Transportation security reports

A

AFTRAL

aftral.com

64

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

M

Michelin

michelin.fr

60

Michelin is a globally recognized enterprise specializing in the manufacturing and retail of tires for automobiles, motorcycles, bicycles, and related mobility products. The website serves as a comprehensive platform offering product information, dealer locators, promotions, and expert advice targeted at a broad audience including individual consumers and professionals. The brand maintains a strong market position as a leader in the transportation sector with consistent branding and high-quality content. Technically, the website leverages modern frameworks such as Astro and Svelte, integrates advanced consent management tools like Didomi, and employs performance optimization via CDNs and asynchronous loading of scripts. Security posture is robust with HTTPS enforcement, comprehensive security headers, and GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent user experience and trustworthiness, suitable for an enterprise of Michelin's stature.

A

Astra

stadtautobahn.ch

69

The website stadtautobahn.ch serves as the official information portal for the renewal of the Stadtautobahn in St. Gallen, Switzerland, managed by Astra, the Federal Roads Office. It provides timely updates on construction, traffic conditions, and community engagement through news articles and an SMS notification service. The site targets local residents and commuters, offering clear and relevant content about the infrastructure project. Technically, the site is built on WordPress with Yoast SEO for optimization, uses Matomo for privacy-conscious analytics, and integrates Google reCAPTCHA to secure user input forms. The design is professional, mobile-optimized, and user-friendly, with consistent branding and trust indicators such as official logos and HTTPS encryption. Security posture is solid with HTTPS and form protections, though it lacks some advanced security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration aligns well with the website's governmental purpose and project timeline, indicating high legitimacy and trustworthiness.

V

Vy

vy.no

63

Vy is a major Norwegian transportation company offering train, bus, and taxi services. The website serves as a platform for ticket purchases and travel information, targeting Norwegian public transport users. The site is professionally designed with excellent content quality and clear branding, reflecting Vy's strong market position in Norway's transportation sector. Technically, the site uses modern web technologies including React and bot protection via Datadome, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, though explicit security headers and policies are not publicly visible. Privacy compliance is limited due to missing explicit privacy and cookie policies in the analyzed content. Overall, Vy's website is trustworthy and professional, with room for improvement in transparency around privacy and security policies.

S

Skippers

skippers.ch

9

Skippers is a Swiss-based e-commerce website specializing in sailing and boating products and services. The website is built on a WordPress platform using WooCommerce for e-commerce functionality and Elementor for page building. The site employs modern web technologies including Google Fonts, Matomo analytics, and WP Rocket for performance optimization. While the site is technically sound with HTTPS enabled and some security best practices like reCAPTCHA, it lacks explicit privacy and cookie policies, as well as contact information, which are critical for compliance and user trust. The domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the website presents a professional front but would benefit from enhanced privacy compliance and security headers to improve trust and security posture.

S

SJ Norge

sj.no

65

SJ Norge operates as a major Norwegian train service provider offering climate-friendly and comfortable travel options across multiple regional and long-distance routes. The company targets a broad audience including individual travelers, groups, and business clients, providing tailored travel solutions and extensive customer support. The website reflects a mature digital presence with comprehensive travel information, booking integration via a national travel planner, and active social media engagement. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, SJ Norge presents a trustworthy and professional online presence aligned with its transportation business.

G

Go-Ahead Nordic

go-aheadnordic.no

52

Go-Ahead Nordic operates as a regional train service provider in Norway, connecting major cities such as Oslo, Stavanger, and Kristiansand. The company is part of the larger Go-Ahead Group and focuses on delivering passenger rail services with an emphasis on travel information and customer support. The website serves as a portal for travelers to plan journeys, check train status, and access company news. Technically, the site is built on a modern React single-page application hosted on Microsoft Azure, integrating analytics and marketing tools such as Google Analytics, Bing Ads, and Telia ACE Web SDK. The site demonstrates good mobile optimization, accessibility, and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies would enhance trust. Overall, the domain registration aligns well with the business profile, indicating legitimacy and consistency. The site is safe for general audiences and does not contain any adult or questionable content.

Entur AS operates as Norway's national travel planner, consolidating multiple modes of public transportation including bus, train, boat, tram, metro, and flights into a single platform. The company provides comprehensive travel search, ticketing, and real-time departure information, positioning itself as the leading travel planning service in Norway. The website is professionally designed, mobile-optimized, and offers a seamless user experience for a broad audience of travelers within Norway. Technically, the site leverages modern frameworks such as React, Firebase backend services, and integrates mapping services via Mapbox. Privacy and cookie compliance are well implemented with Usercentrics consent management, and analytics are handled through PostHog and Firebase Analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, Entur demonstrates a mature digital presence aligned with its business goals and regulatory requirements.

F

Freight and Transit Company Limited (FTL)

ftl.mu

56

Freight and Transit Company Limited (FTL) is a well-established logistics service provider founded in 1994, operating primarily in Mauritius, Madagascar, and South Africa. The company offers a comprehensive range of logistics services including air and sea freight, customs clearing, warehousing, project cargo management, and handling of perishable and dangerous cargo. Their website reflects a professional and consistent brand image, targeting businesses requiring reliable logistics solutions in the Indian Ocean and African regions. Technically, the website is built on Drupal 9 and incorporates modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks some security headers and explicit security policies. The WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security documentation.

א

אוריין בע״מ

orian.com

62

Orian Ltd. is a publicly traded Israeli logistics company offering comprehensive supply chain management solutions. The company operates as part of an international group, providing sea and air freight, domestic transportation, customs brokerage, e-commerce logistics, and specialized services such as cargo insurance and clinical trials logistics. The website is professionally designed, primarily in Hebrew, targeting business clients and investors. Technical infrastructure includes modern JavaScript libraries, Google Analytics, and Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and detailed privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business content and investor relations links support its authenticity. Strategic improvements in privacy policies, security headers, and incident response disclosures are recommended to enhance trust and compliance.

P

Panafric Global Logistics

panafricglobal.com

47

Panafric Global Logistics is a professional logistics service provider offering a wide range of freight forwarding and logistics solutions including air and ocean freight, customs clearance, warehousing, trucking, and project cargo services. The company emphasizes its extensive sector expertise and operational scale, including over 30 years of experience, 13 offices, and a large fleet of trucks. The website is built on a modern WordPress platform using Elementor and related plugins, with good design quality and mobile optimization. Security posture is adequate with HTTPS and secure forms, but lacks published privacy and cookie policies, security headers, and incident response information. WHOIS data is missing, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy in appearance but requires improvements in compliance and transparency.

G

Groupe Marill

groupe-marill.com

56

Groupe Marill is a well-established family-owned business group with a history dating back to 1896, operating primarily in the Horn of Africa region. The group offers a diversified portfolio of services including maritime agency, logistics, insurance, automobile distribution, and industrial equipment supply. Their website reflects a professional and consistent brand image, targeting businesses and individuals requiring these services in the region. Technically, the website is built on Drupal 7 with several JavaScript libraries and uses Google Analytics for tracking with IP anonymization enabled. However, some technologies like jQuery 1.8 are outdated, and there is a lack of modern security headers and DNSSEC implementation. Security posture is moderate with HTTPS enabled but missing several best practices. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy of the business with consistent and long-term domain ownership.

A

APM SA

apmmaritimes.cm

33

APM SA is a Cameroonian maritime transport and logistics company established in 2017, with strategic offices in Douala, Yaoundé, and Kribi. The company positions itself as a reliable partner offering specialized services including maritime agency, stevedoring, customs operations, and transport. The website reflects a professional business presence with clear service offerings and leadership messaging. Technically, the site is built on WordPress using Elementor and Astra theme, hosted on MTN NS infrastructure. Security posture is moderate with HTTPS enabled but lacks security headers and has an expired domain, which poses risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but requires urgent domain renewal and enhanced security and privacy measures.

C

CITIPOST GmbH

citipost.de

49

CITIPOST GmbH operates as a regional postal and logistics service provider in Germany, serving multiple cities through a network of subsidiaries and partner sites. The company focuses on affordable and punctual delivery services nationwide, targeting both business and private customers. The website reflects a professional presence with clear navigation and a localized branch finder feature, supporting customer engagement. Technically, the site is built on WordPress with common plugins such as LayerSlider and Contact Form 7, and integrates a consent management platform to comply with GDPR requirements. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit incident response information. Overall, the security posture is moderate with room for improvement in formal security policies and header implementation. The domain WHOIS data is minimal but consistent with German hosting infrastructure, supporting legitimacy. No adult or questionable content is present, making the site safe for general audiences.

Ü

ÜSTRA

uestra.de

62

ÜSTRA operates as a regional public transportation provider in Hannover, Germany, offering bus and tram services along with timetable and ticketing information. The website is built on TYPO3 CMS and integrates specialized public transport widgets, reflecting a mature digital infrastructure. The site is well-designed, mobile-optimized, and provides a good user experience for its target audience of local commuters and visitors. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

D

DB SCHENKER

dbschenker.de

67

DB SCHENKER is a global leader in logistics, transport, and supply chain management, offering a broad range of services including digital services, land, air, and sea transport, contract logistics, packaging systems, and customs services. The company recently merged with DSV, enhancing its market position as a worldwide leading logistics provider. The website reflects a mature, enterprise-level business with a strong focus on professional service delivery and sustainability. Technically, the website employs modern JavaScript frameworks and integrates with Adobe Experience Platform and other marketing and analytics tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, though additional headers and a security.txt file could improve security transparency. Overall, the site is well-designed, mobile-optimized, and provides comprehensive business and career information, supporting a high trustworthiness rating.

C

Continental AG

continental.de

80

Continental AG is a leading global automotive supplier and tire manufacturer headquartered in Germany. The company focuses on innovation for safe, connected, and sustainable mobility, offering products and solutions primarily for automotive manufacturers and industrial customers. The website reflects a mature digital presence with comprehensive information for investors, job seekers, partners, and customers. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and consent management for GDPR compliance. Security posture is strong with HTTPS enforced and content security policies in place, although additional headers could enhance protection. The absence of public WHOIS data is noted but likely due to privacy protection, not detracting from the site's legitimacy. Overall, Continental AG's website demonstrates professionalism, compliance, and a robust corporate identity.

A

ADAC Niedersachsen/Sachsen-Anhalt e.V.

adac-niedersachsen-sachsen-anhalt.de

48

ADAC Niedersachsen/Sachsen-Anhalt e.V. operates as a regional club focused on mobility, motorsport, tourism, and traffic safety within the German states of Niedersachsen and Sachsen-Anhalt. The organization provides a variety of services including motorsport events, tourism activities, traffic safety programs, and member support. The website reflects a well-established regional presence with consistent branding and a clear target audience of club members and regional residents interested in mobility and motorsport. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as jQuery, Bootstrap, and carousel plugins, offering a good user experience with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's credibility and regional leadership.

A

Allegra Academy

allegra.academy

65

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

S

Sørby Utleie AS

sorbyutleie.no

57

Sørby Utleie AS is a well-established Norwegian company specializing in the rental of machinery and equipment primarily for construction, industrial, and private sectors. Founded in 2009, the company emphasizes quality, service, and sustainability, offering nationwide delivery and green solutions. Their digital presence is professional, featuring a modern, responsive website with integrated search and self-service rental options. The company maintains active social media profiles and demonstrates trustworthiness through certifications like Miljøfyrtårn and customer references. Technically, the website employs modern web technologies, including lazy loading, custom fonts, and a proprietary platform, ensuring good performance and accessibility. Security posture is solid with HTTPS and nonce-based script/style protection, though there is room for improvement in explicit security headers and incident response disclosures. Privacy compliance is adequate with clear privacy and cookie policies, but lacks a consent mechanism. Overall, the site reflects a mature business with a strong market position in equipment rental in Norway.

N

Norske Tog AS

norsketog.no

59

Norske Tog AS is a Norwegian state-owned enterprise responsible for procuring, owning, and managing passenger train vehicles in Norway. The company holds a key position in the national transportation sector, focusing on ensuring modern and efficient rolling stock for passenger rail services. Their website provides comprehensive information about their projects, train types, sustainability efforts, and investor relations, targeting both the general public and industry stakeholders. Technically, the website is well-implemented with modern JavaScript, SVG graphics, and privacy-focused analytics (Plausible). It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response information are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site projects professionalism and trustworthiness, though the lack of WHOIS data from the Norid registry is a notable gap requiring verification. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

T

Tarifverbund OSTWIND

steigensieum.ch

51

The website steigensieum.ch serves as a promotional and informational portal for OSTWIND, a major public transport tariff association in Eastern Switzerland and Liechtenstein. It provides detailed information about monthly and yearly subscriptions, corporate offers, ticket comparisons, and alternatives to car commuting such as P+Rail. The site integrates with official OSTWIND and Swiss public transport services, offering users direct links to purchase tickets and subscriptions. The target audience includes commuters, seasonal travelers, and corporate employees seeking efficient public transport options. The website is professionally designed, content-rich, and well-branded, reflecting a strong market position in the regional transportation sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. It uses Google Maps API for mapping features and employs Matomo and Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the security posture is solid with no critical vulnerabilities detected. However, improvements in privacy compliance and explicit security policies would enhance trust. The domain uses privacy-protected WHOIS, which is justified for this business type. The website demonstrates high professionalism and trustworthiness, supported by official partner links and social media presence. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

SwissPass

swisspass.ch

57

SwissPass operates as a leading Swiss mobility and leisure platform, providing users with access to public transportation and partner offers. The website is professionally designed, multilingual, and targets the general public and travelers within Switzerland. It integrates modern web technologies such as Angular and Adobe DTM for analytics and marketing, ensuring a contemporary digital presence. The platform emphasizes user privacy with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts are absent. Overall, the website demonstrates a mature and trustworthy digital infrastructure suitable for its business domain.

O

OSTWIND

ostwind.ch

56

OSTWIND is a regional public transport tariff association serving multiple Swiss cantons and Liechtenstein, uniting 30 transport companies under a unified zonal fare system. The website provides comprehensive information on ticketing, subscriptions, customer service, and travel tips, targeting public transport users in the region. The digital infrastructure employs modern web technologies including web components and embedded video content, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and accessible, offering a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding standard security headers and publishing explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, OSTWIND’s website is professional and trustworthy, serving its audience effectively with room for security and compliance enhancements.

S

ShipScience

refundgeeks.com

60

ShipScience is an enterprise-focused SaaS provider specializing in parcel shipping data analytics and claims automation. Their platform integrates parcel tracking, invoices, and order data to streamline claims management and optimize shipping operations for large businesses. The company emphasizes automation, data unification, and operational efficiency, targeting logistics, operations, finance, and customer support teams within enterprise shippers. The website demonstrates a mature digital presence with modern technologies, comprehensive privacy and cookie consent mechanisms, and strong security features including SOC-2 compliance and encryption. Technically, the site is built on WordPress with Oxygen Builder and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced, role-based access, SSO support, and audit logging. However, explicit security headers could be improved and an incident response policy is not publicly disclosed. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Despite this, the website content and security practices indicate a legitimate and professional enterprise business. No direct contact emails or phone numbers are publicly listed, relying instead on contact forms. Overall, the site is trustworthy but would benefit from improved WHOIS transparency and explicit security disclosures. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and improving domain registration transparency to bolster trust and compliance.

A

AKT II

akt-uk.com

60

AKT II is a globally recognized interdisciplinary engineering design firm specializing in structural, civil, infrastructure, façade, bioclimatic, geotechnical, and transport engineering. The company operates multiple offices worldwide, including a recent expansion into Toronto, and is part of the Tyréns Group. Their website reflects a mature, professional business with a strong market position in the built environment sector, emphasizing sustainability through B Corporation certification. Technically, the website is built on WordPress with modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Hotjar, providing moderate user tracking and good performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or unavailable, which is unusual for a professional entity and slightly reduces domain trustworthiness. Overall, the website is professional, trustworthy, and well-optimized for its audience.

A

Association de promotion mybuxi

adp-mybuxi.ch

51

Association de promotion mybuxi is a Swiss non-profit organization dedicated to promoting and expanding the demand-responsive transport service called mybuxi across rural Switzerland. Founded in 2019, the association supports operational deficits in structurally weak regions and funds technical development to enable mobility for people without private cars. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing clear information about membership, projects, and the mission. The target audience includes Swiss rural communities, private individuals, and companies interested in sustainable mobility solutions. The organization positions itself as a niche promoter of innovative transport services with a growing footprint in Switzerland.

Ostschweizer Gästekarte GmbH operates a regional guest card service called 'Oskar' that provides tourists in Eastern Switzerland with access to free public transportation on the Ostwind network and discounts or free entry to various leisure activities. The company partners with local accommodations to issue these cards, targeting travelers seeking convenient and cost-effective regional travel and experiences. The website is professionally designed with a clear focus on user experience, offering multilingual support (German and English) and interactive features such as hotel booking forms and image sliders showcasing regional attractions. The business maintains a consistent brand presence and provides comprehensive legal and privacy documentation, reflecting a mature approach to compliance and customer trust.

PostBus Ltd operates a comprehensive regional and local bus transportation network throughout Switzerland, providing essential public transit services, special trips, and leisure excursions. The company maintains a professional and user-friendly website that supports multiple languages and offers extensive customer service resources, including ticket purchases and lost property services. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Coveo search integration, and Usercentrics consent management, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website and domain registration data align well, confirming the legitimacy and trustworthiness of the business.

A

Aargau Verkehr AG (AVA)

aargauverkehr.ch

61

Aargau Verkehr AG (AVA) is a regional public transportation company operating in the Aargau region of Switzerland. The company provides transit schedules, operational updates, and ticketing services primarily targeting local commuters and travelers. The website is professionally designed using Joomla CMS with Helix Ultimate framework and integrates modern web technologies such as Bootstrap and jQuery. It features a cookie consent mechanism compliant with GDPR and uses Google Analytics for traffic analysis. Security posture is good with HTTPS enforced and CSRF protections in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and established transportation service provider with a solid digital presence.

T

Tarifverbund A-Welle

a-welle.ch

10

Tarifverbund A-Welle operates as a regional public transportation tariff association in Switzerland, providing ticketing, subscriptions, zone plans, and travel information services primarily for the A-Welle region. The website is professionally designed and targets general public users including commuters and travelers within the region. The business model focuses on facilitating public transport access through digital and physical ticketing solutions, supported by partnerships such as SwissPass. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

M

mybuxi AG

mybuxi.ch

49

mybuxi AG operates a sustainable on-demand driving service primarily targeting rural areas in Switzerland. The company leverages a mobile app and web platform to provide flexible regional transport solutions, positioning itself as a mobility startup focused on ecological and community-oriented transport. The website reflects a professional and consistent brand image with clear navigation and multilingual support, enhancing accessibility for diverse users. Technically, the site is built on WordPress with Elementor and uses modern libraries such as Swiper.js and Bootstrap, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is comprehensive, including multiple regional emails and a customer hotline, supporting business credibility. Overall, the website is trustworthy and well-positioned but could improve in privacy and security transparency.

G

graubünden Bike

graubuendenbike.org

47

Graubünden Bike is a regional project initiative focused on advancing bike tourism and sustainable mobility in the Graubünden region of Switzerland. The project is positioned as a pioneer in the bike tourism sector, aiming to enhance the region's attractiveness through development of bike offerings, training, and community engagement. The website serves as an information hub with event calendars, news, and project documentation, targeting cyclists, local stakeholders, and tourists. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Matomo analytics, providing a good user experience with mobile optimization and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms. The domain registration is recent but consistent with the project timeline and shows no suspicious patterns. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

Ö

Öpfelchasper GmbH

oepfelchasper.ch

64

Öpfelchasper GmbH is a small Swiss company specializing in the delivery of organic fruits and vegetables to urban customers, including offices and private homes. Their business model centers on eco-friendly bicycle courier delivery, emphasizing bio-quality and CO2-neutral logistics. The company offers subscription services, gift vouchers, and extras to enhance customer experience. Their market position is that of a niche local provider with a strong sustainability focus. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted behind Cloudflare CDN, ensuring good performance and security. The website is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Contact information is transparent and consistent with WHOIS data, supporting business credibility. Overall, the website presents a trustworthy, professional, and user-friendly platform for its target audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and adding incident response contacts to further strengthen security posture.

Radpass Hannover is a small, community-focused organization dedicated to promoting cycling sports and organizing cycling events in Hannover, Germany. The website serves as a hub for event information, registration links, and showcases partner cycling clubs. Technically, the site is built on WordPress with modern plugins for gallery display, GDPR compliance, and lightweight analytics. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the site presents a trustworthy and professional image suitable for its local community audience.

E

eichels GmbH

marathon-hannover.de

45

The ADAC Marathon Hannover website represents a well-established regional sports event organizer specializing in marathon and related running events in Lower Saxony, Germany. The business is operated by eichels GmbH and enjoys strong partnerships with reputable sponsors and regional organizations such as ADAC. The website provides comprehensive event information, registration options, media galleries, and community engagement features, targeting runners, sponsors, and local participants. Technically, the site is built on TYPO3 CMS with a modern yet slightly dated technology stack including Bootstrap 3 and jQuery 3.2.1. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with strong SSL configuration and employs spam protection for email addresses. However, it lacks some advanced security headers and a formal security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is transparent and includes multiple channels. No suspicious or malicious content is detected, and the site is free from adult or NSFW content. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and modernization of the tech stack could further enhance the site's security and resilience.

S

SOLUTRANS

solutrans.fr

63

SOLUTRANS is a prominent biennial trade fair and exhibition dedicated to industrial and urban vehicles, held in Lyon, France. It serves as a global crossroads for professionals in road and urban transport, showcasing innovations in energy transition, digitalization, and regulatory compliance. The event is organized by Comexposium and supported by key industry partners such as Michelin and Aramco. The website provides comprehensive information about the event, exhibitors, conferences, and practical visitor details, supported by a modern technical infrastructure including Sitecore CMS, Bootstrap, and compliance tools like OneTrust.

M

Matthäi

matthaei.de

48

Matthäi is a well-established German construction and infrastructure company with over 90 years of experience. The company operates across multiple sectors including infrastructure construction, building construction, raw materials, building materials, logistics, and disposal services. With a workforce of over 3,500 employees and more than 75 locations, Matthäi holds a strong market position in Germany. The website reflects a mature digital presence with modern technologies, good performance, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and privacy-respecting analytics, though explicit security policies and incident response contacts are not publicly visible. Overall, the domain registration and website content align well, indicating a trustworthy and credible business.

D

DINGFO | Donau-Iller-Nahverkehrsverbund-GmbH

dingfo.de

45

DINGFO is a digital magazine operated by Donau-Iller-Nahverkehrsverbund-GmbH, focusing on public transportation and regional stories within the DING area in Germany. The website serves as an information portal providing news, fun facts, and travel destinations related to the local public transport network. It holds a niche regional market position with a medium-sized audience. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, with integrated cookie consent management via Cookiebot and analytics through Google Analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks some security headers and explicit security policies, which could be improved. Overall, the website is trustworthy, compliant with GDPR, and safe for general audiences.

E

Erich Jaeger GmbH + Co. KG

erich-jaeger.de

60

Erich Jaeger GmbH + Co. KG operates a professional website specializing in electrical connector systems for towing vehicles and trailers, serving the transportation sector primarily in Germany and internationally. The company offers a comprehensive product portfolio including plugs, sockets, adapters, controllers, and cable components. The website is built on TYPO3 CMS and employs modern technologies such as Matomo analytics and Google reCAPTCHA for user tracking and security. Security posture is strong with HTTPS and TISAX certification, though some security headers and privacy policies are missing. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and detailed product information.

D

Donau-Iller-Nahverkehrsverbund-GmbH (DING)

ding.eu

61

Donau-Iller-Nahverkehrsverbund-GmbH (DING) operates as a regional public transportation association in Germany, providing comprehensive transport schedules, ticketing options, and service information for the Donau-Iller region. The website serves as a portal for commuters, students, and travelers, offering quick connection searches, ticket purchase information, and service updates. The company holds a solid regional market position as a transportation authority and service provider.

L

Linfox Armaguard Pty Ltd

jeni.cash

51

Jeni.cash is a professionally designed website representing a cash deposit solution offered by Linfox Armaguard Pty Ltd, a large Australian transportation and cash management company. The service focuses on providing businesses with a secure, flexible, and efficient way to deposit cash without the risks and delays of traditional bank trips. The platform integrates uniquely identified cash bags, an online portal for logging deposits, and scheduled collections, positioning itself as an innovative solution in the cash logistics sector. Technically, the website is built on WordPress with modern plugins and multimedia content, offering good mobile optimization and SEO. Security posture is solid with HTTPS and secure login portals, but lacks visible security headers and privacy compliance documentation. The WHOIS data is limited, lacking registrant details, which slightly reduces trust but aligns with the business's legitimate branding and market presence.

A

Armaguard

armaguard.com.au

55

Armaguard, operating under Linfox Armaguard Pty Ltd, is a well-established enterprise specializing in secure currency supply chain management and technology solutions across Australia, New Zealand, and Southeast Asia. The company holds a strong market position as an industry leader, partnering with major banks, financial institutions, and retailers. Their services encompass currency management, secure transport of precious cargo, and integrated technology solutions, supported by a network of subsidiaries and partners. The website reflects a professional and consistent brand image with good content quality and clear navigation.

I

INFINITI Abu Dhabi

infiniti-abudhabi.com

63

INFINITI Abu Dhabi operates as an official luxury automotive dealership specializing in new and pre-owned SUVs and crossovers under the INFINITI brand. The website targets luxury vehicle buyers in Abu Dhabi and the UAE, offering premium design, performance, and innovation in their vehicle lineup. The business appears to be a medium-sized entity aligned with Nissan Motor Company, leveraging strong brand recognition in the automotive sector. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Adobe Experience Platform, with a professional design optimized for mobile devices and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and explicit security policies. Overall, the website is functional and professional but requires enhancements in privacy, security, and domain registration transparency to strengthen trust and compliance.

E

EICMA

eicma.it

56

EICMA operates as an internationally recognized exhibition organizer specializing in two-wheel vehicles, primarily motorcycles. The website serves as a digital platform to promote their events, provide exhibitor information, and engage enthusiasts and industry professionals. The business is positioned as a key player in the transportation exhibition sector in Italy, targeting a broad audience of motorcycle fans and exhibitors. Technically, the site is built on WordPress with modern SEO and marketing tools integrated, including Yoast SEO, Google Tag Manager, and multiple tracking pixels. The presence of Cookiebot ensures compliance with cookie consent regulations, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and well-optimized for its audience and business goals.

A

Aviation360

aviation360me.com

55

Aviation360 is a specialized aviation media platform providing news, opinions, videos, podcasts, and event information targeting aviation professionals and enthusiasts. The website is built on a modern WordPress infrastructure with popular plugins such as Elementor, WooCommerce, and Yoast SEO, indicating a mature digital presence. Social media integration with YouTube, LinkedIn, and Instagram supports audience engagement. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of key security headers and privacy policies suggests room for improvement. The lack of WHOIS data introduces uncertainty about domain legitimacy, which impacts overall trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and clarifying domain registration details to improve credibility and compliance.

U

UD Trucks

udtrucks.com

73

UD Trucks is a globally active Japanese commercial vehicle solutions provider, specializing in manufacturing and selling trucks across more than 60 countries. The website presents a professional and well-structured digital presence built on Drupal 10, incorporating modern analytics and cookie consent tools to ensure compliance and user tracking. The business targets commercial vehicle buyers and fleet operators, offering truck finder services and vehicle solutions. Despite the lack of publicly available WHOIS data, the website's content and technical infrastructure indicate a mature and legitimate enterprise with a strong market position in the transportation sector. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent, representing an area for improvement.

The website represents the Global Elevator Exhibition (GEE), a major trade fair event dedicated to elevators, escalators, moving walkways, and components, organized by Fiera Milano S.p.A. It targets industry professionals, exhibitors, and visitors interested in the vertical transportation sector. The site provides comprehensive event information, exhibitor services, visitor ticketing, and news updates, positioning itself as a key industry hub in Italy. Technically, the website is built on Adobe Experience Manager (AEM) with modern front-end technologies including Bootstrap, jQuery, and carousel libraries. It integrates Google Tag Manager and Iubenda for analytics and cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and well-structured for user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust but mitigated by the professional presentation and association with Fiera Milano. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business purpose effectively. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity are recommended to enhance trust and security posture.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.

P

Prosegur Brasil

prosegur.com.br

73

Prosegur Brasil is a leading security and cash management services provider operating extensively across Brazil. The company offers comprehensive solutions including cash logistics, intelligent safes, daily deposits, authorized correspondent services, and special cargo transportation. Their target audience primarily includes B2B clients such as small, medium, and large enterprises, especially in finance, retail, industry, and services sectors. The website reflects a strong market position with a large national presence and is part of the global Prosegur group. Technically, the site uses modern technologies such as Google Tag Manager, YouTube API, and a privacy SDK, hosted on Akamai infrastructure, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, with good accessibility and performance metrics. Security posture is solid with HTTPS enforcement and privacy compliance mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.