Transportation security reports

P

Porsche Inter Auto CZ spol. s r.o.

porsche-brno.cz

11

Porsche Inter Auto CZ spol. s r.o. operates as a major authorized automotive dealership and service provider in the Czech Republic, specializing in Volkswagen, Audi, Škoda, and Porsche brands. The company is part of the larger Porsche Inter Auto group based in Austria, which is a leading automotive sales and service entity in Europe. Their website showcases a comprehensive portfolio of new and used vehicles, service offerings, and accessories, targeting customers seeking premium automotive products and services. The site is professionally designed, mobile-optimized, and integrates modern web technologies such as Nuxt.js and Google Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, although some security headers could be improved. Privacy compliance is well addressed with accessible GDPR and cookie policies. Overall, the website reflects a mature digital presence aligned with the company's market position and business model.

Les Artisans Déménageurs is a French-based moving service platform operating under the parent company Bemove. It offers a comprehensive network of over 300 professional moving partners across France and Europe, providing users with tools such as moving volume calculators, detailed guides, and a streamlined process to request and compare moving quotes. The website is well-positioned as a leading service in the transportation sector, targeting individuals and businesses planning moves within France and internationally. The business model focuses on lead generation and connecting customers with certified professional movers.

U

U Logistique

u-logistique.com

9

U Logistique is a large French logistics company serving the Coopérative U retail cooperative. The company specializes in transport logistics, warehouse management, and supply chain expertise, operating 27 sites and managing millions of parcels annually. The website reflects a professional and consistent brand presence with clear business focus and recruitment efforts. Technically, the site is built on WordPress with modern SEO and analytics tools, including Matomo for privacy-conscious tracking. Security posture is good with HTTPS and cookie consent implemented, though additional security headers and explicit policies are recommended. The absence of WHOIS domain registration data is a concern for domain legitimacy and should be investigated. Overall, the site is trustworthy and well-maintained but could improve transparency and security documentation.

M

motoTrasy.com - cestování na motorce

mototrasy.com

40

motoTrasy.com is a niche web platform dedicated to motorcycle enthusiasts primarily in the Czech Republic region. It provides a community-driven environment where users can share motorcycle routes, interesting places, and multi-day trips. The website offers user registration and login features to personalize content sharing. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11.2, jQuery UI, and plugins like Nivo Slider and Fancybox, alongside modern mapping libraries like OpenLayers. Google Analytics is employed for user tracking, but no visible cookie consent or privacy policies are present, indicating limited privacy compliance. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated libraries with known vulnerabilities. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and partner links suggest a legitimate community platform. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

U Location is a French vehicle and festive equipment rental service affiliated with the Super U and Hyper U retail brands. The company operates a large network of over 780 agencies across France, offering car rentals, utility vehicles, and festive materials. The website is professionally designed, mobile-optimized, and provides a comprehensive store locator to facilitate customer access. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and is built on the Jahia CMS platform. Security-wise, the site enforces HTTPS and includes CSRF protection scripts but lacks visible security headers and published security or privacy policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

R

renault

renault.fr

79

Renault France operates a comprehensive and professionally designed website dedicated to showcasing and selling new vehicles, including electric, hybrid, and utility models. The site targets a broad audience of vehicle buyers primarily in France, reflecting Renault's position as a major automotive brand. The website leverages modern web technologies such as React, Google Analytics, and OneTrust for cookie consent, ensuring a smooth user experience and compliance with privacy regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is typical for AFNIC-managed domains and does not detract from the site's legitimacy. Overall, the site demonstrates high professionalism, good technical implementation, and solid privacy compliance.

G

GLOBDATA a.s.

parksimply.cz

52

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

P

Průvodce Koloběhem

pruvodce-kolobehem.cz

53

Průvodce Koloběhem operates as a specialized content platform providing the largest database of scooter routes primarily focused on the Czech Republic and Europe. The website offers detailed trip descriptions and navigation aids for mobile users, targeting outdoor enthusiasts and scooter riders. The business model centers on content provision and partnerships with related companies such as Kostka Koloběžky and Kudyznudy.cz, enhancing its market position as a leading resource in its niche. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is managed via Webflow's CDN and Amazon S3 for static assets, ensuring moderate performance and good mobile optimization. However, accessibility features are basic and there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. It integrates common tracking and retargeting services but lacks explicit cookie consent banners and security policies. The WHOIS data is privacy protected, which is reasonable for this business type, though it reduces transparency. No critical vulnerabilities or security incidents are evident from the analysis. Overall, the website presents a professional and trustworthy front with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance its security posture and user trust.

V

Vendée U Pays de la Loire

vendee-u.com

55

Vendée U Pays de la Loire is a regional French cycling team competing in Division Nationale 1, focusing on sports promotion and fan engagement. The website is professionally designed using the Wix platform, featuring modern JavaScript technologies and polyfills to ensure compatibility across browsers. The site provides relevant content about the team, news, and programs, targeting cycling enthusiasts and regional supporters. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears legitimate and consistent with the business identity. Security posture is moderate with HTTPS implied and use of Sentry for error monitoring, but lacks explicit security headers and privacy policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

M

Mooj ! Le réseau Mobilités de Mauges Communauté

mooj.fr

51

Mooj ! Le réseau Mobilités de Mauges Communauté is a regional public transportation service operated by the local community of Mauges Communauté in France. The website serves as an information portal for residents and commuters, offering details on regular bus lines, school transport, transport on demand, train connections, carpooling, and electric bike rental and purchase aid. The service is positioned as a key regional mobility provider, supporting sustainable and accessible transportation options for the community. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Yoast SEO, Matomo Analytics, and MailPoet for marketing. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with common libraries like jQuery and Slick Carousel used for UI components. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy page, vulnerability disclosure, and incident response contact information, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with its public service mission. The absence of WHOIS data due to privacy protection is not unusual for such entities and does not detract from the site's legitimacy. Strategic recommendations include publishing security policies and improving transparency around incident response to further strengthen security posture and user trust.

Parkovacilistek.cz is a Czech Republic based website operated by Erika, a.s. and parent company GLOBDATA a.s., providing mobile parking payment solutions across numerous Czech cities. The platform offers services including SMS parking payments, mobile applications ParkSimply and SEJF, and virtual parking tickets, targeting motorists seeking convenient parking payment methods. The website demonstrates a moderate level of digital maturity with ASP.NET backend, jQuery frontend, and basic SEO and accessibility features. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is legitimate, well-established, and trusted within its niche but would benefit from enhanced privacy and security measures.

G

GLOBDATA a.s.

globdata.cz

62

GLOBDATA a.s. is a Czech company specializing in ICT services for public transport and municipal services, positioning itself as a leader in this sector within the Czech Republic. The company offers a range of services including contactless mobile payments, SMS services, voice services, and comprehensive ICT support. The website reflects a professional business presence with clear service descriptions and a focus on innovation in payment and ticketing solutions. Technically, the website employs modern analytics and tracking tools such as Google Analytics and Google Tag Manager, and it is mobile-optimized with a responsive design. However, the absence of WHOIS data and lack of explicit privacy and cookie consent mechanisms indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage implied but no visible security headers detected, and no forms or sensitive data collection points on the homepage reduce immediate risk. Overall, the site is functional and professional but would benefit from enhanced security headers, privacy compliance, and clearer contact information to improve trust and regulatory adherence.

E

Zážitkový vlak KDS – Pronajímáme vlakovou soupravu a motorový vůz, které umožňují klientům prožít večírek originálním způsobem na kolejích. Nabízíme služby eventové agentury, jejímž hlavním cílem je nenechat klienta na holičkách.

event-zazitkovyvlak.cz

55

The website event-zazitkovyvlak.cz represents a small Czech business specializing in the rental of train sets and motor vehicles for unique event experiences, alongside event agency services. The business targets clients looking for original party venues on rails, positioning itself as a niche provider in the transportation and event management sectors. The website is built on WordPress with Elementor, indicating a moderate level of digital maturity and ease of content management. The presence of Cookiebot and Google Tag Manager shows awareness of privacy and analytics needs, although no explicit privacy policy or terms of service pages were found, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and incident response information. Overall, the website is functional and professional but could improve in privacy and security transparency.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

M

MVE Sarl

mve.fr

46

MVE Sarl operates a website focused on the sale of used construction and public works equipment, targeting businesses and professionals in the construction sector primarily in France. The company has a long-standing domain registered since 1999, indicating an established presence in the market. The website uses WordPress with WooCommerce for e-commerce functionality and integrates SEO and analytics tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is modern but lacks some advanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but no published security or incident response policies were found. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

I

Iziflo

iziflo.com

9

Iziflo is a specialized software solution designed for multi brand car dealers, offering an integrated suite of applications to manage sales, processing, logistics, and customer relationship management. The website presents a professional and consistent brand image, targeting automotive dealerships and related business teams. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Analytics, and Google Tag Manager, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are missing. The absence of WHOIS data raises concerns about domain legitimacy, impacting overall trust. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and business-focused but would benefit from enhanced transparency and security documentation.

S

SEJF

sejf.cz

68

SEJF operates a modern mobile application platform focused on cashless payments for public transport tickets, parking, and entry tickets primarily in the Czech Republic. The company positions itself as a leading provider in this niche, offering a wide variety of payment options and a user-friendly experience. The website reflects a mature digital presence with professional design, clear content, and strong branding consistency. Technically, the site leverages modern frameworks such as Next.js and React, integrates with Cookiebot for privacy compliance, and uses Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is typical for CZ NIC domains and does not detract from the site's legitimacy given the professional presentation and compliance with GDPR. Overall, SEJF demonstrates a solid business and technical foundation with room for enhanced security transparency and incident response readiness.

D

DAVE LOG s.r.o.

davelog.cz

41

DAVE LOG s.r.o. is a Czech Republic based logistics company specializing in international and domestic freight forwarding and transport services. Their offerings include road transport, express delivery, air and sea freight, and specialized transport solutions. The website is professionally designed, targeting businesses and individuals requiring comprehensive logistics services. The company emphasizes building long-term relationships and customer satisfaction. Technically, the website uses modern web technologies such as jQuery and Fancybox, with good mobile optimization and SEO practices. However, there is no detected CMS or hosting provider information, and performance is moderate. Security posture is limited due to absence of HTTPS verification in the provided data, lack of security headers, and no published privacy or cookie policies. The WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is accessible and safe but would benefit from improved security and compliance transparency.

K

Kolofix

kolofix.cz

49

Kolofix.cz operates as a professional bicycle repair service with multiple branches and mobile service points across the Czech Republic. The company specializes in servicing all types and brands of bicycles, including electric bikes, and offers an online booking system for customer convenience. With over 65,000 completed services and a network of 15 branches plus additional points, Kolofix holds a strong market position in the Czech cycling service industry. The website is well-structured, providing clear service descriptions, customer testimonials, and multiple contact channels, enhancing user trust and engagement. Technically, the site employs modern web technologies including jQuery, Google Fonts, Swiper.js, and integrates analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager. Hosting is provided by Active24, a reputable Czech hosting provider. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although the site lacks explicit security policies and incident response contacts. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, reflecting a mature digital presence for a medium-sized transportation service business.

The website www.trebicnakole.cz serves as a comprehensive cycling portal for the city of Třebíč, Czech Republic. It provides valuable information for cyclists including transport safety, tourism routes, equipment advice, and local cycling services. The site is supported by regional government and partner organizations, positioning it as a trusted local resource for cycling enthusiasts and commuters. The content is well-structured, professionally designed, and targeted primarily at local cyclists and tourists interested in exploring Třebíč by bike. From a technical perspective, the site employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Remodal. Google Tag Manager and CookieScript are used for analytics and cookie consent management, indicating a moderate level of digital maturity. The site is mobile optimized and SEO-friendly, though some technologies like jQuery are outdated and could benefit from modernization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. The cookie consent mechanism is robust and GDPR compliant, with detailed cookie categorization and user controls. However, the absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were found, but updating libraries and adding security headers would improve security. Overall, the website is a valuable community resource with good content quality and privacy compliance. The main risk lies in the lack of domain registration transparency and some technical debt. Strategic recommendations include verifying domain registration, upgrading outdated libraries, implementing security headers, and enhancing contact information availability to strengthen trust and security posture.

R

renault

renew.auto

71

The website fr.renew.auto/dispatch.html serves as a dispatch landing page for Renault's Renew used car platform, facilitating redirection to country-specific subdomains. Renault, a well-established automotive manufacturer, leverages a modern React-based web infrastructure with integrations such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. The site demonstrates good technical maturity with HTTPS enforcement, service worker usage for PWA capabilities, and structured data for SEO. Security posture is solid with secure cookies and reCAPTCHA integration, though improvements like CSP headers and explicit security policies could enhance defenses. Privacy compliance is evident through comprehensive legal and cookie policies, aligning with GDPR requirements. Overall, the site is professional, trustworthy, and well-branded, targeting general consumers interested in used Renault vehicles across multiple European countries.

M

mobilize

mobilize.es

66

Mobilize is a brand focused on providing electric mobility services in Spain, including 100% electric vehicles, charging solutions, and flexible mobility options such as rentals and subscriptions. The website is professionally designed, mobile-optimized, and leverages modern web technologies including React and CDN hosting by Renault Group. Privacy compliance is strong with integrated cookie consent mechanisms and clear privacy policies. Security posture is good with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are not published. WHOIS data for the domain is unavailable due to .es domain query restrictions, limiting full domain trust assessment. Overall, Mobilize presents a credible and professional digital presence aligned with Renault Group's branding.

R

Renault Group

renault.com

75

Renault Group is a major multinational automobile manufacturer headquartered in France, offering a wide range of automotive products and services. The website serves as the official corporate portal, providing information on the group's activities, brands, sustainability efforts, investor relations, and career opportunities. The site targets a broad audience including consumers, investors, job seekers, and industry stakeholders. Technically, the website is built using modern web technologies such as React and Next.js, with integrations for analytics and cookie consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site employs HTTPS and standard security headers, with a cookie consent mechanism indicating compliance with privacy regulations. However, the absence of WHOIS data and explicit security or incident response policies represents a gap in transparency. Overall, the website is professional, trustworthy, and well-maintained, but could improve by publishing detailed security policies and clarifying domain registration details.

H

Hortim-International, spol. s r.o.

hortim-kariera.sk

62

Hortim-International, spol. s r.o. operates a professional career portal focused on transportation and logistics job opportunities primarily in the Czech Republic and Slovakia. The website serves as a recruitment platform for Hortim Group companies, listing active job positions with detailed descriptions and locations. The company appears to be a medium-sized regional employer with a stable workforce and a clear focus on employee satisfaction and retention. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Slick Carousel, and SimpleLightbox. It employs Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing search engine visibility. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Privacy compliance is strong, with clear user consent and data protection information. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. The lack of WHOIS data due to privacy protection does not detract significantly from legitimacy, given the consistent business information and domain usage. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining transparency in data retention practices.

R

REGIO AUTO, spol. s r.o.

regioauto.cz

58

REGIO AUTO, spol. s r.o. is an authorized automotive dealership specializing in Fiat, Jeep, Alfa Romeo, and Fiat Professional vehicles, operating primarily in the Hradec Králové region of the Czech Republic. The company offers new and used car sales, financial services, authorized servicing, and original spare parts, positioning itself as a trusted regional dealer with a professional online presence. The website reflects a medium-sized business with a clear focus on automotive retail and service, targeting general consumers interested in these vehicle brands. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Google Fonts, and various JavaScript libraries for galleries and popups. It uses the EasyWeb CMS platform and integrates tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security or incident response policies. Cookie consent mechanisms are implemented, indicating some privacy compliance, but no terms of service or vulnerability disclosure information is present. The absence of WHOIS data for the domain reduces trust in domain legitimacy, though the website content and business information appear professional and consistent. Overall, the website is functional, professional, and safe for general audiences, but improvements in security posture, domain transparency, and compliance documentation are recommended to enhance trust and resilience.

B

Boels Česká republika s.r.o.

boels.cz

66

Boels Česká republika s.r.o. is a prominent equipment rental company specializing in tools and construction machinery, serving primarily the Czech market. The company offers a wide range of over 2500 products and maintains a strong branch network, positioning itself as a leading player in the construction and transportation sectors. The website is professionally designed, localized in Czech, and provides clear navigation to various product categories and services including onsite rental, lease, and sales. Technically, the site leverages modern frameworks such as Angular and integrates security and privacy tools like reCAPTCHA and Cookiebot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public security policy or incident response contact is noted. The missing WHOIS data is a concern for domain legitimacy but is offset by the professional web presence and verified social media channels. Overall, the site demonstrates a high level of business credibility and technical sophistication with room for improvement in transparency and incident readiness.

Floya is a Brussels-based transportation app that consolidates multiple mobility services into a single platform, enabling users to plan, book, and pay for various transport modes including bikes, public transit, taxis, and shared vehicles. The website demonstrates a mature digital presence with professional design, strong SEO, and integration of modern technologies such as WordPress CMS, Google Tag Manager, and consent management tools. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Floya presents a trustworthy and user-friendly service for urban mobility in Brussels, supported by reputable partners including STIB-MIVB and Brussels Mobility.

R

renault

renault.es

69

Renault España operates as the official Spanish website for Renault, a major automotive manufacturer offering a wide range of vehicles including electric, hybrid, and commercial models. The site targets general consumers in Spain interested in purchasing new vehicles, providing detailed vehicle information, configuration options, and stock availability. The website demonstrates a high level of digital maturity with modern technologies such as React, optimized images, and integration of Google Analytics and Tag Manager for analytics and marketing purposes. Security measures are robust with HTTPS enforcement and security headers, alongside a cookie consent mechanism ensuring compliance with privacy regulations. However, explicit privacy policies, terms of service, and clear contact information are not found in the provided content, representing areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience.

C

CEiiA

ceiia.com

67

CEiiA is a Portuguese engineering and product development center specializing in high-tech industries such as mobility, aeronautics, and space. The company focuses on creating sustainable technologies and collaborates with global partners to develop innovative products and services. Their website reflects a professional and modern digital presence, showcasing their projects, news, and market sectors clearly and attractively. The technical infrastructure is built on Webflow with integrations for analytics and cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. Overall, the website is trustworthy and well-maintained, though the absence of WHOIS data introduces some uncertainty about domain registration transparency.

G

Grand Automotive East Kft.

omodajaecoo-skladem.cz

63

The website omodajaecoo-skladem.cz serves as an online platform showcasing the inventory of Omoda and Jaecoo vehicles available through authorized dealers primarily in the Czech Republic. Operated by Grand Automotive East Kft., the site targets automotive customers seeking new and demo vehicles with immediate availability. The platform facilitates lead generation through inquiry and test drive request forms, supported by a modern technical stack including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA for security. The site demonstrates good content quality, professional design, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and anti-bot measures, though explicit security policies and incident response contacts are absent. WHOIS data presents inconsistencies, notably a future domain creation date, which warrants verification but does not detract from the overall legitimacy of the business presence. Strategic recommendations include enhancing security transparency, adding incident response information, and correcting WHOIS records to improve trust.

Cargo-Hortim, spol. s r.o. is a Czech-based transportation and logistics company providing both domestic and international freight services. The company operates multiple branches across the Czech Republic and Slovakia and offers additional services such as vehicle washing. The website reflects a professional business presence with clear service offerings and contact information. The company is affiliated with the Total Produce group, indicating a solid market position in the transportation sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response disclosures. Overall, the site is trustworthy and well-maintained, though improvements in security transparency and WHOIS data availability could enhance credibility further.

H

Hortim-International, spol. s r.o.

hortim-kariera.cz

62

Hortim-International, spol. s r.o. operates a professional career portal focused on recruitment for transportation and logistics roles primarily in the Czech Republic. The website provides detailed job listings across multiple locations, supporting the recruitment efforts of the Hortim Group and its subsidiaries such as Abasto, s.r.o. The company targets job seekers in the regional transportation and warehousing sectors, offering a clear and user-friendly platform for applications and inquiries. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for UI components. SEO is enhanced through the Yoast SEO plugin, and Google Tag Manager is used for analytics and tracking. The site is mobile optimized and includes accessibility considerations, though some improvements could be made. Cookie consent and GDPR compliance are well implemented, with explicit user consent mechanisms and links to comprehensive privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, no explicit security headers were detected in the provided data, and there is no visible incident response or security policy documentation. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content are consistent with a legitimate business entity. No vulnerabilities or suspicious patterns were identified in the analysis. Overall, the website presents a trustworthy and professional front for Hortim Group's recruitment activities. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen the security posture and compliance.

H

Hortim-International, spol. s.r.o.

hortim.es

62

Hortim-International, spol. s.r.o. is a medium-sized company specializing in the wholesale and logistics of fresh fruits and vegetables. With over 25 years of market presence, the company offers a comprehensive range of services including importation, cultivation, packaging, storage, ripening, and timely delivery. The business operates internationally with multiple subsidiaries and brands, targeting B2B clients in the fresh produce sector. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery, Bootstrap, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for general audiences.

H

Hortim-International, spol. s.r.o.

hortim.com

68

Hortim-International, spol. s.r.o. is a medium-sized Czech company specializing in the wholesale distribution and comprehensive services related to fresh fruits and vegetables. With over 30 years of market presence, Hortim operates multiple subsidiaries and premium brands, offering services ranging from import and cultivation to packing, storage, ripening, and logistics. The company targets wholesale buyers, retailers, and logistics partners, positioning itself as a reliable regional player in the fresh produce supply chain. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. The site uses HTTPS and includes cookie consent mechanisms, Google Tag Manager, and Facebook SDK for marketing and tracking purposes. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the presence of certifications and consistent branding supports legitimacy. Overall, Hortim's website is professional and trustworthy with good content quality and privacy compliance. The main risk lies in the lack of publicly available WHOIS data and some missing security headers. Strategic improvements in security policies, contact transparency, and technical hardening are recommended to enhance trust and compliance.

S

STIB-MIVB

stib-mivb.be

59

STIB-MIVB is the primary public transportation operator in Brussels, providing metro, tram, and bus services. Their website offers comprehensive travel planning tools, ticket purchasing options, and real-time service updates, targeting residents and visitors in the Brussels region. The site is multilingual and designed with accessibility in mind, reflecting a mature digital presence. Technically, the website uses modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. The WHOIS data is unavailable due to registry restrictions, but the domain and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's public service mission.

A

Aviato

aviato.be

49

Aviato is a specialized employment platform focused on providing quality and sustainable job opportunities at Brussels Airport. It serves both job seekers and employers by offering job listings, internships, career advice, and organizing events such as job fairs and info sessions. The website is professionally designed using Drupal 10, with modern web technologies and good mobile optimization. It integrates analytics and marketing tools like Google Analytics and Facebook Pixel, and complies with GDPR through a comprehensive privacy and cookie policy. Security posture is adequate with HTTPS and secure form handling, though security headers could be improved. WHOIS data is restricted, but the website's content and social media presence indicate a legitimate and trusted organization within the transportation sector in Belgium.

T

Tisséo Collectivités

tisseo-collectivites.fr

56

Tisséo Collectivités is the public authority responsible for organizing and managing mobility services in the Toulouse metropolitan area, France. The organization focuses on sustainable urban transport solutions including metro lines, bus networks, and bike-sharing services. The website reflects a medium-sized public sector entity with a clear mission to serve local governments and residents by providing information and resources related to mobility projects and services. The company is well-positioned in its regional market as a key mobility authority. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery, Swiper for carousels, and FontAwesome for icons. The site is mobile-optimized with good SEO and accessibility features, although full RGAA compliance is partial. Hosting and domain registration are consistent with the organization's profile, and the site uses HTTPS with cookie consent mechanisms to comply with GDPR. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its public sector audience effectively with relevant content and clear navigation. Strategic recommendations include enhancing security headers, completing accessibility compliance, and publishing security and incident response policies to further strengthen trust and compliance.

D

Das WeltAuto®

dasweltauto.cz

51

Das WeltAuto® is a well-established brand specializing in the sale of certified pre-owned vehicles, primarily targeting consumers in the Czech Republic. The website reflects a professional automotive business model under the Volkswagen Group umbrella, offering quality assurance and dealer network support for used car buyers. The digital infrastructure leverages modern frontend technologies such as Angular and Swiper.js, complemented by cookie consent mechanisms to address privacy requirements. While the website is accessible and well-structured, the absence of WHOIS data and explicit privacy and terms of service policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and published security policies. Overall, the site presents a trustworthy and professional image consistent with a large automotive brand.

P

Porsche Česká republika s.r.o.

cupraofficial.cz

59

CUPRA Česká republika operates as a premium automotive brand website focused on high-performance sports and electric vehicles. The site is professionally designed, featuring rich multimedia content, detailed product offerings including plug-in hybrids and electric models, and integrated configurator and stock vehicle listings. The brand is affiliated with Porsche Česká republika s.r.o., indicating strong market positioning in the Czech automotive sector. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence with minor areas for improvement in security transparency.

A

Audi Česká republika

audi.cz

58

Audi Česká republika operates as the official regional website for the Audi brand in the Czech Republic, providing comprehensive information about Audi's vehicle models, electric vehicles, financing options, servicing, and promotional offers. The site targets consumers interested in premium automotive products and services, supporting Audi's market position as a leading luxury car manufacturer. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Next.js and Google Tag Manager, and incorporates cookie consent management via OneTrust. Security posture is generally strong with HTTPS enforced, though some security headers and explicit privacy policies are not detected in the provided content. The absence of WHOIS data limits domain registration trust verification, but the website's branding and content strongly indicate legitimacy. Overall, the site offers a professional, user-friendly experience with rich multimedia content and clear navigation.

W

Windcoop SCIC SA

wind.coop

52

Windcoop SCIC SA is a French maritime cooperative based in Lorient specializing in low-carbon cargo transport using sail-powered container ships. The company operates an innovative business model focused on sustainability and cooperative ownership, targeting individuals, businesses, and communities interested in ethical and ecological maritime transport. Their flagship project is a 90-meter sail cargo ship designed to reduce CO2 emissions by 60% compared to conventional vessels, with operations planned between Marseille and Madagascar starting in 2027. The website reflects a professional and modern digital presence built on WordPress, featuring comprehensive content, multimedia, and clear calls to action for investment and membership. Technical infrastructure includes Matomo analytics and Google Tag Manager, with a strong emphasis on privacy and cookie consent compliance. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Overall, Windcoop presents a credible, transparent, and innovative player in the sustainable transportation sector.

R

Réseau Citiz

citiz.coop

56

Réseau Citiz operates as a cooperative carsharing network in France, providing flexible vehicle rental services across more than 80 cities. The website presents a professional and consistent brand image, targeting both individual and professional users seeking shared mobility solutions. Technically, the site employs modern tracking and consent management tools, including Google Analytics, Facebook Pixel, and tarteaucitron.js for cookie consent, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the site is trustworthy and well-positioned in its market niche.

Mobicoop.fr is a French-based free and commission-free carpooling platform established in 2017. The website offers a service aimed at facilitating daily and occasional ride sharing as a common good, targeting a general audience interested in sustainable and economical transportation options. The platform positions itself as a niche player in the transportation sector, emphasizing openness and community values. Technically, the website is hosted by OVH and uses HTTPS with a moderate performance profile. It employs Matomo analytics with a consent-based tracking mechanism, reflecting a privacy-conscious approach. The site uses modern web fonts and icons but does not appear to rely on a major CMS or framework. Mobile optimization and SEO are adequately addressed, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and respects user consent for analytics. However, it lacks explicit security headers and formal security policies such as a privacy policy, terms of service, or vulnerability disclosure. No contact information or incident response channels are clearly provided, which could be improved to enhance trust and compliance. Overall, Mobicoop.fr presents a trustworthy and professional online presence for its business model but would benefit from enhanced transparency in privacy and security policies, as well as improved contact and incident response information to strengthen its security posture and compliance with regulations.

G

Grand Automotive Central Europe

omoda-jaecoo.cz

63

The website omoda-jaecoo.cz represents the Czech market presence of the automotive brands Omoda and Jaecoo, subsidiaries of the Chinese Chery Group. It offers detailed information about various car models including electric, hybrid, and combustion engine vehicles, targeting a broad audience from young buyers to urban elites. The site includes dealer locators, news updates, and vehicle configuration options, supporting a direct-to-consumer sales model through a network of dealerships. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and analytics tools, hosted on Netim infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policy disclosures. WHOIS data confirms recent domain registration consistent with the brand's market entry timeline. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Dafit Motoracing is a specialized e-commerce retailer focused on motorcycle parts and accessories, serving primarily the Czech market. The website offers a broad catalog of products including fairings, tires, tuning parts, and accessories for various motorcycle brands such as Aprilia, BMW, Ducati, Honda, Kawasaki, KTM, MV Agusta, Suzuki, Triumph, and Yamaha. The business targets motorcycle enthusiasts and professional racers, positioning itself as a niche player in the transportation retail sector. The website is professionally designed with good navigation and content relevance, supporting a positive user experience.

C

C & K člen skupiny AUTO UH a.s.

motouh.cz

42

The website www.motouh.cz represents a medium-sized Czech retail and service business specializing in CFMOTO motorcycles and ATVs. It operates under the parent company AUTO UH a.s., offering sales, service, and rental of motor vehicles primarily targeting customers in the Czech Republic. The site is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it employs modern JavaScript libraries and Google Fonts, with HTTPS enforced and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with no evident vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the visible business information and social media presence support legitimacy. Overall, the site is a reliable digital presence for a local transportation retailer.

L

Lexus Select

lexusselect.cz

52

Lexusselect.cz is a specialized automotive website focused on the sale of used and stock Lexus vehicles in the Czech Republic. The site offers detailed vehicle search capabilities, financing options, and dealer location services, positioning itself as a premium Lexus vehicle reseller. The business appears to be medium-sized, founded in 2020, and operates with a clear brand identity consistent with Lexus standards. The website is well-structured, leveraging modern web technologies such as AngularJS and Bootstrap, and integrates third-party services like Google Maps and Hotjar for enhanced user experience and analytics. From a technical perspective, the site demonstrates a moderate to good performance profile with mobile optimization and SEO best practices in place. Security posture is solid with HTTPS enforced and CSRF protections evident, though there is room for improvement in implementing comprehensive security headers and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front for Lexus vehicle sales in the region. However, the absence of direct contact information on the main page and lack of visible incident response or vulnerability disclosure policies suggest areas for enhancement in transparency and security readiness. Strategic recommendations include strengthening security headers, publishing incident response details, and improving accessibility features to further elevate the site's security and compliance maturity.

L

Lexus Česko

lexus.cz

66

Lexus Česko operates as the official Lexus brand website for the Czech Republic, offering luxury and hybrid vehicles. The site targets premium automotive customers and provides detailed vehicle information, dealer locations, and customer support. The business is positioned as a premium automotive brand under the Toyota Motor Europe umbrella, reflecting a large enterprise with a strong market presence. Technically, the website leverages modern technologies including Adobe Experience Manager, React, and advanced analytics tools like Datadog RUM and Google Tag Manager. The site is well-optimized for mobile and SEO, with good design and navigation. Security posture is strong with HTTPS, cookie consent, and use of CAPTCHA services, though explicit security policies and incident response contacts are not found. WHOIS data is unavailable, which slightly reduces trust but the website's branding and content strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy standards, suitable for its target audience.

C

C & K člen skupiny AUTO UH a.s.

ckauto.cz

43

C & K člen skupiny AUTO UH a.s. operates as an authorized automotive dealership and service provider specializing in Toyota, Lexus, Subaru, and CFMOTO brands. The company serves customers primarily in the Czech Republic with physical locations in Brno and Uherské Hradiště. Their business model focuses on new and used vehicle sales, vehicle servicing, and financing solutions, positioning them as a reputable regional player within the automotive retail sector. The website reflects a professional and consistent brand image aligned with their market presence. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Seznam Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, the absence of explicit security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The main limitation is the lack of WHOIS data, which restricts domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.