E-commerce security reports

E

eDreams ODIGEO

edreamsodigeo.com

69

eDreams ODIGEO operates as a leading global travel subscription platform and one of Europe's largest e-commerce businesses, offering a suite of travel brands including eDreams, Opodo, and Liligo. The company targets travel consumers and investors, providing subscription-based travel booking services and maintaining a strong investor relations presence. The website reflects a mature digital infrastructure built on WordPress with modern front-end technologies, optimized for mobile and SEO. Security posture is strong with HTTPS, security headers, and ISO 27001 certification, though public vulnerability disclosure and incident response contacts are not evident. Overall, the site is professional, trustworthy, and well-maintained, but the absence of WHOIS data introduces a minor trust concern.

A

AirTrack Factory

airtrackfactory.com

71

AirTrack Factory is a medium-sized e-commerce business specializing in the manufacture and sale of AirTrack sports equipment such as AirFloor, AirTrick, and AirBag products. Established in 2011, it positions itself as the world's leading AirTrack manufacturer, targeting sports enthusiasts, gymnasts, athletes, and families. The website is professionally designed with consistent branding and good content relevance, supporting multiple languages via WPML. The business model is direct online sales with integrated payment processing via Stripe.

B

blackcrows

black-crows.com

73

Black Crows operates a professional e-commerce website specializing in skis and outerwear, targeting winter sports enthusiasts. The company presents a strong market position as a niche premium brand with a comprehensive product range including skis, poles, apparel, and accessories. The website is built on the Shopify platform, leveraging modern technologies such as Alpine.js and Tailwind CSS, and integrates multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Klaviyo. The site demonstrates excellent design quality, mobile optimization, and user experience, with clear navigation and consistent branding. Security posture is strong with HTTPS enforcement, security headers, and secure payment integrations, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. WHOIS data aligns with the business claims, indicating legitimacy and transparency. Overall, the website is a secure, professional, and trustworthy platform for Black Crows' e-commerce operations.

I

INVENT Marketing und Tourismus GmbH

urlaubsbox.com

61

Urlaubsbox.com is a well-established Austrian e-commerce platform specializing in the sale of travel vouchers, hotel vouchers, and experience gift boxes for short trips and wellness vacations primarily in Austria, Germany, and neighboring European countries. The company positions itself as a premium provider with over 30 years of experience, offering flexible and attractive gift solutions for a wide range of customer segments including couples, families, singles, and activity enthusiasts. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience and strong brand trust. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery and Foundation, integrates trusted third-party services like Trusted Shops for buyer protection, and enforces HTTPS with appropriate security headers. However, there is room for improvement in privacy compliance, notably the absence of an explicit cookie consent mechanism and published security policies. Overall, the site demonstrates a solid security posture with no evident vulnerabilities or suspicious content, making it a trustworthy platform for customers seeking travel gift solutions.

Z

Zalando SE

zalando-lounge.at

52

Lounge by Zalando is a well-established online outlet platform operated by Zalando SE, targeting Austrian and European consumers with discounted fashion, home, and sports products. The website demonstrates a mature e-commerce business model with a strong market position as part of the Zalando group. Technically, the site uses modern web technologies including React, RequireJS, and integrates advanced analytics and consent management tools, ensuring a high-quality user experience with fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active vulnerability reporting mechanisms, although a dedicated security policy page and security.txt file could enhance transparency. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the parent company's branding and business practices.

T

Tchibo

tchibo.at

60

The website represents an online shop for Tchibo products, primarily focused on retailing coffee and related merchandise to a general audience in Austria. The site uses modern frontend technologies such as Vue.js and Vuetify, indicating a contemporary technical infrastructure. However, the content quality is basic with limited visible business or contact information. Security posture is weak due to lack of visible security headers, absence of privacy and cookie policies, and no evident incident response or vulnerability disclosure mechanisms. The WHOIS data is unavailable due to quota restrictions, limiting the ability to verify domain legitimacy and registration details. Overall, the site functions as a basic e-commerce platform but requires improvements in security, privacy compliance, and transparency to enhance trust and compliance.

A

ACO

aco.shop

72

ACO operates a professional e-commerce platform specializing in construction and drainage products targeted at both private and commercial customers in Germany. The website is built on Magento, leveraging modern web technologies such as RequireJS and jQuery, and integrates performance and analytics tools like New Relic and Google Tag Manager. The site demonstrates good technical maturity with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of detailed WHOIS registrant information and direct contact details on the homepage slightly detracts from overall trustworthiness. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Strategic recommendations include enhancing transparency by publishing a security policy, incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

M

Gestalten und verkaufen mit Print-on-Demand | Spreadshop

myspreadshop.ch

59

The website myspreadshop.ch serves as a landing page for a print-on-demand merchandise platform affiliated with Spreadshop and Spreadshirt. It targets individuals and small businesses interested in creating and selling custom merchandise online. The business model is based on enabling users to open their own merchandise shops with no upfront cost, leveraging print-on-demand fulfillment services. The site is positioned within the e-commerce sector and appears to serve primarily the Swiss and German-speaking markets. Technically, the site is simple, using standard HTML and CSS with web fonts, and is moderately optimized for mobile devices. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts in the provided content. Security posture is weak due to absence of visible security headers, privacy policies, and contact information, which impacts compliance and trust. The domain uses privacy protection, which is common and justified for this business type. Overall, the site is functional but minimalistic, with room for improvement in security, privacy, and user engagement features.

EVENTIM.Light is a German e-commerce platform enabling event organizers to create their own ticket shops and sell tickets, including through the EVENTIM network. The website is professionally designed, mobile-optimized, and uses modern technologies such as Vue.js and Vuetify. It integrates Google reCAPTCHA for security and uses Akamai CDN for hosting and performance optimization. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. No explicit security policy or incident response information is published, indicating room for improvement in transparency and security posture. Overall, the site is functional, secure, and targeted at professional event organizers in Germany.

C

Clearer.io

clearer.io

70

Clearer.io is a technology company specializing in providing advanced, easy-to-integrate applications aimed at enhancing product discovery and optimizing the customer journey for eCommerce businesses. Positioned as an innovative player in the eCommerce technology sector, Clearer.io offers solutions that increase conversions and reduce customer confusion, targeting B2B clients and partners. The website reflects a professional and consistent brand image with clear messaging and partner endorsements. Technically, the site is built on the Webflow platform, leveraging modern JavaScript libraries and animation frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the domain appears legitimate despite privacy-protected WHOIS data, with a strong compliance stance on privacy and user consent.

E

EHI Geprüfter Online-Shop

ehi-siegel.de

47

EHI Geprüfter Online-Shop operates as a certification provider specializing in e-commerce, offering seals, authentic customer reviews, and secure legal texts to promote safe and fair online shopping experiences. The website targets German online retailers and businesses seeking to enhance trust and compliance. Technically, the site is built on WordPress with the Divi theme, leveraging modern web technologies and privacy-conscious analytics via Matomo with disabled cookies. Security posture is solid with HTTPS and no evident vulnerabilities, though security headers and explicit privacy compliance measures are lacking. Overall, the site presents a professional and trustworthy front but would benefit from enhanced privacy disclosures and contact transparency.

T

Training-Fit: Fitness og bodybuilding udstyr

training-fit.dk

48

Training-Fit.dk is a Danish e-commerce website specializing in fitness and bodybuilding equipment, offering a wide range of products including cardio machines, strength training gear, cross-training equipment, yoga accessories, martial arts supplies, clothing, and footwear. The site targets fitness enthusiasts and athletes primarily in Denmark, providing products from well-known brands such as Adidas, Nike, and Mizuno. The business model is focused on online retail with an emphasis on fast delivery and secure payment options. The website is newly launched in 2024, reflecting a modern and organized digital presence with clear navigation and product categorization. Technically, the website is built on Magento (OpenMage), utilizing modern web technologies including Google Analytics, Google Ads, reCAPTCHA for bot protection, and a consent management platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. It implements a GDPR consent mechanism but lacks explicit privacy policy and terms of service pages in the analyzed content. Security headers are partially present but could be strengthened with additional policies. The domain registration is transparent and consistent with the business, registered recently with GANDI SAS without privacy protection, which is appropriate for an e-commerce business. Overall, Training-Fit.dk presents a professional and trustworthy online store with a solid foundation but would benefit from enhanced privacy disclosures, improved security headers, and clearer contact information to strengthen compliance and user trust.

S

SELECT Sport International

select-sport.com

75

SELECT Sport International operates a professional e-commerce website specializing in sports equipment, including footballs, futsal balls, handballs, sportswear, and training equipment primarily targeting clubs and athletes. The company leverages the Shopify platform to deliver a modern, responsive, and user-friendly online shopping experience. The website demonstrates good content quality, consistent branding, and comprehensive privacy and cookie policies, reflecting a mature digital presence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain ownership transparency. Technically, the site employs modern web technologies including Shopify's Liquid framework, JavaScript ES modules, and integrates third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted on Shopify's CDN infrastructure, ensuring good performance and security. Cookie consent mechanisms are robust, supporting GDPR compliance. Accessibility and SEO optimizations are present but could be enhanced further. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers, although explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could benefit from additional transparency and documentation. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, improving accessibility compliance, and addressing the WHOIS data gap to enhance trust and transparency.

HugeDomains operates a professional domain marketplace specializing in premium domain name sales, including GrowthRepublic.com. The website offers transparent pricing, payment plans, and a 30-day money back guarantee, targeting businesses and individuals seeking quality domain names. The platform is established since 2005 and has a solid market position with thousands of satisfied customers. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA, with SSL encryption ensuring secure transactions. Cookie consent mechanisms are in place, supporting privacy compliance. Security posture is good with HTTPS and bot protection, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and customer testimonials enhancing credibility.

I

iakoe

carrot.is

53

iakoe is a specialized Shopify agency focused on delivering design-led e-commerce solutions, balancing brand identity, user experience, and store optimization to create effective shopping experiences. Founded in 2019, the company targets design-conscious brands seeking Shopify development, UX design, SEO, CRO, and migration services. The website demonstrates a strong market position with notable client logos and positive testimonials, indicating trust and professionalism. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Splide.js, and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Crazy Egg. The site is mobile-optimized, accessible, and SEO-friendly, hosted via GoDaddy with a Craft CMS backend. Performance is moderate with good responsiveness and user experience. Security posture is solid with HTTPS enforced, CSRF protection on forms, and no exposed sensitive data. However, the absence of DNSSEC, security headers, and published security or privacy policies indicates room for improvement. Privacy compliance is limited due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and technically competent but would benefit from enhanced security policies and privacy compliance to strengthen its risk posture and regulatory adherence.

S

StubHub

stubhub.com

74

StubHub is a leading global online ticket marketplace specializing in the buying and selling of tickets for sports, concerts, theater, and festivals. Owned by Viagogo, it serves a broad audience of ticket buyers and resellers with a comprehensive event catalog and user account management features. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, Mapbox GL, and Google Maps API, hosted on AWS with integrated security measures including AWS WAF and Google reCAPTCHA for bot protection. While HTTPS is enforced and some security best practices are observed, the site lacks explicit security headers and published security or privacy policies, which are recommended for enhanced compliance and trust. The website content is professionally designed, mobile-optimized, and safe for general audiences, with extensive use of analytics and advertising networks to support marketing efforts. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, StubHub presents a strong business and technical profile with room for improvement in privacy and security transparency.

S

SPACEFOOT SAS

galope-store.es

51

Galope-Store is a specialized e-commerce platform operated by SPACEFOOT SAS, offering a wide range of equestrian and pet products targeting horse riders and pet owners primarily in Spain and France. The website demonstrates a mature digital presence with comprehensive product categories, clear navigation, and a professional design. It leverages modern e-commerce technologies including Magento (OpenMage), Google Analytics, Google Ads, and GDPR-compliant consent management tools. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be enhanced. The business shows strong trust indicators such as secure payment options, customer service contacts, and return policies. Overall, the site is accessible without WAF or security blocks, indicating good operational stability.

M

Made In Paradis

madeinparadis.es

60

Made In Paradis is a medium-sized e-commerce retailer specializing in women's fashion, footwear, and accessories, operating primarily in Spain with multiple European localized domains. The company offers a wide range of products from over 300 brands, targeting women interested in fashion and footwear. Their business model focuses on online retail with fast delivery and secure payment options, supported by a professional website with clear navigation and brand consistency. The presence of multiple sister stores indicates a broader retail group with diversified offerings. Technically, the website is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito marketing automation. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in loading speed and accessibility. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA v3 for bot protection, and uses a consent management platform to comply with GDPR. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The website maintains good privacy compliance with clear privacy and cookie policies. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen their position.

S

SPACEFOOT SAS

velo-store.es

60

Vélo-Store is a specialized European e-commerce retailer focused on bicycles, cycling equipment, and accessories. Operated by SPACEFOOT SAS based in France, the company targets cycling enthusiasts primarily in Spain and other European countries through localized domains. The website offers a broad catalog of products including bicycles, parts, apparel, and electronic devices, supported by a professional online shopping experience with secure payment options and customer service. The presence of multiple country-specific domains indicates a strategic market expansion across Europe. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, Google Ads, and marketing automation tools like Actito. The site is mobile optimized with good SEO and accessibility basics, providing a smooth user experience. Security measures include HTTPS enforcement, reCAPTCHA integration, and a consent management platform ensuring GDPR compliance. From a security perspective, the site demonstrates a solid posture with appropriate security headers and encrypted communications. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are well implemented, reflecting compliance with European data protection regulations. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Vélo-Store presents a trustworthy and professional e-commerce platform with a strong market presence in the cycling retail sector. Strategic recommendations include enhancing transparency around security policies, publishing vulnerability disclosure information, and further improving accessibility compliance to strengthen user trust and regulatory adherence.

S

SPACEFOOT SAS

sneakids.it

62

Sneakids is an e-commerce retailer specializing in sneakers and fashion apparel for children and babies, operating primarily in Italy and France. The company, legally registered as SPACEFOOT SAS, offers a wide range of branded products including adidas, Puma, and Asics, targeting parents and guardians seeking quality children's fashion at competitive prices. The website demonstrates a solid market position as a specialized online store with customer service based in France and a clear focus on secure payment and easy returns. Technically, the site is built on the Magento platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Actito. The site is mobile-optimized with good navigation and content quality, supporting a positive user experience. Security-wise, HTTPS is enforced, and Google reCAPTCHA is implemented on forms, complemented by a consent management platform ensuring GDPR compliance. However, some security headers are missing, and DNSSEC is not enabled, suggesting room for improvement in security hardening. Overall, the domain registration data aligns well with the business information, indicating legitimacy and consistency. The site is free from adult or suspicious content, making it safe for general audiences.

S

SPACEFOOT SAS

sneakids.pt

60

Sneakids is a specialized e-commerce retailer focused on children's shoes, clothing, toys, and accessories, targeting parents and caregivers primarily in Portugal and France. The company operates multiple country-specific websites, indicating a broad international presence. Their business model centers on offering well-known brands at competitive prices with secure payment options and customer-friendly policies such as easy returns and post-sale support based in France. The website content is professionally presented, with clear navigation and relevant product categories tailored to their target audience.

S

SPACEFOOT SAS

sneakids.pl

58

Sneakids is an e-commerce retailer specializing in children's footwear, clothing, toys, and baby care products. The company operates multiple localized websites across Europe, targeting parents and guardians seeking fashionable and affordable children's products. The business is registered in France under SPACEFOOT SAS and was founded in 2023, indicating a relatively new but professionally established entity. The website demonstrates a solid market position with a focus on trusted brands and customer service based in France.

S

SPACEFOOT SAS

selleriemae.de

61

La Sellerie de Maé, operated by SPACEFOOT SAS, is a specialized e-commerce retailer offering a wide range of equestrian equipment and apparel for riders and horses. The company targets a European market with localized websites for multiple countries, including Germany, France, Spain, Portugal, Italy, Netherlands, and others. Their product offerings include horse blankets, saddles, rider clothing, and accessories, supported by express shipping and customer service based in France. The website is professionally designed with clear navigation and multilingual support, catering to equestrian enthusiasts and professionals.

S

SPACEFOOT SAS

sneakids-de.de

62

Sneakids is a specialized e-commerce retailer focused on children's shoes and fashion, targeting parents and guardians primarily in Germany and other European countries. The company operates multiple country-specific domains, indicating a broad international market presence. Their product offerings include well-known brands such as adidas, Asics, and Puma, emphasizing quality and affordability. The business model centers on online retail with secure payment options and customer service based in France. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, AWIN affiliate tracking, and Actito marketing automation. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Consent management is implemented via a TCFv2-compliant CMP, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and integrates invisible reCAPTCHA for form protection. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and transparent contact information. Overall, Sneakids presents a trustworthy and professional online retail platform with a good balance of business credibility, technical maturity, and security awareness. Strategic improvements could focus on enhancing security headers and accessibility compliance to further strengthen their posture.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit-de.de

62

Training-Fit is a German-based e-commerce platform specializing in fitness and muscle building equipment, apparel, and accessories. The website targets fitness enthusiasts and athletes across multiple European markets, as evidenced by its multilingual sister sites. The business model focuses on retail sales of well-known fitness brands with an emphasis on fast shipping and secure payment options. The site demonstrates a professional and consistent brand presence with good content quality and navigation.

M

Made In Paradis

madeinparadis.de

62

Made In Paradis is a professional e-commerce retailer specializing in women's fashion, shoes, and sportswear, operating multiple country-specific websites across Europe. The platform offers a broad selection of over 300 brands, emphasizing fast delivery and secure payment options. The website demonstrates a mature digital infrastructure with modern marketing and analytics tools, including Google Analytics, Google Ads, and affiliate tracking via AWIN. GDPR compliance is actively managed through a consent management platform and clear privacy policies. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Overall, the site presents a trustworthy and user-friendly shopping experience with clear contact and customer service information.

S

SPACEFOOT SAS

slowood-interior.ch

10

Slowood Interior operates as a specialized e-commerce retailer focusing on modern home decoration, furniture, lighting, and lifestyle products. The company, legally registered as SPACEFOOT SAS in France, targets general consumers interested in stylish and contemporary interior design solutions. Their market position is that of a niche player offering a broad catalog of products with a user-friendly online shopping experience. The website demonstrates a consistent brand presence and provides multiple trust signals such as secure payment options and clear customer service contacts. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with a well-structured navigation system and comprehensive product categorization. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements security best practices such as invisible reCAPTCHA on forms and cookie consent mechanisms. However, there is no dedicated security policy or incident response information publicly available, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a low-risk profile with strong business credibility and compliance with GDPR. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing accessibility. The WHOIS data confirms the legitimacy of the business with consistent registration details matching the website's claims.

S

SPACEFOOT SAS

slowood-interior.nl

62

Slowood Interior is a French-based e-commerce retailer specializing in modern interior decoration, furniture, lighting, and lifestyle products. The company operates a professionally designed multilingual website targeting consumers interested in home decor and lifestyle enhancements. The business is relatively new, founded in 2023, and maintains a clear market position as an online decor and furniture shop with a focus on quality and trendy products. The website demonstrates a solid technical infrastructure leveraging Magento (OpenMage), Google Analytics, Google Ads, and advanced consent management tools, reflecting a mature digital presence. Security posture is strong with HTTPS, DNSSEC, and reCAPTCHA protections, although some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-positioned in the e-commerce sector.

S

SPACEFOOT SAS

slowood-interior.de

62

Slowood Interior operates as a professional e-commerce retailer specializing in modern home decoration, furniture, lighting, and lifestyle products. The company targets general consumers interested in enhancing their living spaces with contemporary design elements. The business maintains a strong market position in the European home decor sector, supported by a multilingual website and a network of related partner stores. The company is legally registered as SPACEFOOT SAS in France, with clear contact and customer service information provided on the website. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google AdWords, AWIN affiliate tracking, and Actito marketing automation. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Hosting is managed via Gandi, as indicated by the DNS nameservers. From a security perspective, the website enforces HTTPS and integrates Google reCAPTCHA for form protection. A consent management platform ensures GDPR compliance, and privacy policies are comprehensive and accessible. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and improving accessibility features to meet broader compliance standards.

S

SPACEFOOT SAS

slowood-interior.dk

58

Slowood Interior is a Danish e-commerce retailer specializing in modern interior decoration, design furniture, lighting, and lifestyle products. The company operates under the legal entity SPACEFOOT SAS, based in France, with a newly registered domain consistent with a recent business launch in 2024. The website targets consumers interested in trendy and modern home decoration solutions, offering a broad catalog of products through a well-structured online store. The business model is retail-focused, leveraging multiple partner stores and brands to enhance its market presence. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern JavaScript libraries and third-party services such as Google Analytics, Google Ads, reCAPTCHA, and Actito marketing tools. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Privacy compliance is well addressed through a consent management platform and clear privacy and cookie policies, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, with no privacy protection masking, enhancing trustworthiness. Overall, Slowood Interior presents a professional, secure, and privacy-conscious e-commerce platform with a clear business focus and good technical implementation. Strategic improvements in security headers and DNS security would further strengthen its posture.

S

SPACEFOOT SAS

slowood-interior.at

55

Slowood Interior operates as a specialized e-commerce platform offering a wide range of modern home decoration, furniture, lighting, and lifestyle products. The company, legally registered as SPACEFOOT SAS in France, targets consumers interested in stylish and contemporary interior design solutions. The website presents a professional and well-structured online shopping experience with clear navigation and multiple product categories, supported by a consistent branding approach and trust signals such as secure payment options and customer service contacts. Technically, the website leverages a Magento-based CMS (OpenMage), integrates modern marketing and analytics tools including Google Analytics, Google Ads, Actito marketing automation, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements consent mechanisms for cookies and tracking. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or vulnerability disclosure page and lack of explicit Data Protection Officer contact information indicate areas for improvement. Overall, the website demonstrates a solid security posture and privacy compliance aligned with European regulations, supporting a trustworthy e-commerce environment. Strategic enhancements in transparency and accessibility could further strengthen its position and customer confidence.

S

SPACEFOOT SAS

velo-store.ie

63

Vélo-Store is a specialized e-commerce retailer focused on bicycles, bike parts, and cycling equipment, operating primarily in France and Ireland with multiple country-specific domains. The company, SPACEFOOT SAS, offers a broad catalog of cycling products and emphasizes customer service, secure payment, and easy returns. The website demonstrates a solid digital presence with modern marketing and analytics tools integrated, including Google Analytics, Google Ads, and Actito. The technical infrastructure is based on Magento (OpenMage), hosted by Gandi, and employs HTTPS with reCAPTCHA for form security. Security posture is good but could be enhanced by enabling DNSSEC and adding advanced security headers. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the e-commerce cycling market.

T

Training-Fit : Fitness and bodybuilding equipment

training-fit.ie

48

Training-Fit.ie is an e-commerce website specializing in fitness and bodybuilding equipment, offering a wide range of products including cardio devices, professional fitness machines, bodybuilding accessories, crossfit gear, yoga apparel, fighting sports equipment, clothing, shoes, and related accessories. The site targets fitness enthusiasts, athletes, and consumers seeking quality fitness products from well-known brands. The business model is retail-focused, leveraging online sales with fast delivery and secure payment options. The domain is newly registered in December 2023, indicating a recent market entry or brand launch. Technically, the website is built on Magento (OpenMage), utilizing modern web technologies such as Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for security and marketing. The site is hosted with Gandi, with HTTPS enabled and a clientTransferProhibited domain status, indicating basic domain security. Mobile optimization and navigation are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags. From a security perspective, the site uses HTTPS and reCAPTCHA, and implements a consent management platform to comply with privacy regulations. However, no DNSSEC is enabled, and security headers are missing, which are areas for improvement. No privacy policy or terms of service were found, which is a compliance gap. No contact information for security incidents or data protection officers is provided, limiting incident response readiness. Overall, the website presents a professional and trustworthy e-commerce platform with moderate security posture and technical maturity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

H

Handball-Store: online handball specialist

handball-store.ie

61

Handball-Store.ie is a specialized e-commerce website focused on selling handball-related equipment, including shoes, balls, clothing, and protective gear. The site targets handball players and enthusiasts primarily in Ireland, offering a wide range of branded products with fast delivery and competitive pricing. The business appears to be newly established in 2023, consistent with the domain registration date. Technically, the website is built on Magento (OpenMage), uses modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito, and enforces HTTPS for secure communications. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with room for improvement in security headers and DNSSEC implementation. Overall, the site presents a professional and user-friendly shopping experience but should enhance its compliance and security transparency.

F

Foot-store : Store 100% Football | Shirts and boots

foot-store.ie

64

Foot-store.ie is an e-commerce website specializing in football-related products including boots, shirts, balls, and protective gear. The site targets football players and fans, offering a range of branded sportswear and equipment with a focus on fast delivery and competitive pricing. The business appears to be newly established in 2023, with a domain registered through Gandi and consistent branding throughout the site. The website uses Magento (OpenMage) as its CMS platform and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google AdWords. A consent management platform is implemented, indicating some level of GDPR compliance awareness, although explicit privacy and cookie policies are not found in the provided content. Security posture is generally good with HTTPS enforced and reCAPTCHA used, but there is room for improvement in security headers and published security policies. Overall, the site presents a professional and trustworthy e-commerce platform for football enthusiasts.

T

Training-Fit

training-fit.com

64

Training-Fit is a France-based e-commerce retailer specializing in fitness and bodybuilding equipment, offering a wide range of products from major brands. The company targets fitness enthusiasts and athletes globally, providing fast delivery and secure payment options. The website demonstrates a mature digital presence with modern technology and good user experience. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent mechanisms. No critical vulnerabilities or suspicious indicators were found. Overall, the business appears legitimate and professionally managed.

L

La sellerie de Maé

selleriemae.shop

63

La Sellerie de Maé is a specialized e-commerce retailer focused on equestrian equipment and accessories for riders and horses. The company operates primarily from France and targets equestrian enthusiasts internationally through multiple country-specific domains. Their product offerings include riding helmets, boots, saddle pads, grooming products, and other horse tack essentials. The website demonstrates a professional and consistent brand presence with clear navigation and a focus on customer service, including secure payment options and express delivery.

D

Direct-Volley : Number 1 website for online volleyball

direct-volley.com

10

Direct-Volley.com is an established e-commerce platform specializing in volleyball equipment, apparel, and accessories. Founded in 2014, it positions itself as a leading online retailer in the volleyball niche, offering a wide range of products including shoes, wear, balls, and protective gear. The website targets volleyball players and enthusiasts globally, with multiple localized sister sites for different countries. Technically, the site is built on Magento Open Source (OpenMage), leveraging modern tracking and marketing technologies such as Google Analytics, Google Ads, and Facebook Pixel. The site implements a consent management platform for GDPR compliance and uses HTTPS with a reputable registrar, Gandi SAS. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is generally good but could be improved by enabling DNSSEC and adding security.txt for vulnerability disclosures. Overall, the site is professional, well-branded, and safe for general audiences.

T

Training-Fit

training-fit.co.uk

10

Training-Fit is a UK-based e-commerce retailer specializing in fitness and bodybuilding equipment, offering a wide range of products from well-known brands. The website targets fitness enthusiasts and athletes primarily in the UK and Europe, providing fast delivery and secure payment options. The business appears to be medium-sized, founded in 2022, with a consistent brand presence and multiple country-specific domains. Technically, the site uses modern frameworks such as SvelteKit, is hosted on Cloudflare, and integrates Google Analytics and Google Ads for marketing and tracking. The site is mobile-optimized and performs well with good SEO and accessibility features. Security posture is strong with HTTPS, consent management for GDPR compliance, and secure payment methods, although no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in transparency around security policies and vulnerability disclosures.

1

11teamsports

11teamsports.com

62

11teamsports operates as a leading e-commerce retailer specializing in football-related products including shoes, sportswear, and fan merchandise. The company targets football players and enthusiasts across multiple European countries, maintaining a strong market position as the largest football shop in its region. The website supports multiple country-specific portals, indicating a broad regional presence and a tailored approach to local markets. Technically, the site employs modern JavaScript frameworks and marketing tools such as Exponea and Luigisbox, with performance optimizations via Baqend SpeedKit. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers and published security policies are lacking. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain raises some concerns about registration transparency. Overall, the site is professional and trustworthy but could improve in security transparency and domain registration clarity.

S

Seal Subscriptions

sealsubscriptions.com

60

Seal Subscriptions is a specialized SaaS provider offering a subscription management app tailored for Shopify merchants. The company positions itself as a leading solution in the Shopify subscription app market, boasting over 30,000 merchants and 1,800+ positive reviews with an average rating of 4.9. Their key services include automatic recurring payments, subscription boxes, product swaps, and loyalty discounts, targeting e-commerce businesses seeking to increase customer lifetime value and retention. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence.

K

Kaffeemacher:innen

kaffeemacher.de

66

Kaffeemacher:innen operates an e-commerce platform specializing in coffee products, barista accessories, and educational courses, targeting coffee enthusiasts primarily in Germany. The website is built on Shopify, leveraging modern web technologies and third-party integrations for subscriptions, reviews, and analytics. The business positions itself as a niche provider with a strong content marketing approach through blogs and videos. Technically, the site is well-structured, mobile-optimized, and performs moderately well, with a consistent brand presentation and active social media presence. Security posture is solid with HTTPS and platform protections, though explicit security headers and formal privacy/cookie policies are missing. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

The Österreichisches E-Commerce-Gütezeichen website serves as a certification and trust-building platform for Austrian online shops, emphasizing legal compliance, consumer protection, and e-commerce best practices. Supported by key Austrian institutions such as the Wirtschaftskammer, Arbeiterkammer, and the Ministry for Digitalization and Economic Location, it holds a strong market position as a trusted certification authority since 2000. The site targets both online retailers seeking certification and consumers looking for secure shopping options. Technically, the website is built on TYPO3 CMS with privacy-respecting Matomo analytics, offering a modern and responsive user experience with good SEO and accessibility basics. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and explicit policies are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

C

Conversion Bear

conversionbear.com

66

Conversion Bear operates a SaaS e-commerce solution focused on Shopify merchants, offering Honeycomb Upsell Funnels to increase sales via pre- and post-purchase upsell funnels. The company positions itself as a market leader with over 90,000 customers globally and a strong emphasis on ROI and ease of use. Technically, the website is built on Webflow with integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, LinkedIn Ads, and Clearbit, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and well-optimized for mobile and SEO, supporting a credible e-commerce SaaS business.

R

RBA

rbacoleccionables.com

67

The website tienda.rba.es/coleccionables is an e-commerce platform operated by RBA, a well-known Spanish publisher and retailer specializing in collectibles and magazines. The site offers subscription-based and direct sales of collectible series, targeting a general Spanish-speaking audience. The business model focuses on engaging customers through exclusive offers and gifts tied to subscriptions, positioning itself as a reputable player in the collectibles market in Spain. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates various third-party services including Google Tag Manager, New Relic for monitoring, and consent management via Didomi and Indigitall SDKs. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates monitoring tools to detect issues. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website presents a professional and trustworthy online presence with moderate to good scores in content quality, technical implementation, security posture, privacy compliance, and business credibility. The lack of WHOIS data limits full domain legitimacy verification, but the site’s content and structure support its authenticity.

K

Kaffeemacher

kaffeemacher.ch

71

Kaffeemacher is a Swiss-based specialty coffee e-commerce business offering a curated selection of coffee beans, accessories, and educational courses. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Judge.me for customer reviews and Seal Subscriptions for recurring orders. The company targets coffee enthusiasts primarily in Switzerland and Germany, positioning itself as a niche provider with a strong focus on quality and education. The digital infrastructure is robust, with good performance and mobile optimization, supported by Shopify's CDN and security features. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are not found in the provided content, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

Zipchat Inc

zipchat.ai

68

Zipchat Inc operates the website zipchat.ai, offering an advanced AI chatbot platform tailored for e-commerce businesses. Their solution integrates sales, support, WhatsApp marketing, and data analytics into a single autonomous AI agent designed to enhance customer engagement and increase sales conversion rates. The company targets online retailers using platforms such as Shopify, WooCommerce, and Magento, positioning itself as a top-rated AI chatbot provider with strong client testimonials and measurable performance metrics. The business model is subscription-based SaaS, founded recently in 2023, focusing on small to medium-sized e-commerce enterprises. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as GSAP for animations and multiple analytics and tracking tools including Crazy Egg, Microsoft Clarity, Amplitude, Facebook Pixel, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and implements a cookie consent mechanism via Cookiefirst, indicating a moderate level of digital maturity and compliance awareness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML content. However, explicit security headers and formal security policies are not present, and no incident response or vulnerability disclosure mechanisms are found. The WHOIS data is privacy-protected, which is typical for SaaS businesses, but limits direct verification of registrant details. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with basic privacy standards. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing vulnerability disclosure to further strengthen trust and compliance.

D

Digt AG

digt.ch

61

Digt AG is a Swiss-based company specializing in community building, brand creation, and product promotion within the e-commerce sector. Their website presents a professional and modern digital presence, targeting businesses seeking to grow their communities, create brands, and promote products in the Swiss market. The company appears to be relatively new, founded around 2021, with a clear focus on service provision in e-commerce and brand distribution. Technically, the website is built on WordPress with a solid tech stack including Bootstrap, jQuery, and SEO tools like Yoast. It is mobile-optimized and uses Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit policies, which could be improved. Overall, the site is trustworthy and professional, with minor gaps in privacy compliance and security transparency.

I

Impulse

plumpopup.com

64

Impulse is a SaaS company offering an all-in-one no-code solution to boost sales for e-commerce stores by providing banners, timers, forms, and popups. The platform targets e-commerce marketers and store owners seeking easy-to-use tools to increase conversions and engagement. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Webflow CMS, Google Tag Manager, and Crisp Chat for customer support. Security posture is strong with HTTPS enforced and CAPTCHA protection on forms, though some security headers are missing and cookie consent mechanisms are absent. The domain is newly registered with privacy protection, consistent with a startup business. Overall, the website demonstrates a mature digital presence with good trust signals and user experience.