Transportation security reports

B

Bus de l'Entrepreneuriat - Bienvenue sur le site des Bus de l'Entrepreneuriat pour Tous

bus-tousentrepreneurs.fr

57

The website 'Bus de l'Entrepreneuriat' serves as a public service platform aimed at supporting entrepreneurs in France by providing advice, orientation to partners, financing solutions, workshops, testimonials, events, training, and sponsorships. It positions itself as a regional and national initiative to facilitate business creation and growth, likely supported by Bpifrance. The site is well-structured with a clear focus on entrepreneurship and public support services. Technically, it employs modern frameworks such as Bootstrap and integrates Google Maps API for location-based services, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no explicit contact information or security policies are present, which impacts its compliance and trustworthiness. Security posture is moderate with no detected advanced security headers or incident response contacts. Overall, the site is safe, professional, and targeted at a general audience interested in entrepreneurship support.

The website www.kaiserwagenticket.de is operated by Wuppertal Marketing GmbH and serves as a ticketing and information platform for cultural and historical tours in Wuppertal, Germany. It offers services such as historic Kaiserwagen rides, city tours, and guided walks, targeting tourists and local visitors interested in cultural experiences. The site is well-branded, with consistent design and good content quality focused on its niche market. Technically, the site uses a CMS called itrium .datentechnik, with client-side technologies including jQuery 1.11.0 and a comprehensive accessibility tool from digiAccess, enhancing usability for users with disabilities. Hosting is provided via rzone.de nameservers, indicating a stable infrastructure. Security posture is moderate with HTTPS enabled and secure login forms, but the use of an outdated jQuery version and lack of security headers present potential vulnerabilities. Privacy compliance is basic, with a privacy policy and terms of service present but no visible cookie consent mechanism. Overall, the site is functional, accessible, and trustworthy but could improve security and privacy features.

P

Perinfo

perinfo.eu

56

Perinfo is a French company specializing in software solutions for passenger transport professionals and public transport authorities, with over 36 years of experience. Their offerings include integrated management software for interurban, urban, and technical maintenance activities, complemented by consulting, training, and support services. The company positions itself as a trusted partner in the transportation sector, targeting transport operators and public entities. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, incorporating modern tools such as Slider Revolution and Google Analytics for performance and user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and uses standard analytics scripts but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. The absence of public WHOIS data is consistent with EURid privacy policies for .eu domains and does not raise immediate concerns. Overall, the website reflects a professional and credible business with a solid digital presence, though enhancements in security headers and privacy compliance would strengthen its trustworthiness and regulatory adherence.

A

AutoFrame-FM

kia.md

42

AutoFrame-FM operates as the official distributor of KIA automobiles in Moldova, providing a comprehensive online platform for vehicle sales, service bookings, and customer engagement. The website targets consumers in Moldova interested in KIA vehicles, offering detailed model information, pricing, and promotional offers. The business is positioned as a key player in the Moldovan automotive retail sector with a medium-sized operation founded in 2021. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries. It employs SEO best practices and is optimized for mobile devices, delivering a good user experience. Hosting is provided by a Moldovan hosting provider, consistent with the business location. Analytics tools such as Google Analytics and Ahrefs are used for performance and marketing insights. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks visible security headers and formal security policies. There is no evidence of privacy or cookie policies, which impacts compliance with GDPR and related regulations. Contact information is primarily via web forms, with no explicit emails or phone numbers displayed. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is professional and functional with moderate security posture and compliance gaps. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance trust and regulatory adherence.

K

KIA AUTO AS

kia.ee

61

KIA AUTO AS operates as the official importer and distributor of Kia vehicles in the Baltic region, primarily serving Estonia. The company offers a broad range of Kia models including SUVs, electric vehicles, and passenger cars, supported by a network of 12 official dealerships across Estonia. The website reflects a professional automotive business with a focus on customer engagement through vehicle configuration and comparison tools. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is mobile-optimized and presents a good user experience with clear navigation and branding consistency. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and published security policies or incident response contacts. The extensive use of third-party tracking and advertising services indicates a high level of user data collection, balanced by transparent cookie consent dialogs. Overall, the website is legitimate, professionally maintained, and compliant with regional privacy regulations, though it could improve in explicit security policy disclosures and contact information availability.

K

Kia Canarias

kiacanarias.es

47

Kia Canarias is a regional automotive website dedicated to providing information and services related to Kia vehicles in the Canary Islands. The site offers detailed vehicle specifications, financing options, and dealership locations, targeting consumers interested in Kia automobiles within this region. The website demonstrates consistent branding aligned with the Kia corporate identity and uses modern web technologies including Nuxt.js and third-party marketing tools such as SmartSupp Chat and Evergage. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy policies in the provided content. WHOIS data could not be retrieved due to query restrictions, but the website appears legitimate and professionally maintained. Overall, Kia Canarias presents a trustworthy and functional online presence for Kia's regional operations in Spain.

K

Kia

kia.fi

69

Kia's Finnish website presents a professional and comprehensive digital presence for the automotive brand, focusing on electric and hybrid vehicles with a strong emphasis on a 7-year warranty. The site is built on Adobe Experience Manager and integrates multiple marketing and analytics tools such as Google Tag Manager, Adobe DTM, and Leadoo chat services, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, providing a good user experience with clear navigation and relevant content for the Finnish market. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are not directly visible in the provided content. The absence of WHOIS data is notable but likely due to registry or privacy protections; the domain is consistent with a major global brand. Overall, the site reflects a trustworthy and professional business with moderate user tracking and good compliance practices.

S

SWK AG

schluff-krefeld.de

59

Schluff Krefeld is a heritage railway service operated under the SWK AG umbrella, offering historical steam locomotive rides in Krefeld, Germany. The website targets tourists, families, and local residents interested in cultural and historical experiences. It provides ticket sales, event information, and community engagement opportunities. The business holds a solid local market position supported by community and partner organizations. Technically, the site is built on modern frameworks like React and Next.js, hosted likely via Vodafone IP infrastructure, and integrates privacy compliance tools such as Usercentrics CMP. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is professional, user-friendly, and trustworthy, with moderate user tracking balanced by consent mechanisms.

K

Kia

kia.com

69

Kia's Finnish website serves as a localized portal for the global automotive brand, offering detailed information about their vehicle lineup, including electric and hybrid models, with a strong emphasis on a 7-year warranty. The site targets Finnish consumers interested in purchasing or learning about Kia vehicles, providing tools such as a car configurator, service booking, and dealer locator. The business model focuses on automotive manufacturing and retail, supported by a consistent and professional online presence.

D

DB Fernverkehr AG

bahn.de

69

Deutsche Bahn's website www.bahn.de serves as the primary digital portal for train travel in Germany, offering comprehensive services including ticket booking, travel information, and loyalty programs. The site targets a broad audience of travelers within Germany and Europe, positioning itself as the leading national railway operator. The business model focuses on transportation services with integrated digital ticketing and customer engagement through programs like BahnCard and BahnBonus. The website reflects a mature enterprise with consistent branding and a strong market presence.

P

Postradali.com

postradali.com

45

Postradali.com is a Bulgarian website dedicated to providing information, comparison, and support services for victims of road traffic accidents and their families. The platform aggregates offers from associations, NGOs, and lawyers to help users find legal assistance and claim compensation. The site is focused on the Bulgarian market and is presented in Bulgarian language. Technically, the website is built on WordPress with several plugins for forms, ratings, and filtering. It uses Google Analytics and Adsense for tracking and monetization. However, the site lacks HTTPS, which is a critical security shortcoming. There is no visible security policy or incident response information, and contact details are limited to a web form. The domain is registered since 2015 with consistent data and local hosting, indicating legitimacy. Overall, the website serves a niche audience with relevant content but requires significant security improvements.

Beyond Aero is a small, innovative aircraft manufacturer specializing in electric and hydrogen-powered business jets, aiming to revolutionize private aviation with sustainable technologies. Their flagship product, 'One', is positioned as the world's first electric business aircraft using hydrogen propulsion. The website content is minimal and currently exhibits client-side errors, limiting user experience and content accessibility. Technically, the site uses modern frameworks like Next.js and React, but lacks visible SEO, accessibility, and performance optimizations. Security posture is weak due to missing security headers, absence of privacy and cookie policies, and no visible incident response or vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website requires significant improvements in content quality, security, and compliance to enhance business credibility and user trust.

A

ASEAG

aseag.de

49

ASEAG is the largest mobility service provider in Aachen and the surrounding StädteRegion Aachen, Germany. The company offers comprehensive public transportation services including timetable information, ticket sales, and customer support. The website reflects a well-established public transport business with a clear focus on serving local residents and visitors. ASEAG maintains a strong digital presence with integrated journey planners and departure monitors, leveraging partner services such as auskunft.avv.de. The site is built on TYPO3 CMS and incorporates modern web technologies and analytics tools such as Matomo and Google Tag Manager, ensuring a robust technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, ASEAG's website demonstrates professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible transportation service provider.

The website at westfalenfahrplan.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is hosted on Amazon AWS infrastructure, indicating a professional hosting environment. However, the lack of accessible content severely limits the ability to assess the company's services, market position, or compliance posture. No privacy, cookie, or terms of service policies are detectable, nor is there any contact or incident response information available. The security posture cannot be evaluated due to the absence of content and headers. Overall, the site appears to be blocked or restricted, which significantly impacts trust and usability.

I

InPost sp. z o.o.

inpost.pl

71

InPost sp. z o.o. operates a comprehensive parcel delivery and logistics platform primarily serving individual customers and businesses in Poland. The company is a market leader in parcel lockers (Paczkomat®) and courier services, offering a wide range of shipping options including international shipments and fulfillment services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses Drupal CMS, integrates Google Tag Manager and Didomi for consent management, and employs modern JavaScript frameworks. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data confirms domain legitimacy and long-term operation since 2006. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

NOVA Performance Paragliders is a well-established manufacturer specializing in innovative performance paragliders since 1989. The company holds a strong market position in the transportation and outdoor sports manufacturing sector, offering a wide range of certified paragliding equipment including gliders, harnesses, parachutes, and accessories. Their website reflects a professional and consistent brand image with comprehensive product information and certifications, targeting paragliding enthusiasts and pilots globally. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as JavaScript and SVG graphics. It demonstrates good mobile optimization, SEO practices, and a cookie consent mechanism, indicating a mature digital presence. However, some security best practices like HTTP security headers and explicit incident response contacts are not evident. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR. The risk level is low, but improvements in security headers and incident response transparency are recommended to enhance security posture and trust further.

The website transpole.fr currently returns a 502 Bad Gateway error served by Microsoft Azure Application Gateway, indicating backend server or configuration issues that prevent content delivery. Due to this, no business content, metadata, or contact information is accessible for analysis. The domain is well-established, registered since 1997 with a reputable registrar and consistent WHOIS data, suggesting a legitimate transportation-related business likely operating in France. However, the lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. The hosting on Microsoft Azure indicates a modern cloud infrastructure, but the current outage represents a critical availability risk. Security posture cannot be evaluated due to missing headers and lack of HTTPS confirmation. Privacy and cookie policies are absent, and no contact or incident response information is available. Overall, the site is currently non-functional, resulting in a low AI score and incomplete analysis.

T

TPF Engenharia

tpfengenharia.com.br

42

TPF Engenharia is a well-established multinational engineering consultancy company with over 55 years of experience, primarily operating in Brazil. The company offers a broad range of services including project development, consulting, management, supervision, and innovation solutions, serving sectors such as transportation, energy, and real estate. Their market position is strong, supported by recognized certifications like ISO 9001, 14001, 45001, and Great Place To Work. The website reflects a professional and trustworthy brand with comprehensive content and clear contact information. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations. It employs Google Tag Manager for analytics and has a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, though performance is moderate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some HTTP security headers and a formal security policy or incident response contact. Overall, the security posture is solid with room for improvement in security headers and vulnerability disclosure. The domain WHOIS data aligns well with the business claims, indicating legitimacy and consistency. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include enhancing HTTP security headers, publishing a security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability reporting. These steps will strengthen trust and compliance while maintaining the company's strong market presence.

B

Beemob

beemob.fr

56

Beemob operates as the official public transportation service for the Béziers Méditerranée agglomeration in France, providing bus network plans, route itineraries, schedules, ticketing options, and real-time alerts. The website is designed to serve residents and visitors with accessible and relevant transit information, supported by local government. Technically, the site employs modern web technologies including Bootstrap, jQuery, and a cookie consent management system (tarteaucitron.js), hosted on OVH infrastructure with HTTPS enforced. Analytics are handled via ActiSTAT, a privacy-conscious tool that does not set cookies. Security posture is solid with HTTPS and consent mechanisms, though improvements could be made by adding security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its users.

C

Celebration Tours

westbrew.com

60

Celebration Tours is a small, established tour operator specializing in escorted group motor coach tours primarily departing from the Birmingham, Alabama area. The company offers extended tours and day trips with a focus on customer safety, comfort, and enjoyable travel experiences. The website is built using GoDaddy Website Builder and hosted with Cloudflare DNS services, reflecting a moderate level of technical maturity. The site is mobile optimized and provides clear navigation and relevant content about upcoming tours for 2026. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy policy or terms of service pages found, though a cookie consent banner is present. Contact information is minimal, limited to a phone number, with no email or physical address disclosed. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

S

SKIDATA

skidata.com

66

SKIDATA is a global enterprise specializing in intelligent access and parking solutions for sectors including transportation, sports, entertainment, and hospitality. Their website demonstrates a mature digital presence built on HubSpot CMS, featuring comprehensive product and segment information, customer testimonials, and a focus on integrated solutions via their SKIDATA Connect platform. The technical infrastructure is modern and includes standard marketing and analytics tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The absence of WHOIS data for the domain www.skidata.com is a notable anomaly that impacts trust from a domain registration perspective but does not detract from the professional appearance and content quality of the website. Overall, the site is well-designed, user-friendly, and business credible, with moderate privacy compliance and room for improvement in transparency and security documentation.

T

Truckecopower LTD.

truckecopower.cz

53

Truckecopower LTD. operates a specialized business focused on software tuning and optimization services for heavy vehicles such as trucks and buses, aiming to reduce operational costs and improve engine performance. The company offers a comprehensive suite of services including engine software modifications, GPS-based vehicle monitoring, driver training for economical driving, and particulate filter cleaning. Their market position is that of a niche provider within the transportation sector in the Czech Republic, targeting fleet operators and commercial vehicle owners. Technically, the website is built on a modern stack utilizing HTML5, CSS3, Bootstrap, and jQuery, with integrations for Google Tag Manager, Facebook Pixel, and Pipedrive forms for lead capture. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the website content and external partner references support legitimacy. Overall, the website presents a professional and trustworthy front for a small specialized business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture.

X

XTUNING s.r.o.

dpf-xtuning.cz

49

XTUNING s.r.o. operates the website dpf-xtuning.cz, providing specialized cleaning services for diesel particulate filters (DPF) primarily targeting vehicle owners with diesel engines in the Czech Republic. The company positions itself as a niche service provider focusing on emission compliance and vehicle inspection readiness through professional DPF cleaning. The website is well-structured, with clear service descriptions and a professional design that supports user engagement and conversion via contact forms and ordering options. The business model revolves around service delivery with partnerships in related automotive performance sectors.

P

Port de La Grande Motte (34)

portdelagrandemotte.fr

54

Port de La Grande Motte is the official maritime port authority website serving the La Grande Motte region in France. It provides comprehensive information and services related to port operations, maritime regulations, events, and local tourism. The website targets boaters, tourists, and local residents, positioning itself as a trusted source for port-related information. The business model is focused on public service and maritime transportation facilitation. Technically, the website is built on WordPress CMS with modern plugins such as Advanced Custom Fields Pro and Rank Math SEO. It employs jQuery and integrates Google Translate for multilingual support. The site demonstrates good digital maturity with accessibility features, SEO optimization, and moderate performance. Analytics are handled via Matomo with privacy-conscious settings. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or vulnerability disclosure page, which could enhance its security posture. The WHOIS data is not publicly available, likely due to privacy protection, but the website's official nature and content consistency support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include publishing a security policy, adding vulnerability disclosure mechanisms, and enhancing incident response visibility to further strengthen trust and compliance.

E

Eiffage

eiffagerail.com

58

Eiffage Rail is a large French company specializing in the design, construction, maintenance, and management of railway infrastructure both in France and internationally. It operates as a key partner to public and private railway transport operators, offering a comprehensive range of services including track construction, renewal, catenary systems, safety, and equipment maintenance. The company is part of the larger Eiffage group, a well-established construction and infrastructure conglomerate with multiple subsidiaries. The website reflects a professional and consistent corporate identity, emphasizing certifications and trustworthiness. Technically, the website uses a modern tech stack including jQuery, video APIs, Google reCAPTCHA, and consent management tools, built on the Jahia CMS platform. It is mobile-optimized with good SEO and basic accessibility features. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent, though explicit security headers and incident response information are lacking. The WHOIS data is unavailable, which raises some concerns about domain registration transparency; however, the website content and branding strongly align with the legitimate Eiffage Rail business. No blocking or WAF challenges were detected, and the site is fully accessible. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and professionally maintained, with room for improvement in security policy transparency and accessibility. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, improving accessibility compliance, and providing explicit data protection officer contact details to strengthen trust and compliance.

E

Eiffage

eiffagegeniecivil.com

58

Eiffage Génie Civil is a division of the Eiffage Group specializing in the design, construction, and maintenance of civil engineering infrastructures both terrestrial and maritime across France, Europe, and internationally. The company offers a broad range of services including demolition, depollution, deep foundations, nuclear industrial civil engineering, water and environmental engineering, pipelines, and maritime works. It targets business and public sector clients requiring large-scale infrastructure projects. The website reflects a large enterprise with consistent branding and multiple subsidiaries, indicating a strong market position in the transportation and construction sectors. Technically, the website employs modern JavaScript libraries such as jQuery, YouTube and Vimeo APIs, Google reCAPTCHA, and analytics tools like Piano Analytics and TagCommander. It is built on the Jahia CMS platform, optimized for mobile, and includes accessibility features. SEO and metadata are well implemented, with Open Graph and JSON-LD structured data present. Cookie consent and privacy policies are implemented, indicating compliance with GDPR. From a security perspective, the site uses HTTPS with good SSL configuration and includes reCAPTCHA for form protection. However, explicit security headers like Content-Security-Policy and X-Content-Type-Options are not detected. No explicit security or incident response policies or vulnerability disclosure mechanisms are found. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and branding suggest a legitimate enterprise. Overall, the website is professional and trustworthy with good technical and privacy compliance. The lack of WHOIS data and explicit security policies are areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and clarifying domain registration information.

E

Eiffage

eiffageroute.com

57

Eiffage Route is a prominent French road construction company specializing in sustainable and innovative infrastructure solutions. The website presents a professional and comprehensive overview of their services, subsidiaries, and commitment to ecological transition. The digital infrastructure uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a concern but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, trustworthy, and aligned with corporate standards.

X

XTUNING LTD. - pobočka

xtuning.cz

50

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

E

Eiffage

aprr.com

60

APRR is a major motorway concession operator in France, managing a 2,410 kilometer network focused on sustainable and efficient mobility solutions. It operates under the umbrella of the Eiffage group, a large construction and infrastructure conglomerate. The website reflects a mature digital presence with comprehensive content about their services, sustainability initiatives, and corporate governance. Technically, the site uses modern JavaScript libraries, integrates video APIs, and employs cookie consent management tools, indicating a good level of digital maturity. Security-wise, HTTPS is enforced and reCAPTCHA is used, but explicit security headers and policies are not evident, suggesting room for improvement. The absence of WHOIS data is unusual but the website's branding and social media presence support its legitimacy. Overall, APRR's website is professional, compliant with privacy regulations, and serves its audience effectively.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

C

CM Control, s.r.o.

cmcontrol.sk

50

CM Control, s.r.o. is a Slovakian company specializing in vehicle technical inspections, emission controls, and originality checks. Established in 2007, it serves both individual vehicle owners and large fleets, offering convenient services including an interactive booking system and customer amenities. The company holds ISO 37001 certification, demonstrating commitment to anti-corruption standards, which enhances its market credibility. Technically, the website employs common JavaScript libraries such as jQuery and jQuery UI, with a moderate performance profile and basic mobile optimization. The site lacks a CMS and advanced SEO or accessibility features but maintains a consistent and professional design. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain is well-registered with DNSSEC enabled and a long registration history, supporting legitimacy. However, the website lacks visible HTTPS enforcement and security headers, and no privacy policy or terms of service are published, representing compliance and security gaps. The cookie consent mechanism is implemented, but overall privacy compliance could be improved. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced security measures, privacy documentation, and technical improvements to strengthen compliance and user trust.

I

ilévia

ilevia.fr

63

ilévia operates as the primary public transportation provider for the Métropole Européenne de Lille, offering comprehensive bus, metro, tram, and bike-sharing services. The website serves residents and visitors with route planning, schedules, ticketing, and news about local events, positioning ilévia as a key mobility facilitator in the region. The digital presence is modern, leveraging Next.js and React frameworks, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, security headers, and script nonce usage, though the absence of WHOIS data and explicit security policies slightly reduce transparency. Overall, ilévia's website reflects a professional, trustworthy, and user-centric platform supporting urban mobility.

MKW-air, s.r.o. is a small Czech aviation company specializing in sightseeing flights, observation flights, introductory flights, photo flights, and ultralight pilot training based at Plzeň - Letkov airport. The company has been operating since 2008 and presents itself as a local aviation service provider with a focus on the Western Czech region. The website content is primarily in Czech and targets aviation enthusiasts, tourists, and prospective pilots. Technically, the website uses basic HTML 4.0 Transitional with CSS and JavaScript, including Google Analytics for user tracking. The site lacks modern CMS or frameworks and shows basic mobile and accessibility features. Security posture is moderate with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are published, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but would benefit from modernization and improved security and privacy compliance.

M

M+H

mh.cz

58

M+H is a Czech Republic based small business specializing in automotive services including chiptuning, decarbonization, and car media systems. The company claims 28 years of experience, positioning itself as an established player in the automotive enhancement sector. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and use of reCAPTCHA and cookie consent, but lacks visible security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding appear professional and consistent. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.

The website smartwings.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to the site's content. This prevents extraction of business, contact, or policy information from the site. The domain is registered since 2003 with a reputable registrar and uses Cloudflare for DNS and security services. However, no privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions accessible. The technical infrastructure relies on Cloudflare's security and CDN services, but the lack of accessible content limits the ability to assess digital maturity or user experience. Security posture is partially observable through the use of Cloudflare's WAF and Turnstile challenge, but no additional security headers or policies are evident. Overall, the site appears legitimate based on domain age and registration data, but the blocking mechanism significantly limits analysis and lowers the trust and quality scores.

I

IDEA

groupe-idea.com

52

IDEA is a well-established French logistics company specializing in industrial logistics, transport, customs, industrial packaging, production delegation, and consulting for flow management. The company serves diverse sectors including aeronautics, energy, naval, defense, agro-food bulk, manufacturing, health, and construction. The website is professionally designed using Drupal 8 and modern JavaScript libraries, providing a rich user experience with clear navigation and mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and monitoring domain registration details.

B

Boucles de la Mayenne - Crédit Mutuel | Course cycliste Pro Series

bouclesdelamayenne.fr

56

The website www.bouclesdelamayenne.fr represents a professional cycling event known as Boucles de la Mayenne - Crédit Mutuel, part of the UCI Pro Series calendar. It targets cycling enthusiasts and partners, offering event promotion and media broadcasting services. The site is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data from the AFNIC server raises concerns about domain registration transparency, although the website content and branding appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and regulatory adherence.

M

Mobibus

tisseomobibus.com

38

Tisséo Mobibus is a specialized transportation service catering to persons with reduced mobility in the Toulouse metropolitan area, operating under the Tisséo Collectivités umbrella. The website provides comprehensive information about their on-demand transport services, reservation systems, tariff details, and accessibility support. The digital presence is well-structured, leveraging WordPress with modern plugins and frameworks to deliver a user-friendly experience. The site is optimized for mobile and accessibility, reflecting the organization's mission. Security posture is solid with HTTPS and cookie consent management, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business and technical indicators suggest a trustworthy public service entity.

T

Tisseo Ingénierie

tisseo-ingenierie.fr

45

Tisseo Ingénierie is a French public local company specializing in the design and realization of sustainable transport infrastructure projects, primarily serving local authorities in the Toulouse metropolitan area. The company positions itself as a key regional player in transport engineering, focusing on innovative and environmentally friendly mobility solutions. Their website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The site is well-designed, mobile-optimized, and provides clear navigation and relevant project information. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data slightly reduces domain trust but does not significantly impact overall legitimacy given the professional content and branding. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain transparency.

D

dacia

dacia.ma

71

The website www.dacia.ma serves as the official Moroccan portal for the Dacia automotive brand, part of the Renault Group. It provides comprehensive information on vehicle models, pricing, financing options, after-sales services, and dealer locations. The site targets consumers in Morocco interested in purchasing new or used Dacia vehicles, offering a user-friendly interface with vehicle configurators and test drive booking features. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Google Analytics, ensuring a responsive and well-structured user experience. Security measures such as HTTPS and security headers are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, reducing trust scores despite the professional presentation and strong brand alignment. Overall, the site is well-designed and functional, with room for improvement in transparency and direct contact information to enhance trust and compliance.

K

Kolektor

kolektorgradbenistvo.si

46

Kolektor Gradbeništvo is a construction-focused branch of the Kolektor group, operating primarily in Slovenia with a strong emphasis on infrastructure, high-rise buildings, and reinforced concrete structures. The company leverages its subsidiaries Kolektor Koling and Kolektor CPG to deliver comprehensive construction engineering services. The website reflects a mature business with a clear market position in the regional construction sector, targeting industry clients and potential employees. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and documented security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

O

ONERA

onera.fr

60

ONERA is the French national aerospace research center, established in 1995, with a strong market position as a leading government research entity in aerospace. The website reflects a mature digital presence with comprehensive content targeting researchers, industry professionals, and academic audiences. Technically, the site uses Drupal 10, Bootstrap 5, and Matomo analytics, ensuring modern standards and good performance. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting ONERA's reputation as a credible research institution.

S

SNCF Group

groupe-sncf.com

58

SNCF Group is a leading global player in low-carbon mobility, specializing in passenger transport and freight logistics. The company operates internationally with a large workforce and a diversified portfolio of subsidiaries including SNCF SA, Keolis, and GEODIS. Their business model focuses on sustainable transportation solutions and mass transit services, positioning them as a world leader in their sector. The website reflects a mature digital presence with comprehensive content targeting various stakeholders such as job seekers, investors, journalists, suppliers, and travelers. Technically, the site leverages modern frameworks like Next.js and React, integrates advanced consent management and bot protection, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS and bot mitigation, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability for trust enhancement.

R

Renault

renew.ma

46

Renew Maroc operates as an official online platform for certified used Renault vehicles in Morocco, offering a comprehensive range of services including vehicle sales, financing, trade-in, assistance, and insurance. The website is professionally designed with clear navigation and targets Moroccan consumers interested in purchasing certified used Renault cars. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and domain registration transparency, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the platform presents a trustworthy and professional presence in the Moroccan automotive market.

Yamaha Motorsports USA operates a professional and well-branded website focused on providing information about Yamaha motorsports products, dealer locations, pricing, and community engagement. The site targets motorsports enthusiasts and Yamaha product owners in the USA, positioning itself as a key player in the transportation sector with a long-established presence since 2001. The business model revolves around retail and brand experience enhancement through racing, training, and community programs. Technically, the website employs modern JavaScript libraries, video embedding, and accessibility tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain management best practices, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional, with extensive analytics and advertising integrations.

R

renault

renault.dz

74

Renault Algeria operates an official regional website dedicated to showcasing and selling new Renault vehicles, as well as providing after-sales services including maintenance, warranty, and service appointments. The website targets the general Algerian public interested in Renault automobiles and related services. It reflects the brand's strong market position as a major automotive player in Algeria, supported by the global Renault Group. The site offers vehicle configurators, distributor locators, and promotional offers, enhancing customer engagement and service accessibility. Technically, the website employs modern web technologies such as React, integrates Google Analytics and Tag Manager for tracking, and uses OneTrust for cookie consent management. The site is responsive and optimized for mobile devices, with good SEO and accessibility basics. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly visible security policies or incident response information. Privacy compliance is partially addressed through cookie consent, but explicit privacy and terms of service documents are not found. Overall, the website is professional, trustworthy, and well-branded, though it could improve transparency by publishing detailed privacy and security policies and providing clear contact information. The domain registration details align well with the Renault brand, confirming legitimacy and consistency.

R

renault

renault.lu

69

Renault Luxembourg operates as the official regional website for Renault in Luxembourg, providing comprehensive information on new vehicles including electric and hybrid models. The site targets consumers interested in purchasing Renault vehicles and offers configurators and promotional content. Technically, the site is built using modern React frameworks and integrates privacy compliance tools such as OneTrust for cookie consent, alongside Google Analytics for user tracking. The security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment, but the professional branding and content strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and compliant with GDPR, making it a reliable source for Renault vehicle information in Luxembourg.

R

renault

renault.ma

70

Renault Maroc operates a professional and comprehensive automotive website targeting the Moroccan market, offering new vehicles including electric, hybrid, and utility models. The site provides extensive information on financing, insurance, after-sales services, and vehicle accessories, positioning Renault as a major automotive brand in Morocco. Technically, the website is built on modern frameworks like React, uses optimized media formats, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trustworthiness, but the overall site professionalism and branding consistency support legitimacy. Strategic recommendations include publishing security policies and improving transparency on contact information to enhance trust and compliance.

L

La Tribune Events

parisairforum.fr

39

The Paris Air Forum website is a professionally designed event platform managed by La Tribune Events, focusing on aerospace, technology, and innovation sectors. It serves as a hub for industry professionals to access information about the 2025 edition of the forum, including registration, exhibitors, and networking opportunities. The site leverages a mature technical infrastructure based on WordPress and integrates multiple third-party tools for analytics, marketing, and user engagement. Security posture is adequate with HTTPS and monitoring tools in place, though explicit security policies and headers could be improved. Privacy compliance is minimal, lacking visible privacy and cookie policies. Overall, the site presents a moderate risk profile with good business credibility and technical implementation.

O

Outdoor Access Initiative

yamahaoai.com

61

The Outdoor Access Initiative (OAI) website serves as a platform supporting grassroots efforts to protect and improve access to public lands for motorized and outdoor recreation. The organization operates as a small non-profit focused on advocacy, education, and grant funding to promote responsible use of off-highway vehicles and conservation goals. The website is built on WordPress with standard plugins for SEO and analytics, including Yoast SEO, Slider Revolution, Google Analytics, and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy within its niche but would benefit from improved privacy disclosures and security enhancements.