Retail security reports

A

APA Polska Sp. z o.o. Sp.K.

apapolska.pl

0

APA Polska Sp. z o.o. Sp.K. is a well-established Polish company specializing in the distribution and sale of high-quality framing products and art supplies. With over 20 years of experience and a domain registered since 2002, the company serves a diverse clientele including framers, galleries, museums, and artists. Their product portfolio includes wooden and aluminum frames, passepartout, museum glass, framing machines, and art materials under the Renesans brand. The website is professionally designed, SEO optimized, and provides comprehensive product information and partner links. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the company demonstrates strong business credibility and digital maturity, with room for improvement in privacy and security transparency.

C

Chachar catering s.r.o.

chachar.cz

0

Chachar catering s.r.o. operates a regional pizza delivery and catering service in the Czech Republic, established since 2006. The company offers fast delivery of pizza, wings, and other fresh food items through an online ordering platform and telephone. With multiple branch locations across various Czech cities, the business targets general consumers seeking convenient food delivery. The website is professionally designed with consistent branding and good content quality, supporting a medium-sized enterprise model focused on retail and hospitality sectors. Technically, the website is built on WordPress 4.9.8 with a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA for security. Hosting is consistent with Czech providers, and the site uses HTTPS with no detected blocking or WAF interference. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequate with proper meta tags and structured navigation. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms in place. However, explicit security headers and a formal security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is evident with GDPR-related pages and cookie consent, though no dedicated data protection officer contact was identified. Overall, the website and business present a trustworthy and professional front with low risk. Strategic improvements include enhancing security headers, updating WordPress to the latest version, and publishing explicit security and incident response policies to further strengthen trust and compliance.

F

Fastest Solution s.r.o.

kvetinkatrinec.cz

0

Květinka Třinec is a local Czech Republic-based e-commerce business specializing in flower delivery services across Třinec and surrounding areas. The website offers a variety of fresh flowers, bouquets, flower boxes, and seasonal arrangements with convenient online ordering and timely delivery. The business targets consumers seeking fresh floral gifts and arrangements with a focus on regional delivery. Technically, the website is hosted likely on AWS infrastructure, uses modern JavaScript libraries, and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and some security headers present, though the Content-Security-Policy header is commented out and no explicit security or incident response policies are published. Privacy compliance is well addressed with GDPR documentation and cookie consent mechanisms. However, the WHOIS data for the domain is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy but could improve transparency on security policies and domain registration details.

G

Geiger Edelmetalle

geiger-edelmetalle.de

0

Geiger Edelmetalle operates a professional e-commerce platform specializing in the sale and purchase of precious metals including gold, silver, copper, palladium, and platinum. The company targets investors and collectors seeking high-quality bullion and coins, supported by services such as engraving, storage, and individual minting. The website is TÜV-certified, indicating a commitment to quality and trustworthiness in the precious metals retail market. Technically, the site is built on the Shopware CMS platform, leveraging modern web technologies and analytics tools like Matomo and TikTok Pixel, with a good level of mobile optimization and accessibility. Security posture is strong with HTTPS enforced and nonce usage in scripts, though explicit security headers and policies are absent. Privacy compliance is basic, with cookie consent mechanisms present but no clear privacy or terms of service pages detected. Overall, the site presents a credible and professional digital presence with room for improvement in transparency and security documentation.

C

Cirio 1856 Swiss

cirio1856.ch

0

Cirio 1856 Swiss is a well-established company specializing in authentic Italian tomato and vegetable products, serving both consumers and professional food service sectors. The website reflects a mature digital presence with multi-language support and a comprehensive product catalog. The brand leverages WordPress with Oxygen Builder and several modern plugins to deliver a responsive and SEO-optimized experience. Security posture is solid with HTTPS and GDPR cookie consent implemented, though privacy and terms of service pages are absent, which could be improved. No direct contact information is readily visible, which may impact user trust and compliance. Overall, the site is professional and trustworthy, aligning well with the company's heritage and market positioning.

C

Cirio 1856

cirio1856.se

0

Cirio 1856 is a well-established brand specializing in authentic Italian tomato products, serving both consumers and business clients primarily in Sweden and internationally through multiple country-specific domains. The website is built on WordPress using Oxygen Builder and enhanced with Yoast SEO for search optimization. It offers a clear navigation structure with product categories, recipes, business services, and quality certifications. The site demonstrates good digital maturity with mobile optimization and cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data for the domain www.cirio1856.se raises concerns about domain registration legitimacy. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit incident response policies. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and enhanced security practices.

C

Cirio 1856

cirio1856.ro

0

Cirio 1856 Romania operates as a medium-sized food product company specializing in authentic Italian tomatoes and vegetables. The website presents a professional and well-structured digital presence, targeting both consumers and professional clients in the food service and retail sectors. The company leverages a multi-language platform to serve various international markets, indicating a broad geographic reach and established brand heritage dating back to 1856. The business model includes B2B partnerships, food service solutions, and retail product offerings, positioning Cirio 1856 as a premium supplier in its niche. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR, ensuring good SEO and privacy compliance. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit incident response policies are absent. No WAF or blocking mechanisms interfere with content accessibility. The security evaluation reveals good practices but highlights opportunities for improvement in security headers and vulnerability disclosure. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Business credibility is supported by consistent branding, certifications, and professional content. Overall, the website is trustworthy and safe for general audiences. Strategic recommendations include enhancing security headers, publishing a security policy and incident response page, and adding a security.txt file to facilitate vulnerability reporting. These steps will strengthen the security posture and trustworthiness further, supporting the company’s market position and digital maturity.

C

Cirio 1856

cirio1856.pl

0

Cirio 1856 is a well-established brand specializing in authentic Italian tomato and vegetable products, targeting both consumers and business clients in Poland and internationally. The website reflects a professional presence with a clear product catalog and multi-language support, indicating a mature digital footprint. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall brand consistency and content quality support legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving contact transparency to strengthen trust and compliance.

C

Cirio 1856

cirio1856.hu

0

Cirio 1856 is a well-established brand specializing in premium Italian tomato, fruit, and vegetable products. The website serves both consumers and business partners, offering detailed product categories and business information. The company has a strong market position with a history dating back to 1856, emphasizing quality and authenticity. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit contact details and terms of service pages.

C

Cirio 1856

cirio1856.nl

0

Cirio 1856 is a well-established Italian food company specializing in authentic Italian tomatoes, fruits, and vegetables, with a strong international presence through multiple country-specific domains. The website reflects a mature digital presence built on WordPress with modern technologies and good SEO practices. Privacy and cookie compliance are well implemented, indicating attention to GDPR requirements. Security posture is good with HTTPS and security headers, but lacks visible security policies or incident response information. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be monitored. Overall, the website presents a professional and trustworthy image suitable for both consumers and business clients.

C

Cirio International

cirio1856.es

0

Cirio International is a historic Italian food company specializing in authentic Italian cuisine products, particularly canned tomatoes and related food items. Founded in 1856, the company emphasizes traditional Italian culinary heritage and quality agricultural sourcing. The website targets consumers and retail buyers interested in authentic Italian food products across multiple countries. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.2, along with modern UI components like Slick Carousel and Fancybox. Google Analytics is employed for user tracking, and cookie consent mechanisms are implemented, indicating basic privacy compliance. Security posture is moderate, with HTTPS enforced but lacking visible security headers and using outdated libraries that may pose vulnerabilities. The WHOIS data is unavailable due to registrar restrictions common for .es domains, but the website content and branding are consistent with a legitimate historic brand. Overall, the website is professional, content-rich, and trustworthy but would benefit from technical and security updates.

C

Cirio 1856 Deutschland

cirio1856.de

0

Cirio 1856 Deutschland is a medium-sized retail business specializing in authentic Italian tomatoes and vegetable products, targeting both consumers and B2B clients in Germany. The website presents a well-structured product catalog including tomato varieties, ready meals, and organic and climate-neutral options, reflecting a strong brand heritage dating back to 1856. The company maintains a consistent brand identity and positions itself as a trusted provider of Italian food products in the German market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Alpine.js, hosted behind Cloudflare DNS and likely CDN services, ensuring good performance and mobile optimization. However, minor backend PHP warnings indicate some code quality issues that should be addressed. Security posture is adequate with HTTPS enabled and Cloudflare protection, but lacks visible security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible GDPR indicators. Contact information is not explicitly found in the provided content, limiting direct communication channels. Overall, the website is functional and professional but would benefit from improved privacy compliance and backend code hygiene.

C

Cirio 1856 Belgium

cirio1856.be

0

Cirio 1856 Belgium is a retail-focused business specializing in authentic Italian tomato and vegetable products, serving both consumers and professional food service markets. The website is professionally designed using WordPress CMS with multilingual support and SEO optimization, reflecting a medium-sized enterprise with a heritage brand image. The technical infrastructure is modern and mobile-optimized, though hosting details are not explicitly available. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no clear privacy policy page. WHOIS data is restricted, limiting transparency but not indicating suspicious activity. Overall, the website presents a trustworthy and professional front with room for improvement in security and compliance documentation.

C

Cirio 1856 Österreich

cirio1856.at

0

Cirio 1856 Österreich is a medium-sized retail business specializing in authentic Italian tomato and vegetable products, serving both consumers and professional food service clients primarily in Austria. The website is built on WordPress with modern technologies such as Alpine.js and Yoast SEO, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data due to NIC.AT restrictions is typical for Austrian domains but limits transparency. Overall, the website presents a professional image with moderate trustworthiness and business credibility.

C

Cirio 1856

ciriothailand.com

0

Cirio 1856 Thailand is a regional branch of the historic Italian food brand Cirio, specializing in authentic Italian tomato-based products and related food items. The website serves both consumers and business clients such as restaurants and partners, offering a range of products including tomatoes, vegetables, ready-to-eat sauces, and jams. The brand emphasizes its Italian heritage and premium quality, positioning itself as a trusted supplier in the Thai market and beyond. Technically, the website is built on WordPress with the Oxygen builder, leveraging modern JavaScript libraries like GSAP and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized with good SEO metadata and structured data, indicating a mature digital presence. However, some accessibility features and security headers could be improved. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, but lacks explicit privacy and cookie policies, as well as contact information for security incidents or data protection officers. No vulnerabilities or malicious content were detected, but the absence of key compliance documents and security headers suggests room for improvement. Overall, the website is professional and trustworthy with a solid business foundation, but would benefit from enhanced privacy compliance and security transparency to reduce risk and build greater user trust.

B

Bagelstein

bagelste.in

0

Bagelstein is a leading French quick-service restaurant chain specializing in bagels and coffee shop products. The company emphasizes fresh ingredients, original recipes, and a unique brand personality. Their market presence spans France and several European countries, positioning them as a leader in the fast bagel food segment. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on Drupal 11 with modern JavaScript libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. WHOIS data is unavailable, which slightly impacts trust but does not outweigh the professional presentation and strong social media presence. Overall, the site is safe, well-structured, and suitable for general audiences.

B

Bagelstein

bagelstein.com

0

Bagelstein is a leading French fast-food chain specializing in bagels and coffee shop products, with a strong presence across France and parts of Europe. The company emphasizes fresh, on-site prepared bagels with a variety of recipes and seasonal offerings, targeting a broad general audience seeking quick-service dining options. The website reflects a professional and consistent brand image with good content quality and navigation. Technically, the site is built on Drupal 11 with modern JavaScript libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some best practices but lacks explicit security headers and formal policies. The absence of WHOIS registrant data introduces some uncertainty about domain registration legitimacy, though the website and social media presence support business credibility. Overall, the site is functional, secure, and business-focused but would benefit from enhanced privacy and security transparency.

K

Krispy Kreme France

krispykreme.fr

0

Krispy Kreme France operates as the localized branch of the iconic American doughnut brand, offering freshly made doughnuts and coffee beverages primarily in Paris. The website reflects a medium-sized retail and hospitality business with a focus on quality and customer experience, supported by a loyalty program and corporate delivery services. Technically, the site is built on WordPress with Elementor, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well-structured, mobile-optimized, and integrates a cookie consent mechanism, though it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and no obvious vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Church & Dwight México

trojan.com.mx

0

Trojan.com.mx is the official Mexican website for Trojan condoms, operated by Church & Dwight México. The site promotes sexual health and safety by offering high-quality condom products and educational content tailored to the Mexican market. It maintains a strong brand presence with integrated social media channels and a focus on user engagement. Technically, the website employs modern front-end frameworks such as Materialize CSS and Bootstrap, enhanced by analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is protected by Imperva Incapsula WAF and enforces HTTPS, reflecting a solid security posture. Privacy compliance is robust with OneTrust cookie consent management and clear privacy and terms of service pages. However, explicit contact information and security policies are not prominently displayed, which could be improved for enhanced trust and transparency.

Trojan.ca is the Canadian website for Trojan, a well-known brand specializing in sexual wellness products including condoms, lubricants, and vibrating massagers. The site is professionally designed and targets adult consumers in Canada seeking high-quality sexual health products. It is owned by Church & Dwight Co., Inc., a large enterprise with a strong market presence. The website leverages modern technologies such as Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though some security headers and explicit incident response contacts are missing. Overall, the site is legitimate, trustworthy, and compliant with privacy regulations, serving a niche adult market effectively.

Church & Dwight Canada Corp. operates as a manufacturer and distributor of well-known consumer household brands trusted by Canadian consumers. The website presents a professional corporate image with clear branding and a focus on product families such as ARM & HAMMER™, GRAVOL™, and others. The company targets Canadian households and emphasizes reliability and effectiveness in its product offerings. The business is a subsidiary of Church & Dwight Co., Inc., with a domain age consistent with its market presence since 2000. Technically, the website employs modern tracking and consent management technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent. The hosting is managed via MarkMonitor, a reputable provider. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, no CMS or specific frameworks were detected. From a security perspective, the site uses HTTPS and has domain status flags that prevent unauthorized transfers or updates. DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response information, which could be improved. The cookie consent mechanism is robust and GDPR compliant, reflecting good privacy practices. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The absence of direct contact emails or phone numbers is mitigated by a contact form hosted on a related domain. Recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and security posture.

RIDGIDGear.com operates as an official e-commerce platform specializing in RIDGID and Greenlee branded apparel and accessories, targeting trade professionals and brand enthusiasts. The site is owned by Emerson Electric Co., a large and established industrial company, which lends credibility and market presence. The website offers a structured product catalog with clear navigation and a professional design, supporting a positive user experience. Technically, the site uses standard web technologies including jQuery and Google Fonts, with a custom or proprietary e-commerce platform. Mobile optimization is good, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is implied but no advanced security headers or DNSSEC are enabled, representing an area for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and functional but could benefit from enhanced security and privacy features.

C

Church & Dwight Co., Inc.

naircare.com

0

Nair™ is a well-established brand specializing in hair removal products including creams, waxes, and depilatories, targeting a broad consumer audience. The website positions itself as a leading brand with over 80 years of expertise, offering a variety of products and educational content to support consumer needs. The parent company is Church & Dwight Co., Inc., a large retail entity. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Bazaarvoice. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data reduces transparency but the overall brand trust and content quality remain strong. Strategic improvements in security posture and transparency would enhance trust further.

XTRA™ Laundry is a consumer brand focused on laundry products, likely detergents, marketed through an e-commerce style website featuring product information and customer testimonials. The website uses common marketing and analytics technologies such as Google Tag Manager, Bazaarvoice for reviews, and OneTrust for cookie consent. The technical infrastructure is moderate with Bootstrap and Owl Carousel frameworks, but lacks advanced CMS or hosting details. Security posture is basic with HTTPS implied but no visible security headers or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Privacy compliance is minimal with no privacy policy found, though cookie consent is implemented. Overall, the website is functional but lacks critical trust and compliance elements.

C

Church & Dwight Co., Inc.

batistehair.com

0

Batistehair.com is the official website for Batiste Dry Shampoo, a consumer retail brand specializing in hair care products. The site is owned by Church & Dwight Co., Inc., a large and established corporation in the consumer goods sector. The website offers a range of dry shampoo products, leave-in hair masks, and hair care tips, targeting consumers seeking quick and effective hair refresh solutions. The brand is well positioned in the retail market with award recognition and a strong social media presence. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager, YouTube APIs, and uses OneTrust for cookie consent management. The site is mobile optimized with good SEO practices and moderate performance. Embedded third-party services include Salesforce chat and MikMak for e-commerce affiliate links. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is good with a comprehensive privacy policy hosted on the parent company’s domain. Overall, the website presents a professional and trustworthy front for the Batiste brand. The main risk is the absence of WHOIS registration data, which limits domain transparency. However, the strong brand association and external references mitigate this concern. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts.

C

Church & Dwight Co., Inc.

oxiclean.com

0

OxiClean.com is the official website for the OxiClean brand, a leading stain remover and home cleaning product line owned by Church & Dwight Co., Inc. The site offers comprehensive product information, multimedia content including instructional videos, and customer testimonials, targeting consumers seeking effective stain and odor removal solutions. The website is professionally designed with consistent branding and good mobile optimization, reflecting a mature digital presence. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Analytics, and Salesforce chat integration. Privacy compliance is well addressed with a OneTrust cookie consent mechanism and links to comprehensive privacy and terms policies hosted on the parent company’s domain. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved and explicit security policies are absent. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but does not detract from the overall legitimacy given the brand and corporate association. Overall, the website demonstrates a solid business and technical foundation with room for enhanced security disclosures and direct contact information.

C

Church & Dwight Co., Inc.

trojanbrands.com

0

Trojanbrands.com is the official website for Trojan™, a leading and trusted sexual health brand in the United States with a history spanning 100 years. The site offers a range of adult sexual health products including condoms, lubricants, sex toys, and supplements, targeting an adult audience seeking quality and trusted products. The website is professionally designed with consistent branding and clear navigation, supporting a strong market position under the parent company Church & Dwight Co., Inc. The site integrates modern technologies such as Google Analytics, Google Tag Manager, Salesforce chat support, and OneTrust for cookie compliance, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and privacy policies linked to the parent company domain, although explicit security headers are not detected in the provided data. The absence of WHOIS data for the domain is unusual and warrants further investigation, but the overall trustworthiness is supported by the brand's established reputation and external references. The site is not blocked by WAF or security mechanisms and is fully accessible.

F

Finishing Touch Flawless™

flawlessbeauty.com

0

Flawlessbeauty.com is an established e-commerce retail website specializing in beauty and personal care products targeted primarily at women. The brand, Finishing Touch Flawless™, has been in operation since 2000, indicating a mature market presence. The website employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Bazaarvoice for customer reviews, reflecting a moderate level of digital maturity. The technical infrastructure is hosted via MarkMonitor Inc., a reputable domain registrar and brand protection service, which adds to the business credibility. However, the website lacks visible privacy and terms of service policies in the provided content, which is a compliance gap.

H

Hero Cosmetics

herocosmetics.us

0

Hero Cosmetics operates a professional e-commerce platform specializing in acne-prone skincare products, offering customizable acne toolkits and targeted solutions. The company has established a strong market presence with cult-favorite products such as the Mighty Patch and Rescue Balm. The website is built on Shopify, leveraging modern technologies and integrations for marketing, analytics, and customer engagement. The technical infrastructure is robust, with fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS, security headers, and secure payment processing, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

Arrid.com is the official website for the Arrid brand, a well-established personal care product line specializing in deodorants and antiperspirants. The brand operates under the corporate umbrella of Church & Dwight, Inc., a large and reputable consumer goods company. The website presents a professional and consistent brand image, offering detailed product information and clear navigation aimed at general consumers seeking sweat protection solutions. The site integrates standard marketing and tracking technologies such as Google Tag Manager and The Trade Desk pixel, alongside a robust cookie consent mechanism powered by OneTrust, reflecting a commitment to privacy compliance. However, the use of an outdated jQuery version and absence of explicit security headers suggest areas for technical improvement.

V

Viviscal

viviscal.com

0

Viviscal operates a professional e-commerce website focused on hair growth vitamins and hair care products, targeting consumers seeking solutions for thicker, fuller hair. The site is built on the Shopify platform, leveraging a modern tech stack including Google Analytics, Facebook Pixel, TikTok Pixel, Hotjar, Klaviyo, and Yotpo for marketing, analytics, and customer engagement. The website demonstrates good digital maturity with fast performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable or protected, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and trust signals. Overall, Viviscal presents a credible and secure online presence with a solid foundation for business growth and customer trust.

T

Toppik.com

toppik.com

0

Toppik.com is a professionally designed e-commerce website specializing in hair building fibers and products for individuals experiencing hair thinning and hair loss. The site targets consumers seeking instant hair volume solutions and positions itself as a leading brand in this niche retail market. The business operates primarily in the United States and leverages Shopify as its e-commerce platform, integrating multiple third-party marketing and analytics tools to enhance customer engagement and operational efficiency. The website demonstrates good content quality, clear navigation, and consistent branding, supporting a positive user experience.

L

L'il Critters

lilcritters.com

0

L'il Critters is a well-established brand specializing in children's gummy vitamins and supplements, targeting parents seeking nutritious and tasty health products for their kids. The website demonstrates a professional e-commerce platform with clear navigation, rich content, and strong branding consistency. Technically, the site employs modern marketing and analytics technologies including Google Tag Manager, Facebook Pixel, Hotjar, and Bazaarvoice, indicating a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable anomaly that reduces overall trust and should be investigated further. Overall, the site is safe, user-friendly, and compliant with privacy regulations, but could improve transparency and security disclosures.

C

Church & Dwight Co., Inc.

felinepine.com

0

Feline Pine is a product brand under Church & Dwight Co., Inc., specializing in natural pine cat litter products that emphasize odor control, pet safety, and sustainability. The website presents a professional and consistent brand image, targeting cat owners seeking natural and effective litter solutions. The business model focuses on retail sales with clear product differentiation between clumping and non-clumping varieties. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security-wise, the site benefits from HTTPS, domain registration protections, and a WAF (Incapsula), though it lacks DNSSEC and some advanced security headers. Overall, the site is secure, privacy-compliant, and trustworthy, with minor areas for improvement in security policy transparency and DNS security. The domain's long history and consistent registration details further reinforce legitimacy.

ARM & HAMMER, a brand under Church & Dwight Co., Inc., operates a comprehensive website offering a wide range of household and personal care products including baking soda, cat litter, laundry detergents, oral care, and deodorants. The brand targets general consumers seeking trusted, everyday products with a focus on sustainability and community engagement. The website demonstrates a mature digital presence with multiple language options and rich multimedia content, reflecting a well-established market position in the retail and manufacturing sectors. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, Hotjar, TikTok Pixel, and Salesforce Embedded Chat, indicating advanced analytics and customer engagement capabilities. The site is mobile-optimized with good SEO practices, though accessibility features could be enhanced. Performance is moderate with room for improvement in loading speed and accessibility compliance. From a security perspective, the site uses HTTPS and integrates several security and analytics scripts but lacks explicit security headers and dedicated security or incident response pages. No critical vulnerabilities were detected, but recommendations include implementing security headers and publishing incident response contacts. Privacy compliance is well addressed through comprehensive policies hosted on the parent company domain, including GDPR considerations and cookie consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the brand's business objectives. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong brand presence and external references. Strategic improvements in security transparency and accessibility would further enhance the site's robustness and user trust.

Church & Dwight Co., Inc. is a well-established enterprise in the consumer goods sector, specializing in home and personal care products. The company operates globally with a portfolio of recognized brands, targeting consumers and investors interested in quality household and health products. The website reflects a professional corporate presence with clear branding and navigation, supporting business functions such as careers, innovation, and investor relations. Technically, the site employs modern frameworks like Bootstrap and integrates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and cookie consent mechanisms, though there is room for improvement by enabling DNSSEC and publishing a security.txt file. Overall, the website is trustworthy, compliant with privacy regulations, and provides a positive user experience.

B

Bokadirekt

bokadirekt.se

0

Bokadirekt is a prominent Swedish online booking platform specializing in beauty and health services, including massage, hairdressing, nail care, and wellness treatments. The platform targets consumers in Sweden seeking convenient online booking options for various personal care services. It operates a mature and professional website with a consistent brand presence and offers additional services such as gift cards and wellness cards. The company maintains active social media profiles and provides business portals for service providers. Technically, the website is built using modern JavaScript frameworks like React and integrates multiple analytics and marketing tools, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the www subdomain suggests possible registrar configuration nuances but does not detract from the site's legitimacy. Overall, Bokadirekt demonstrates a strong digital presence with good security and privacy practices, serving a large user base in Sweden.

L

Leuchtturm Gruppe

leuchtturmgruppe.com

0

Leuchtturm Gruppe is a large, family-owned premium brand house based in the Hamburg metropolitan region, Germany. It operates internationally with over 500 employees across 10 locations on 4 continents. The company manages a portfolio of eight premium brands specializing in products related to Collecting, Writing, Living, and Giving. The website reflects a strong brand identity with professional design and comprehensive content, targeting a general audience interested in high-quality, real-world products. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern JavaScript libraries like Swiper and jQuery, delivering a mobile-optimized and SEO-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are absent. The absence of WHOIS data for the domain reduces transparency and trustworthiness somewhat, but the overall digital presence is professional and consistent with a legitimate business.

P

Point S group

point-s-group.com

0

Point S group operates as a leading global independent tyre dealer and car maintenance network with presence in 51 countries and over 6,700 points of sale. The company offers modern retail concepts adaptable to various business environments and focuses on providing vehicle maintenance services through a network of independent dealers. The website is professionally designed, SEO optimized, and uses modern web technologies including WordPress, jQuery, and Google Analytics. Privacy compliance is well addressed with a consent management platform and clear cookie policies. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response information are not published. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but the overall business credibility remains high based on website content and branding.

R

Renesans Polska

renesanspolska.pl

0

Renesans Polska is a well-established Polish company specializing in the production and distribution of high-quality artistic painting supplies including paints, pigments, brushes, and related accessories. The company targets both professional and amateur artists, offering a broad product range that supports various painting techniques. With nearly 30 years of brand presence and a medium-sized market position, Renesans Polska combines traditional craftsmanship with modern technology to serve a diverse creative audience. The website reflects this with comprehensive product information and educational content, supported by a professional design and consistent branding. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website is trustworthy, user-friendly, and compliant with basic privacy regulations, making it a reliable digital presence for the company.

B

Bullet Journal by LEUCHTTURM1917

bullet-journal.eu

0

Bullet Journal by LEUCHTTURM1917 operates a professional e-commerce platform focused on premium stationery products, primarily bullet journals and related writing instruments. The company leverages its long-standing brand heritage dating back to 1917 to position itself as a trusted provider within the European market. The website offers a curated shopping experience with clear navigation, product presentation, and customer support channels. Technically, the site employs modern web technologies including Bootstrap and jQuery, integrates Google Analytics and other marketing tools, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, serving a general audience with safe content.

Earth and Sky Jewelry is a small artisan jewelry retailer specializing in handcrafted pieces made from Sterling Silver, Gold, Red Brass, and Copper. The company emphasizes unique design and craftsmanship, targeting general consumers interested in elegant and flexible jewelry. The website is built on legacy ASP.NET Web Forms technology using the DNN CMS platform, indicating a moderate level of digital maturity. While the site provides basic content and navigation, it lacks modern features such as mobile optimization and advanced SEO. Security posture is limited, with no visible HTTPS confirmation or security headers, and no cookie consent mechanism despite having a privacy policy. The domain is well-established since 2006, supporting the legitimacy of the business. Overall, the website functions adequately for its niche but requires improvements in security, privacy compliance, and technical modernization.

F

Fanshop HC Olomouc

fanshopolomouc.cz

0

Fanshop HC Olomouc operates an official e-commerce platform dedicated to selling fan merchandise and souvenirs for the HC Olomouc hockey team. The website offers a variety of products including official jerseys, scarves, and accessories, targeting passionate hockey fans primarily in the Czech Republic. The business model is retail-focused, leveraging the Shoptet platform for online sales and customer engagement. The site demonstrates consistent branding and provides clear contact information, enhancing trust and customer confidence. Technically, the website uses a mature but somewhat dated technology stack including jQuery and the Shoptet e-commerce platform. It is mobile-optimized and includes standard SEO and accessibility features. Performance is moderate, with room for improvement in modernizing libraries and enhancing security headers. Privacy compliance is addressed with cookie consent and privacy policies, though GDPR compliance could be further strengthened with more detailed disclosures. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a good baseline security posture. However, the absence of advanced security headers and a public security policy or incident response contact reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data limits domain trust assessment but the official club affiliation and professional presentation support legitimacy. Overall, Fanshop HC Olomouc presents a trustworthy and functional online retail presence for hockey fans, with recommendations to enhance security practices and transparency to further improve trust and compliance.

G

Galerie Šantovka, a. s.

galeriesantovka.cz

0

Galerie Šantovka is a large retail shopping center located in Olomouc, Czech Republic, recognized as one of the largest in the region and among the top ten in the country. The website showcases a broad range of retail shops, entertainment options such as cinemas and bowling, and various customer services including parking and gift vouchers. The site targets general consumers and local visitors, providing event information and promotional activities to engage its audience. Technically, the website employs modern JavaScript libraries like jQuery and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile optimized and includes structured data for SEO benefits. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers and explicit vulnerability disclosure information. Overall, the website is professionally maintained, trustworthy, and compliant with GDPR requirements, but could improve its security posture by adding security headers and incident response details.

S

SELM MORAVA, S.R.O.

selm-morava.cz

0

SELM MORAVA, S.R.O. is a Czech-based company specializing in wholesale and retail sales of sanitary equipment and related installation materials, with a business tradition dating back to 1996. The company targets both B2B and B2C customers within the Czech Republic, positioning itself as an established regional player in the retail sector. The website reflects this business focus with clear descriptions of services and product offerings, including a dedicated e-shop link for online sales. Technically, the website is built on a custom CMS platform using modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps API for location services. The site demonstrates moderate performance and good mobile optimization, though SEO and accessibility features are basic. The presence of cookie consent mechanisms and privacy policy pages indicates some level of privacy compliance, albeit at a basic level. From a security perspective, the website employs HTTPS and has implemented cookie consent, but lacks explicit security headers and published security or incident response policies. No vulnerability disclosure or security.txt files are present, and contact information is limited to a web form without direct email or phone contacts. These gaps suggest room for improvement in security posture and transparency. Overall, the website is professional and trustworthy with a moderate security and privacy compliance level. Strategic enhancements in security policies, contact transparency, and technical security controls would strengthen the company's digital maturity and risk management posture.

K

Kitty Care

kittycare.cz

0

Kitty Care is a Czech-based e-commerce business specializing in premium cat care products including 100% meat-based cat food, probiotic dry food, wet food, and premium cat litter. The website targets cat owners seeking high-quality, natural, and locally produced pet products. The company emphasizes health, sustainability, and local sourcing in its product offerings. Technically, the website uses modern frontend frameworks such as Bootstrap and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Smartlook. Hosting appears to leverage Microsoft Azure Blob Storage for media assets. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy/cookie policies. WHOIS data is unavailable, which limits domain trust assessment but the website content and contact information appear professional and consistent with a legitimate retail business. Overall, the site provides a good user experience with clear navigation and product information but should improve privacy compliance and security headers to enhance trust and compliance.

PNEUMATICO International, spol. s r. o. operates an e-commerce platform specializing in the sale of tires and wheels for various vehicle types including passenger cars, utility vehicles, trucks, and motorcycles. The company also provides complementary tire services such as mounting, balancing, repairs, and seasonal storage. The business targets vehicle owners primarily in the Czech Republic and maintains a regional presence with a focus on quality service and product offerings. The website is professionally designed, mobile-optimized, and integrates modern web technologies including Google reCAPTCHA for form security. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and explicit cookie consent mechanisms. Overall, the website presents a credible and professional business front with room for enhanced privacy and security compliance.

The Salt and Pepper Shaker Store is a specialized e-commerce retailer focused on offering a wide variety of collectible salt and pepper shakers. Established in 2011, the company targets collectors and enthusiasts with a niche product catalog exceeding 1000 styles. The website is built on the DNN CMS platform using the Cart Viper e-commerce module, providing standard online shopping features including product search, category browsing, and cart management. The business maintains a clear market position as a niche leader in its segment with a small but focused operation based in the United States. Technically, the website employs common web technologies such as jQuery and Font Awesome, with a moderate performance profile and basic mobile optimization. SEO and accessibility features are present but not advanced. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie consent banner, though GDPR compliance indicators are minimal. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in DNS security and security header implementation. The website is trustworthy with consistent domain registration data and clear contact information. The business credibility is supported by professional content and a consistent brand presence. Strategic recommendations include enhancing security controls, improving privacy compliance, and expanding incident response transparency to strengthen trust and resilience.

LEELOODLES is a small, youth-led ecommerce business specializing in humorous and creative tshirts and apparel based in Toronto, Canada. The website is hosted on the Big Cartel platform and integrates Stripe and PayPal for payment processing. The business targets a general audience interested in unique, themed apparel, leveraging social media channels for brand presence. The website design and navigation are good, with mobile optimization and clear product listings. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. WHOIS data is inconsistent and suspicious, showing a future domain creation date and a drop-catching registrar, which raises legitimacy concerns despite the professional website content. Overall, the site is functional and safe but requires improvements in privacy compliance and domain registration transparency.