Transportation security reports

D

Dopravní podnik Ostrava a.s.

dpo.cz

55

Dopravní podnik Ostrava a.s. is a well-established public transportation company operating in Ostrava, Czech Republic, with a domain age dating back to 1998. The company provides comprehensive urban transit services including buses, trams, and trolleybuses, supported by digital tools such as mobile applications and online timetables. The website reflects a mature digital presence with a Joomla CMS platform, modern JavaScript libraries, and responsive design optimized for mobile users. Security practices include HTTPS enforcement and CSRF protection in forms, though some security headers are missing. Privacy compliance is evident with a dedicated GDPR page, but cookie consent mechanisms are not clearly implemented. Overall, the site is professional, trustworthy, and serves its target audience effectively.

X

Xmarton s.r.o.

xmarton.com

48

Xmarton s.r.o. is a Czech-based technology company specializing in smart mobility solutions, including digital vehicle keys, GPS monitoring, and fleet management software. The company targets a diverse audience ranging from corporations and municipalities to individual vehicle owners, offering a range of products tailored to different customer needs. Their platform enables advanced vehicle security and management features accessible via mobile devices, positioning them as an innovative player in the transportation technology sector. Technically, the website is built on WordPress with modern libraries such as jQuery, FontAwesome, and Google Tag Manager, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although explicit security headers and a formal security policy are absent. The domain WHOIS data is missing, which raises concerns about registration transparency, but the website content and business information appear professional and trustworthy. Overall, the site demonstrates strong digital maturity and privacy compliance, with room for improvement in domain registration transparency and security policy publication.

R

Renocar Synot, a.s.

bmw-synotauto.cz

62

Renocar Synot, a.s. is an authorized BMW dealership and service provider located in Zlín, Czech Republic. The company specializes in the sale of new and certified used BMW vehicles, along with offering comprehensive servicing and genuine BMW parts and accessories. The website reflects a professional and consistent brand presence aligned with BMW's corporate identity, targeting customers in the Zlín region and broader Czech market. The business model focuses on direct vehicle sales, after-sales services, and customer support, positioning itself as a trusted regional partner for BMW customers. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, supported by jQuery and integrated with Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized, well-structured, and provides a good user experience with clear navigation and relevant content. Cookie consent and privacy policies are implemented in compliance with GDPR, enhancing user trust and legal compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for business domains. Overall, the site demonstrates a solid security posture appropriate for its business type. The overall risk assessment is low, with recommendations to enhance security headers and maintain regular audits of third-party scripts. The website effectively supports the company's business goals and customer engagement strategies, reflecting a mature digital presence in the automotive retail sector.

E

EIBACH Renocar, a.s.

eibach.cz

42

EIBACH Renocar, a.s. operates a professional website offering high-performance automotive suspension parts and systems, targeting sports car enthusiasts and professional installers primarily in the Czech Republic and worldwide through partners. The company is positioned as a leading manufacturer with a strong reputation and a comprehensive online product catalog and configurator. The website is built on Reflex CMS, uses modern web technologies including HTTPS, Google Analytics, and Facebook SDK, and provides a good user experience with clear navigation and mobile optimization. However, the WHOIS data is unavailable, limiting domain trust verification. Security posture is moderate with HTTPS and secure forms but lacks explicit security headers and a privacy policy page, which are important for compliance and trust. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and updated technical components.

V

VISTA car

vistacar.cz

58

VISTA car is an established automotive dealership and authorized service partner for Škoda and Hyundai vehicles, operating primarily in the Czech Republic since 1999. The company offers new and used car sales, servicing, and rental services, targeting regional customers in Kyjov and Hodonín. The website reflects a professional business presence with clear branding and relevant content for its audience. Technically, the site uses common web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is hosted under a Czech registrar consistent with the business location. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is well addressed with detailed cookie classifications and opt-in consent. Overall, the website demonstrates a good level of digital maturity and business credibility, supporting its market position as a trusted automotive partner.

V

Vairai

vairai.lt

41

Vairai.lt is a Lithuanian niche job board platform specializing in employment opportunities for drivers across various license categories. The platform connects candidates and employers in the transportation sector, offering job listings, candidate and employer profiles, and user account management. The website is professionally designed with good SEO and mobile optimization, leveraging WordPress CMS and popular plugins such as Yoast SEO and WP Job Board Pro. Hosting is provided by HOSTINGER operations, UAB, a reputable hosting provider. Security measures include HTTPS enforcement and Google reCAPTCHA on critical forms, though some HTTP security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the site presents a solid digital presence for a small-sized business in the transportation recruitment niche.

DSA a.s. is a well-established Czech aviation company operating since 1992, specializing in pilot and technician training, aircraft maintenance, helicopter emergency medical services, aerotaxi, and aerial work. The company holds a strong market position as the largest flight school in the Czech Republic and provides critical aviation services including medical emergency flights and aircraft upkeep. Their website reflects a professional and consistent brand image, targeting aviation professionals and private/business air travel customers. Technically, the site is built on WordPress with modern frameworks like UIkit and employs Google Fonts and reCAPTCHA for security. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit security policies. Privacy compliance is partially met with a GDPR policy present but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy and maturity of the business. Recommendations include enhancing security headers, adding cookie consent, and publishing security and incident response policies.

M

MEDIROL s.r.o.

medirol.cz

50

MEDIROL s.r.o. is a Czech Republic-based company specializing in the manufacturing and sale of medical transport equipment, including powered stretchers, roll-in stretchers, and transport chairs. The company targets healthcare providers and emergency services, offering solutions designed to improve patient transport safety and efficiency. The website presents a professional image with clear product categories and multilingual support, indicating a medium-sized enterprise with a specialized niche market position. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as jQuery and Slider Revolution. The site is mobile-optimized and includes multilingual capabilities via TranslatePress. Performance is moderate, with good SEO and accessibility features, though some improvements could be made in accessibility and cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several security headers and explicit incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. The absence of WHOIS data reduces trust slightly, but the professional website and business focus support legitimacy. Overall, the site is well-structured and professional but would benefit from enhanced security headers, clearer contact information, and improved privacy compliance to strengthen trust and compliance posture.

R

RENOCAR a.s.

renocar.cz

52

RENOCAR a.s. is an established authorized dealer and service provider for BMW, MINI, and BMW Motorrad vehicles operating primarily in the Czech Republic with multiple physical branches. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financial services, insurance, and test drives. Their market position is strong within the automotive retail sector, supported by consistent branding and a professional online presence. The website is well-designed, mobile-optimized, and integrates modern tracking and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS registration data is a notable gap, reducing domain registration trustworthiness but not detracting from the overall legitimacy indicated by the website content and structured data. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

D

DPD

dpd.cz

70

DPD is a leading European parcel delivery company operating in the Czech Republic as part of the Geopost group. The website offers comprehensive parcel shipping, tracking, and pickup services targeting both individual and business customers. It maintains a strong market position with a wide network of pickup points and boxes across Europe. The digital infrastructure is built on WordPress with modern technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and user-friendly experience. Security practices include HTTPS enforcement, cookie consent mechanisms, and user warnings about phishing scams, reflecting a mature security posture. However, the absence of WHOIS data transparency and lack of explicit security policies or vulnerability disclosure programs represent areas for improvement. Overall, the website is professional, trustworthy, and well-optimized for its business purpose.

The website omniva.lt is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of meaningful business, contact, or policy information from the site. The domain is registered since 2018 with a reputable registrar and appears legitimate. The business likely operates in the transportation sector, consistent with the domain name and country of registration (Lithuania). The technical infrastructure includes Cloudflare protection and JavaScript-based captcha verification, indicating a focus on security and bot mitigation. However, the lack of accessible content limits the ability to assess the website's design, user experience, and compliance posture. Security posture is difficult to evaluate fully, but the presence of Cloudflare WAF is a positive indicator. Overall, the site is protected but currently not analyzable beyond the security challenge.

U

UAB HOVUS

hovus.lt

58

HOVUS is a Lithuanian company specializing in the sale, rental, and servicing of automotive trailers, operating primarily within Lithuania. The company is an official representative of the Scandinavian TIKI Treiler brand, offering a broad range of trailer types and related services including mobile servicing and generator rentals. Their market position is that of a trusted local leader with a medium-sized business footprint, founded in 2009 but operating under a domain registered in 2023, indicating possible rebranding or domain update. Technically, the website is built on WordPress using the Elementor page builder, with modern JavaScript libraries and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements could be made in security headers and privacy policy publication. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and formal security or incident response policies. No vulnerabilities or malware indicators were detected in the content. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found. Overall, the website is professional, trustworthy, and safe for general audiences, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

U

UAB "Detalita"

detalita.lt

41

Detalita is a Lithuanian-based B2B company specializing in automotive parts supply and vehicle servicing. Established in 1998, it holds a strong market position in Lithuania's transportation and retail sectors, offering a wide range of automotive components and related services. The website targets business clients and automotive professionals, providing product search by vehicle and brand, along with utilization services for batteries, oils, and tires. Technically, the site uses modern web technologies including OXID eShop CMS, jQuery, HTMX, and Hyperscript, delivering a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security policies are recommended.

U

UAB Diginet LTU

autoplius.lt

62

Autoplius.lt is a leading Lithuanian online automotive marketplace established in 2003, operated by UAB Diginet LTU. The platform offers a comprehensive range of services including used and new car listings, vehicle rentals, automotive parts, and related services, targeting general consumers interested in vehicle transactions within Lithuania and neighboring regions. The website demonstrates a mature digital infrastructure leveraging modern technologies such as Cloudflare CDN, Firebase, and multiple analytics and advertising platforms to support its operations and monetization strategies. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage; however, the absence of explicit security policies, privacy and cookie consent mechanisms, and incident response contacts indicates room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and safe for general audiences, with a solid business credibility and technical foundation.

The website vilnius-airport.lt represents the official online presence of Vilnius Airport, operated under the entity Telia Lietuva, AB. The business focuses on transportation services, primarily airport operations and passenger facilitation in Lithuania. The domain is well-established since 1998, indicating a mature business presence. However, the current website content is inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page employing Turnstile captcha, which blocks direct content access and analysis. Technically, the site leverages Cloudflare's security and performance services, including bot mitigation via Turnstile captcha. Due to the WAF challenge, detailed technical and content quality assessments are limited. No visible privacy, cookie, or terms of service policies were found, nor any contact information or business transparency elements in the accessible content. The use of Cloudflare indicates a focus on security, but the lack of visible policies and contact details reduces trust and compliance signals. Security posture benefits from Cloudflare's protection, but the absence of visible security headers and policies in the accessible content is a gap. The WHOIS data is consistent and trustworthy, showing no privacy protection and matching the business entity and country. Overall, the site is safe with no adult or questionable content detected, but the WAF challenge significantly limits content and security analysis. The overall risk assessment is moderate due to content inaccessibility and missing compliance information. Strategic recommendations include improving transparency by publishing privacy and cookie policies, providing clear contact information, and ensuring accessibility beyond WAF challenges for legitimate users.

U

UAB "Autoverus"

autoverus.lt

39

AutoVerus is a Lithuanian company specializing in microbus rental services, offering a fleet of vehicles aged between 1 and 10 years. The company operates primarily in Kaunas and Vilnius, targeting individuals and businesses needing cargo, passenger, or light vehicle rentals. The website is professionally designed using WordPress and includes modern features such as responsive design, Google reCAPTCHA, and integration with marketing tools like Mailchimp. Despite the lack of accessible WHOIS data, the site presents clear contact information and partner affiliations, indicating a legitimate business presence. Technically, the website leverages a common WordPress tech stack with plugins for enhanced user experience and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is decent with HTTPS enforced and reCAPTCHA on forms, but lacks some security headers and a formal security policy. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and functional, though the absence of WHOIS data and security headers suggests areas for improvement. The business appears credible and focused on transportation services within Lithuania, with a clear market niche in microbus rentals.

P

Packung s.r.o.

boxollo.com

10

BOXOLLO.COM is a logistics optimization platform operated by Packung s.r.o., a Czech Republic-based company specializing in packaging size optimization and logistics data-driven decision making. The website offers a SaaS model with multiple subscription plans and a warehouse picker application, targeting logistics companies and e-commerce businesses. The platform is recognized by independent experts and includes client testimonials, indicating a niche but credible market position. Technically, the site is built on WordPress with Elementor and Yoast SEO, providing a modern and responsive user experience. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and incident response documentation. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and company information appear consistent and professional. Overall, the site demonstrates good business credibility and privacy compliance but should address domain registration transparency and enhance security policies.

LANDBAU s.r.o. is a small Czech construction company specializing in earthworks, heavy machinery rental with operators, and oversized cargo transport primarily in the Opava and Ostrava regions. The company leverages advanced 3D GPS leveling technology and reputable heavy machinery brands to deliver precise and efficient services. Their website provides clear descriptions of services and contact information but lacks privacy and cookie policies, which impacts compliance. Technically, the site uses jQuery and Google Analytics but does not employ advanced CMS or security headers. The absence of WHOIS data reduces transparency but is common for small businesses. Overall, the company presents a legitimate regional service provider with moderate digital maturity and basic security posture.

E

ECTA - European Chemical Transport Association

ecta.com

66

ECTA - European Chemical Transport Association is an established industry association founded in 2004, representing the chemical transport sector in Europe. The organization acts as a network and voice for stakeholders in chemical logistics, aiming to improve industry standards and collaboration. The website reflects a professional and consistent brand presence targeting industry members and stakeholders. Technically, the site is built on WordPress with WooCommerce and Elementor, indicating a modern CMS infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

A

AUTO WOZAR s.r.o.

auto-wozar.cz

43

AUTO WOZAR s.r.o. operates as an authorized Peugeot dealership in the Czech Republic, specializing in the sale of new and used Peugeot vehicles, vehicle servicing, and financing options. The website targets both individual consumers and business clients interested in Peugeot cars and related services. The company has been established since 2015 and maintains a consistent brand presence with official Peugeot branding and a clear focus on automotive retail and service. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern frontend frameworks like UIkit and jQuery. Hosting is provided by a Czech hosting provider, ensuring regional consistency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Contact information is clearly presented, enhancing business credibility. No blocking or WAF mechanisms interfere with content access, and no adult or questionable content is present, making the site safe for general audiences.

R

Rubena Tyres

rubena-tyres.com

73

Rubena Tyres operates an e-commerce website specializing in cycling tyres designed and manufactured in Europe. The company targets cycling enthusiasts and outdoor sports consumers, positioning itself as a European manufacturer with a focus on quality and performance. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing and analytics tools to enhance user experience and business operations. The technical infrastructure is solid, with good mobile optimization and SEO practices, although some security headers could be improved. The security posture is good with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies. However, explicit security policies and incident response information are not published, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

E

European Federation of Tank Cleaning Organisations

eftco.org

60

The European Federation of Tank Cleaning Organisations (EFTCO) operates as a non-profit federation representing over 630 tank cleaning depots across 25 European countries. It focuses on promoting reliable, trustworthy, and environmentally friendly tank cleaning services through standardization and collaboration with related European federations. The EFTCO Cleaning Document (ECD) is a key service that provides traceable and multilingual documentation of tank cleaning processes, supporting supply chain safety and compliance. The website targets industry professionals, transport companies, and regulatory bodies, positioning EFTCO as a unique and authoritative federation in its niche. Technically, the website employs a traditional tech stack including jQuery 1.8.3, Modernizr, and Bootstrap, with Google Analytics for visitor tracking. While the site is accessible and well-structured with good content quality and navigation, some technical debt is evident due to the use of outdated JavaScript libraries and missing modern security headers. The cookie consent mechanism is implemented, but privacy and terms of service pages are not found, indicating partial privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks visible security headers and uses an outdated jQuery version that may expose it to vulnerabilities. The WHOIS data is malformed and unavailable, limiting trust verification of domain registration details. No incident response or security policies are publicly disclosed. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment suggests the website is legitimate and professional but has gaps in privacy compliance and security best practices. Strategic recommendations include updating technical components, enhancing security headers, publishing privacy and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

I

International Committee Road Transport (ICRT)

icrt-idtf.com

58

The International Database Transport (for) Feed (IDTF) website is a specialized platform created by the International Committee Road Transport (ICRT) to provide a comprehensive database for bulk transport of animal feed products, primarily by road and inland waterways. The site is supported by several recognized partner organizations, indicating a collaborative industry effort. The business model centers on providing classification and procedural information to stakeholders in the animal feed transport sector. The website demonstrates a good level of professionalism, with clear navigation, multilingual support, and regularly updated news content. However, the absence of visible privacy and cookie policies and the lack of direct contact information reduce transparency and user trust to some extent. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Select2. It employs Google Analytics for visitor tracking but lacks advanced security headers and explicit GDPR compliance indicators. The security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but improvements are recommended in security header implementation and incident response transparency. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and lowers the domain legitimacy score. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced privacy, security, and transparency measures.

The Československá asociace čistících stanic (formerly Česká asociace čisticích stanic) is a small, non-profit association focused on improving the quality and safety of cleaning stations for chemical and food transport containers primarily in the Czech Republic and Slovakia. The association provides certification services, education, and advocacy for its members and is recognized by European and Czech chemical industry bodies. The website content is professionally relevant but basic in design and technical implementation, lacking modern CMS or frameworks. Security posture is moderate with HTTPS implied but no visible security headers or explicit privacy and cookie policies, which are compliance gaps. The site uses Google Analytics without a consent mechanism, indicating privacy compliance weaknesses. WHOIS data confirms a consistent and legitimate domain registration dating back to 2006, supporting the association's stated history. Overall, the site is safe, trustworthy, and functional but would benefit from improved privacy compliance and security hardening.

The website bikerentalmanager.com is currently inaccessible due to a 403 Forbidden error served by Cloudflare's Web Application Firewall (WAF). This indicates that access to the site is blocked, possibly due to security policies or misconfiguration. The page content is minimal, consisting solely of an error message with no business or contact information, privacy policies, or terms of service. The domain is registered since 2013 with a reputable registrar and uses Cloudflare DNS services, but DNSSEC is not enabled. No structured data or SEO metadata is present, and the site is set to noindex, preventing search engine indexing. Overall, the site lacks visible content and compliance information, limiting the ability to assess its business or security posture fully.

T

trendtours Touristik GmbH

trendtours.de

58

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

H

Holiday Extras Ltd

holidayextras.de

63

Holiday Extras Ltd operates a leading online platform specializing in travel extras such as airport parking, hotels, and transfers, primarily targeting German-speaking European markets. The company positions itself as a market leader with over 40 years of experience, offering convenience and enhanced travel experiences to its customers. The website is professionally designed, localized in German, and integrates multiple social media channels to engage its audience. Technically, the website employs modern web technologies including React, extensive use of JavaScript, and third-party optimization and analytics tools such as Visual Website Optimizer and Google Analytics. Hosting and content delivery leverage Amazon Cloudfront CDN, ensuring reliable performance. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong digital presence with good content quality and security posture. The absence of WHOIS data limits domain trust assessment, but the business credibility is supported by consistent branding and market claims. Strategic recommendations include enhancing security transparency, improving accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

A

AUTO B.E.K.

autobek.cz

53

AUTO B.E.K. is a small automotive dealership and service center located in Ústí nad Labem, Czech Republic, specializing in sales and servicing of Mazda, SsangYong, Honda, and authorized Subaru servicing. The company offers comprehensive post-sale services including used car sales, trade-ins, financing, and insurance consulting. The website is built on the Wix platform, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent with a legitimate local business. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

R

RYKO a.s.

ryko.cz

60

RYKO a.s. is a Czech-based company specializing in modern wagon repair and maintenance services, including modernization, inspections, cleaning, mobile service, and wheelset repairs. Positioned as one of the most modern wagon repair shops in Europe, it targets railway and transportation companies seeking high-quality wagon servicing. The website reflects a professional and consistent brand image with clear service offerings and customer engagement through social media and news updates. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging OpenStreetMap for location services, and implements HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy policy documentation, which are areas for improvement. The absence of WHOIS data reduces transparency but does not critically undermine the business credibility given the professional web presence and certifications. Overall, the site is functional, secure, and business-focused with room for enhanced privacy and security compliance.

E

Elias IT Solutions s.r.o.

ebikestrachan.sk

56

E-bike Strachan is a specialized e-bike rental service operating in Ždiar, Slovakia, targeting tourists and cycling enthusiasts exploring the Belianske Tatry region. The company offers e-bike rentals, cycling route guidance, and an online reservation system. The business is positioned as a local provider with a strong focus on outdoor tourism and leisure activities. The website reflects a consistent brand identity and leverages social media channels to engage its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and MailerLite for marketing automation. The site is hosted on Websupport and uses DNSSEC for domain security. Performance and mobile optimization are good, with a clear navigation structure and SEO-friendly metadata. Cookie consent mechanisms are implemented to comply with privacy regulations. From a security perspective, the site uses HTTPS with a good SSL configuration and DNSSEC enabled. However, it lacks explicit security policies, incident response contacts, and a security.txt file. The site does not expose sensitive data and uses standard security best practices but could improve HTTP security headers and publish privacy and terms of service documents to enhance compliance and trust. Overall, the website is professional, secure, and compliant with basic privacy requirements, scoring 78/100 in AI evaluation. Strategic improvements in security policy transparency and privacy documentation are recommended to further strengthen the site's trustworthiness and regulatory compliance.

P

pelicantravel.com s.r.o.

repjegykiraly.hu

53

Repjegykirály.hu is a Hungarian travel deals and tips website operated by pelicantravel.com s.r.o., established in 2016. The site focuses on providing affordable flight tickets, travel stories, and tips primarily targeting Hungarian-speaking travelers. It leverages affiliate marketing models integrated with Pelikan's flight booking services. The website is built on WordPress and incorporates modern analytics and marketing technologies such as Google Analytics, Google Ads, Exponea, and Crisp Chat. It features a cookie consent mechanism aligned with GDPR requirements but lacks a visible privacy policy or terms of service on the main site. Social media presence on Facebook and Instagram supports user engagement. The site demonstrates good mobile optimization and SEO practices with structured data markup.

Letenky.in is a small affiliate marketing website focused on providing users with tools and affiliate links to find cheap flights from Central European cities such as Prague, Brno, and Vienna. The site offers travel advice and popular destination suggestions, targeting budget-conscious travelers. Technically, the site uses modern frontend technologies including Angular and integrates Google Adsense for monetization. The website is accessible without any blocking mechanisms and presents a professional design with good content relevance and navigation. However, it lacks critical compliance elements such as privacy and cookie policies, terms of service, and contact information, which impacts trust and privacy compliance scores. Security posture is moderate with HTTPS usage but no detected security headers or incident response information. Overall, the site is functional and safe but would benefit from enhanced compliance and security practices.

The website at boataround.com is currently inaccessible, returning a 403 Forbidden error page with no visible content, metadata, or interactive elements. This prevents any meaningful analysis of the site's business offerings, user experience, or technical infrastructure. The domain is registered with Amazon Registrar, Inc. since 2016 and is actively maintained with an expiry in 2026, indicating a legitimate and established presence. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. From a technical perspective, no information about the technology stack, CMS, or hosting beyond the registrar is available. Security headers, SSL configuration, and privacy compliance cannot be evaluated due to the blocked content. The WHOIS data shows no privacy protection and consistent registration details, supporting domain legitimacy. Security posture evaluation is constrained by the absence of accessible content and security headers. No vulnerabilities or security best practices can be identified. Privacy and compliance policies such as GDPR, cookie consent, or incident response contacts are not found. The site does not expose any contact information or social media links, limiting business credibility assessment. Overall, the site is currently non-functional for external users, resulting in a low AI score and a recommendation to resolve access restrictions to enable proper evaluation and user engagement.

P

pelicantravel.com s.r.o.

flipo.at

64

Flipo.at is an established online travel agency specializing in flight ticket bookings, hotel reservations, and car rentals primarily targeting German-speaking customers in Austria. The company, operating under pelicantravel.com s.r.o., leverages over 20 years of experience and serves more than 3 million satisfied customers, positioning itself as a trusted player in the transportation sector. The website offers a comprehensive user experience with clear navigation, multiple language and currency options, and a modern design tailored for desktop and mobile users. Technically, the site employs a modern AngularJS framework combined with various analytics and marketing tools such as Google Analytics, Facebook Pixel, New Relic, and Exponea. The infrastructure appears robust with CDN usage and good mobile optimization. However, some security best practices like explicit security headers are not visibly implemented, and no public security policy or incident response information is provided. From a security and compliance perspective, the website enforces HTTPS, provides a detailed cookie consent mechanism aligned with GDPR, and displays trust badges including IATA membership and PCI compliance. Contact information is transparent and accessible, enhancing business credibility. The absence of WHOIS data limits domain registration trust analysis but does not detract significantly from the overall legitimacy based on website content and trust signals. Overall, Flipo.at demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in security transparency and WHOIS data availability could further enhance trust and compliance standing.

P

pelicantravel.com s.r.o.

flipo.de

65

Flipo.de is an established online travel agency specializing in flight ticket bookings, hotel reservations, car rentals, and gift vouchers primarily targeting German-speaking customers. The company operates under pelicantravel.com s.r.o., based in Slovakia, with over 20 years of industry experience and a customer base exceeding 3 million. The website offers a comprehensive and user-friendly platform with multilingual support and integration of various travel-related services. Technically, the site leverages modern JavaScript frameworks like AngularJS and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published incident response policies, indicating room for improvement. Overall, Flipo.de presents a professional, trustworthy, and compliant online presence with solid business credibility and good technical implementation.

P

pelicantravel.com s.r.o.

flipo.pl

59

Flipo.pl operates as an established online travel agency primarily serving the Polish market, offering affordable flight tickets, car rentals, and gift cards. The business is part of pelicantravel.com s.r.o., a Slovak company with over 20 years of experience and a customer base exceeding 3 million. The website demonstrates a professional and user-friendly design with comprehensive travel search functionalities and multiple payment options. Technically, the site leverages modern web technologies including AngularJS, Google Tag Manager, and various analytics and marketing tools, ensuring a robust digital presence. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms, though it lacks a publicly available security policy or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not significantly detract from the overall trustworthiness given the strong business signals and certifications. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to further strengthen security posture.

P

pelicantravel.com s.r.o.

pelikan.hu

58

Pelikan.hu is a well-established Hungarian online travel agency specializing in affordable flight tickets, hotel bookings, car rentals, and travel insurance. With over 3 million satisfied customers and 20 years of experience, it holds a strong market position in the Hungarian travel sector. The website offers a comprehensive range of travel services with Hungarian language support and integrates multiple partner services to enhance its offerings. Technically, the site uses modern web technologies including AngularJS and integrates advanced analytics and marketing tools such as Google Analytics, Facebook Pixel, and New Relic. The platform is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though it lacks explicit security policy and incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

P

pelicantravel.com s.r.o.

pelipecky.sk

51

Pelipecky.sk is a Slovak travel media website operated by pelicantravel.com s.r.o., specializing in providing travel stories, tips, and affordable flight and holiday deals. The site targets travelers seeking budget-friendly travel options and leverages affiliate marketing partnerships, notably with Pelikan.sk. The website is built on WordPress with a modern tech stack including Slider Revolution, Google Analytics, and Crisp Chat, indicating a mature digital infrastructure. Security posture is solid with HTTPS and DNSSEC enabled, though improvements can be made by adding explicit security headers and publishing privacy and terms policies. Overall, the site presents professional content with good user experience and trustworthy branding, though lacks explicit privacy and terms documentation in the analyzed content.

HELICAR a.s., operating under the brand Shipify, is a Czech logistics and distribution company specializing in home appliances across the Czech Republic and Slovakia. Established in 1994, the company offers comprehensive services including warehousing, transportation to wholesale, retail, and end consumers, as well as e-business support such as order processing and shipment tracking. The website reflects a professional and consistent brand image with clear contact details and client references from notable appliance brands, positioning Shipify as a reliable regional player in the transportation sector. Technically, the website employs a traditional tech stack including jQuery 1.10.2, Bootstrap 4.4.1, and Font Awesome Pro, with moderate performance and good mobile optimization. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for technical improvement. The site lacks explicit privacy and cookie policies, which may pose compliance risks under GDPR regulations. From a security perspective, the site uses HTTPS and does not expose sensitive data, but the absence of security headers and incident response information suggests a moderate security posture. The missing WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is safe, professional, and business-focused, but improvements in privacy compliance and security practices are recommended. Strategically, Shipify should prioritize implementing comprehensive privacy and cookie policies, update its technical stack to mitigate vulnerabilities, and enhance security headers and incident response readiness. These steps will strengthen compliance, security posture, and customer trust, supporting sustainable growth in the competitive logistics market.

P

pelicantravel.com s.r.o.

pelikan.sk

58

Pelikan.sk is a well-established Slovak online travel agency specializing in affordable flight bookings, hotel reservations, car rentals, visas, and travel insurance. With over 3 million satisfied customers and 20 years of experience, it holds a strong market position in Slovakia's travel sector. The website offers a comprehensive and user-friendly platform with modern technologies and mobile app support. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

D

D.R.J. Tiskárna Resl s.r.o.

tiskarnaresl.cz

52

D.R.J. Tiskárna Resl s.r.o. is a Czech Republic-based company operating since 2006, specializing in transportation services including international and domestic freight, bus transportation, and printing services such as production of publications, magazines, books, and textbooks. The company maintains a professional online presence with a well-structured website that clearly segments its three main divisions: Bus, Print, and Transport. The website targets both general public and business clients in the transport and printing sectors, positioning itself as an established regional player with diversified services. Technically, the website employs modern JavaScript libraries including jQuery and integrates Google Analytics, Google Tag Manager, and Google Ads for tracking and marketing purposes. The hosting and domain registration are managed by REG-GRANSY, a known registrar, with no indications of privacy protection or suspicious registrations. The website demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS (implied by Google Analytics and external scripts) and implements a cookie consent mechanism with granular user controls, supporting GDPR compliance. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital front for the company, with room for improvement in security policy transparency and technical security headers. Strategic recommendations include enhancing security headers, publishing comprehensive security and incident response policies, and adding terms of service to improve compliance and trust.

Rytíři nebes operates as a small online travel agency specializing in affordable flight tickets primarily targeting Czech and European customers. The website offers online reservation services and information about various airlines and ticket sellers, focusing on popular destinations such as Paris, London, New York, and others. The business model relies heavily on affiliate marketing and Google Adsense advertising. Technically, the website uses basic HTML, CSS, and JavaScript with embedded third-party affiliate widgets and ads. Hosting is provided by HostMonster, and the domain is well-established since 2007, supporting business legitimacy. However, the site lacks modern security practices, including HTTPS verification, security headers, and privacy compliance mechanisms. No contact information or privacy policies are provided, which may impact user trust and regulatory compliance.

A

AEROSIM.cz

aerosim.cz

54

AEROSIM.cz is a specialized small business based in the Czech Republic offering unique aviation simulation experiences using historical military aircraft simulators enhanced with virtual reality. The website is professionally designed using WordPress with the Divi theme and integrates modern technologies such as Gravity Forms for booking, Stripe for payments, and Google Analytics for tracking. The business targets aviation enthusiasts and general audiences seeking adrenaline-filled experiences in Prague. Security posture is good with HTTPS and Cloudflare DNS, but lacks formal privacy and cookie policies and incident response contacts, which are important for GDPR compliance and user trust. Overall, the website is functional, content-rich, and credible but could improve compliance and security transparency.

A

Arval BNP Paribas Group

arval.cz

69

Arval.cz is a professional website representing Arval BNP Paribas Group's vehicle leasing services in the Czech Republic. The company specializes in full-service operational leasing solutions for individuals, entrepreneurs, and companies, offering new and used vehicles with flexible leasing terms. The website is well-structured, mobile-optimized, and uses modern technologies such as Drupal 10, Google Tag Manager, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data limits domain trust analysis, but the site’s branding and content strongly indicate legitimacy and affiliation with BNP Paribas Group.

L

L7 GROUP a.s.

l7group.cz

59

L7 Group is a Czech transportation and logistics company established in 2016, operating multiple subsidiaries specializing in automotive services, freight transport, and logistics solutions. The company targets business clients within the Czech Republic and maintains a professional online presence with clear branding and subsidiary links. Technically, the website employs modern JavaScript frameworks and Google Tag Manager for analytics, hosted on Webglobe infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and headers. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

H

Helicar, a.s.

helicar.cz

61

Helicar, a.s., operating under the L7 ATG brand, is a well-established logistics and vehicle transport company based in the Czech Republic with a history dating back to 1999. The company offers comprehensive services including vehicle transport across Europe, storage solutions near Prague, and sustainable logistics practices. The website reflects a professional and modern digital presence with good content quality and user experience. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and is hosted by Webglobe. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain is very recently registered, which may indicate a rebranding or new domain launch, but the business information is consistent and credible. Overall, the website is trustworthy and well-positioned in its market niche.

M

MASTERTRUCK

mastertruck.cz

49

Mastertruck.cz is a Czech Republic-based transportation business specializing in trucks and related services. The website serves as a professional digital presence for the company, showcasing their offerings and targeting businesses and individuals interested in transportation solutions. The site is built on WordPress using the Divi theme, incorporating modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. Cookie consent is managed through Cookiebot, indicating a basic level of privacy compliance. From a technical perspective, the website demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. Hosting is provided by Active24, a known provider, and the site uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or suspicious indicators were detected in the content. Security posture is adequate but could be enhanced by implementing additional security headers and publishing clear security and incident response policies. Privacy compliance is basic, with cookie consent present but no visible privacy or terms of service pages. Contact information is not explicitly found in the analyzed content, which may affect user trust and business credibility. Overall, the website is professional and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security policies, improving privacy disclosures, and providing clear contact information to strengthen trust and compliance.

M

Miroslav Macko

bagr-pardubice.cz

57

Miroslav Macko operates a small local business specializing in earthworks and excavation services primarily in the Pardubice, Chrudim, and Hradec Králové regions of the Czech Republic. The company offers services such as digging pits and trenches, soil relocation using specialized equipment like the JCB 3CX tractor excavator and Barford SX6000 dumper, foundation trenching, and minor crane work. The website reflects a focused service provider with a long history dating back to 1994, targeting local construction and property clients. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses standard web technologies including HTML5, CSS3, and JavaScript, with integration of Facebook SDK and Google Tag Manager for social and analytics purposes. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site enforces HTTPS and implements a cookie consent banner with advanced user controls, indicating some attention to privacy compliance. However, the absence of a privacy policy, terms of service, and security headers reduces the overall security posture. No WHOIS data is available, which limits domain trust assessment and raises concerns about domain registration transparency. Overall, the website is functional and professional for a small local business but would benefit from enhanced security practices, formal privacy documentation, and improved domain registration transparency to strengthen trust and compliance.

P

Pelikan.cz

pelikan.cz

57

Pelikan.cz is a well-established online travel agency primarily serving the Czech Republic and Slovak markets. The company offers a broad range of travel-related services including flight bookings, hotel reservations, travel insurance, car rentals, and holiday packages. With over 3 million satisfied customers and 20 years of experience, Pelikan.cz positions itself as a trusted and comprehensive travel service provider. The website is professionally designed with clear navigation and a focus on user experience, targeting travelers seeking affordable and convenient travel solutions. The business model revolves around aggregating offers from over 800 airlines and travel partners, providing a one-stop platform for travel planning and booking. Technically, the website leverages modern web technologies such as AngularJS, Swiper.js, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, New Relic, and Exponea. The site is served over HTTPS with service worker support, indicating a commitment to security and performance. Mobile optimization is good, and SEO practices are well implemented, although accessibility features are basic. The site employs a detailed cookie consent mechanism compliant with GDPR, reflecting awareness of privacy regulations. From a security perspective, the site enforces HTTPS and uses several third-party monitoring and analytics services. However, explicit security headers are not detected in the provided data, and no dedicated security or incident response policies are publicly available. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, which slightly impacts trust assessment. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, Pelikan.cz presents a professional and trustworthy online travel platform with a solid technical foundation and good privacy compliance. The main risks relate to incomplete domain registration transparency and the opportunity to enhance security headers and incident response visibility. Strategic improvements in these areas would strengthen the site's security posture and trustworthiness.

B

bété s.r.o.

bete-studio.cz

52

bété s.r.o. is a Czech design studio specializing in product and transport design, offering end-to-end project management from initial sketches to production and marketing. The company serves notable automotive clients such as BMW, Ford, Škoda Auto, and Kofola, positioning itself as a reputable player in the design and marketing consulting sector. The website reflects a professional business presence with clear service descriptions and contact information, though it lacks formal privacy and cookie policies. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks visible advanced security headers or compliance indicators. The absence of WHOIS data limits domain registration transparency, but the business credibility is supported by client references and professional presentation. Overall, the site is safe, business-focused, and trustworthy, though improvements in security posture and privacy compliance are recommended.