Security Directory

W

WESTbahn Management GmbH

westbahn.at

78

WESTbahn Management GmbH operates a professional rail transport service primarily serving Austria and Germany, offering long-distance train services and ticket sales. The website is well-branded and targets passengers seeking affordable and frequent train connections between major cities. The company maintains a consistent market position as an important private rail operator in the region. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for consent management, ensuring compliance with privacy regulations. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency by adding privacy and terms of service pages. The domain registration data aligns well with the business, supporting legitimacy and trust.

M

MG Motor Europe

mgmotor.eu

68

MG Motor Europe operates a professional and well-branded website targeting Finnish and broader European markets with a focus on electric and hybrid vehicles. The site offers detailed model information, configurators, test drive requests, and dealer locators, indicating a mature digital presence aligned with automotive industry standards. The technical infrastructure leverages modern web technologies including Google Tag Manager, Imgix CDN, and Swiper.js for UI components, supported by SEOmatic CMS meta generation. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of direct contact information and incident response details suggests room for improvement in transparency and compliance. Overall, the site is trustworthy and professionally maintained, suitable for its business domain.

A

ADMIRAL Sportwetten

admiral.at

69

ADMIRAL Sportwetten operates an online sports betting platform primarily targeting German-speaking users in Austria. The website offers sports betting services with a focus on providing competitive odds. The business model revolves around online gambling, catering to mature audiences interested in sports wagering. The site branding is consistent and the content is relevant to its target market, though the content quality is basic with limited visible business contact information or policy disclosures. Technically, the website employs modern front-end technologies including Bootstrap and OverlayScrollbars, ensuring a responsive and moderately optimized user experience. However, the absence of visible security headers and privacy-related policies indicates gaps in security and compliance maturity. No advanced analytics or advertising technologies were detected, suggesting minimal tracking or marketing integrations. From a security perspective, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a functional but basic digital presence with room for improvement in privacy compliance, security posture, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

Adolf Würth GmbH & Co. KG

wuerth.de

67

Adolf Würth GmbH & Co. KG operates a professional and comprehensive website focused on assembly and fastening technology products for industrial and craft users. The company is positioned as a leading manufacturer and supplier in its sector, offering over 100,000 products including screws, dowels, tools, and safety equipment. The website targets professional users such as workshops, construction sites, and various tradespeople. Technically, the site uses a modern CMS (FirstSpirit), Bootstrap framework, and integrates Visual Website Optimizer for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.

E

Engelbert Strauss GmbH & Co. KG

engelbert-strauss.com

77

Engelbert Strauss GmbH & Co. KG operates the www.strauss.com website, a leading European retailer specializing in high-performance workwear and safety shoes targeted at tradespeople and farmers. The website is professionally designed with a strong international presence, supporting multiple languages and leveraging modern web technologies and CDN hosting for optimal performance. Privacy and cookie policies are comprehensive and GDPR compliant, although direct contact details are primarily available via contact forms rather than explicit emails or phone numbers. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Security posture is strong with HTTPS enforcement and security headers, but the site lacks explicit security policies or incident response information.

W

Werbehelden GmbH

werbehelden.com

55

Werbehelden GmbH is a small Austrian marketing agency specializing in below-the-line marketing, ambient media, promotions, and sampling campaigns. The company offers comprehensive 360-degree promotional services including concept creation, planning, execution, and documentation. Their market position is that of an established regional player with award-winning campaigns and a strong focus on experiential marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in German targeting business clients seeking direct marketing solutions. Technically, the site uses modern JavaScript libraries, Matomo and Google Analytics for tracking, and implements a detailed cookie consent mechanism with GDPR compliance. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, but lacks some HTTP security headers and a published security policy or incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for WHOIS inconsistencies and minor security header omissions.

1

1blu GmbH

1blu.de

58

1blu GmbH operates a professional web hosting and server services platform primarily targeting business and professional customers in Germany. Their offerings include web hosting packages, VPS, dedicated servers, domain registration, and a website builder. The company emphasizes performance with NVMe SSD technology and managed hosting options. The website is well-structured, professionally designed, and provides clear pricing and service information. Technical infrastructure appears modern with use of Bootstrap and JavaScript frameworks, hosted in their own German data center in Frankfurt/Main. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks published security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, with transparent business operations and no suspicious indicators.

alixon gmbh is a Swiss-based small IT solutions company specializing in software and internet services such as address management, reservation systems, cloud solutions, and web hosting. Established in 2000, it serves primarily local businesses and organizations with a focus on personalized consulting and tailored software solutions. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site uses Ext JS framework and a custom CMS, with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. Remote support is offered via AnyDesk, enhancing customer service capabilities. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Compassion Switzerland operates a professional non-profit website focused on child sponsorship and charitable donations. The platform provides users with account management features including sponsorship tracking, donation history, and communication with sponsored children. The website is built on the Odoo CMS platform and incorporates modern web technologies such as JavaScript, FontAwesome, and Google Analytics for tracking. The site is well-branded, mobile-optimized, and provides multi-language support, targeting donors and sponsors primarily in Switzerland. Security measures include HTTPS enforcement and CSRF protection on login forms, though some security headers are missing. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the website presents a trustworthy and professional front for Compassion Switzerland's charitable activities.

B

Betterment LLC

betterment.com

73

Betterment LLC is a leading US-based financial technology company specializing in automated investing and financial planning services. Their platform offers tailored investment portfolios, retirement accounts, cash management products, and premium advisory services targeting individual investors, employers, and financial advisors. The company holds a strong market position supported by multiple industry awards and a high customer satisfaction rate. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, delivering excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and consent management, although a dedicated security policy and incident response contact could enhance transparency. Overall, Betterment demonstrates a mature digital presence with strong business credibility and compliance adherence.

A

Airbrake

airbrake.io

65

Airbrake is a technology company specializing in error monitoring, performance monitoring, and deployment tracking solutions for software developers and DevOps teams. Positioned as a developer-centric SaaS provider, Airbrake offers tools that enable faster bug detection and resolution, helping organizations deploy software fearlessly. The company is a subsidiary of LogicMonitor and serves over 1600 organizations including major brands like Netflix and Adobe. The website is professionally designed, mobile-optimized, and rich in content, providing clear calls to action and extensive resources such as blogs, documentation, and customer stories. Technically, the website leverages modern web technologies including Webflow CMS, JavaScript libraries, Google Analytics, and Google Tag Manager. It integrates Airbrake's own browser notifier for error tracking. The site performs well with fast loading times and good accessibility features. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. The WHOIS data is unavailable due to query failure or privacy protection, but the website's branding and association with LogicMonitor support its legitimacy. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no visible security policy or incident response page, and no security.txt file was found. The site uses tracking scripts for analytics and marketing but maintains a good level of privacy compliance. Overall, the security posture is solid but could benefit from enhanced transparency and additional security headers. The overall risk assessment is low with strong business credibility and technical maturity. Strategic recommendations include implementing cookie consent banners, publishing a security policy, adding security headers, and providing a vulnerability disclosure mechanism to further enhance trust and compliance.

A

Australian Broadcasting Corporation

abc.net.au

64

The Australian Broadcasting Corporation (ABC) is Australia's national public broadcaster, established in 1929. It provides a wide range of services including news, local content, audio and video streaming, educational programming, and entertainment. The website serves a broad Australian audience with trusted and comprehensive media content. The ABC maintains a strong market position as a leading media entity in Australia with multiple subsidiaries and branded services.

B

Bocoup

bocoup.com

63

Bocoup is a worker-owned technology consultancy specializing in the development of web standards, software tools, and digital projects with a strong emphasis on accessibility, privacy, and inclusivity. They serve a diverse clientele including tech companies, nonprofits, and institutions, positioning themselves as a niche player with a values-driven approach. Their market presence is supported by reputable clients such as Google, Mozilla, and Meta Accessibility, and they maintain a strong commitment to creating technologies that resist capture and safeguard user privacy. Technically, the website is built using modern frameworks such as Next.js and React, with a focus on performance, mobile optimization, and accessibility. The site integrates a headless WordPress CMS for blog content and uses minimal tracking via plausible.io, reflecting a privacy-conscious digital maturity. The technical infrastructure supports a fast, responsive, and user-friendly experience. From a security perspective, the site enforces HTTPS and employs secure forms but lacks explicit security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or a data retrieval issue, but it introduces some uncertainty regarding domain legitimacy. Overall, Bocoup presents a professional and trustworthy online presence with strong technical and business foundations. Strategic improvements in transparency around privacy, security policies, and domain registration details would further strengthen their security posture and business credibility.

Bleacher Report is a well-established sports media platform founded in 2005, offering sports news, highlights, expert analysis, and scores to a broad audience of sports fans. The website demonstrates a strong market position as a recognized brand in the sports media industry. Technically, the site leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, and incorporates GDPR-compliant cookie consent mechanisms. The site performs moderately well with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced and domain registration includes protective status flags; however, security headers and explicit security policies are not evident, indicating room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

N

New Vector Ltd

gitter.im

54

Gitter is a developer-focused chat and networking platform operated by New Vector Ltd, leveraging the Matrix open communication protocol. It serves as a community hub for developers and open source projects, providing messaging, content discovery, and community management services. The platform is trusted by major technology companies such as Airbnb, AWS, Google, and Microsoft, indicating a strong market position within the technology sector. The website presents a professional and consistent brand image with clear messaging targeted at developers and community managers. Technically, the website is built using modern web technologies including the Astro framework and integrates with Matrix clients like Element. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized and offers a good user experience, although SEO and accessibility features are basic. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's infrastructure. However, explicit security headers and published security policies are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were identified. Privacy compliance is limited, with no visible privacy or cookie policies, though terms of service and acceptable use policies are provided. Contact information is minimal, with no direct emails or phone numbers listed. Overall, Gitter demonstrates a solid technical foundation and credible business presence with a safe content profile. Strategic enhancements in privacy compliance, security policy transparency, and contact availability would further strengthen its security posture and user trust.

A

ARC Imaging Resources

arcsupplies.com

49

ARC Imaging Resources operates a customer supply and service portal accessible via arcsupplies.com. The website serves as a login gateway for existing customers to manage their supply orders and service requests. The business appears to be a niche supplier in the imaging resources retail sector, with a domain age consistent with its founding year of 2012, indicating a stable market presence. The portal is designed with basic but functional user experience and mobile optimization, targeting primarily existing customers requiring supply and service support. Technically, the website uses standard HTML5, CSS3, and JavaScript with a theme framework from Coderthemes. The site is hosted under a domain registered with Network Solutions, LLC, with no DNSSEC enabled and no advanced CMS detected. Performance and accessibility are moderate to good, but SEO and privacy compliance are minimal. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers such as Content-Security-Policy or HSTS. The login form does not show anti-CSRF tokens, and no incident response or security contact information is provided. The domain WHOIS data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and security best practices reduces the overall security posture. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security measures. Strategic improvements in security headers, privacy compliance, and incident response visibility are recommended to enhance trust and compliance.

The website manalyticshub.com presents minimal content, consisting primarily of a single JavaScript inclusion and a generic page title 'Content widget'. There is no visible business description, contact information, or user-facing content. The domain is registered since 2018 with a reputable Russian registrar REG.RU LLC and uses Yandex Cloud for hosting. The lack of content and metadata limits the ability to assess the business model or market position. Technically, the site uses basic JavaScript and has a permissive Content-Security-Policy header that allows unsafe inline scripts, which is a security concern. No HTTPS or SSL configuration details were provided, but the domain uses clientTransferProhibited status, indicating some domain transfer protection. No privacy, cookie, or terms of service policies are present, and no contact or security policies are found, indicating low privacy compliance and business credibility. Overall, the site appears to be either under development or a placeholder with very limited functionality and content.

S

Smash-Expert

smash-expert.pt

59

Smash-Expert is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, table tennis, and squash. The company operates multiple country-specific domains indicating a broad European market presence. Their website offers a comprehensive catalog of products including shoes, rackets, balls, strings, clothing, and accessories, targeting sports enthusiasts and athletes. The business model is retail e-commerce with emphasis on fast delivery and secure payment options. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Ads, and reCAPTCHA, with a consent management platform to comply with privacy regulations. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is strong with HTTPS enforced and security best practices observed, but lacks explicit security policies and incident response information. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the retail racket sports market in Portugal and Europe.

S

Smash-Expert: specialisten på racketsporter

smash-expert.se

56

Smash-Expert.se is a specialized e-commerce retailer focused on racketsports equipment including tennis, padel, badminton, table tennis, and squash. The website targets sports enthusiasts primarily in Sweden, offering a broad range of products with an emphasis on fast delivery and secure payment. The business is relatively new, with domain registration in 2023, and positions itself as a specialist in the racketsports retail market. Technically, the website is built on Magento (OpenMage), leveraging modern web technologies and integrating Google Analytics, Google Ads, and reCAPTCHA for marketing and security purposes. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, but could be improved by enabling DNSSEC and adding more comprehensive security headers. Privacy compliance is partial; while a consent mechanism is implemented, explicit privacy and cookie policy pages are not found, and contact information is not clearly provided. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

H

HAVALning O'zbekistondagi rasmiy distribyutori

haval.uz

46

The website haval.uz serves as the official distributor platform for Haval vehicles in Uzbekistan, offering information on new car models such as H6, H9, Dargo, and Jolion. It targets automotive customers and dealers within Uzbekistan, providing services including vehicle sales, test drives, and promotional offers. The site demonstrates a moderate level of digital maturity with a modern tech stack including Firebase, Yandex Maps API, Google Tag Manager, and Yandex Metrika for analytics and tracking. The design is professional and mobile-optimized, ensuring a good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is legitimate and consistent with its business claims, but improvements in privacy and security transparency are recommended.

W

WP Rocket

wp-rocket.com

67

WP Rocket is a well-established company founded in 2013, specializing in WordPress performance optimization through its flagship caching plugin. The company holds a strong market position as a leading WordPress caching solution, targeting a broad audience including bloggers, eCommerce sites, freelancers, and agencies. Their business model revolves around direct sales of their plugin with subscription options, supported by comprehensive documentation and customer testimonials. Technically, the website is built on WordPress, leveraging modern web technologies and third-party tools such as Google Tag Manager, VWO, and Termly for analytics and compliance. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSP monitoring, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for WordPress users seeking performance enhancements.

Z

Zuger Kantonaler Imkerverein

zugerimker.ch

49

The Zuger Kantonaler Imkerverein website serves as an informational and community platform for beekeepers in the Zug canton of Switzerland. It provides educational courses, event announcements, and resources related to beekeeping and bee health. The site targets local beekeepers and individuals interested in apiculture, operating as a small non-profit regional association. Technically, the website is built on the CMSimple platform, featuring a clean and consistent design with good navigation and mobile optimization. However, it lacks advanced technical features such as structured data and visible analytics. Security posture is moderate with no visible security headers or confirmed HTTPS status, and no cookie consent mechanism is implemented despite a privacy policy being present. Business credibility is supported by sponsor links and event information, though contact details are not clearly visible on the homepage. Overall, the site is safe and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

Business Media Central Asia

bmca.uz

57

Business Media Central Asia (BMCA) operates as a representative office of Messe Frankfurt in Central Asia, focusing on organizing large-scale B2B exhibition projects and events that promote market development in the region. The company is relatively new, founded in 2022, and positions itself as a key player in the exhibition and media sector within Uzbekistan and neighboring markets. The website reflects a professional business presence with clear branding and navigation, targeting B2B clients and partners interested in exhibition participation and collaboration. Technically, the website is built on the Tilda CMS platform, leveraging Tilda's CDN and JavaScript libraries for content delivery and user experience. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. The absence of advanced frameworks or complex backend technologies suggests a straightforward digital infrastructure suitable for the company's current scale. From a security perspective, the website uses HTTPS, ensuring encrypted communication. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for compliance with data protection regulations such as GDPR. No incident response contacts or vulnerability disclosure mechanisms are present, indicating room for improvement in security posture and transparency. Overall, BMCA's website demonstrates a solid business foundation and digital presence but requires enhancements in privacy compliance, security best practices, and contact transparency to strengthen trust and regulatory adherence.

The website www.meos.ch is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. As a result, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or attacks. Without access to the actual website content, it is not possible to assess the company's market position, services, or technical infrastructure in detail. The lack of visible security headers, privacy policies, or contact information further limits the ability to evaluate compliance and security posture. Overall, the site is effectively locked behind a security gate, which impacts the ability to perform a comprehensive analysis.

Diakonische Stadtarbeit Elim is a Basel-based non-profit organization dedicated to social-diaconal work, focusing on integrating marginalized individuals such as addicts, refugees, and people in need. Established in 1997, it operates several service areas including housing, care, outreach, and community café services, supported by a team of about 35 employees and numerous volunteers. The organization is funded through a combination of government agreements and donations from a broad donor base. Technically, the website is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and incorporates GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and some best practices, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its mission.

B

Bundeswaldinventur

bwi.info

60

The website bwi.info serves as the official results database for the German Federal Forest Inventory (Bundeswaldinventur). It provides comprehensive statistical data and reports on forest conditions, ownership, wood stock, growth, and other forestry-related metrics in Germany. The site targets researchers, policymakers, forestry professionals, and the general public interested in forest data. Technically, the site is built on ASP.NET WebForms with extensive JavaScript and CSS, offering a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The domain registration is privacy-protected via Identity Digital, which is common for governmental portals. Overall, the site is trustworthy and professionally branded but could improve in privacy compliance and security best practices.

B

Basket-Center: Basketballudstyr og tilbehør

basket-center.dk

57

Basket-Center.dk is a Danish e-commerce retailer specializing in basketball equipment, apparel, and accessories. The website serves as an official distributor for well-known brands such as Mitchell & Ness, Spalding, Hummel, Adidas, and Wilson, targeting basketball enthusiasts and sportswear consumers primarily in Denmark. The business model focuses on online retail with an emphasis on fast shipping and secure payment options. The domain is newly registered in July 2024, consistent with a recently launched business. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit privacy documentation. From a security perspective, HTTPS is properly implemented, and a consent management platform is active, reflecting awareness of GDPR requirements. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing contact information for security or incident response reduce the overall security posture. No critical vulnerabilities or suspicious patterns were detected. Overall, Basket-Center.dk presents a professional and trustworthy e-commerce presence with a solid foundation but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

S

Smash-Expert: specjalista od sportów rakietowych

smash-expert.pl

58

Smash-Expert.pl is an e-commerce retailer specializing in racket sports equipment including tennis, padel, badminton, table tennis, and squash. The website targets sports enthusiasts primarily in Poland, offering a wide range of products from recognized brands with fast shipping and secure payment options. The business appears to be recently established in 2023, consistent with the domain registration data. Technically, the website is built on Magento (OpenMage), employs modern web technologies, and integrates Google Analytics and Google Ads for marketing and tracking. Security posture is good with HTTPS and DNSSEC enabled, and reCAPTCHA implemented to prevent bots. However, the site lacks explicit privacy and cookie policies, security policies, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional with moderate risk, but improvements in privacy compliance and security transparency are recommended.

D

Direct-Running: buty, tekstylia, sprzęt do biegania

direct-running.pl

56

Direct-Running.pl is a specialized e-commerce platform focused on selling running shoes, sportswear, and related equipment primarily targeting Polish and European customers. The website offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, emphasizing fast shipping and secure payment options. The business appears to be relatively new, founded in 2023, with a medium-sized market presence in the retail sector. Technically, the website is built on Magento (OpenMage) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. Security posture is solid with HTTPS and DNSSEC enabled, and bot protection via Google reCAPTCHA is implemented. However, the site lacks explicit privacy and cookie policy pages, and no direct contact information is visible in the provided content, which may impact user trust and compliance. Overall, the website is professionally designed with good navigation and mobile optimization, but improvements in privacy disclosures and security headers are recommended.

B

Basketbalové centrum: Basketbalové vybavení a doplňky

basket-center.cz

58

Basket-center.cz is an e-commerce website specializing in basketball-related apparel, equipment, and accessories, serving primarily the Czech market. The site acts as an official distributor for well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson, offering NBA merchandise with promises of fast delivery and secure payment. The website is professionally designed with a comprehensive navigation structure and is optimized for mobile devices. Technically, it is built on the Magento Open Source platform (OpenMage fork) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and reCAPTCHA for bot protection. The site employs a consent management platform to comply with GDPR requirements, although explicit privacy and cookie policies are not found on the site. Security posture is good with HTTPS enforced and security best practices observed, but the absence of published security policies and incident response contacts is a gap. The WHOIS data presents an inconsistency with a domain creation date set in the future, which raises concerns about domain legitimacy. Overall, the website is functional, secure, and professional but would benefit from improved transparency in privacy and security documentation.

F

Foot-store: 100% Fußballgeschäft : Pullover und Schuhe

foot-store.de

62

Foot-store.de is a German e-commerce website specializing in football-related products including shoes, jerseys, training clothing, and accessories. The site targets football enthusiasts, clubs, and athletes, offering a wide range of branded products with a focus on fast delivery and competitive pricing. The website is part of a broader network of localized sites serving multiple European markets. Technically, the site is built on a Magento-based platform (OpenMage variant) and integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and AWIN affiliate tracking. Security posture is solid with HTTPS enforced and GDPR consent mechanisms implemented, although explicit privacy and cookie policies are not found in the provided content. No contact information or security policies are explicitly published, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy retail platform with room for improvement in transparency and security documentation.

S

SPACEFOOT SAS

nauti-wave.es

60

Nauti-Wave, operated by SPACEFOOT SAS, is a specialized e-commerce retailer focused on aquatic sports equipment and apparel, including neoprene suits, swimwear, and related gear. The company targets consumers interested in aquatic sports across multiple European countries, with a strong presence in France and Spain. Their business model centers on online retail with value propositions such as fast delivery, secure payment, and post-sale service in France. The website demonstrates a consistent brand identity and offers a broad product catalog with recognized brands.

S

SPACEFOOT SAS

slowood-interior.dk

58

Slowood Interior is a Danish e-commerce retailer specializing in modern interior decoration, design furniture, lighting, and lifestyle products. The company operates under the legal entity SPACEFOOT SAS, based in France, with a newly registered domain consistent with a recent business launch in 2024. The website targets consumers interested in trendy and modern home decoration solutions, offering a broad catalog of products through a well-structured online store. The business model is retail-focused, leveraging multiple partner stores and brands to enhance its market presence. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern JavaScript libraries and third-party services such as Google Analytics, Google Ads, reCAPTCHA, and Actito marketing tools. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Privacy compliance is well addressed through a consent management platform and clear privacy and cookie policies, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, with no privacy protection masking, enhancing trustworthiness. Overall, Slowood Interior presents a professional, secure, and privacy-conscious e-commerce platform with a clear business focus and good technical implementation. Strategic improvements in security headers and DNS security would further strengthen its posture.

S

Sport is good

sportisgood.cz

56

Sport is good is a medium-sized e-commerce retailer specializing in sportswear, footwear, and lifestyle apparel primarily targeting consumers in the Czech Republic and other European countries. The website offers a broad range of products from well-known brands and emphasizes fast delivery and secure payment options. The company operates multiple associated retail domains, indicating a diversified retail network. Technically, the website is built on modern frameworks such as SvelteKit and is hosted behind Cloudflare, ensuring good performance and security. The presence of Google Analytics and a consent management platform demonstrates a commitment to privacy compliance. Security posture is strong with HTTPS enforced and security headers present, although no dedicated security policy or incident response information is published. The WHOIS data shows an unusual future domain creation date, which may be a data anomaly but warrants further verification. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sport is good

sportisgood.dk

54

Sport is good is an e-commerce retailer specializing in sports and fashion apparel and equipment, targeting primarily the Danish and broader European market. The company operates multiple localized domains, indicating a multi-country strategy. Their website offers a wide range of products from major sports and fashion brands, emphasizing fast delivery and secure payment options. The business appears to be recently founded in 2024, with a modern digital presence and a focus on customer service and trust.

S

Sport is good

sportisgood.at

59

Sport is good is a professional e-commerce retailer specializing in sportswear, shoes, and sporting equipment, targeting primarily the German-speaking market in Austria and neighboring countries. The company operates multiple country-specific domains, indicating a broad European market presence. Their website offers a wide range of products from major sports and fashion brands, emphasizing fast delivery and secure payment options. The site is well-branded and consistent, with clear navigation and a focus on customer service, including a dedicated German customer service contact. Technically, the website is built using modern web technologies including the SvelteKit framework, and integrates Google Analytics and Google Ads for marketing and analytics purposes. It employs a consent management platform to comply with GDPR requirements, showing a mature digital infrastructure. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site enforces HTTPS and displays secure payment logos, indicating a secure shopping environment. However, the absence of visible security headers and lack of explicit security policy or incident response information suggests room for improvement. The WHOIS data is unavailable due to NIC.AT quota limits, but the use of privacy protection is justified for an e-commerce business. No signs of malicious activity or blocking mechanisms were detected. Overall, Sport is good presents a trustworthy and professional online retail platform with good compliance and security practices. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen their security posture and customer trust.

S

Sport is good

sportisgood.ch

61

Sport is good is a professional e-commerce retailer specializing in sportswear, shoes, and sports equipment, targeting primarily German-speaking Switzerland and neighboring countries. The company operates multiple country-specific domains, indicating a broad European market presence. Their business model focuses on online retail with fast delivery and secure payment options, supported by a comprehensive customer service infrastructure. The website is well-branded and consistent, offering a good user experience with clear navigation and relevant content.

S

Sport is good

sportisgood.se

54

Sport is good is a Sweden-based e-commerce retailer specializing in sportswear, shoes, and equipment from major brands. The website targets consumers interested in sports and fashion products, offering a broad product range with fast delivery options and secure payment methods. The company appears to be relatively new, founded in 2023, and operates multiple country-specific domains to serve a European and international audience. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience.

S

Sport is good

sportisgood.pl

57

Sport is good is a Polish e-commerce retailer specializing in sports equipment and apparel across multiple disciplines including football, handball, volleyball, running, and training. The company operates a professional and well-structured website with a clear focus on providing quality products from top brands, secure payment options, and customer support. The business is relatively new, founded in 2023, and targets sports enthusiasts primarily in Poland, with sister sites serving other European countries. The website demonstrates a solid digital infrastructure using modern technologies such as SvelteKit, Google Analytics, and a GDPR-compliant consent management platform. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

S

Sport is good

sportisgood.pt

56

Sport is good is a professional e-commerce retailer specializing in sports shoes, clothing, and equipment, targeting consumers interested in sports and fashion. The website presents a consistent brand image and operates multiple country-specific domains, indicating a broad international market presence. The platform offers fast delivery, secure payment options, and post-sale assistance, particularly in Portugal. Technically, the site uses modern frameworks such as SvelteKit and integrates Google Analytics, Google Ads, and a Consent Management Platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data. However, there is no dedicated security policy or incident response contact information published. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations.

S

Sport is good

sportisgood.nl

57

Sport is good is a medium-sized e-commerce retailer specializing in sportswear, shoes, and lifestyle apparel, targeting general consumers interested in sports and fashion. The company operates multiple country-specific domains, indicating a broad international presence primarily in Europe. Their business model focuses on online sales with fast delivery, secure payment options, and customer-friendly return policies. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript frameworks (SvelteKit), integrates Google Analytics, Google Ads, and a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding year. Overall, the site demonstrates a good balance of business credibility, technical maturity, and privacy compliance.

S

Sport is good

sportisgood.it

59

Sport is good is a medium-sized e-commerce retailer specializing in sportswear, footwear, and fashion apparel primarily targeting the Italian and broader European market. Founded in 2021, the company offers a wide range of products from major brands with a focus on fast delivery and secure payment options. The website is professionally designed with clear navigation and a consistent brand presence, supported by customer trust signals such as Trustpilot reviews and secure payment logos. Technically, the site leverages modern frameworks like SvelteKit and integrates Google Analytics and Google Ads with GDPR-compliant consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. No explicit security policy or incident response information is publicly available, which could be enhanced to improve trust. Overall, the site is safe, well-structured, and compliant with privacy regulations, making it a credible online retail platform.

S

Sport is good

sportisgood-de.de

57

Sport is good is a European e-commerce retailer specializing in sportswear, shoes, and equipment, targeting primarily the German and wider European market. The website offers a broad range of products from major sports and fashion brands, emphasizing fast delivery and secure payment options. The business operates multiple affiliated stores and brands, indicating a medium-sized retail operation with a diversified portfolio. Technically, the website is built on a modern stack using SvelteKit, hosted behind Cloudflare, and integrates multiple marketing and tracking tools with a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and standard security headers present, though no dedicated security policy or incident response contact is published. Overall, the site is professional, well-branded, and trustworthy with good user experience and mobile optimization. Recommendations include publishing a security policy, incident response contacts, and enhancing accessibility features to further improve compliance and trust.

S

Sport is good

sportisgood.es

55

Sport is good is an e-commerce retailer specializing in sportswear, footwear, and fashion products. The website targets consumers interested in popular sports and lifestyle brands, offering a broad catalog with fast delivery and secure payment options. The business operates primarily in France with a network of associated retail domains, indicating a medium-sized retail operation with a focus on customer service and brand variety. Technically, the website uses modern frameworks such as SvelteKit and integrates multiple marketing and tracking tools with a consent management platform to comply with GDPR. Security posture is generally good with HTTPS enforced and secure payment methods displayed, though some security headers are missing and could be improved. The WHOIS data is unavailable due to query restrictions, but the domain appears legitimate with privacy protection justified for this business type. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

H

Hölibu 3000

hoelibu.ch

44

The website hoelibu.ch serves as a digital paperless songbook for the Jubla Freiburg youth organization, offering members access to a curated collection of songs with features such as filtering, transposition, and night mode. It is designed as an internal club publication with controlled access via login credentials, targeting members and contributors within the community. The site uses modern web technologies including Meteor.js and SVG graphics to provide a responsive and user-friendly experience. While the site is functional and well-designed for its niche audience, it lacks publicly available privacy and cookie policies, which limits its compliance with data protection regulations. Security posture is moderate with HTTPS enforced and login access controlling content visibility, but no advanced security headers or incident response information are present. Overall, the site is a niche community tool with a good technical foundation but could improve in privacy and security transparency.

Q

QR Code Generator

qr-code-generator.com

69

QR Code Generator is an established online platform specializing in the creation and customization of QR codes for various uses such as URLs, vCards, and more. The business targets a broad audience seeking free and premium QR code generation services with options for branding and high-quality downloads. The website demonstrates a solid market position as a leading QR code service provider with a freemium business model. Technically, the site employs modern JavaScript libraries including Snowplow Tracker, Google Tag Manager, and Optimizely for analytics and optimization, hosted on a WordPress CMS platform. The site is mobile-optimized with good SEO and accessibility basics. Security-wise, the site enforces HTTPS, includes standard security headers, and manages cookie consent in compliance with GDPR, though it lacks a publicly visible security policy or incident response details. The absence of WHOIS data introduces some uncertainty about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and security posture. Overall, the site is trustworthy and well-maintained with room for improvement in security transparency and accessibility.

H

HANDWERK BW

handwerk-bw.de

52

HANDWERK BW is the leading umbrella association representing craft and trade organizations in the Baden-Württemberg region of Germany. The organization provides advocacy, consulting, publications, and event services to support the local craft industry. The website is professionally designed using TYPO3 CMS and incorporates modern web technologies and privacy-conscious analytics via Matomo. It offers clear navigation, mobile optimization, and a comprehensive content structure targeting handcraft businesses and stakeholders in the region. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence aligned with the organization's mission and regional focus.

D

Direct-Running: Laufschuhe, Lauftextilien, Laufausrüstung

direct-running.at

9

Direct-Running.at is a German-language e-commerce website specializing in running shoes, sports apparel, and related equipment. The platform offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, targeting runners and sports enthusiasts primarily in Austria and German-speaking regions. The website features a comprehensive product catalog with clear navigation and promotional offers, emphasizing fast shipping and secure payment options. Technically, the site is built on the Magento Open Source (OpenMage) platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for bot protection. While the site enforces HTTPS and employs consent management for cookies, explicit privacy policies and terms of service pages were not detected in the provided content, indicating room for improvement in privacy compliance. Security posture is moderate with HTTPS enabled but lacking visible security headers and vulnerability disclosure mechanisms. Overall, the website presents a professional and trustworthy retail experience with good content quality and user experience, though enhancements in privacy and security documentation are recommended.

S

Sport is good

sportisgood.ie

10

Sport is good is an e-commerce retailer specializing in sportswear, footwear, and fashion items, targeting a broad consumer base interested in sports and lifestyle products. The company operates multiple country-specific domains, indicating a strategic approach to regional markets, with a strong presence in Ireland and France. Their offerings include well-known brands and a variety of product categories, supported by fast delivery and secure payment options. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence for a business founded recently in 2023. Technically, the website leverages modern web technologies including SvelteKit, Cloudflare DNS, and Google Analytics, ensuring fast performance and good SEO. The use of a consent management platform demonstrates attention to GDPR compliance. Security posture is strong with HTTPS, security headers, and domain transfer protections, although DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security and privacy compliance are good, with clear contact information and trust indicators such as secure payment logos and social media presence. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in security transparency and readiness. The risk assessment indicates a low risk profile with recommendations to enhance DNS security and publish security policies. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

P

Pecheur-Store : Online fishing shop

pecheur-store.ie

62

Pecheur-Store.ie is an e-commerce website specializing in the sale of fishing tackle and equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, coarse, and sea fishing. The website targets fishing enthusiasts and anglers primarily in Ireland and possibly France, as indicated by customer service mentions. The business model is retail-focused with an emphasis on fast delivery and secure payment options. The domain is newly registered in 2024, consistent with a recently launched online store. Technically, the website is built on a Magento-based platform (OpenMage variant) and employs modern web technologies including HTML5, CSS3, and JavaScript. It integrates Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for analytics, marketing, and security purposes. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies were found in the provided content, though consent management scripts indicate some GDPR compliance efforts. No contact emails or phone numbers were detected, which may impact user trust and support accessibility. Overall, the website presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency, security hardening, and contact information availability. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enabling DNSSEC, adding security headers, and providing clear contact details to enhance user trust and compliance.