Security Directory

T

Trek-Expert

trek-expert.fr

55

Trek-Expert is a French e-commerce retailer specializing in outdoor and mountain sports equipment, offering a wide range of products including clothing, footwear, and gear for hiking, trail running, skiing, aquatic sports, and fishing. The company positions itself as a discount specialist with up to 70% off on branded products, targeting outdoor enthusiasts primarily in France and neighboring European countries. The website demonstrates a professional and consistent brand presence with clear navigation and a focus on customer trust through secure payment options and customer service availability. Technically, the website is built using modern web technologies such as SvelteKit and is hosted behind Cloudflare, ensuring good performance, security, and scalability. The site is mobile-optimized and accessible, with SEO best practices implemented. It integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and AWIN affiliate tracking, all managed with GDPR-compliant consent mechanisms. From a security perspective, the site enforces HTTPS, uses appropriate security headers, and does not expose sensitive data. However, there is no dedicated security policy or incident response information publicly available, which could be improved. The WHOIS data is transparent and consistent with the business claims, indicating a legitimate and well-managed domain. Overall, Trek-Expert presents a low-risk profile with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance trust and resilience.

T

Training-Fit

training-fit.fr

54

Training-Fit is a French-based e-commerce retailer specializing in fitness and musculation equipment, accessories, and apparel. The company offers a wide range of products from major brands such as Adidas, Nike, Garmin, and Mizuno, targeting fitness enthusiasts and sports professionals primarily in France and Europe. The website demonstrates a mature market position with multiple sister stores and a strong brand presence. Their business model focuses on online retail with fast delivery and secure payment options, supported by customer service and after-sales support. Technically, the site is built on modern frameworks like SvelteKit, hosted behind Cloudflare, and integrates advanced marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and Criteo. The site is mobile-optimized, fast, and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS, proper security headers, and GDPR-compliant cookie consent mechanisms, although a dedicated security policy and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious activity.

S

Sport is good

sportisgood.fr

55

Sport is good is a French-based e-commerce retailer specializing in sportswear, sports equipment, and lifestyle apparel. Founded in 2016, it operates multiple country-specific domains and offers a wide range of products from major brands such as Adidas, Asics, Puma, and more. The website emphasizes fast shipping, secure payment options, and customer service, positioning itself as a reliable online sports retailer in the European market. The presence of multiple partner stores and a Trustpilot widget further supports its market credibility. Technically, the website is built using modern web technologies including the SvelteKit framework, Cloudflare CDN and DNS services, and integrates various marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and AWIN affiliate tracking. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, uses Cloudflare for protection, and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly identified, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a professional and trustworthy e-commerce platform with good privacy compliance and technical maturity. Strategic improvements could include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and security posture.

S

Sneak'In

sneakin.fr

57

Sneak'In operates a French-based e-commerce platform specializing in sneakers, clothing, and fashion accessories for men, women, and children. The website positions itself as a mid-tier retailer offering popular brands with competitive pricing and fast delivery options. The business targets fashion-conscious consumers across multiple European countries, supported by localized domains and a broad partner network. The company was founded in 2019 and maintains a consistent brand presence with clear customer service channels and trust signals such as secure payment badges and Trustpilot integration. Technically, the website leverages modern web technologies including SvelteKit for frontend rendering, Cloudflare for DNS and CDN services, and integrates multiple marketing and tracking tools such as Google Tag Manager, Facebook Pixel, Criteo, and AWIN affiliate tracking. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Consent management is implemented via AppConsent, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Sneak'In presents a trustworthy and professionally managed e-commerce platform with solid technical infrastructure and compliance posture. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing incident response transparency to further strengthen security and customer trust.

S

Sneakids

sneakids.fr

55

Sneakids is a French e-commerce retailer specializing in children's footwear and fashion clothing, targeting parents and guardians of babies, girls, and boys. The company offers a curated selection of top brands at competitive prices, supported by secure payment options and customer service based in France. The website demonstrates a solid market position within the children's retail segment in France, with a modern and responsive design optimized for mobile and desktop users. Technically, the site leverages modern JavaScript frameworks (SvelteKit), Cloudflare CDN, and integrates widely used marketing and analytics tools such as Google Tag Manager and Facebook Pixel, all managed with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities, although the site lacks a dedicated security policy or incident response contact information. Overall, Sneakids presents a trustworthy and professional online presence with good compliance and technical maturity.

S

Smash-Expert

smash-expert.fr

55

Smash-Expert is a French-based e-commerce retailer specializing in racket sports equipment and accessories, including tennis, padel, badminton, table tennis, and squash. The company offers a wide range of branded products with a focus on fast delivery and secure payment options. Their market position is that of a specialist retailer targeting sports enthusiasts primarily in France and other European countries. The website demonstrates a modern technical infrastructure built on SvelteKit and hosted behind Cloudflare, ensuring good performance and mobile optimization. The presence of multiple tracking and advertising pixels indicates a mature digital marketing strategy. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place, although no explicit security policy or incident response information is publicly available. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

S

Slowood Interior

slowood-interior.fr

55

Slowood Interior is a French e-commerce retailer specializing in modern interior decoration, furniture, lighting, and home textiles. The website targets general consumers interested in stylish and contemporary home decor products. The business operates primarily online with a clear focus on the French market, supported by localized content and contact information. The company appears to be relatively new, founded in 2023, and positions itself as a niche player offering curated design products from various brands. Technically, the website is built using modern technologies including SvelteKit, Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and performs well with good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and GDPR compliance via a consent management platform. However, no explicit security policy or incident response information is published, which could be improved. Overall, the website is professional, trustworthy, and well-maintained, with a high legitimacy score based on domain registration and content consistency.

P

Pet and Garden

pet-and-garden.fr

55

Pet and Garden is a French e-commerce retailer specializing in pet supplies, gardening, and agricultural equipment. Founded in 2024, the company targets pet owners and gardeners primarily in France and neighboring European countries. The website offers a broad range of products from well-known brands, emphasizing fast shipping and secure payment options. The business positions itself as a reliable and customer-focused online store with clear service policies and multiple partner stores.

P

Pecheur-Store

pecheur-store.fr

55

Pecheur-Store is a French e-commerce retailer specializing in fishing equipment including rods, reels, baits, and accessories for various fishing styles such as carp, carnassier, and sea fishing. Founded in 2022, it targets fishing enthusiasts primarily in France and neighboring European countries. The website demonstrates a solid market position with partnerships with well-known fishing brands and a broad product catalog. Technically, the site uses modern frameworks like SvelteKit, is hosted behind Cloudflare, and integrates advanced marketing and analytics tools such as Google Analytics, Google Ads, and Facebook Pixel. The site is well-optimized for performance and mobile devices, with good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and cookie consent management, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, making it a reliable platform for customers. Strategic recommendations include publishing explicit security and incident response policies and enhancing accessibility features.

O

On-Fight

on-fight.fr

55

On-Fight is a French e-commerce retailer specializing in martial arts and combat sports equipment, offering a wide range of products including gloves, protections, shoes, textiles, and club materials. The website targets martial arts practitioners and combat sports enthusiasts primarily in France and European countries. The business operates a modern, well-structured online platform with clear navigation and professional branding. Technically, the site leverages modern frameworks such as SvelteKit, is hosted behind Cloudflare, and integrates multiple marketing and analytics tools with GDPR-compliant consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the site presents a trustworthy and professional e-commerce presence in its niche.

M

Made in Paradis

madeinparadis.com

59

Made in Paradis is a French e-commerce retailer specializing in women's fashion, footwear, and accessories, offering over 300 brands with a focus on fast delivery and secure payment. The company operates multiple sister sites targeting different international markets, indicating a strategic expansion and solid market presence. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to its target audience of fashion-conscious women. Technically, the site leverages modern frameworks such as SvelteKit and integrates various marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Trustpilot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, domain protection statuses set, and GDPR compliance via a consent management platform. However, minor improvements such as enabling DNSSEC and publishing a formal security policy could enhance trust further. Overall, the site presents a professional, trustworthy, and compliant e-commerce platform with a good balance of business and technical maturity.

L

Le Motard Bleu

lemotardbleu.com

59

Le Motard Bleu is a well-established French e-commerce retailer specializing in motorcycle equipment and parts, founded in 2009. The website offers a broad range of products including helmets, gloves, jackets, and accessories, targeting motorcycle riders primarily in France and neighboring European countries. The business operates multiple related retail brands, indicating a medium-sized enterprise with a strong market presence in the motorcycle retail sector. Technically, the website is built using modern frameworks such as SvelteKit, hosted behind Cloudflare, and employs advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no critical vulnerabilities detected, although DNSSEC is not enabled. Privacy compliance is robust with clear GDPR consent mechanisms and comprehensive privacy policies. Overall, the website demonstrates good professionalism, trustworthiness, and user experience, making it a reliable platform for motorcycle gear retail.

L

La Sellerie de Maé

selleriemae.com

58

La Sellerie de Maé is a specialized French e-commerce retailer focused on equestrian equipment and accessories for both horses and riders. Established in 2011, the company offers a wide range of products from reputable brands, targeting equestrian enthusiasts primarily in France and neighboring European countries. The website presents a professional and well-structured digital storefront with clear navigation and a strong emphasis on customer service, including secure payment options and fast shipping. Technically, the site leverages modern web technologies such as SvelteKit, Cloudflare CDN, and integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, ensuring a robust and performant user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure channel to further enhance trust and compliance.

L

La Bagagerie du Motard

labagageriedumotard.com

58

La Bagagerie du Motard is a French e-commerce retailer specializing in motorcycle luggage and accessories, offering a wide range of products such as top cases, side bags, and rider gear. Established since 2012, the company targets motorcycle enthusiasts primarily in France and Europe, positioning itself as a niche market leader with a strong online presence and multiple brand partnerships. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site leverages modern frameworks like SvelteKit, integrates with major analytics and marketing tools, and is hosted with Cloudflare DNS and CDN services, ensuring fast performance and reliability. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved and a formal security policy is absent. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to further strengthen security and compliance.

H

House of Rugby

house-of-rugby.fr

55

House of Rugby is a specialized e-commerce retailer focused on rugby apparel, footwear, and equipment, primarily serving the French market and French-speaking rugby enthusiasts. The website offers a broad catalog of official club products, shoes, and accessories from major brands, positioning itself as a niche market leader with a strong emphasis on secure payment and customer service. The business is relatively new, founded in 2022, and operates with a medium-sized footprint in the retail sector. Technically, the website is built on modern technologies including SvelteKit and is hosted behind Cloudflare, ensuring fast performance and good mobile optimization. The site integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel, with a compliant consent management platform to adhere to GDPR requirements. The design is professional and user-friendly, with clear navigation and good SEO practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. However, the site lacks a dedicated security policy or incident response contact, which could be improved to enhance trust and preparedness. Overall, the security posture is strong for an e-commerce retailer. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include publishing a formal security policy, adding incident response contacts, and implementing a security.txt file for vulnerability disclosures. These steps would further strengthen compliance and security culture. The website demonstrates a mature digital presence with good privacy compliance and business credibility.

H

Handball-Store : Site numéro 1 du handball en ligne

handball-store.fr

37

Handball-Store.fr is a specialized e-commerce platform focused on retailing handball-related equipment, including shoes, clothing, balls, and protective gear. Established in 2009, it holds a strong market position in France as a leading online handball store. The website offers a comprehensive catalog with detailed navigation and supports multiple languages, indicating a mature digital presence. Technically, the site leverages a Magento-based CMS (OpenMage), uses Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo. The site is served over HTTPS with good security headers, reflecting a solid security posture. However, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which are areas for improvement in compliance and user trust. Overall, the website is professional, functional, and secure, but could enhance privacy transparency and user support channels.

G

Galop-Store

galop-store.fr

55

Galop-Store is a French e-commerce retailer specializing in equestrian equipment and animal care products. Founded in 2022, it targets horse riders, animal owners, and related enthusiasts with a broad catalog of products from reputable brands. The website demonstrates a solid market position within its niche, supported by a professional design, clear navigation, and secure payment options. The company maintains a medium-sized operation with a focus on the French market and some international reach through sister sites. Technically, the site leverages modern frameworks like SvelteKit and is hosted on Cloudflare, ensuring fast performance and good mobile optimization. Security practices include HTTPS enforcement, security headers, and GDPR-compliant cookie consent management, although no explicit security policy or incident response information is published. Overall, the site is trustworthy, professional, and well-maintained, with room for improvement in publishing dedicated security and incident response policies.

F

Foot-Store

foot-store.fr

56

Foot-Store is a well-established French e-commerce retailer specializing in football-related products including shoes, jerseys, and equipment. The website targets football players and fans primarily in France and Europe, offering a wide range of branded merchandise from Nike, Adidas, Puma, and others. The business has a solid market position supported by a domain age of over 9 years and multiple related partner sites. Technically, the website employs modern technologies such as SvelteKit, Cloudflare CDN, and integrates various marketing and tracking tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS enforced, comprehensive security headers, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a professional and trustworthy e-commerce platform with good privacy and security practices.

E

Espace Golf

espace-golf.fr

54

Espace Golf is a specialized French e-commerce retailer focused on golf equipment, including clubs, bags, carts, clothing, and accessories. Founded in 2019, it serves golf enthusiasts primarily in France and surrounding European countries. The website demonstrates a professional market position with competitive pricing, fast delivery, and multiple payment options including secure installment plans. The presence of Trustpilot reviews and clear contact information enhances customer trust. Technically, the site uses modern frameworks such as SvelteKit, is hosted with OVH and Cloudflare, and integrates advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are absent. Overall, the site is compliant with GDPR and provides a good user experience with clear navigation and mobile optimization.

D

Direct-Volley : chaussures, ballons, vêtements et équipements de volleyball

direct-volley.fr

57

Direct-Volley.fr is a specialized e-commerce retailer focused on volleyball equipment, apparel, and accessories, serving primarily the French market with multiple localized European domains indicating a broader regional presence. The website offers a comprehensive catalog including shoes, balls, protective gear, club equipment, and lifestyle products related to volleyball. The business appears well-established with a domain age of nearly 9 years and uses reputable hosting and CDN services via Cloudflare. The technical infrastructure is based on Magento (OpenMage), supported by modern analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, reflecting a mature digital marketing strategy. Security posture is solid with HTTPS enforced, security headers present, and domain registration practices consistent with a legitimate retail business. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Contact information and incident response details are also missing, limiting transparency. Overall, the site is professional, secure, and functional but would benefit from enhanced privacy and compliance documentation.

B

Basket-Center

basket-center.fr

57

Basket-Center is a well-established French e-commerce retailer specializing in basketball equipment and accessories, including official NBA merchandise and products from major brands such as Adidas, Nike, Wilson, and Mitchell & Ness. The company targets basketball players and fans primarily in France and Europe, offering a broad catalog with fast shipping and secure payment options. The website demonstrates a strong market position as an official distributor with a professional and consistent brand presence. Technically, the website is built on modern technologies including SvelteKit and is hosted behind Cloudflare, ensuring good performance and security. It employs multiple tracking and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and a consent management platform to comply with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements security headers, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, Basket-Center presents a low-risk profile with a strong business and technical foundation. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure policy to further strengthen security posture and transparency.

M

mylokalesuche AG

myls.ch

67

mylokalesuche AG operates as a specialized marketing agency and software developer focused on Swiss small and medium-sized enterprises (SMEs). Their core offerings include the myls App for synchronizing business profiles across multiple directories, website creation with SEO optimization, and management of Google and Meta advertising campaigns. The company positions itself as a Google Partner, enhancing its credibility and market presence within the local Swiss digital marketing landscape. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress CMS with modern plugins and libraries, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response details are absent. Overall, the business demonstrates a trustworthy and professional online presence with strong customer trust signals, including numerous positive Google reviews.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb-nrw.de

46

The Landessportbund Nordrhein-Westfalen e.V. is a large, non-profit regional sports umbrella organization serving the state of North Rhine-Westphalia, Germany. It provides a broad range of sports programs, information, and funding opportunities for sports clubs and individuals. The website is professionally designed, well-structured, and targets sports organizations and enthusiasts within NRW. The technical infrastructure is based on TYPO3 CMS with integration of modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns given the website's professional nature and content. Overall, the site demonstrates a strong commitment to privacy compliance and user experience.

L

Leichtathletik Shop

leichtathletik-shop.info

72

Leichtathletik Shop is the official online merchandise store of the Deutscher Leichtathletik Verband (German Athletics Association), offering athletics apparel and related products primarily targeting athletes and fans in Germany. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Facebook Pixel for marketing analytics. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced, use of security headers, and form protection via hCaptcha, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in transparency of security and contact information.

K

Kunstmuseum Basel

kunstmuseumbasel.ch

61

Kunstmuseum Basel is a prestigious and historic public art museum located in Basel, Switzerland, recognized as the oldest public art collection in the world. The museum offers a rich collection of paintings, sculptures, installations, videos, drawings, and prints spanning seven centuries. It serves a diverse audience including art enthusiasts, families, researchers, and educational groups through exhibitions, workshops, guided tours, and research initiatives. The museum operates as a non-profit cultural institution with a strong market position in the art and cultural sector. Technically, the website employs a modern JavaScript stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Visual Website Optimizer for analytics and marketing purposes. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks a visible cookie consent mechanism and explicit security policies, which are areas for improvement in privacy compliance and security transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The WHOIS data confirms the legitimacy and consistency of the domain registration with the museum's identity. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Kunstmuseum Basel's website is professional, trustworthy, and content-rich, but could enhance privacy compliance by implementing cookie consent and publishing security policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

D

Direct Running

direct-running.fr

54

Direct Running is a French-based e-commerce retailer specializing in running shoes, sportswear, and related equipment. The company offers a wide range of products from major brands such as Adidas, Saucony, Puma, and Mizuno, targeting runners and sports enthusiasts primarily in France and Europe. The website demonstrates a mature digital presence with a professional design, clear navigation, and mobile optimization. It integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, supported by a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and modern security headers implemented, although no dedicated security policy or incident response page was found. Overall, the site is trustworthy and well-positioned in the retail e-commerce market.

V

Verein Sakrallandschaft Innerschweiz

sakrallandschaft-innerschweiz.ch

67

Verein Sakrallandschaft Innerschweiz is a non-profit organization dedicated to promoting the rich cultural and spiritual heritage of Central Switzerland, focusing on churches, chapels, monasteries, and sacred sites. The website serves as an informational and promotional platform targeting tourists, pilgrims, families, and cultural enthusiasts interested in spirituality and history. It offers event information, guided tours, newsletters, and partner collaborations to enhance visitor engagement. Technically, the site is built on the Jimdo CMS platform, leveraging common web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could be improved by adding more security headers and explicit security policies. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations, though it lacks detailed terms of service and incident response information.

C

Charles Dickens Museum

dickensmuseum.com

68

The Charles Dickens Museum operates as a well-established cultural and educational institution located in London, dedicated to preserving and promoting the legacy of Charles Dickens. The website serves as both an informational portal and an e-commerce platform offering museum tickets, educational resources, events, and themed merchandise. The museum targets a broad audience including tourists, educators, students, and literary enthusiasts. The business model is primarily non-profit with revenue streams from admissions, retail sales, and memberships. The museum holds a reputable market position supported by cultural funders and charity status. Technically, the website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Hosting and domain registration are consistent with a legitimate, long-standing organization. From a security perspective, the site enforces HTTPS, uses secure Shopify checkout, and implements client transfer protection on the domain. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information, which are areas for improvement. Privacy compliance is strong with GDPR-consistent cookie consent and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and secure online presence for the Charles Dickens Museum, with minor recommendations to enhance security transparency and DNS security. The risk profile is low, and the site effectively supports the museum's mission and business objectives.

A

AGROLA AG

agrola.ch

53

AGROLA AG is a Swiss energy and mobility company providing a broad range of products and services including heating oil, wood pellets, electricity, electromobility charging solutions, and solar energy systems. The company targets both residential and commercial customers within Switzerland, positioning itself as a reliable regional partner in energy and mobility sectors. The website reflects a mature digital presence with clear navigation, professional design, and multilingual support (German and French). Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a moderate to advanced digital infrastructure. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is partially met with a comprehensive privacy policy available, but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

fenaco Genossenschaft

fenaco.ch

53

fenaco Genossenschaft is a large Swiss agricultural cooperative with a 150-year history, serving over 40,000 members including active Swiss farmers. The organization operates across multiple sectors including agriculture, food industry, retail, and energy, with well-known subsidiary brands such as UFA, RAMSEIER, Volg, LANDI, and AGROLA. The website reflects a mature digital presence built on Drupal 11, featuring comprehensive content, multimedia, and multilingual support. It demonstrates good technical infrastructure with modern tracking and marketing tools integrated, including Facebook Pixel and Google Tag Manager. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not clearly published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional and consistent branding and content. Overall, fenaco's website is a trustworthy and well-maintained digital asset supporting its cooperative business model and stakeholder engagement.

N

Norfax AS

norfax.no

53

Norfax AS is a well-established Norwegian manufacturer specializing in the production and delivery of outdoor shelters (leskur) and furniture for both public and private sectors. With a founding date of 1946 and product delivery since 1984, Norfax positions itself as a quality-focused provider offering customized solutions tailored to client projects. The company maintains a strong digital presence with comprehensive contact information, social media engagement, and clear privacy and cookie policies, reflecting a mature business approach. Technically, the website employs modern JavaScript frameworks, analytics tools, and security best practices, ensuring a reliable and user-friendly experience. Security posture is robust with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Norfax demonstrates a high level of professionalism, trustworthiness, and compliance, making it a credible and secure business entity online.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

O

Optix

optixdev.com

10

Optix is a technology company specializing in coworking and flexible office management software. Their platform offers a mobile-first, white-labeled app solution designed to enhance community engagement and streamline workspace operations. Positioned as a modern workplace operating system, Optix integrates with thousands of third-party applications to provide a comprehensive management experience. The website reflects a mature, professional business with clear branding and customer testimonials, targeting coworking space operators and flexible office managers. Technically, the website employs modern web technologies including AngularJS, HubSpot marketing tools, Intercom for customer engagement, and analytics services such as Google Analytics and FullStory. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices, although some security headers are not explicitly detected. Privacy and cookie policies are present and indicate GDPR compliance. From a security perspective, the site demonstrates a solid posture with encrypted communications and secure form handling. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The WHOIS data for the provided domain www.optixdev.com is missing, which raises questions about domain registration status; however, the main operational domain appears to be optixapp.com, associated with ShareDesk Global Inc., lending credibility. Overall, the website is professional, secure, and compliant with privacy standards, serving a clear business purpose. The main risk lies in the domain registration inconsistency, which should be clarified to strengthen trust. Strategic recommendations include enhancing security headers, publishing security policies, and ensuring domain registration transparency.

K

Kakao Corp.

kakao.com

59

Kakao Corp. is a leading South Korean technology company specializing in AI, communication, lifestyle, business, shopping, and entertainment services. The company operates a diverse portfolio of digital platforms including KakaoTalk, KakaoMap, KakaoPay, and Melon, serving a broad general audience primarily in South Korea. The website demonstrates a high level of digital maturity with modern frameworks such as Nuxt.js and integration of major analytics and marketing tools. Security posture is strong with HTTPS enforcement and multiple security headers, though no explicit vulnerability disclosure or DPO contact details are published. Overall, the site is professional, well-structured, and compliant with privacy regulations, reflecting a trustworthy and enterprise-grade digital presence.

G

Goldsmiths, University of London

gold.ac.uk

59

Goldsmiths, University of London is a well-established higher education institution specializing in creative, cultural, and social disciplines. The website reflects a strong market position as a leading university in South East London, offering degree programs, research opportunities, and community engagement. The target audience includes prospective and current students, academics, and researchers. The business model focuses on education and research services with a large institutional size and a history dating back to 1904. Technically, the website employs a modern technology stack including multiple analytics and advertising pixels managed through Google Tag Manager, and uses TerminalFour CMS. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. Cookie consent and privacy mechanisms are robust, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a public security policy or incident response page suggests room for improvement. The WHOIS data is unavailable or privacy protected, which is common for UK academic domains and justified in this context. Overall, the website is professional, trustworthy, and secure with minor recommendations to enhance security transparency and header implementation. The risk level is low, and the site effectively supports the university's digital presence and business objectives.

A

Arquine

arquine.com

49

Arquine is an established international architecture and design magazine primarily serving Spanish-speaking audiences, founded in 1999. The website operates on a WordPress CMS platform with WooCommerce integration, hosted on DigitalOcean infrastructure. It employs modern web technologies including Google Fonts, Google Analytics, TikTok and Facebook tracking pixels, and Google Tag Manager, indicating a mature digital marketing and analytics setup. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could expose the organization to regulatory risks. No direct contact or incident response information is provided, limiting transparency and user trust. Overall, the site is professional and content-rich but would benefit from improved privacy and security practices.

M

MasterCraft Boat Company

mastercraft.com

77

MasterCraft Boat Company is a leading manufacturer and marketer of premium performance inboard wakesurfing, wakeboarding, and ski boats. The company holds a strong market position as an innovator with numerous patents and awards, targeting watersports enthusiasts and boat buyers. Their business model includes direct sales supported by a dealer network and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies such as Google Analytics, Facebook Pixel, Microsoft Application Insights, and reCAPTCHA for security. The site is well-optimized for mobile and accessibility, featuring a professional design and clear navigation. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. Overall, the domain appears legitimate despite missing WHOIS data, supported by trust signals including NASDAQ listing and ISO certifications. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.

S

ShareDesk Global Inc.

optixapp.com

65

Optix, operated by ShareDesk Global Inc., is a specialized SaaS provider offering automation-first coworking and flexible workspace management software. The platform emphasizes end-to-end automation, including booking, invoicing, CRM, and branded mobile apps, targeting coworking operators and community managers seeking to streamline workflows and accelerate growth. The website presents a professional, well-branded, and content-rich experience with strong trust signals such as customer testimonials and industry awards. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including HubSpot, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS and some security plugins, though explicit security headers and policies are not evident. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. WHOIS data for the domain is missing, which raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is mature, professional, and well-optimized but would benefit from enhanced transparency and security disclosures.

A

Autopromotec

autopromotec.com

58

Autopromotec is an established international biennial exhibition focused on automotive equipment and aftermarket products, primarily targeting industry professionals and exhibitors. The event is held in Bologna, Italy, and serves as a key networking and showcase platform within the automotive aftermarket sector. The website presents professional branding and relevant event information, indicating a mature business presence in the transportation industry. Technically, the site employs a modern tech stack including jQuery, Cookiebot for consent management, Google Analytics, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe, trustworthy, and well-suited for its business purpose but would benefit from enhanced transparency and security hardening.

A

Automechanika Tashkent

automechanika.uz

59

Automechanika Tashkent is a professional event organizer specializing in automotive aftermarket exhibitions in Uzbekistan and Central Asia. The website presents the upcoming event scheduled for October 2025 at the Central Asian Expo center in Tashkent, targeting automotive industry professionals, exhibitors, and visitors. The platform offers services such as stand booking, advertising partnerships, visitor registration, and a business program. The website is built on the Tilda CMS platform, leveraging modern web technologies and content delivery networks for performance and mobile optimization. However, it lacks explicit privacy and cookie policies, which are critical for compliance with data protection regulations. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but security headers are missing. Tracking technologies like Google Tag Manager and Facebook Pixel are used, indicating moderate user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

H

Holidu Hosts GmbH

bookiply.com

76

Bookiply is a vacation rental management platform focused on helping hosts maximize bookings and reduce administrative workload. It operates primarily in Europe and is part of the Holidu Group, a recognized entity in the hospitality sector. The website offers a comprehensive suite of services including property listing, channel management, and personal support for hosts. The company targets vacation rental owners and agencies, providing an all-in-one solution to increase visibility and revenue. Technically, the website is built using modern web technologies such as React and Next.js, hosted on AWS in Ireland, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly disclosed, which could be improved. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is mitigated by the professional presentation and detailed imprint. Overall, Bookiply presents a trustworthy and professional online presence with strong compliance and technical maturity. Strategic improvements in transparency around security policies and incident response would enhance its security posture and trustworthiness further.

L

Leyendecker HolzLand GmbH & Co. KG

leyendecker.de

51

Leyendecker HolzLand GmbH & Co. KG is a well-established wood specialist retailer and wholesaler based in Trier, Germany, with a history dating back to 1860. The company offers a broad range of wood products including flooring, doors, garden furniture, and wood-based materials, serving craftsmen, businesses, and end consumers primarily in the Rheinland-Pfalz, Saarland, and Luxembourg regions. Their market position is strong regionally, supported by a large physical exhibition and an online shop. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and consent management tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, CSP headers, and privacy compliance mechanisms in place, though lacking a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence.

D

DigiShop GmbH

weltholz.de

59

Weltholz is a German-based wood import company specializing in high-quality timber and exclusive wood products for wholesale and retail customers. The website presents a professional and well-structured platform targeting B2B clients such as large and wood dealers. It offers a comprehensive product catalog, marketing support, and online tools like a terrace planner. Technically, the site uses a custom ColdFusion backend with modern frontend libraries including jQuery, Bootstrap, and Slick Slider, integrated with HubSpot and Google Analytics for marketing and analytics. The security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected and could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, well-branded, and professionally maintained.

M

Muffin Group

muffingroup.com

59

Muffin Group is a well-established company specializing in premium WordPress themes and website building tools, notably Betheme and BeBuilder. The company targets WordPress users, developers, and agencies seeking versatile and feature-rich themes with extensive pre-built website demos and premium plugin integrations. Their market position is strong, supported by a large user base exceeding 300,000 satisfied customers and consistent product updates. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, though improvements in privacy transparency and security hardening are recommended.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

Rumahweb Indonesia is a well-established web hosting and domain registration provider based in Indonesia, serving primarily small to medium businesses and individuals. Founded in 2002, the company offers a comprehensive suite of services including shared hosting, cloud hosting, VPS, dedicated servers, email hosting, SSL certificates, and website creation tools. Their market position is strong locally, supported by over 155,000 customers and multiple industry certifications such as ISO 27001. The website reflects a professional and modern digital presence built on WordPress with Elementor, demonstrating technical maturity and good user experience. Security posture is robust with HTTPS, security partnerships, and anti-DDoS measures, though explicit cookie consent mechanisms and incident response contacts could be improved. The absence of WHOIS data for the domain is unusual but does not detract significantly from the overall trustworthiness given the extensive business and trust signals present. Strategic recommendations include enhancing privacy compliance and publishing vulnerability disclosure information to further strengthen security and compliance posture.

B

blogduwebdesign

blogduwebdesign.com

61

Blog Du Webdesign is a French-language online resource hub focused on web design, UX, and UI for web professionals and enthusiasts. It offers high-quality articles, tutorials, toolboxes, and trend analyses tailored for experts in the web industry. The website is built on the e-monsite CMS platform and leverages modern web technologies including Bootstrap 4, jQuery, Google Fonts, and integrates advertising and tracking tools such as Google Adsense, Google Analytics, and Facebook Pixel. While the site demonstrates strong content quality, professional design, and good SEO practices, it lacks some security headers and a cookie consent mechanism, which are important for GDPR compliance. The WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, though the website's professional appearance and active social media presence mitigate this risk. Overall, the site is a valuable resource for its target audience but would benefit from enhanced security and privacy compliance measures.

B

BigRock

bigrock.in

73

BigRock is a leading Indian domain registration and web hosting provider offering a wide range of services including shared, VPS, dedicated, and cloud hosting, along with email hosting, website building, and online marketing solutions. The company has a strong market position in India, reinforced by its partnership with HostGator India, and targets small to medium businesses and entrepreneurs seeking affordable and reliable web presence solutions. Technically, the website is built on modern frameworks like Next.js and React, with extensive use of analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is fast, mobile-optimized, and well-structured, providing an excellent user experience. Security-wise, the site enforces HTTPS and uses SSL certificates, along with security products like SiteLock and CodeGuard, but lacks explicit published security policies and vulnerability disclosure information. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security transparency.

G

Gotthilf Benz Turngerätefabrik GmbH + Co KG

benz-sport.de

57

Gotthilf Benz Turngerätefabrik GmbH + Co KG operates a professional e-commerce platform specializing in sports equipment manufacturing and retail. The company targets a broad audience in Germany and neighboring countries, offering a wide range of sports products with a focus on quality and service. The website is well-branded, consistent, and provides clear contact and business information, reinforcing its market position as a trusted sports equipment provider. Technically, the website leverages Prestashop CMS with modern integrations such as Google Tag Manager, Facebook Pixel, and PayPal SDK, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the business scale. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, including cookie consent and privacy policy. However, explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and accessibility would further strengthen its posture.