Transportation security reports

O

OnTrac

ontrac.com

65

OnTrac is a large regional last-mile delivery company specializing in e-commerce parcel delivery across 35 states and Washington D.C. The company focuses on fast, reliable, and cost-effective delivery solutions for retailers and shippers, positioning itself as a key player in the US transportation and logistics sector. The website reflects a mature digital presence built on WordPress with modern technologies and integrations for analytics, marketing, and customer engagement. Security posture is solid with HTTPS and secure form handling, though some security headers and incident response disclosures are absent. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional website and active social media presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility compliance.

F

FedEx

fedex.com

70

FedEx is a globally recognized logistics and transportation company providing comprehensive shipping, tracking, and business support services worldwide. The website serves as a global location selector, offering localized content and language options to cater to a diverse international audience. The company maintains a strong market position as a leader in express transportation and logistics, targeting shippers and small businesses with a robust digital presence. Technically, the website leverages Adobe Experience Manager as its CMS, integrates multiple modern JavaScript libraries, and employs third-party services for analytics, consent management, and user feedback. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and accessibility could be improved. Security posture is strong with HTTPS enforcement and GDPR-compliant cookie consent, but lacks explicit security headers and dedicated security policy pages. WHOIS data is unavailable, likely due to registry query limitations, but the brand's legitimacy is well established. Overall, the website is professional, trustworthy, and well-maintained, supporting FedEx's global business operations effectively.

抵押车交易网 is a Chinese online platform specializing in the nationwide buying and selling of mortgage cars. Established in 2014 and operated by Chengdu Fly-Digital Technology Co., Ltd., the website serves as a marketplace and service platform offering car listings, price evaluations, and related automotive services. The platform targets Chinese consumers and businesses interested in mortgage cars, providing localized city-based listings and customer support via a prominently displayed hotline. Technically, the site uses a custom CMS with JavaScript libraries such as jQuery and Swiper, and integrates Baidu and Ahrefs analytics for traffic monitoring. Hosting assets suggest use of Alibaba Cloud OSS. Security posture is moderate with HTTPS enforced and CAPTCHA on forms, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy and terms of service linked, but no cookie consent mechanism or GDPR indicators. Overall, the site is functional, professional, and trustworthy with room for security and privacy improvements.

Leyifan.com operates as a specialized Japanese parcel forwarding and purchasing agent service primarily targeting Chinese-speaking customers interested in cross-border shopping from Japan. The company, established in 2012, offers a comprehensive suite of logistics services including EMS, air, sea freight, DHL express, and value-added services such as consolidation, repackaging, and inspection. Their business model focuses on facilitating seamless international shopping experiences by providing warehouse and forwarding solutions, supported by multilingual customer service. The website reflects a mature market position with consistent branding and active customer engagement through news and promotions. Technically, the website is built on WordPress 6.1.1 and leverages modern front-end libraries such as jQuery, Bootstrap, and Swiper for responsive design and user experience. Analytics and tracking are implemented via Baidu Analytics, Microsoft Clarity, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site employs HTTPS with good SSL configuration but lacks DNSSEC and security headers, which are recommended to enhance protection against DNS spoofing and common web attacks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Contact information is available, including a verified company email and social media presence. Overall, Leyifan.com presents a trustworthy and professional online presence with room for improvement in security hardening and privacy compliance. The domain registration data aligns well with the business claims, supporting legitimacy and continuity.

八

八达网

8dexpress.com

56

8dexpress.com is a Chinese-based parcel forwarding and cross-border e-commerce logistics service provider established in 2013. The company offers services including providing US warehouse addresses, package tracking, insurance claims, and shopping discounts targeting Chinese-speaking customers engaged in international online shopping. The website is professionally designed with good navigation and content relevance, supporting a medium-sized business in the transportation sector. Technically, the site uses a mix of legacy and modern JavaScript libraries, integrates third-party chat support, and is hosted on Alibaba Cloud. While HTTPS is properly implemented, the site lacks DNSSEC and security headers, and uses an outdated jQuery version, which introduces potential security risks. Privacy and cookie policies are absent, indicating compliance gaps with data protection regulations. Contact information is limited to email addresses without phone or physical addresses. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy measures.

铭

铭宣海淘

mxhaitao.com

48

铭宣海淘 is a Chinese-based international parcel forwarding and logistics service provider established in 2014. The company offers cross-border shipping solutions with warehouses in multiple countries including the USA, Japan, Spain, Poland, and the UK. Their services target Chinese-speaking global shoppers engaged in international e-commerce, providing competitive pricing, customs clearance, and package tracking. The website is well-structured with rich content including news, tutorials, and service pricing, supporting a medium-sized business model with consistent branding and trust indicators such as long domain age and active customer portals. Technically, the website uses a traditional web stack including jQuery, Bootstrap, and Swiper.js, hosted under a reputable registrar (GoDaddy) with DNS hosted on Alibaba Cloud DNS servers. Performance is moderate with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and HTTP security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in privacy compliance and security headers are advised. The website content is safe for general audiences with no adult or questionable content. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include implementing DNSSEC, adding comprehensive privacy and cookie policies, enhancing security headers, and improving mobile responsiveness to strengthen both security and user experience.

Zhonghuanus.com is a Chinese logistics and package forwarding company specializing in facilitating cross-border e-commerce shipments from the US and Australia to China. Established in 2014, the company offers stable and fast forwarding services with self-operated customs clearance teams, targeting Chinese consumers engaged in overseas online shopping. The website is primarily in Chinese and provides key services such as package tracking, multiple warehouse options, and membership tiers. Technically, the site uses modern JavaScript frameworks including Vue.js and Layui, hosted on Alibaba Cloud infrastructure. While the site demonstrates good content quality and user experience, it lacks advanced security headers and DNSSEC, and does not implement cookie consent mechanisms despite using tracking scripts. The domain registration is consistent and legitimate, with ICP licenses and certifications displayed, supporting business credibility. Overall, the website is functional and professional but could improve its security posture and privacy compliance.

K

Kapsch TrafficCom AG

kapsch.net

70

Kapsch TrafficCom AG is a well-established Austrian company specializing in digitalization and intelligent mobility solutions, with a history dating back to 1892. The company positions itself as a leading partner in the transportation technology sector, offering advanced digital and traffic management services primarily targeting businesses and government entities. Their website reflects a mature digital presence with professional design, comprehensive content, and clear branding consistent with their market position. Technically, the website employs modern web technologies including JSON-LD structured data for SEO, custom fonts, and integration with YouTube APIs. The site is mobile-optimized, fast-loading, and accessible, indicating a high level of digital maturity. Privacy compliance is well addressed with visible privacy and cookie policies and consent management mechanisms. From a security perspective, the site uses HTTPS with strong SSL configuration and appropriate security headers. However, there is a lack of publicly available security policies or incident response information, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain www.kapsch.net is a notable gap, reducing transparency and slightly impacting trustworthiness. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure channel, and clarifying domain registration details to enhance trust.

C

CellPoint Digital

cellpointdigital.com

69

CellPoint Digital is a B2B technology company specializing in omni-channel payment orchestration and digital commerce platforms, primarily serving airlines, travel companies, retailers, and other merchants. Founded in 2019, the company positions itself as a leading provider in payment optimization solutions. The website reflects a professional and modern digital presence, leveraging contemporary JavaScript frameworks and third-party services such as Cookiebot for consent management and HubSpot for forms. Hosting infrastructure is based on Amazon AWS, indicating a robust and scalable backend environment. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement in security headers and explicit security policies. The absence of a visible privacy policy and terms of service on the homepage slightly impacts privacy compliance scores. Overall, the website is trustworthy, well-branded, and targeted at a professional audience in the transportation and retail sectors.

成都金开物流有限公司 operates as a specialized logistics and freight company based in Chengdu, China. The company offers a comprehensive range of services including warehousing, freight transport, vehicle transport, and value-added logistics services. Their market position is focused on providing cost-effective and reliable logistics solutions with extensive coverage across multiple provinces and cities in China. The website content is professionally presented in Chinese, targeting businesses and individuals requiring logistics services. Technically, the website employs common web technologies such as jQuery and Swiper.js, with moderate performance and good mobile optimization. However, the absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. Contact information is clearly presented, but no company emails or physical addresses are disclosed on the site. Overall, the site is functional and informative but would benefit from enhanced security practices and clearer domain registration transparency.

B

Budimex Parking Wrocław

parkinghalastulecia.pl

64

Budimex Parking Wrocław operates a 24-hour underground parking facility located near the historic Hala Stulecia in Wrocław, Poland. The parking service targets drivers attending events or visiting nearby tourist attractions such as the ZOO, Afrykarium, and the Japanese Garden. The business is managed by Interparking Polska sp. z o.o., a reputable parking operator with over 15 years of experience in Poland and part of the larger Interparking Group. The website provides comprehensive information about parking services, pricing, accessibility, and local attractions, supporting a user-friendly experience with multilingual support.

F

FBSerwis S.A.

fbserwis.pl

62

FBSerwis S.A. is a Polish company specializing in intelligent infrastructure solutions, including waste management, road and lighting infrastructure maintenance, and technical facility services. The company is part of the Budimex group, a well-established entity in the construction and infrastructure sector, which strengthens its market position and credibility. The website presents a professional image with comprehensive service offerings targeting industrial, commercial, and governmental clients. The content is well-structured, multilingual, and supported by modern web technologies.

B

Budimex Bau GmbH

budimex-bau.de

73

Budimex Bau GmbH is a large, well-established general contractor operating primarily in Germany, specializing in public tenders and private projects in road, bridge, canal, industrial, and high-rise construction. As part of the Budimex Group, it benefits from extensive experience, a large workforce, and strong financial performance. The website reflects a professional and comprehensive digital presence with good SEO and user experience. Technically, the site uses modern WordPress-based infrastructure with popular plugins and scripts for analytics and cookie consent management. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a detailed privacy policy and cookie management. Overall, the site is trustworthy, well-branded, and aligned with the business identity.

B

Budimex Kolejnictwo S.A.

budimex-kolejnictwo.pl

65

Budimex Kolejnictwo S.A. is a specialized railway construction and transport service provider operating in Poland as part of the larger Budimex S.A. group. The company leverages advanced machinery and certified expertise to deliver high-quality railway equipment services, welding, surveying, and transport solutions. Their market position is strong within the Polish railway construction sector, supported by a large parent company and a professional digital presence. Technically, the website is built on WordPress with modern JavaScript libraries and includes a compliant cookie consent mechanism and analytics via Piwik PRO. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. Overall, the website reflects a professional and trustworthy business with clear contact information and transparent policies.

上海省省钱物流有限公司 operates as a specialized logistics and freight company based in Shanghai, China, offering a comprehensive range of transportation and warehousing services. The company targets both enterprise and individual customers requiring efficient logistics solutions, emphasizing door-to-door and integrated supply chain services. Their market position is that of a professional third-party logistics provider with extensive coverage across major provinces and counties in China. Key services include warehousing, freight transport, vehicle transport, and value-added services such as insured shipping and packaging. Technically, the website employs common web technologies including jQuery, Swiper.js for UI components, and FontAwesome for icons. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. However, there is no evidence of a CMS or advanced hosting details. The site uses HTTPS but lacks visible security headers and advanced privacy or cookie policies. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, privacy policies, and incident response information indicates room for improvement. The WHOIS data is notably missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional site content and lack of domain registration data suggests a need for further verification. Overall, the site presents a professional logistics business with solid content and user experience but requires enhancements in privacy compliance, security posture, and domain legitimacy verification to improve trust and reduce risk.

A

Aleet

aleet.co

37

Aleet is a Polish technology company specializing in AI-powered fleet management and logistics optimization solutions. Their offerings include digital twin technology for operational strategy analysis and dynamic routing software, targeting transport companies across various sectors such as e-commerce, last-mile delivery, specialist transport, courier, and passenger transport. The company positions itself as an innovative provider improving operational efficiency and reducing costs for transport businesses. Technically, the website is built on WordPress with modern plugins like WPML for multilingual support and Contact Form 7 for user interaction. The site is hosted via GoDaddy with domain privacy protection enabled. Performance and mobile optimization are good, with SEO best practices implemented through the All in One SEO plugin. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though DNSSEC is not enabled and some security headers are not explicitly confirmed. From a security perspective, the site demonstrates a moderate security posture with room for improvement in DNS security and explicit security policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. No signs of WAF blocking or malicious content were detected. Overall, Aleet presents a professional and trustworthy online presence suitable for its business domain. Strategic recommendations include enabling DNSSEC, adding security.txt for vulnerability disclosure, implementing cookie consent for GDPR compliance, and enhancing security headers to strengthen the security posture.

北

北京汽车制造厂（青岛）有限公司

51vala.com

56

The website www.51vala.com represents a Chinese automotive brand specializing in innovative, multi-functional electric small RV vehicles. The company emphasizes modular design, urban-friendly dimensions, and lifestyle integration, targeting consumers interested in new energy vehicles and mobile living solutions. The site is well-structured, mobile-optimized, and uses modern web technologies such as React and Next.js, indicating a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with a legitimate business. Security posture is moderate, with no visible security headers or explicit privacy policies, suggesting room for improvement in compliance and security transparency. Overall, the site is functional and informative but would benefit from enhanced privacy disclosures and domain registration transparency.

C

CarDekho

cardekho.com

76

CarDekho is a leading Indian online automotive marketplace specializing in new and used car sales, price comparisons, and automotive news. The platform targets car buyers and sellers across India, offering comprehensive services including 360-degree car views and detailed comparisons. Owned by GirnarSoft, CarDekho maintains a strong market position with a large user base and consistent branding. Technically, the website employs modern web technologies such as React, JSON-LD structured data, and Google Tag Manager, ensuring good SEO and mobile optimization. Security-wise, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data, reflecting a mature security posture. However, the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, CarDekho presents a professional, trustworthy, and well-structured digital presence suitable for general audiences.

恒新源科技有限公司 operates a professional website focused on manufacturing and selling electric vehicles such as patrol cars, sightseeing cars, sanitation vehicles, and related electric transport solutions primarily in China. The company, founded in 2014, positions itself as a regional manufacturer with a comprehensive product range and nationwide sales and service network. The website is content-rich, well-structured, and optimized for mobile devices, providing detailed product information and customer engagement tools such as live chat. Technically, the site uses common JavaScript libraries and tracking tools like Baidu Analytics and CNZZ, with moderate performance and basic accessibility features. However, the absence of visible security headers and privacy policies indicates room for improvement in security and compliance. Critically, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trustworthiness. Strategic verification of domain registration and enhancement of security and privacy practices are recommended to improve the site's credibility and compliance posture.

进口宝典 (jinkoubaodian.com) is a specialized Chinese-language online platform providing comprehensive customs HS code queries, import/export tariff information, and declaration element references. Founded in 2022 and operated by 东莞市鹏拓网络科技有限公司, the site targets importers, freight forwarders, and small to medium enterprises seeking detailed customs classification and regulatory guidance. The platform offers a rich knowledge base, practical tools such as tariff simulators and currency converters, and user account features including login and registration with captcha security. Technically, the site employs a custom PHP-based CMS with common JavaScript libraries like jQuery and Layer.js, hosted on Alibaba Cloud (HiChina). While HTTPS is enabled, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance and security improvements. No WAF or blocking mechanisms were detected, and the site is fully accessible with moderate performance and basic mobile optimization.

北

北京首汽环球租车公司

www-izuche.com

46

北京首汽环球租车公司 operates a professional vehicle rental service platform primarily serving corporate and group clients in Beijing, China. The company offers a range of services including tourism charter buses, business vehicles, airport transfers, and shuttle rentals. The website is well-structured, content-rich, and designed to cater to its target audience with clear service descriptions and contact information. Technically, the site is built on WordPress, hosted by Alibaba Cloud in Beijing, and uses modern web technologies such as jQuery and Font Awesome. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap given the use of tracking services like Baidu Analytics. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

首

首汽环球（北京）汽车租赁有限公司

aishouqi.com

49

首汽环球（北京）汽车租赁有限公司是一家成立于2014年的专业汽车租赁服务供应商，主要面向北京地区的企业、政府机构及团体客户，提供旅游包车、商务用车、会议租车及机场接送等多样化服务。公司以丰富的车型选择和透明的价格体系为核心竞争力，致力于为客户提供安全、便捷和高品质的出行体验。网站内容丰富，涵盖详细的车型介绍、价格信息及客户案例，体现出较强的业务专业性和市场定位。技术上，网站基于WordPress平台，使用多种常见的前端库和插件，具备良好的移动端适配和用户体验，但部分技术组件如jQuery版本较旧，存在升级空间。安全方面，网站未显示安全头信息，且缺少隐私及Cookie政策，存在一定的合规风险。WHOIS信息缺失，影响域名注册透明度和信任度。整体来看，网站业务成熟，技术实现合理，但安全和合规方面需加强以提升整体风险防范能力。

北

北汽租车

kuoqu.com

41

北汽租车是一家专注于北京地区的汽车租赁服务提供商，主要面向企业、团体及个人客户，提供多种车型的租赁服务，包括商务车、小巴、中巴及大巴。网站通过WordPress平台搭建，采用了jQuery和Swiper.js等技术，具备良好的移动端适配和基础的用户体验。尽管网站启用了HTTPS，保障了数据传输安全，但缺乏关键的安全头部配置和隐私合规政策，存在一定的合规风险。网站内容丰富，涵盖车型展示和租车新闻，体现了较好的内容相关性和专业性，但缺少隐私政策、Cookie政策及条款服务页面，影响用户信任和法律合规。整体安全态势中等，建议加强安全头部配置，完善隐私合规文档，并增加安全事件响应渠道以提升安全成熟度。

The website www.jsypj.com operates as a specialized Chinese platform offering driving accompaniment and training services, connecting learners with professional driving coaches and companies. It targets new drivers and learners across multiple cities in China, providing listings, pricing, and contact information. The business is positioned as a trusted intermediary with a history dating back to 2003, operated by 南京元贝信息技术有限公司. Technically, the site uses legacy JavaScript libraries like jQuery 2.1.4 and custom scripts, with basic mobile optimization and moderate performance. Security posture is average, lacking modern security headers and visible SSL configuration details. Privacy and cookie policies are absent, reducing compliance maturity. Contact information is primarily phone-based, with no verified company emails found. The site includes Baidu Analytics for user tracking but lacks advanced privacy controls. Overall, the domain WHOIS data is unavailable, raising concerns about registration transparency despite the site's apparent legitimacy.

北

北汽租车

beiqijituan.com

41

北汽租车是一家专注于旅游包车、商务用车、机场接送及班车租赁的汽车租赁服务提供商，隶属于北汽集团，拥有较高的行业声誉和市场地位。其网站内容丰富，面向企业客户及旅游团体，提供多样化的车辆租赁服务。技术上，网站基于WordPress平台，使用jQuery和Swiper.js实现动态交互，整体性能适中，移动端优化良好。安全方面，网站启用了HTTPS，但缺少安全头部配置，且未发现隐私政策或合规声明，存在一定合规风险。WHOIS信息缺失，影响域名信任度，建议进一步核实域名注册信息。整体风险中等，建议加强安全和合规措施以提升信任度和用户体验。

汽

汽修帮手资料库

qxbsk.com

45

汽修帮手资料库 operates a professional online automotive repair data platform targeting automotive technicians and enthusiasts primarily in China. The website offers a comprehensive and frequently updated database of repair manuals, wiring diagrams, maintenance guides, and training materials for over 6000 vehicle models globally. Their business model is subscription-based with multiple membership tiers providing access to premium content and services such as rare data retrieval and dedicated customer support. The platform supports multi-device access including mobile, tablet, PC, and WeChat mini program integration, enhancing user convenience and engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries to deliver a responsive and user-friendly experience. The site is HTTPS enabled and integrates Baidu Analytics for user tracking. However, it lacks some advanced security headers and privacy compliance features such as privacy and cookie policies, which are critical for GDPR and other regulations. The absence of WHOIS data for the domain raises concerns about transparency and trustworthiness, although the site content and structure indicate a legitimate business operation. From a security perspective, the site demonstrates basic good practices like HTTPS usage and no visible vulnerabilities or exposed sensitive data. Yet, it lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms. The overall risk is moderate, with recommendations to enhance security headers, implement privacy and cookie policies, and improve WHOIS transparency to boost trust. Overall, the platform is a valuable resource in the automotive repair sector with a solid technical foundation but requires improvements in privacy compliance and domain registration transparency to strengthen its security posture and business credibility.

The website www.jizwx.com operates as a specialized platform providing automotive repair manuals, electrical circuit diagrams, and training materials primarily targeting automotive technicians and enthusiasts in China. It offers a large repository of downloadable content and technical resources, positioning itself as a niche knowledge base in the automotive repair sector. The site is content-rich with a clear focus on automotive repair documentation and training, supported by a structured navigation system and SEO-optimized metadata. Technically, the site uses a traditional web stack with jQuery 1.7.1 and custom CSS/HTML. While the site is accessible and moderately optimized for performance and SEO, it lacks modern security headers and uses an outdated JavaScript library, which could expose it to vulnerabilities. Mobile optimization is basic, and accessibility features are minimal. The site employs HTTPS but does not implement cookie consent or privacy policies adequately. From a security perspective, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No advanced security policies or incident response contacts are provided, and no security.txt or vulnerability disclosure mechanisms are evident. The site does not appear to be protected by a WAF or other blocking mechanisms, allowing full content access. Overall, the security posture is moderate but could be significantly improved by updating libraries, adding security headers, and enhancing privacy compliance. The overall risk assessment suggests the site is functional and serves its niche well but lacks critical trust and security indicators. Strategic improvements in domain registration transparency, security best practices, and privacy compliance would enhance its credibility and reduce potential risks.

共

共享(北京)汽车租赁有限公司

beiqizuche.com

48

共享(北京)汽车租赁有限公司 operates as a leading car rental service provider in Beijing, specializing in a wide range of vehicle leasing options including buses, minibuses, and luxury vehicles such as Toyota Coaster. The company targets corporate clients, government agencies, and groups requiring transportation services for business, tourism, and events. Their market position is strong within the Beijing region, supported by a professional website showcasing their services, client cases, and partnerships. Technically, the website is built on WordPress using a modular theme and incorporates modern JavaScript libraries like jQuery and Swiper.js for UI elements. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and privacy compliance documentation. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the visible content. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, introduces some risk and reduces overall trust. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security headers, and transparency of domain registration would strengthen its security posture and trustworthiness.

华

华夏二手车网

zuxxrm.com

55

华夏二手车网 is a Chinese online marketplace specializing in used car sales, evaluations, and related automotive services. The platform offers extensive listings of used cars across various brands and models, targeting a broad audience interested in buying or selling second-hand vehicles in China. The website also provides automotive news, exhibition information, and franchise opportunities, positioning itself as a comprehensive resource in the used car market segment. Technically, the site is built on a traditional HTML/CSS/JavaScript stack with jQuery and appears to use the Destoon CMS platform. Hosting is provided by Alibaba Cloud, ensuring reliable infrastructure. Mobile optimization is basic but functional, and SEO practices are adequately implemented. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. No WAF or blocking mechanisms were detected, and the WHOIS data confirms legitimate domain registration consistent with the business profile. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

北京盛昂科技有限公司运营的盛昂京牌指标服务中心网站，专注于北京地区车牌租赁、过户及相关车务咨询服务。该网站提供多样化的服务，包括京牌短租、长租、公司车牌代办及车务咨询，面向北京车主及企业客户，市场定位为北京车牌行业内较具影响力的门户平台。网站内容丰富，结构清晰，设计专业，适合目标用户群体使用。技术上，网站采用了Bootstrap、jQuery及Swiper等现代前端技术，具备良好的移动端适配和基本的SEO优化，但未检测到CMS或高级后台技术。安全方面，网站未检测到HTTPS状态及安全头，且缺少隐私及Cookie政策，存在合规风险。WHOIS信息缺失，域名注册状态不明，影响整体信任度。建议加强安全配置，完善隐私合规，及核实域名注册信息以提升业务可信度。

C

Cloud Yuqu LLC

gdshsh.com

59

The website gdshsh.com operates as a Chinese driving school information and service platform, providing users with resources for driving license exams, driving school listings, and related educational content. It targets learners and individuals seeking driving school enrollment and exam preparation. The business model centers on online information dissemination and facilitating driving school registrations, positioning itself as a specialized portal within the transportation sector. The domain is recently registered in November 2023, consistent with the website's content and launch timeframe. Technically, the site employs jQuery libraries (versions 1.5.2 and 2.1.1), JavaScript, and CSS, running on the Destoon CMS platform. The hosting and domain registrar is Cloud Yuqu LLC. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices evident through meta tags and structured navigation. However, accessibility features are basic, and no advanced frameworks or platforms are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and does not implement common security headers such as Content Security Policy or HSTS. No explicit security or incident response policies are published, and no contact channels for security incidents are visible. The use of Baidu Analytics indicates moderate user tracking without visible cookie consent mechanisms, which may raise privacy compliance concerns. No vulnerabilities or malware indicators are detected, but security posture could be improved. Overall, gdshsh.com is a functional and content-rich platform serving a niche market with moderate technical maturity and security posture. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

深圳开利通物流有限公司 is a small logistics and supply chain management company founded in 2020 and based in Shenzhen, China. The company offers a range of services including supply chain platform management, channel design, international freight forwarding, customs agency, and logistics consulting. The website primarily targets a Chinese-speaking audience interested in logistics and related services, but also contains extensive gambling and lottery-related content, which suggests a mixed or unclear business focus. Technically, the website uses basic technologies such as jQuery 1.11.1 and is hosted behind Cloudflare DNS, but lacks modern security headers and privacy policies. The site is accessible without WAF blocking or security challenges.

起

起步学车网

zuojx.com

44

起步学车网是一家专注于中国驾校培训和驾考服务的专业信息平台，提供驾校报名、陪练、考试资讯及模拟考试等多项服务。网站内容丰富，涵盖驾考各科目知识和最新驾考政策，面向广大准备考驾照的用户群体。技术上，网站采用了HTML5、CSS和JavaScript技术，使用了jQuery库和Destoon CMS，整体性能表现中等，移动端优化基础。安全方面，网站启用了HTTPS，但缺少DNSSEC和安全HTTP头，WHOIS信息显示域名注册存在异常，降低了信任度。整体网站设计专业，内容相关性强，导航清晰，用户体验良好，但缺乏明确的隐私和安全政策披露。建议加强安全配置，完善隐私合规措施，并核实域名注册信息以提升业务可信度。

车质网 is a prominent Chinese automotive consumer complaint and quality evaluation platform dedicated to resolving vehicle complaints and providing authoritative information on automotive quality and defects. The platform leverages a large user base to analyze real complaints and assist enterprises in improving product quality and after-sales service, thus promoting healthy industry development. Technically, the website employs a mobile-optimized responsive design using jQuery, Swiper, and lazy loading techniques, with Baidu Analytics integrated for user tracking. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, which are areas for improvement. The WHOIS data is unavailable or hidden, which reduces transparency and trustworthiness, though the website content and structure suggest a legitimate and professional operation. Overall, the site scores well on content quality and business credibility but should enhance privacy compliance and security practices to strengthen trust and compliance.

玩改车 is a Chinese automotive modification website operated by 北京途宁网络, providing a comprehensive platform for car enthusiasts focused on casual and accessible car modifications. The site offers news, case studies, knowledge articles, forums, and a marketplace for modification parts, targeting a broad audience of car owners and modification businesses. Technically, the site is built on the Discuz! CMS platform, optimized for both PC and mobile devices, and includes Baidu Analytics for user tracking. Security posture is moderate with HTTPS enforced but lacking advanced security headers and cookie consent mechanisms. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the website's apparent legitimacy and active presence. Overall, the site is professional and content-rich but would benefit from improved security and privacy compliance measures.

天津顺达仓储物流有限公司 operates a professional warehousing and logistics service platform in Tianjin, China, specializing in cloud warehouse fulfillment, third-party warehousing, and logistics distribution. The company targets e-commerce businesses and enterprises requiring flexible and cost-effective storage solutions. Their website reflects a localized business model with clear service offerings and customer engagement channels. Technically, the site uses common web technologies such as jQuery and AOS for animations, with Baidu Analytics for user tracking, indicating a focus on the Chinese market. However, the absence of HTTPS information and security headers suggests room for improvement in security posture. The lack of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information appear professional and consistent with a legitimate business. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site presents a functional business presence but requires enhancements in security and compliance to improve trust and risk profile.

博程通达供应链管理(天津)有限公司通过其网站展示了专注于仓储物流及云仓储服务的业务，提供包括冷链、休闲食品、美妆及保健品等多种电商云仓一件代发服务。公司成立于2005年，拥有15000平米仓库，面向电商及企业客户，致力于智能化和高效的供应链解决方案。技术基础包括使用jQuery、Swiper.js及百度统计，网站设计专业，内容丰富，导航清晰，适合目标客户群体。安全方面，网站启用HTTPS但缺少关键安全头，且无隐私或Cookie政策，存在合规风险。WHOIS信息缺失，影响域名信任度。整体风险中等，建议加强安全配置和合规披露以提升信任和安全水平。

选

选车网

yqxdmj.com

41

选车网 is a Chinese online platform specializing in second-hand car trading, offering extensive listings, market information, and automotive news. The website positions itself as one of the largest second-hand car markets in China, targeting individual buyers, sellers, and car dealers. The platform provides services such as vehicle listings, market pricing, professional evaluations, and transaction guidance. Technically, the site is built on the Destoon CMS platform, utilizing jQuery and standard web technologies. The site is moderately optimized for mobile and SEO, with a clear navigation structure and professional design. Security posture is basic, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism. The domain is very recently registered, which may indicate a new launch or rebranding. Overall, the site is functional and professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

陪

陪驾网

hexwpj.com

40

陪驾网 is a Chinese online platform specializing in driving school training, registration, and driving license exam appointment services. The website targets a general audience in China seeking driving education and related services. It operates a service marketplace model connecting users with driving schools and driving practice instructors across multiple regional subdomains. The platform is relatively new, with domain registration in early 2024, and positions itself as a recognized domestic service provider in the transportation education sector. Technically, the website uses Destoon CMS, a popular Chinese content management system, with a technology stack including HTML5, CSS, JavaScript, and jQuery libraries. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. Hosting is provided by DNSPod, Inc., a known registrar and hosting provider in China. However, the site lacks advanced security headers and DNSSEC, which could improve its security posture. From a security perspective, the site uses HTTPS but does not implement DNSSEC or security headers such as Content-Security-Policy or X-Frame-Options. There is no visible privacy or cookie consent mechanism, and no incident response or vulnerability disclosure information is provided. No contact emails or phone numbers are explicitly listed, which may impact user trust and compliance with privacy regulations. The domain registration is consistent with the business claims, and no suspicious patterns were detected. Overall, the website is functional and professionally designed with good content quality and navigation. However, it would benefit from enhanced security measures, privacy compliance improvements, and clearer contact information to increase trustworthiness and regulatory adherence.

中

中国二手车网

fhhyye.com

44

中国二手车网 is a specialized online marketplace focused on the Chinese used car market, offering extensive listings for used car sales, purchase requests, dealer information, automotive exhibitions, and news. The platform targets general consumers interested in buying or selling used vehicles and provides additional services such as price evaluation and advertising. The website is relatively new, with domain registration in mid-2024, aligning with its business launch. Technically, the site uses Destoon CMS and jQuery libraries, with basic mobile optimization and moderate performance. Security posture is moderate, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie consent mechanism detected and basic privacy policy coverage. Overall, the site presents a professional and content-rich experience but would benefit from enhanced security and privacy practices.

H

Hefei Juming Network Technology Co., Ltd

cnkki.com

43

中国驾考网由合肥聚明网络科技有限公司运营，是一个专注于中国驾校报名、陪练及学车培训的专业门户网站。网站提供丰富的驾考知识、模拟考试和驾校信息，覆盖全国多个城市，面向广大驾校学员及驾驶培训需求者。技术上，网站采用自定义CMS系统，使用HTML5、CSS和JavaScript，包含jQuery库，整体性能表现中等，移动端优化基础。安全方面，网站启用了域名转移保护，但缺少DNSSEC和安全HTTP头，未检测到HTTPS强制，存在一定安全提升空间。隐私政策和服务条款页面存在，但缺少Cookie政策和GDPR合规指示。整体网站内容丰富，设计良好，用户体验较好，适合目标用户群体使用。

The website www.carro-carros.com is a Portuguese-language content platform focused on automotive topics including cars, motorcycles, boats, travel, auto repair, and aftermarket parts. It targets automotive enthusiasts and consumers seeking information and guides related to vehicles and travel. The business model appears to be content-driven, likely monetized through advertising and affiliate marketing, but lacks clear business identity or contact information. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. Security evaluation reveals critical gaps: absence of HTTPS, missing privacy and cookie policies, no contact or incident response information, and no WHOIS registration data available for the domain. These factors raise concerns about legitimacy and trustworthiness. The site content is safe for general audiences with no adult or explicit material detected. Overall, the website presents a basic informational resource with limited technical sophistication and significant security and compliance deficiencies. Strategic improvements in security, privacy compliance, and business transparency are recommended to enhance trust and user confidence.

网

网上车市

ajudol.com

37

网上车市 (ajudol.com) is a Chinese online platform specializing in used car trading, offering a comprehensive marketplace for buying and selling second-hand vehicles. The website provides categorized listings by car brands and models, automotive news, educational content, and services such as member registration, product publishing, and merchant backend management. It targets individual consumers and used car dealers across multiple cities in China, positioning itself as a professional and established player in the domestic used car market. The business appears to have been founded in 2008, although the current domain was registered in 2023, suggesting a possible domain migration or rebranding. Technically, the website is built on the Destoon CMS platform, utilizing HTML5, CSS, and JavaScript with jQuery libraries. The site is hosted by Alibaba Cloud Computing Ltd., a reputable provider. The website demonstrates moderate performance and basic mobile optimization, with clear navigation and structured content. SEO practices are adequately implemented with relevant meta tags and keyword usage. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS but lacks DNSSEC and does not implement common security headers, which reduces its security posture. No sensitive data exposure or vulnerable libraries were detected in the provided content. Privacy compliance is limited, with no visible cookie consent mechanisms and only a basic privacy policy present. Contact information is not explicitly provided, which may impact user trust and compliance with data protection regulations. Overall, the website is functional and professional with good content quality and business credibility. However, improvements in security best practices, privacy compliance, and mobile accessibility are recommended to enhance trustworthiness and regulatory adherence.

N

Notamify

notamify.com

62

Notamify is a specialized aviation technology company offering AI-powered NOTAM decoding and briefing services to pilots and aviation professionals. The platform simplifies complex NOTAM data into actionable summaries, enhancing preflight planning efficiency. Their offerings include a real-time monitoring dashboard, email briefings, and an API for integration, positioning them as a niche player in the aviation safety and flight planning sector. Technically, the website is built on modern frameworks like Next.js and React, with Cloudflare DNS and analytics tools such as Google Analytics and PostHog, reflecting a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS and domain protection flags, though improvements like enabling DNSSEC and publishing security policies are recommended. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though contact information and privacy compliance could be enhanced for greater user assurance.

广

广州陆连物流有限公司

wuliusuyun.com

42

广州陆连物流有限公司 operates a comprehensive logistics and freight transportation service primarily focused on the Guangdong region and extending nationwide across China. The company offers a wide range of services including full truckload, less-than-truckload, large item transportation, refrigerated transport, and moving services. Their website demonstrates a solid market presence with detailed service routes and extensive coverage of Chinese provinces and cities, targeting both corporate and individual customers requiring freight and logistics solutions. The business model is service-oriented, leveraging a network of regional routes to provide timely and cost-effective transportation solutions. Technically, the website employs common web technologies such as jQuery and Owl Carousel for UI components, with moderate performance and good mobile responsiveness. However, there is no evidence of advanced CMS or hosting details, and no analytics or tracking scripts were detected, indicating a minimal digital marketing footprint. The site lacks explicit privacy and cookie policies, which is a compliance gap, and no security headers were found, suggesting room for improvement in security posture. Security-wise, the site appears to use HTTPS (assumed but not confirmed), but the absence of security headers and WHOIS data transparency reduces trust. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of WHOIS information and domain registration details is a concern for domain legitimacy and trustworthiness, although the website content and contact information suggest a legitimate business operation. Overall, the website is functional and informative but requires enhancements in security best practices, privacy compliance, and domain registration transparency to improve trust and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration details, and enhancing accessibility and SEO features.

The website '人人二手车直卖网' operates as a Chinese online marketplace specializing in used car sales, purchases, dealer listings, and automotive knowledge dissemination. It positions itself as an authoritative platform in the used car market in China, offering various services including car exhibitions and evaluation tools. The business targets general consumers interested in buying or selling used vehicles and related automotive information. The domain is newly registered in 2024, which may indicate a recent migration or rebranding, although the business claims operation since 2008. Technically, the site uses Destoon CMS, a popular Chinese content management system, and incorporates standard web technologies such as jQuery, JavaScript, HTML5, and CSS. The site includes Baidu SEO push scripts to enhance search engine visibility in China. Mobile optimization and accessibility are basic but functional. Performance is moderate with no critical errors detected. However, there is no evidence of advanced security headers or modern security frameworks. From a security perspective, the site uses HTTPS (implied by URLs) but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie consent mechanisms are present, indicating compliance gaps with privacy regulations such as GDPR. Incident response and vulnerability disclosure policies are not found, limiting transparency in security management. The domain WHOIS data is consistent with the business location and language but the recent domain age suggests monitoring for legitimacy. Overall, the website is functional and provides relevant content for its target audience but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing DNSSEC, security headers, privacy and cookie policies with consent, and publishing incident response contacts.

X

Xinhan Freight Forwarder

wuliuaou.com

51

Xinhan Logistics operates as a comprehensive freight forwarding and international logistics service provider, offering a broad range of transportation and warehousing services. The company targets businesses and individuals requiring efficient and reliable logistics solutions. The website is built on WordPress with modern plugins and frameworks, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance measures. Overall, the site presents a professional front but requires improvements in transparency and security to enhance trust.

众车网 is a professional automotive website operated by 北京隐逸数字技术有限公司, providing comprehensive car-related information and services including pricing, market guides, test drives, images, news, and financing options. The site targets Chinese car buyers and automotive enthusiasts, positioning itself as a trusted portal in the Chinese automotive market. Technically, the website uses modern web technologies, integrates Baidu Analytics and Tencent Map API, and is optimized for mobile devices with good SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and company information appear professional and credible. Overall, the site presents a moderate risk profile with recommendations to improve privacy compliance and security transparency.

I

万车网_汽车报价_汽车试驾_汽车资讯_轻松驾驭车生活

i7car.com

57

The website www.i7car.com operates as a professional Chinese automotive portal offering comprehensive car pricing, reviews, dealer information, and automotive news. It targets Chinese-speaking car buyers and enthusiasts, providing a broad range of services including new and used car searches, group buying, and expert Q&A. The site positions itself as a trusted automotive expert resource within the domestic Chinese market. Technically, the website employs common JavaScript libraries such as jQuery and Swiper for UI interactions and includes Baidu analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security-wise, the site uses HTTPS but lacks important security headers and shows signs of outdated JavaScript libraries, which could pose risks. No privacy or cookie policies are present, indicating poor privacy compliance. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain transparency to enhance trust and reduce risk.

一

一起顺风车

17sfc.com

50

一起顺风车 is a Chinese online platform specializing in connecting private car owners with passengers seeking long-distance carpool rides. The website offers a searchable database of ride listings, user account management, and community engagement through QQ groups and WeChat public accounts. It targets general users in China looking for economical and convenient transportation options. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Baidu Maps API, with moderate performance and good mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. Security posture is moderate with HTTPS usage but lacks important security headers and visible privacy compliance mechanisms. Overall, the site is functional and relevant to its niche but would benefit from enhanced security and compliance measures.