Transportation security reports

A

Alliance GloBâle

alliance-globale.ch

58

Alliance GloBâle is a small regional advocacy initiative focused on preserving and developing the EuroAirport to ensure optimal connectivity for the trinational Basel region. The website is built on the Wix platform and uses standard Wix technologies along with Google Analytics and Tag Manager for visitor tracking. The site is primarily in German with alternate language support for French and Swiss German. While the technical infrastructure is modern and the site is mobile optimized, there is a lack of published privacy and cookie policies, as well as no visible contact information or security policies. The security posture is adequate with HTTPS enabled and some JavaScript security measures, but the absence of security headers and incident response information limits the overall security maturity. The website content is safe and appropriate for a general audience, focusing on transportation advocacy without any adult or questionable content.

L

LAQO by Croatia osiguranje

laqo.hr

64

LAQO by Croatia osiguranje is a pioneering digital insurance provider in Croatia, offering fully digital insurance products including vehicle, property, travel, and pet insurance. The company leverages modern web technologies and a user-friendly mobile app to deliver seamless insurance contracting and claims processes. Positioned as an innovative market player, LAQO targets Croatian residents seeking convenient and cost-effective insurance solutions. The website demonstrates strong digital maturity with Angular framework, Google Tag Manager, and integration of live chat support. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, LAQO presents a trustworthy and professional online presence aligned with its business objectives.

S

Singapore Airlines

singaporeair.com

69

Singapore Airlines operates a comprehensive and professional online platform for booking international flights, targeting a global audience with a focus on Singapore and international travelers. The website demonstrates a mature digital infrastructure leveraging modern technologies such as service workers, CDN delivery via Akamai, and advanced analytics tools. The presence of structured data and social media integration enhances brand visibility and user engagement. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available, representing an area for improvement. The absence of WHOIS data is unusual but does not detract from the overall legitimacy given the brand's global recognition. Strategic recommendations include enhancing transparency around security and compliance, and publishing vulnerability disclosure information.

A

ACMobility - We empower you to move forward

acmobility.ph

63

The website acmobility.ph presents a minimal online presence with very limited content. It appears to be related to the transportation sector, as indicated by the branding and title 'ACMobility - We empower you to move forward'. The site uses modern frontend technologies such as Vuetify and Google Tag Manager for analytics, but lacks substantive business information, contact details, or user engagement features. The absence of privacy, cookie, and terms of service policies indicates low compliance maturity. Security posture is basic with no visible security headers or incident response information, and no forms or input fields to assess input security. Overall, the site is accessible but provides minimal information, limiting trust and business credibility.

L

Lufthansa Group

lufthansagroup.careers

65

The Lufthansa Group Careers website serves as a professional portal for employment opportunities within the Lufthansa Group, a major global aviation company headquartered in Germany. The site presents a clear business focus on connecting talent with diverse aviation-related career paths. The content is primarily in German, with structured data and Open Graph metadata supporting SEO and social sharing. The technical infrastructure is modern, leveraging Angular 15 with server-side rendering, ensuring a responsive and performant user experience. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security headers and SSL configuration details are not available from the provided data, indicating potential areas for improvement in security posture. Overall, the domain appears legitimate and consistent with the Lufthansa brand, though WHOIS data is privacy protected, which is typical for large enterprises. The site is safe for general audiences and does not contain any adult or questionable content.

L

Lufthansa Technik

lufthansa-technik.com

70

Lufthansa Technik is a leading aviation technology company based in Germany, specializing in comprehensive aircraft maintenance, repair, overhaul, and modification services globally. The company serves a broad customer base including airlines, lessors, governments, and private jet owners, positioning itself as a premier independent MRO provider with a strong market presence and extensive service portfolio. The website reflects a mature digital infrastructure using modern CMS and search technologies, with good mobile optimization and user experience. Privacy compliance is robust, featuring a consent management platform and clear privacy policies. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and published incident response policies are absent. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the strong branding and parent company association mitigate concerns. Overall, the site is professional, trustworthy, and well-structured, supporting Lufthansa Technik's market leadership in aviation services.

Lufthansa Cargo operates a comprehensive and professionally designed website serving as a global air freight expert platform. The site offers extensive eServices such as booking, tracking, and freight management, targeting business customers worldwide. The technical infrastructure is built on a modern Liferay CMS platform with React and AlloyUI components, enhanced by consent management and tag management tools to ensure privacy compliance. Security posture is strong with HTTPS enforcement, nonce-based script security, and form validation, although explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a mature digital presence consistent with a leading enterprise in the transportation sector.

The website pre-flight-shopping.com serves as an e-commerce platform allowing customers to pre-order meals for Lufthansa Group flights. It is branded and operated under Miles & More GmbH, a known entity within the airline loyalty and service ecosystem. The site targets airline passengers seeking enhanced culinary experiences during flights. Technically, the site employs modern web technologies including Apache Wicket, jQuery, and Material Design Components, providing a responsive and interactive user experience. Security posture is adequate with HTTPS enforced, though lacks visible advanced security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and branding strongly suggest a legitimate business operation. Overall, the site is functional and professional but would benefit from improved transparency and compliance documentation.

T

Tomorrow's Air

tomorrowsair.com

64

Tomorrow's Air is a small, mission-driven organization focused on combating climate change by enabling individuals and businesses to invest in carbon dioxide removal from the atmosphere. Positioned as an innovative leader in sustainable travel and carbon removal education, the organization leverages community engagement and partnerships to amplify its impact. The website is professionally designed, mobile-optimized, and features endorsements from reputable media and community testimonials, enhancing its credibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Analytics, and third-party integrations like Feathr Boomerang for marketing analytics. The site demonstrates good performance and accessibility, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for enhancing trust and compliance. The absence of WHOIS data for the domain is a notable concern, though the website's content and external trust signals mitigate some of this risk. Overall, Tomorrow's Air presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen its risk posture and stakeholder confidence.

The website www.tarom.ro currently presents a service unavailable message due to rate limiting or a Web Application Firewall (WAF) blocking access, returning an HTTP 429 Too Many Requests error. This prevents access to any meaningful content, metadata, or business information. The domain is a Romanian national airline domain, but WHOIS data is not publicly available due to ROTLD privacy policies. The lack of accessible content and metadata limits the ability to assess the company's digital maturity or security posture in detail. Technically, the site appears to be protected by generic rate limiting or WAF mechanisms, but no specific security headers or SSL configuration details are visible. The absence of privacy, cookie, or security policies on the accessible page indicates compliance gaps. No contact information or business details are available from the provided content. From a security perspective, the site is currently inaccessible for analysis, which is a critical issue for user experience and trust. The domain registration appears legitimate but privacy-protected, which is common for ROTLD domains. Overall, the website's current state poses a risk for user trust and operational continuity due to unavailability and lack of visible security and compliance information.

K

Kenya Airways

kenya-airways.com

77

Kenya Airways is a leading African airline and a member of the Sky Team Alliance, operating flights to over 40 destinations worldwide. The company holds a strong market position in the African transportation sector, recognized by multiple prestigious awards such as Africa's Leading Airline in 2024. The website reflects a mature digital presence with multi-language support and modern web technologies including Vue.js and Microsoft Application Insights for analytics. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although public security policies and vulnerability disclosures are absent. Overall, the site demonstrates professionalism and trustworthiness, supporting Kenya Airways' brand as a major airline in Africa.

T

Transavia

transavia.com

73

Transavia is a European low-cost airline offering affordable flights to over 100 destinations primarily within Europe. The website presents a professional and consistent brand image with a focus on flight bookings and travel services. The technical infrastructure leverages modern JavaScript frameworks, Sitecore CMS, and Microsoft Application Insights for analytics and performance monitoring. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and a coordinated vulnerability disclosure policy, though explicit security headers are not evident in the HTML source. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data reduces domain trustworthiness, which is unusual for a major airline. Overall, the site is professional, secure, and user-friendly, supporting a large-scale transportation business.

Lufthansa AG operates a comprehensive airline service platform, offering flights to over 200 destinations worldwide. The website serves as a primary digital channel for flight booking, travel preparation, and customer account management. It targets global travelers seeking premium air travel services. The platform integrates advanced search capabilities, personalized flight information, and ancillary services such as baggage management, upgrades, and travel insurance. Lufthansa maintains a strong market position as a leading global airline with a well-established brand. Technically, the website leverages modern JavaScript frameworks, Adobe Experience Manager CMS, and enterprise-grade hosting with Akamai CDN support. It demonstrates excellent mobile optimization, accessibility, and SEO practices. The use of advanced analytics and consent management tools reflects a mature digital infrastructure focused on user experience and compliance. From a security perspective, the site enforces HTTPS, employs security headers, and integrates secure OAuth2 login flows. Privacy policies and cookie consent mechanisms align with GDPR requirements, enhancing user trust. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response information could be improved. Overall, Lufthansa's website exhibits a high level of professionalism, security, and compliance, supporting its enterprise-scale operations. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

The Lufthansa Group is a leading global aviation conglomerate operating a diversified portfolio of passenger airlines, cargo, and aviation services. The website reflects a mature, enterprise-level organization with a strong market position in the transportation sector. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries, providing a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and security headers, though some enhancements are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data is unavailable or protected, which slightly reduces trust but the extensive corporate content and investor relations presence support legitimacy. Overall, the website is professional, secure, and trustworthy, serving a broad audience including investors, customers, and job seekers.

Austrian Airlines AG is a major European airline operating as part of the Lufthansa Group, providing passenger air transportation services globally. The website presents corporate information, press releases, and service details primarily in German with English support, targeting a broad audience including customers, media, and partners. The business model focuses on passenger flights and ancillary services such as in-flight catering. The company holds a strong market position as a member of the Star Alliance and Lufthansa Group, indicating a large enterprise scale. Technically, the website is built on WordPress with a modern plugin ecosystem including SEO, portfolio management, and contact forms. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. Hosting appears to leverage Akamai CDN for performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. The WHOIS data is unavailable or malformed, which slightly reduces trust but does not outweigh the strong corporate branding and social media presence. Overall, the website is professional, trustworthy, and well-maintained, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

M

Miles & More GmbH

miles-and-more.com

74

Miles & More GmbH operates Europe’s largest frequent flyer and awards program, offering customers the ability to earn and redeem miles across flights, hotels, rental cars, and merchandise. The website is professionally designed, leveraging Adobe Experience Manager and Adobe marketing tools to provide a seamless user experience. The platform targets frequent travelers and loyalty program members, positioning itself strongly in the transportation sector with a large user base. Technically, the site is modern, mobile-optimized, and integrates advanced analytics and personalization frameworks. Security posture is solid with HTTPS and CSRF protections, though explicit security policies and incident response details are absent. WHOIS data is missing, which is unusual for a major brand and slightly impacts trustworthiness. Overall, the site is trustworthy, secure, and user-friendly, serving a large international audience.

C

CarTrawler

cartrawler.com

66

CarTrawler operates as a leading B2B technology platform specializing in car rental and mobility solutions for the travel industry. The company connects travel businesses with car rental suppliers globally, positioning itself as a key player in the transportation technology sector. The website reflects a mature digital presence with comprehensive content, clear branding, and targeted messaging towards travel industry partners. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the site demonstrates professionalism and trustworthiness suitable for its business audience.

S

Ski World Cup

skiworldcup-cransmontana.ch

44

The Ski World Cup Crans-Montana website serves as an official informational portal for the Audi FIS Alpine Ski World Cup events held in Crans-Montana, Switzerland. It targets ski enthusiasts, event attendees, and stakeholders by providing detailed event schedules, competition information, visitor experience guidance, and news updates. The site maintains a professional and consistent brand image aligned with the event's prestige. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and Google Tag Manager for analytics and marketing. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for improved posture. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

L

Louisiana Department of Transportation and Development

511la.org

58

The website 511la.org is the official Louisiana Department of Transportation and Development's traveler information portal, providing real-time traffic and transit data, trip planning tools, and traffic alerts. It serves as a critical resource for commuters and travelers within Louisiana, offering comprehensive services such as traffic cameras, travel times, and advisories. The site integrates modern technologies including Google Maps API, Bootstrap, and various JavaScript libraries to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR statements. Overall, the site is professional, trustworthy, and well-aligned with its government service mission.

Eurowings is a prominent low-cost airline operating primarily in Europe, offering affordable flights to Germany and other European destinations. The website serves as a comprehensive booking platform with a professional design, clear navigation, and multilingual support. It targets general travelers seeking budget-friendly air travel options. Technically, the site leverages modern web technologies including Adobe Experience Manager CMS, Adobe Analytics, and OneTrust for privacy compliance, hosted likely on Akamai CDN infrastructure. Security is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS data is noted but likely due to privacy protection or registrar policies, not detracting significantly from the site's legitimacy given its association with Lufthansa Group. Overall, the website demonstrates a mature digital presence with strong privacy and security practices, suitable for its business model and audience.

S

SkyAlps

skyalps.com

68

SkyAlps is a regional airline company focused on providing air transportation services primarily in the Alpine region. The company offers flight booking services through its website, which is professionally designed and built on a modern technology stack including Joomla CMS and popular JavaScript libraries. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy and terms of service pages is a gap in compliance. The WHOIS data for the domain is missing, which raises questions about domain registration legitimacy and requires further verification. Overall, the website presents a trustworthy and professional front for the airline business.

Austrian Airlines AG operates a comprehensive airline website offering flight booking, travel information, and customer services. The company is a major European airline affiliated with the Lufthansa Group and Star Alliance, serving over 120 destinations worldwide. The website targets travelers seeking convenient and reliable air travel services, providing a user-friendly interface with advanced search and booking capabilities. The business model focuses on passenger transportation and ancillary services such as upgrades, baggage handling, and loyalty programs. Austrian Airlines maintains a strong market position supported by its parent company and partnerships.

R

Ryanair

ryanair.com

76

Ryanair operates as a leading low-cost airline primarily serving European routes, including Finland. The website provides a professional and user-friendly platform for booking flights, featuring modern web technologies such as Angular and tracking tools like Hotjar and Adobe Demdex. The site is well-optimized for mobile and accessibility, with comprehensive privacy and cookie policies that include consent mechanisms, indicating good privacy compliance. However, the absence of WHOIS data in the provided raw output is unusual for a major brand and limits domain registration trust analysis. Security posture is strong with HTTPS and security headers implemented, but lacks explicit public security policies or incident response contacts. Overall, the website demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

Flying Blue is the official loyalty program of Air France-KLM and its partner airlines including Transavia, Aircalin, Kenya Airways, and TAROM. It serves frequent flyers by offering mileage accumulation and redemption services, positioning itself as a major European airline loyalty program. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Angular, Google Tag Manager, and a consent management platform (Didomi) to ensure compliance with privacy regulations. Despite the absence of WHOIS registration data, the website's branding and technical infrastructure indicate a legitimate and enterprise-level operation. Security posture is strong with HTTPS enforced and consent mechanisms in place, though improvements could be made by adding explicit security headers and publishing a security policy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

K

Kärntner Flughafen Betriebsgesellschaft m.b.H.

airport-klagenfurt.at

55

Klagenfurt Airport operates as a regional international airport in Carinthia, Austria, connecting southern Austria with various European destinations. The website provides comprehensive flight schedules, passenger services, business aviation information, and travel guides, targeting travelers, business clients, and visitors. The airport maintains a professional digital presence with clear navigation, multilingual support, and detailed content about flights and destinations. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and ensuring mobile responsiveness and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.

The website post.lt is the official domain for Lithuania's national postal service operated by Telia Lietuva, AB. The domain is well-established, created in 1997, and registered to a reputable registrar. However, the current accessible content is a security challenge page featuring CAPTCHA and obfuscated JavaScript, indicating the presence of a Web Application Firewall or anti-bot mechanism. This restricts direct content access and analysis. The website lacks visible privacy, cookie, or terms of service policies, and no contact information is present in the accessible HTML content. The technical infrastructure appears minimal with no clear CMS or modern frameworks detected, and performance and accessibility are poor due to the blocking mechanism.

L

Latvijas Pasts

pasts.lv

58

Latvijas Pasts is the national postal service provider in Latvia, offering a wide range of postal and logistics services including parcel and letter sending and receiving, courier services, and financial services. The organization positions itself as a reliable and modern postal partner connecting the Baltic region with the world. The website reflects a mature digital presence with multilingual support, clear navigation, and integration with digital platforms such as mans.pasts.lv for shipment management. Technically, the site uses modern JavaScript frameworks and consent management tools, hosted on Microsoft Azure DNS infrastructure, indicating a robust and scalable setup. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a broad general audience without any adult or questionable content.

RigiShop.ch is an e-commerce platform dedicated to selling gift vouchers and tickets related to the Rigi mountain railway and associated tourism experiences in Switzerland. The website offers a variety of vouchers including tickets, steam rides, annual passes, and other curated experiences targeting tourists and visitors interested in the Rigi region. The platform is well integrated with the main Rigi tourism website and maintains consistent branding and social media presence. Technically, the site uses a mix of legacy and modern web technologies including jQuery, FontAwesome, Google Analytics, and cookie consent mechanisms. While the site is secure with HTTPS and basic privacy compliance, it lacks some advanced security headers and uses an outdated jQuery version which could pose minor risks. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in security and compliance documentation.

R

RigiPlus AG/RIGI BAHNEN AG

rigi.ch

48

RigiPlus AG, operating under the brand 'Rigi - Königin der Berge', is a well-established tourism and transportation company based in Switzerland. The company offers mountain railway services, hiking and wellness experiences, event hosting, and an online shop for tickets and souvenirs. The website is professionally designed, multilingual, and targets tourists and visitors interested in the Central Swiss mountain region. Technically, the site uses modern frameworks such as Neos CMS and Flow PHP, integrates Google Tag Manager and Zendesk Chat, and implements accessibility and SEO best practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

2

2L.COMM SA

kendros.com

40

Kendros.com operates as a specialized travel industry information portal primarily targeting travel agencies and tourism professionals. The platform aggregates and distributes daily information from various service providers, including travel offers, directories, visa information, and news updates. The business is linked to 2L.COMM SA, a Swiss company, and serves a niche market within the transportation and hospitality sectors. The website content is mostly in French and provides basic but relevant information for its target audience. Technically, the website is built on legacy ASP.NET WebForms technology with JavaScript enhancements and uses Google Analytics for visitor tracking. The site is moderately optimized with basic mobile and accessibility features but lacks modern security headers and advanced privacy compliance mechanisms. The absence of a clear cookie policy and GDPR compliance indicators suggests room for improvement in privacy practices. From a security perspective, the site uses HTTPS but lacks critical security headers such as Content-Security-Policy and anti-CSRF protections. No vulnerabilities were directly observed, but the missing WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the security posture is moderate but could benefit from enhancements to protect user data and improve trust. The overall risk assessment indicates a moderately trustworthy site with some compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers and form protections, and resolving domain registration transparency issues to strengthen legitimacy and user trust.

C

ClassicCars.com

classiccars.com

68

ClassicCars.com operates as a leading online marketplace specializing in classic, collector, muscle, and vintage vehicles. It offers a comprehensive platform for buying, selling, and auctioning vehicles, supported by a large inventory and integration with partner auction sites. The website demonstrates a mature digital presence with modern technologies, responsive design, and strong branding consistency. Consent management and privacy compliance are well implemented, reflecting adherence to GDPR and related regulations. Security posture is solid with HTTPS enforcement and consent-gated tracking, though explicit security policies and incident response contacts are not publicly visible. Overall, the site presents a professional, trustworthy, and user-friendly experience for classic car enthusiasts and dealers.

B

BAM - La Voie des Sens

lavoiedessens.ch

48

BAM - La Voie des Sens is a niche tourism operator in Switzerland offering unique gourmet experiences aboard the historic Bière Apples Morges (BAM) train. The company focuses on culinary outings such as gastronomic meals, fondue, beer and burgers, brunch, and wine pairings, targeting tourists and locals interested in regional terroir and heritage. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers visible. Social media presence on Facebook and Instagram supports brand trust. Overall, the site is credible and well-positioned in its market niche but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

C

CalaCarWash

cala-carwash.com

42

CalaCarWash is a premium car wash service provider located in Kehl, Germany, operating since 2016. The business offers advanced car wash technologies including high-pressure washing, active foam, power drying, and nanowax paint sealing, targeting local car owners seeking high-quality vehicle cleaning. The company emphasizes environmental sustainability through a water recycling system and uses biodegradable detergents. The website is built on WordPress with a modern theme and UIkit framework, providing a good user experience with clear navigation and mobile optimization. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies could be improved. No signs of blocking or WAF interference were detected, and the domain registration data supports legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Move – Zweckverband Verkehrsverbund Schwarzwald-Baar-Heuberg operates a regional public transportation portal providing comprehensive bus and train connection information, ticket sales, and travel planning services for the Schwarzwald-Baar-Heuberg region in Germany. The website serves as a central hub for travelers to access schedules, purchase tickets, and receive traffic updates, positioning itself as a key regional transportation authority. The business model focuses on facilitating mobility and providing customer support through digital channels.

S

Schweizerische Schifffahrtsgesellschaft Untersee und Rhein AG (URh)

urh.ch

53

Schweizerische Schifffahrtsgesellschaft Untersee und Rhein AG (URh) operates passenger shipping services on the Rhine and Lake Constance, providing scheduled routes, excursions, group offers, and ship rentals. The company targets tourists, local travelers, and groups seeking leisure and event experiences on the water. Their market position is that of a regional transportation and tourism provider with a medium-sized business footprint in Switzerland. The website reflects a professional and consistent brand image with good content quality and clear navigation.

B

Bahnbetriebe Blumberg GmbH & Co. KG

sauschwaenzlebahn.de

48

Bahnbetriebe Blumberg GmbH & Co. KG operates the Sauschwänzlebahn, a historic steam and diesel train service in the Black Forest region of Germany. The company offers nostalgic train rides, special events, and group packages, positioning itself as a notable regional tourism attraction with multiple awards and partnerships. The website is professionally designed, providing clear information and multiple contact channels, targeting tourists, families, and railway enthusiasts. Technically, the site is built on WordPress with WooCommerce and Fusion Builder, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

T

TracTrac ApS

tractrac.com

47

TracTrac ApS is a specialized provider of live GPS tracking services for sports events such as sailing, orienteering, cycling, skiing, and triathlon. Established in 2004, the company has positioned itself as a leader in the niche market of sports live tracking, serving athletes, fans, sponsors, and event organizers globally. Their offerings include real-time tracking platforms, event management tools, and mobile applications available on iOS and Android. The company emphasizes user engagement through live event visualization and playback features, supported by testimonials from notable event organizers. Technically, the website leverages modern web technologies including Vue.js, Google Maps API, and analytics platforms like Matomo and Google Analytics. Hosting is provided by Hetzner Online GmbH, a reputable provider. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. Analytics usage is moderate, but no explicit consent mechanism for cookies is present, indicating potential GDPR compliance gaps. Overall, TracTrac presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic enhancements in privacy compliance, security headers, and transparency around data protection would strengthen their security posture and regulatory adherence.

F

Friderici automobiles

friderici-automobiles.ch

49

Friderici Automobiles is a reputable Hyundai car dealership based in the Morges region of Switzerland, offering a comprehensive range of automotive services including new and used vehicle sales, maintenance, repair, leasing, and bodywork. The company positions itself as an official Hyundai partner with a strong regional presence and a focus on customer satisfaction. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and mobile optimization. Security measures such as HTTPS, cookie consent, and reCAPTCHA are implemented, though there is room for improvement in security headers and policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Transports de la région Morges Bière Cossonay SA

mbc.ch

53

Transports de la région Morges Bière Cossonay SA operates as a regional public transportation provider in Switzerland, serving the Morges, Bière, and Cossonay areas. The company offers train and bus services, ticketing options including online and SMS purchases, group and school transport, and tourism-related transport services. Their market position is that of a key regional transport operator with a focus on mobility and customer convenience. The website reflects a modern technical infrastructure built on React and Next.js frameworks, leveraging CDN hosting for performance and Bootstrap for responsive design. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is strong with HTTPS enforcement and security headers, though some compliance aspects like cookie consent and incident response information are missing. Overall, the site is trustworthy and professional, with room for improvement in privacy compliance and direct contact information availability.

H

HUSCH - Ihr Profi für Autoteile und Commonrailsysteme | Forst | Karlsruhe | Bruchsal

husch-autoteile.de

39

HUSCH Autoteile is a small German automotive parts supplier specializing in diesel injection systems and common rail components, serving regional customers in Forst, Karlsruhe, and Bruchsal. The website is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics via Google Tag Manager. The presence of Usercentrics indicates GDPR compliance efforts through cookie consent management. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is found in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and explicit security policies. Overall, the site is functional and professional but could improve transparency and security practices.

L

Lightstone (Pty) Ltd

lightstoneauto.co.za

63

Lightstone Auto is a South African company specializing in automotive market intelligence, data analytics, and finance and insurance platforms for the motor industry. Established in 2014, it offers a range of services including vehicle verification, market statistics, and risk management solutions. The company targets automotive dealerships and industry professionals, leveraging proprietary data and analytics to provide insights and forecasting. The website reflects a mature digital presence with a professional design and clear navigation, built on an ASP.NET platform and hosted behind Cloudflare DNS services. The technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Analytics and Hotjar, supporting moderate user tracking and marketing analytics. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth strategies. Overall, the website is trustworthy and professionally maintained, though enhancing privacy compliance and security policies would strengthen its risk profile.

S

SEAT

seat.com

70

SEAT's official website presents a professional and comprehensive platform showcasing their range of new and used cars. The site targets consumers interested in automotive products, offering detailed model information and facilitating vehicle discovery. The brand is well-established in the transportation sector, primarily serving the Spanish market with localized versions for other countries. Technically, the website leverages Adobe Experience Manager CMS, integrates advanced analytics and marketing tools such as Google Tag Manager, Adobe Analytics, and Hotjar, and implements GDPR-compliant cookie consent via OneTrust. Accessibility features are also incorporated, enhancing usability for visually impaired users. Security posture is strong with HTTPS enforced and privacy frameworks in place, though explicit security headers and incident response contacts are not clearly visible. The absence of WHOIS data is notable but likely due to registry privacy policies rather than malicious intent. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, supporting SEAT's market position as a reputable automotive brand.

D

Deutsche Automobil Treuhand GmbH

datgroup.com

60

Deutsche Automobil Treuhand GmbH (DAT) operates an international website providing automotive data and software solutions with a history spanning approximately 90 years. The company targets automotive professionals, fleet managers, repair shops, and insurers with products such as vehicle valuation, repair cost estimation, claims management, and telematics. The website reflects a mature business with a broad international footprint through multiple subsidiaries. Technically, the site is built on TYPO3 CMS, employs modern JavaScript frameworks, and integrates a consent management platform (Usercentrics) and self-hosted analytics (Matomo), indicating a good level of digital maturity. Security posture is strong with HTTPS enforcement and nonce-based content security, though some security headers and explicit policies are absent. The absence of WHOIS data for the domain reduces trust in domain registration transparency but does not detract from the professional presentation and business legitimacy evident on the site. Overall, the site is well-structured, privacy compliant, and professionally maintained.

D

Deutsche Automobil Treuhand GmbH

get-dat-job.de

59

Deutsche Automobil Treuhand GmbH (DAT) operates as a key data and software service provider within the German automotive industry, offering innovative digital solutions and consulting services. The company positions itself as a talent-centric organization, emphasizing employee development and a strong corporate culture. The website serves as a recruitment platform highlighting job opportunities, company values, and employee benefits. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and integrates a consent management platform (Usercentrics) and self-hosted analytics (Matomo), reflecting a mature digital infrastructure. Security measures include HTTPS, nonce-based Content Security Policy, CAPTCHA protection on forms, and privacy proxy for embedded third-party content, indicating a robust security posture. Overall, the site is professional, GDPR-compliant, and trustworthy, with no critical vulnerabilities detected.

C

CUPRA

cupraofficial.ch

67

The website www.cupraofficial.ch is a professionally designed and well-maintained digital presence for CUPRA, a premium automotive brand specializing in electric and hybrid vehicles in Switzerland. The site offers detailed product information, leasing options, configurator tools, and after-sales services, reflecting a mature and customer-focused business model under the Volkswagen Group umbrella. Technically, the site leverages Adobe Experience Manager, Google Tag Manager, and Adobe Analytics, indicating a modern and scalable infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security disclosures are not directly found in the provided HTML snapshot. Overall, the domain registration aligns well with the brand's Swiss market focus, supporting legitimacy and trustworthiness.

I

iX Online

ix.co.za

53

iX Online is a South African digital marketing and web development company specializing in the automotive dealership sector. Established in 2001, it offers a comprehensive suite of services including vehicle stock management, lead generation, SEO, social media marketing, and website design tailored for dealerships. The company holds recognized certifications such as Google Partner and Meta Business Partner, reinforcing its market credibility. Their national footprint and integration with leading dealer accounting systems position them as a key player in the South African automotive digital marketing space. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various marketing and analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and features interactive elements such as forms with CAPTCHA and consent mechanisms, indicating a mature digital infrastructure. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS, uses spam protection on forms, and provides clear privacy and cookie policies compliant with POPIA and GDPR principles. However, explicit security headers are not detected, and incident response information is absent, suggesting areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is justified given the business type. Overall, iX Online demonstrates a strong business and technical foundation with good security and privacy practices. Strategic enhancements in security headers and incident response transparency would further strengthen their posture.

A

AUDI AG

audi-mediacenter.com

72

The Audi MediaCenter website serves as a comprehensive corporate media platform for AUDI AG, providing media professionals with access to press releases, images, videos, and other media resources. The site is well-branded, professionally designed, and targets journalists and automotive industry stakeholders. It supports Audi's market position as a leading premium automotive brand with a global presence. Technically, the site uses modern web technologies including lazy loading, JavaScript frameworks, and privacy management scripts, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be verified further. The absence of WHOIS data is notable but likely due to privacy protection or recent registration, not detracting from the site's legitimacy given the strong brand signals. Overall, the site is a trustworthy and professional resource for Audi's media communications.

The analyzed website is a login portal for MSI users to access the oneAudi OS platform, likely an internal or partner system related to Audi AG. The site provides a secure login interface using Auth0 ULP React components with standard username/email and password fields, including accessibility features and password visibility toggling. The portal is hosted on Amazon S3 for static assets and uses HTTPS, indicating a secure connection. However, no public-facing business information, privacy policies, or contact details are present on this page, suggesting it is not intended for general public use but for authorized users only. WHOIS data for the subdomain is unavailable, which is expected as WHOIS queries apply to registered domains, not subdomains.

A

AUDI AG

audi.com

73

Audi AG operates a comprehensive international corporate website showcasing its leadership in the premium automotive sector. The site provides detailed information on innovation, sustainability, investor relations, and career opportunities, targeting investors, job seekers, and automotive enthusiasts. The technical infrastructure leverages Adobe Experience Manager with a modern React-based frontend, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and a robust cookie consent mechanism, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is unusual but likely due to registry restrictions rather than malicious intent. Overall, the website reflects a mature digital presence aligned with Audi's market position.

A

Audi Schweiz

audi.ch

74

Audi Schweiz operates as the official Swiss branch of Audi AG, providing comprehensive information and services related to new Audi vehicles, including electric and hybrid models. The website targets prospective car buyers and existing customers in Switzerland, offering vehicle configurators, promotions, and electric mobility solutions. The digital infrastructure is modern and robust, leveraging Audi's Falcon CMS platform, proprietary scripts, and integrations such as Google Tag Manager and LivePerson chat for enhanced user engagement and analytics. Security measures are well implemented, with HTTPS enforced and multiple security headers present, ensuring a secure browsing experience. However, the absence of explicit privacy policy, terms of service, and incident response information represents a compliance gap that should be addressed to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, technical maturity, and brand consistency, positioning Audi Schweiz strongly in the premium automotive market.