served over HTTPS with good performance and accessibility features, though some security headers are missing. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies, vulnerability disclosure, and incident response contacts. WHOIS data is unavailable, which reduces trustworthiness slightly but is mitigated by clear business registration info and professional web presence. Overall, the website and business demonstrate a mature digital presence with room for improvement in transparency of privacy and security policies. Strategic recommendations include publishing privacy and terms of service pages, enhancing security headers, and providing vulnerability disclosure information to strengthen trust and compliance.

I

Ifor Williams Trailers Benelux

iforwilliams.net

51

Ifor Williams Trailers Benelux operates a website focused on the sale and distribution of trailers, including livestock, horse, and general-purpose trailers. The company positions itself as a market leader in the UK and serves a Belgian audience with Dutch and French language options. The website provides product catalogs, dealer information, and company background, targeting general consumers and businesses needing trailers. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. The hosting is provided by european-server.com, and the domain is well-established since 2003, indicating a mature business presence. Security posture is moderate; while HTTPS is implied, no advanced security headers or DNSSEC are enabled, and no explicit security policies are published. Privacy compliance is basic with a cookie consent banner and a privacy/cookie policy page present. Overall, the site is professional and functional but could improve in security and privacy transparency.

CLIP Group S.A. is a well-established logistics company based in Poland, specializing in intermodal container terminal operations, storage, and transport services including rail and road. The company holds a strong market position as a leading operator in intermodal transport within Europe, supported by certifications and active participation in EU projects. Their website reflects a professional and comprehensive digital presence with clear service offerings and active communication channels. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates high credibility and operational maturity with room for enhancing privacy and security transparency.

S

Skupina Compag

compag.cz

59

Skupina Compag is a Czech-based company specializing in a broad range of municipal and communal services, including waste management, road infrastructure maintenance, facility cleaning, and biogas station operations. The company operates multiple subsidiaries across different regions, positioning itself as a regional leader in communal services. Their business model focuses on providing essential municipal services leveraging modern technology and equipment to serve public and municipal clients effectively. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, contact forms, and cookie compliance. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business profile, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for Skupina Compag, with good content quality and compliance. Strategic improvements in security headers and public security policies could further enhance their security posture and trust.

A

Autopůjčovna NONSTOP

attackerci6.cz

38

Autopůjčovna NONSTOP is a Czech car rental service specializing in providing a wide range of vehicles including SUVs, luxury cars, and electric vehicles with nonstop availability in Prague, including airport and city center locations. The business operates primarily through an online reservation system, targeting both tourists and local customers seeking flexible and reliable car rental options. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Smartsupp for live chat support, indicating a moderate level of digital maturity. The technical infrastructure is supported by the Czech registrar REG-WEDOS, with SSL encryption ensuring secure communications. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies, which could be improved to enhance trust and compliance. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, potentially exposing the business to GDPR compliance risks. Overall, the website presents a professional and trustworthy image with clear contact information and detailed vehicle listings, but could benefit from enhanced security and privacy practices to strengthen its risk profile.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

C

CH&T Pardubice

cht-pce.cz

58

CH&T Pardubice is a well-established construction company specializing in a broad range of building and infrastructure projects, including transportation infrastructure, civil engineering, and steel structure manufacturing. With over 30 years of experience and a stable annual turnover exceeding 4.5 billion CZK, the company holds a strong market position in the Czech Republic. Their services cater primarily to business and public sector clients requiring comprehensive construction solutions. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and a cookie consent mechanism compliant with GDPR. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. However, there is a lack of visible security headers and no WHOIS data available, which slightly diminishes the transparency and security posture. Security-wise, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were detected in the HTML source. The cookie consent banner and privacy policy indicate a commitment to privacy compliance. No forms or input fields were found on the homepage, reducing attack surface but also limiting direct user data collection. Overall, the website is professional and trustworthy from a business perspective but would benefit from improved security header implementation and domain registration transparency. The absence of WHOIS data is a notable gap that should be addressed to enhance trust and legitimacy.

D

David Houška

lodartemis.cz

54

Artemis Boat Club, represented by David Houška, is a small-scale service provider based in Prague, Czech Republic, specializing in boat trips, excursions, and networking events. The website is professionally designed using the Wix platform and targets a general audience interested in leisure and networking activities on boats. The business operates locally within the transportation sector, focusing on experiential services rather than product sales. Technically, the website leverages Wix's infrastructure with modern web technologies, ensuring moderate performance and good mobile optimization. However, the site lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the visible content and structured data suggest a legitimate business presence. Overall, the website is functional and professional but requires improvements in privacy, security, and transparency to enhance trust and compliance.

D

dealerdesk GmbH

dealerdesk.com

54

Dealerdesk GmbH operates a specialized CRM platform tailored for automotive dealerships, offering integrated services such as lead management, marketing automation, and customer communication tools including WhatsApp and video chat. The company is well-established in the German automotive sector with a significant user base and recognized market presence. Technically, the website is built on WordPress with modern web technologies and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a professional and trustworthy business with no critical vulnerabilities detected.

K

Klub Sportowy Adamus Equestrian

adamusequestrian.pl

39

Adamus Equestrian is a Polish sports club specializing in show jumping, represented by top Polish riders and founded by Bartosz Adamus, a successful businessman and active competitor. The website is professionally designed using WordPress and the Divi theme, showcasing stallions, riders, transport services, and partnerships with strategic sponsors. The technical infrastructure is modern and well-maintained, hosted by cyber_Folks S.A., with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partially met with a GDPR privacy policy available but lacking a cookie consent mechanism. Overall, the website presents a credible and trustworthy business presence in the equestrian sports niche.

O

Ostravská organizace vozíčkářů, spolek

vozickari-ostrava.cz

54

The website www.vozickari-ostrava.cz represents the Ostravská organizace vozíčkářů, a non-profit organization dedicated to providing transportation and advisory services for wheelchair users and people with disabilities in the Ostrava region of the Czech Republic. The organization offers specialized vehicle transport, an interactive magazine, and barrier-free consulting services. The site is designed to serve a local audience with clear contact options including a phone number and a contact form. The business model focuses on community support and charitable activities, including fundraising through the Donio platform.

L

L’Heureux Cyclage

heureux-cyclage.org

52

L’Heureux Cyclage is a French non-profit network dedicated to promoting participatory and solidarity-based bicycle workshops. The organization focuses on encouraging cycling through the reuse of unused bicycles and mechanical education. Their website serves as a hub for news, events, training, and resources aimed at cycling enthusiasts, community members, and educators. The network holds a reputable position within the sustainable transportation sector in France, offering certifications, advocacy, and cooperative events to support its mission. Technically, the website is built on the SPIP CMS platform and utilizes modern JavaScript libraries such as Leaflet for interactive GIS mapping and Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and performance optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses deferred and asynchronous loading for scripts, which is good practice. However, it lacks important security headers and does not provide a dedicated security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to missing security headers and incomplete privacy compliance mechanisms. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

E

Eiffage Infra-Bau SE

eiffage-infra.de

47

Eiffage Infra-Bau SE is a large, well-established infrastructure construction company with over 150 years of experience, operating primarily in Germany and Europe. The company offers a broad range of construction and engineering services including infrastructure, rail, noise protection, and specialized construction sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and comprehensive organizational information. The technical infrastructure is modern and includes GDPR-compliant cookie consent and analytics via Google Tag Manager. Security posture is good with HTTPS enforced and basic security best practices observed, though some HTTP security headers could be improved. Contact information and multiple company locations are clearly provided, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences.

Č

Čazmatrans - Nova d.o.o.

cazmatrans.hr

53

Čazmatrans - Nova d.o.o. is a Croatian transportation company specializing in bus services within Croatia and international routes. The website provides an online ticket purchasing platform targeting general travelers and commuters. The company has a medium-sized presence with multiple subsidiaries and a well-established market position since 2012. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on transportation services. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google services like Tag Manager and Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, cookie consent implemented, and secure payment logos displayed, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

C

Comark - Project Logistics Company

comark-logistics.com

50

Comark is a specialized project logistics company based in Slovenia, focusing on the transportation and packing of cargo worldwide. The company offers a range of services including project cargo handling, heavy and oversized transport, government and defence logistics, cargo packing, permits and escorts, and relocation and assembly. With over 25 years of experience in oversize load logistics and ISO 9001:2015 certification, Comark positions itself as a reliable and knowledgeable partner in complex logistics projects. The website reflects a professional and consistent brand image targeting businesses requiring specialized logistics solutions globally. Technically, the website is built on WordPress using a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and WPML for multilingual support. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA for forms, and cookie consent mechanisms; however, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. The security posture is solid but could be enhanced by implementing DNSSEC, security headers, and publishing a formal security policy and incident response contacts. Privacy compliance is basic but present, with clear cookie and privacy policies and GDPR compliance indicators. Contact information is comprehensive and clearly presented, enhancing business credibility. No signs of malicious activity or suspicious domains were found, and the domain registration details align well with the business claims, supporting legitimacy. Overall, Comark's digital presence is professional and trustworthy, with good business credibility and moderate technical maturity. Strategic improvements in security and privacy transparency would further strengthen their posture and trustworthiness.

П

ПАШОВИ КАРС ООД

pashovcars.com

57

Pashov Cars is a Bulgarian company specializing in the sale of high-quality used cars sourced from Europe, the USA, and Canada. The company offers a comprehensive range of services including free consultations, preferential leasing and credit terms, vehicle registration assistance, insurance services, and professional car servicing. Positioned as a trusted partner in the Bulgarian used car market, Pashov Cars targets individual and business customers seeking reliable automotive solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is built on a custom e-commerce solution by Valival Commerce, with moderate performance and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the security posture is adequate for the business size, with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

xmlteam GmbH & Co KG operates in the transportation sector, providing specialized software solutions for the cruise and travel industry. Their flagship product, CruiseCompass, is accessible online without requiring software downloads and integrates with various mid-office systems used by travel agencies. The company targets travel professionals and agencies seeking efficient cruise management tools. The website is currently under maintenance but provides clear access points to their services and support. Technically, the website employs modern frameworks such as Bootstrap 5.1.3 and is hosted on Hetzner servers, indicating a reliable infrastructure. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms. The design and content quality are basic but functional, with room for improvements in accessibility and SEO. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited maturity in security governance. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website and domain appear legitimate and consistent with the business profile. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance posture.

E

EquipmentShare

equipmentshare.com

68

EquipmentShare is a large US-based construction equipment rental and technology company offering a wide range of rental equipment, sales of new and used machinery, and a proprietary fleet tracking platform called T3. The company operates a nationwide network of 348 locations, targeting construction firms and jobsite managers with integrated technology and service solutions. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Datadog RUM, and Google Maps API, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and privacy-conscious analytics implementation, though the absence of a public security policy or incident response contact is noted. The lack of WHOIS data limits domain trust verification but the overall site professionalism and business consistency support legitimacy. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and enhancing accessibility compliance.

D

deutsche Automobilberatung Oranienburg

dabag.de

48

The website www.dabag.de represents deutsche Automobilberatung Oranienburg, a small-sized automobile consulting and brokerage service based in Germany. The company offers services including automobile brokerage, fleet management, custom vehicle procurement, and financing solutions. The website is professionally designed using WordPress CMS with SEO optimization and targets automobile customers and fleet managers primarily in the German market. The business has been active since at least 2014, consistent with the domain age. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Meta Pixel, and Cookiebot for cookie consent management. The site is hosted likely on your-server.de, a German hosting provider, and uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and cookie consent with blocking mode, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party analytics and marketing scripts, indicating extensive user tracking but with GDPR-compliant consent mechanisms in place. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration and hosting details align with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen the security posture and compliance.

D

Derendinger AG

derendinger.ch

72

Derendinger AG is the largest supplier of automotive spare parts and consumables in the Swiss aftermarket, serving professional garages and workshops. The company offers a wide range of products including parts for passenger cars, commercial vehicles, motorcycles, tires, lubricants, and workshop equipment, supported by consulting and training services. Their market position is strong as a key player within the Swiss Automotive Group. Technically, the website is built on Neos CMS with modern JavaScript libraries such as Swiper.js and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through clear policies and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting the company's business credibility and market presence.