Security Directory

W

World Evangelical Alliance

worldea.org

64

World Evangelical Alliance is a global non-profit organization focused on strengthening local churches through national alliances and grassroots leadership coordination. The website reflects a mature digital presence with a WordPress CMS, modern SEO practices, and integration of Google Analytics for user tracking. The organization has a consistent brand and clear mission targeting evangelical Christian communities worldwide. Technically, the site uses popular frameworks and plugins such as Elementor and Astra theme, hosted with DNS managed by Cloudflare and domain registered via NameCheap. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

H

Help Scout

helpscout.com

64

Help Scout is a well-established technology company specializing in customer support software solutions, including shared inboxes, help centers, and live chat tools. The company targets businesses seeking efficient customer communication management and operates primarily on a SaaS business model. With a strong market position and certifications such as ISO 27001 and SOC 2 Type II, Help Scout demonstrates a commitment to security and compliance. The website reflects a mature digital infrastructure using modern technologies like React, Gatsby, and Contentful CMS, ensuring fast performance and excellent mobile optimization. Security best practices are evident through HTTPS enforcement, comprehensive security headers, and clear incident response contacts. Privacy policies and cookie consent mechanisms align with GDPR requirements, supporting user trust and regulatory compliance. Overall, the website presents a professional, trustworthy, and secure platform for its users.

H

Hail

hail.to

63

Hail is a New Zealand-based technology company offering a digital content consolidation platform that integrates websites, publications, AI chatbots, integrations, and email campaigns. The website is professionally designed using WordPress and Elementor, targeting sectors such as schools, sports clubs, and community organizations. The platform emphasizes long-term support and ease of digital content management. Technically, the website employs modern web technologies and analytics tools like Google Analytics and Microsoft Clarity, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some sanitization libraries but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security documentation.

HugeDomains operates a professional domain marketplace specializing in premium domain name sales, including GrowthRepublic.com. The website offers transparent pricing, payment plans, and a 30-day money back guarantee, targeting businesses and individuals seeking quality domain names. The platform is established since 2005 and has a solid market position with thousands of satisfied customers. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA, with SSL encryption ensuring secure transactions. Cookie consent mechanisms are in place, supporting privacy compliance. Security posture is good with HTTPS and bot protection, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and customer testimonials enhancing credibility.

D

d.labs

dlabs.si

61

d.labs is a technology, strategy, and design studio specializing in developing digital products for companies aiming to rapidly succeed in their markets. Established since 2010, the company partners with high-growth ventures and investors to deliver tailored solutions combining technology, design, and strategic insight. Their key services include strategic product development, product discovery, fractional leadership, and lean product teams, serving sectors such as fintech, SaaS, digital marketplaces, AI-powered products, and media and publishing. The website reflects a professional and consistent brand with strong client testimonials and a portfolio of recognized partners. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking and marketing. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, typical for a Webflow-hosted site with rich media content. From a security perspective, the site enforces HTTPS and implements cookie consent via Iubenda, indicating good privacy compliance. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is privacy-protected and incomplete, which is common for technology service providers, but no suspicious patterns were found. Overall, the website presents a credible and professional digital presence with moderate to good security posture and privacy compliance. Strategic recommendations include implementing additional security headers, publishing terms of service and security policies, and enhancing accessibility and incident response transparency to further strengthen trust and compliance.

G

Google LLC

crashlytics.com

72

Firebase Crashlytics is a product offered by Google LLC, providing real-time crash reporting and app stability monitoring for mobile applications across multiple platforms including iOS, Android, Flutter, and Unity. Positioned as part of the Firebase suite, it targets app developers seeking to improve app quality and user experience by quickly identifying and prioritizing crash issues. The website reflects Google's strong market position in cloud services and developer tools, offering a comprehensive and professional digital presence with excellent content quality and user experience. The technical infrastructure leverages Google's cloud hosting, modern web technologies, and integrates Google Fonts, Analytics, and Material Icons, ensuring fast performance, mobile optimization, and accessibility. The site is built on a custom Google framework, ensuring consistency and scalability. Security is robust with HTTPS, strict security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations and consent mechanisms. However, direct contact information and explicit security policies such as incident response or vulnerability disclosure are not prominently available on the product page. The domain ownership and WHOIS data confirm the legitimacy and trustworthiness of the site, fully consistent with Google's corporate identity. Overall, Firebase Crashlytics' website demonstrates a mature, secure, and professional platform suitable for enterprise-level users and developers, with strong trust signals and minimal risk exposure.

I

iakoe

carrot.is

53

iakoe is a specialized Shopify agency focused on delivering design-led e-commerce solutions, balancing brand identity, user experience, and store optimization to create effective shopping experiences. Founded in 2019, the company targets design-conscious brands seeking Shopify development, UX design, SEO, CRO, and migration services. The website demonstrates a strong market position with notable client logos and positive testimonials, indicating trust and professionalism. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Splide.js, and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Crazy Egg. The site is mobile-optimized, accessible, and SEO-friendly, hosted via GoDaddy with a Craft CMS backend. Performance is moderate with good responsiveness and user experience. Security posture is solid with HTTPS enforced, CSRF protection on forms, and no exposed sensitive data. However, the absence of DNSSEC, security headers, and published security or privacy policies indicates room for improvement. Privacy compliance is limited due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and technically competent but would benefit from enhanced security policies and privacy compliance to strengthen its risk posture and regulatory adherence.

B

Betterment LLC

betterment.com

73

Betterment LLC is a leading US-based financial technology company specializing in automated investing and financial planning services. Their platform offers tailored investment portfolios, retirement accounts, cash management products, and premium advisory services targeting individual investors, employers, and financial advisors. The company holds a strong market position supported by multiple industry awards and a high customer satisfaction rate. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, delivering excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and consent management, although a dedicated security policy and incident response contact could enhance transparency. Overall, Betterment demonstrates a mature digital presence with strong business credibility and compliance adherence.

A

Airbrake

airbrake.io

65

Airbrake is a technology company specializing in error monitoring, performance monitoring, and deployment tracking solutions for software developers and DevOps teams. Positioned as a developer-centric SaaS provider, Airbrake offers tools that enable faster bug detection and resolution, helping organizations deploy software fearlessly. The company is a subsidiary of LogicMonitor and serves over 1600 organizations including major brands like Netflix and Adobe. The website is professionally designed, mobile-optimized, and rich in content, providing clear calls to action and extensive resources such as blogs, documentation, and customer stories. Technically, the website leverages modern web technologies including Webflow CMS, JavaScript libraries, Google Analytics, and Google Tag Manager. It integrates Airbrake's own browser notifier for error tracking. The site performs well with fast loading times and good accessibility features. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. The WHOIS data is unavailable due to query failure or privacy protection, but the website's branding and association with LogicMonitor support its legitimacy. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no visible security policy or incident response page, and no security.txt file was found. The site uses tracking scripts for analytics and marketing but maintains a good level of privacy compliance. Overall, the security posture is solid but could benefit from enhanced transparency and additional security headers. The overall risk assessment is low with strong business credibility and technical maturity. Strategic recommendations include implementing cookie consent banners, publishing a security policy, adding security headers, and providing a vulnerability disclosure mechanism to further enhance trust and compliance.

A

Australian Broadcasting Corporation

abc.net.au

64

The Australian Broadcasting Corporation (ABC) is Australia's national public broadcaster, established in 1929. It provides a wide range of services including news, local content, audio and video streaming, educational programming, and entertainment. The website serves a broad Australian audience with trusted and comprehensive media content. The ABC maintains a strong market position as a leading media entity in Australia with multiple subsidiaries and branded services.

S

StubHub

stubhub.com

74

StubHub is a leading global online ticket marketplace specializing in the buying and selling of tickets for sports, concerts, theater, and festivals. Owned by Viagogo, it serves a broad audience of ticket buyers and resellers with a comprehensive event catalog and user account management features. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, Mapbox GL, and Google Maps API, hosted on AWS with integrated security measures including AWS WAF and Google reCAPTCHA for bot protection. While HTTPS is enforced and some security best practices are observed, the site lacks explicit security headers and published security or privacy policies, which are recommended for enhanced compliance and trust. The website content is professionally designed, mobile-optimized, and safe for general audiences, with extensive use of analytics and advertising networks to support marketing efforts. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, StubHub presents a strong business and technical profile with room for improvement in privacy and security transparency.

G

GMI Pte Ltd

gawker.com

52

Gawker.com is a media website operated by GMI Pte Ltd, focusing on news and entertainment content. The site features articles such as tributes and current events, targeting a general audience. Its business model relies primarily on advertising revenue, leveraging Google AdSense and DoubleClick for monetization. The website uses modern web technologies including Next.js and React, indicating a contemporary technical infrastructure with moderate performance and mobile optimization. However, the content quality is basic with limited depth and minimal interactive features. Security posture is moderate with HTTPS enabled but lacks critical security headers and documented security policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or GDPR compliance indicators. Contact information is minimal, limited to a single email address. Overall, the site is functional but would benefit from enhanced security, privacy, and user engagement features.

B

Bocoup

bocoup.com

63

Bocoup is a worker-owned technology consultancy specializing in the development of web standards, software tools, and digital projects with a strong emphasis on accessibility, privacy, and inclusivity. They serve a diverse clientele including tech companies, nonprofits, and institutions, positioning themselves as a niche player with a values-driven approach. Their market presence is supported by reputable clients such as Google, Mozilla, and Meta Accessibility, and they maintain a strong commitment to creating technologies that resist capture and safeguard user privacy. Technically, the website is built using modern frameworks such as Next.js and React, with a focus on performance, mobile optimization, and accessibility. The site integrates a headless WordPress CMS for blog content and uses minimal tracking via plausible.io, reflecting a privacy-conscious digital maturity. The technical infrastructure supports a fast, responsive, and user-friendly experience. From a security perspective, the site enforces HTTPS and employs secure forms but lacks explicit security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or a data retrieval issue, but it introduces some uncertainty regarding domain legitimacy. Overall, Bocoup presents a professional and trustworthy online presence with strong technical and business foundations. Strategic improvements in transparency around privacy, security policies, and domain registration details would further strengthen their security posture and business credibility.

Bleacher Report is a well-established sports media platform founded in 2005, offering sports news, highlights, expert analysis, and scores to a broad audience of sports fans. The website demonstrates a strong market position as a recognized brand in the sports media industry. Technically, the site leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, and incorporates GDPR-compliant cookie consent mechanisms. The site performs moderately well with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced and domain registration includes protective status flags; however, security headers and explicit security policies are not evident, indicating room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

P

Privacy service provided by Withheld for Privacy ehf

about.me

65

About.me is a well-established technology platform founded in 2008 that provides users with the ability to create free, personalized one-page websites quickly and easily. The platform targets a general audience seeking personal branding and online presence solutions. The website demonstrates a professional design with good mobile optimization and clear navigation, supporting a positive user experience. Technically, the site leverages modern analytics and tracking technologies such as Google Analytics, Facebook SDK, and Google Tag Manager, hosted on Cloudflare infrastructure, ensuring reliable performance and security. However, the absence of explicit privacy, cookie, and terms of service pages in the analyzed content indicates gaps in privacy compliance. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks visible security headers and detailed security policies. The domain WHOIS data shows privacy protection typical for this business type, with a long registration period supporting legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

N

New Vector Ltd

gitter.im

54

Gitter is a developer-focused chat and networking platform operated by New Vector Ltd, leveraging the Matrix open communication protocol. It serves as a community hub for developers and open source projects, providing messaging, content discovery, and community management services. The platform is trusted by major technology companies such as Airbnb, AWS, Google, and Microsoft, indicating a strong market position within the technology sector. The website presents a professional and consistent brand image with clear messaging targeted at developers and community managers. Technically, the website is built using modern web technologies including the Astro framework and integrates with Matrix clients like Element. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized and offers a good user experience, although SEO and accessibility features are basic. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's infrastructure. However, explicit security headers and published security policies are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were identified. Privacy compliance is limited, with no visible privacy or cookie policies, though terms of service and acceptable use policies are provided. Contact information is minimal, with no direct emails or phone numbers listed. Overall, Gitter demonstrates a solid technical foundation and credible business presence with a safe content profile. Strategic enhancements in privacy compliance, security policy transparency, and contact availability would further strengthen its security posture and user trust.

A

ARC Print | Transform Your Space with Banners, Custom Posters & Yard Signs

arcprint.com

65

ARC Print is a retail e-commerce website specializing in banners, custom posters, and yard signs aimed at general consumers and businesses looking to transform their spaces. The website uses modern web technologies such as Angular, Google Fonts, Google Maps API, Microsoft Clarity, and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and privacy policies. The site lacks clear contact information and compliance documentation, which impacts trust and privacy compliance scores. Overall, the website is functional and safe for general audiences but requires improvements in security and compliance to enhance credibility and trustworthiness.

A

ARC Imaging Resources

arcsupplies.com

49

ARC Imaging Resources operates a customer supply and service portal accessible via arcsupplies.com. The website serves as a login gateway for existing customers to manage their supply orders and service requests. The business appears to be a niche supplier in the imaging resources retail sector, with a domain age consistent with its founding year of 2012, indicating a stable market presence. The portal is designed with basic but functional user experience and mobile optimization, targeting primarily existing customers requiring supply and service support. Technically, the website uses standard HTML5, CSS3, and JavaScript with a theme framework from Coderthemes. The site is hosted under a domain registered with Network Solutions, LLC, with no DNSSEC enabled and no advanced CMS detected. Performance and accessibility are moderate to good, but SEO and privacy compliance are minimal. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers such as Content-Security-Policy or HSTS. The login form does not show anti-CSRF tokens, and no incident response or security contact information is provided. The domain WHOIS data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and security best practices reduces the overall security posture. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security measures. Strategic improvements in security headers, privacy compliance, and incident response visibility are recommended to enhance trust and compliance.

P

Praxishelden

zfa-beruf.com

73

The website www.zfa-beruf.com serves as an informational and job placement platform focused on the career path of Zahnmedizinische Fachangestellte (ZFA) in Germany. It provides detailed information about the profession, training opportunities, continuing education, and a job board for relevant positions. The site targets individuals interested in dental assistant careers, offering practical resources and testimonials to engage prospective trainees. Technically, the site is built on WordPress using the GeneratePress theme and includes modern web technologies such as jQuery, FontAwesome, Google Tag Manager, and Cookiebot for privacy compliance. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. Security posture is solid with HTTPS enforced and standard security headers present, alongside a comprehensive cookie consent mechanism ensuring GDPR compliance. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

B

Bundeszahnärztekammer

goz-honorarvereinbarung.de

49

The website goz-honorarvereinbarung.de serves as an authoritative informational platform provided by the Bundeszahnärztekammer (Federal Chamber of Dentists, Germany). It focuses on the GOZ fee agreement according to § 2 Abs. 1 & 2, offering calculation tools, templates, and argumentation aids targeted at dental professionals in Germany. The site positions itself as a trusted resource within the German dental healthcare sector. Technically, the website is built on a modern WordPress CMS infrastructure, utilizing plugins such as Real Cookie Banner for GDPR-compliant cookie consent and Matomo for privacy-friendly analytics. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design that supports user experience and navigation clarity. From a security perspective, the site enforces HTTPS and implements a robust cookie consent mechanism. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected during analysis. Overall, the website exhibits a high level of trustworthiness and compliance with privacy regulations, making it a reliable resource for its target audience. Strategic improvements in security headers and incident response documentation would further strengthen its security and compliance stance.

S

SPACEFOOT SAS

on-fight.es

60

On-Fight is a specialized e-commerce retailer focused on providing equipment and accessories for martial arts and combat sports. The company operates primarily in France and Spain, offering a wide range of products including gloves, protective gear, clothing, and training equipment. Their market position is that of a niche retailer catering to practitioners and clubs, supported by a professional website with clear navigation and a broad product catalog. The business demonstrates a medium-sized operation with consistent branding and trust signals such as secure payment options and customer service availability. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies including Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for security. The site shows good mobile optimization and moderate performance, with a structured approach to SEO and accessibility. Consent management is implemented via AppConsent, indicating GDPR compliance. From a security perspective, the site enforces HTTPS and uses invisible reCAPTCHA on forms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits full domain legitimacy assessment, but the website content and business information appear professional and trustworthy. Overall, On-Fight presents a secure, compliant, and professionally managed e-commerce platform with room for improvement in security headers and incident response transparency. The risk profile is low, with recommendations to enhance security policies and accessibility features to further strengthen trust and compliance.

S

SPACEFOOT SAS

selleriemae.es

58

La Sellerie de Maé is a specialized e-commerce retailer focused on equestrian equipment and accessories, targeting riders and horse owners primarily in Spain and Europe. The company operates under the legal entity SPACEFOOT SAS based in France, with a multi-country domain presence indicating a broad market reach. Their website offers a comprehensive catalog of horse and rider products, supported by express shipping and post-sale services. Technically, the site is built on a Magento (OpenMage) platform, integrating modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito, alongside GDPR-compliant consent management. Security measures include HTTPS, invisible reCAPTCHA, and secure payment logos, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital infrastructure with good content quality and user experience, supporting a high trustworthiness rating.

T

Tripnbikers : Maletas y bolsas para motos

tripnbikers.es

59

Tripnbikers.es is a specialized e-commerce website focused on selling motorcycle luggage, including top cases, side luggage, soft luggage, and accessories for motorcycle riders primarily in Spain and other European countries. The website offers a wide range of products from well-known brands such as Givi, Shad, Bagster, and SW-Motech, targeting motorcycle enthusiasts seeking quality and variety in motorcycle luggage and related accessories. The business operates multiple country-specific domains, indicating a regional market presence across Europe. Technically, the website is built on the Magento (OpenMage) e-commerce platform, utilizing modern web technologies including Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for security and marketing automation. The site is mobile-optimized with a responsive design and uses slick carousel for product displays. Consent management is implemented to comply with GDPR requirements, although explicit privacy and cookie policy pages were not detected in the provided content. From a security perspective, the site enforces HTTPS and uses security best practices such as reCAPTCHA and consent management. However, it lacks some advanced security headers and does not provide visible contact information or a security policy page, which could be improved. The WHOIS data for the domain is not publicly accessible due to Red.es restrictions on .es domains, which is common and does not necessarily indicate risk but reduces transparency. Overall, Tripnbikers.es presents as a legitimate, professional online retailer with a solid technical foundation and moderate security posture. To enhance trust and compliance, the business should publish clear privacy and terms of service documents and provide explicit contact information. These improvements would also positively impact their AI-assessed credibility and privacy compliance scores.

H

House of Rugby: el especialista en rugby

house-of-rugby.es

59

House of Rugby is a specialized e-commerce retailer focused on rugby apparel, equipment, and lifestyle products primarily targeting rugby players and fans in Spain and Europe. The website offers a broad catalog of rugby jerseys, boots, protective gear, and branded lifestyle clothing from well-known sports brands. The business model is retail-oriented with an emphasis on niche sportswear. The site demonstrates consistent branding and a professional design tailored to its target audience. Technically, the website is built on a Magento/OpenMage platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with standard e-commerce functionalities. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to prevent abuse. However, it lacks explicit security headers and published security policies or incident response information. Privacy compliance is partially addressed through a cookie consent mechanism with GDPR features, but no dedicated privacy or terms of service pages were found. No contact information or business registration details are publicly available, which may impact trust. Overall, the website presents a moderate risk profile with no critical security issues detected. Strategic improvements in transparency, privacy policy publication, and security header implementation would enhance trust and compliance. The domain uses privacy protection typical for small retail businesses, with no suspicious indicators found.

S

SPACEFOOT SAS

galope-store.es

51

Galope-Store is a specialized e-commerce platform operated by SPACEFOOT SAS, offering a wide range of equestrian and pet products targeting horse riders and pet owners primarily in Spain and France. The website demonstrates a mature digital presence with comprehensive product categories, clear navigation, and a professional design. It leverages modern e-commerce technologies including Magento (OpenMage), Google Analytics, Google Ads, and GDPR-compliant consent management tools. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be enhanced. The business shows strong trust indicators such as secure payment options, customer service contacts, and return policies. Overall, the site is accessible without WAF or security blocks, indicating good operational stability.

T

Training-Fit : Material de fitness y musculación

training-fit-es.es

59

Training-Fit is an established e-commerce retailer specializing in fitness, bodybuilding, cross training, yoga, and contact sports equipment. The website offers a broad range of products from well-known brands, targeting fitness enthusiasts and athletes primarily in Spain and other European countries through sister sites. The platform demonstrates a good level of digital maturity with a modern tech stack including Google Analytics, Google Tag Manager, and marketing automation tools. The site is mobile optimized and provides a clear navigation structure, enhancing user experience. Security posture is adequate with HTTPS and reCAPTCHA implemented, though explicit security headers and privacy policies are lacking. The absence of WHOIS data due to Red.es restrictions limits transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional and trustworthy for its target audience.

B

Basket-Center: Equipamiento y accesorios de baloncesto

basket-center.es

60

Basket-Center.es is a professional e-commerce platform specializing in basketball equipment, apparel, and accessories. It serves primarily Spanish-speaking customers and offers products from well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson. The site positions itself as a leading online basketball store in Spain with a focus on fast delivery and secure payment options. Technically, the website is built on Magento (OpenMage) and integrates multiple modern marketing and tracking technologies including Google Analytics, Facebook Pixel, and Google Ads. The site uses HTTPS and implements reCAPTCHA for security, but lacks some advanced security headers and visible privacy documentation. The absence of WHOIS data due to Red.es restrictions limits full verification of domain legitimacy. Overall, the site demonstrates a moderate to good security posture and a solid business presence in the retail sports sector.

P

Pet & Garden - Tu tienda de mascotas y centro de jardinería online

pet-and-garden.es

59

Pet & Garden is a Spanish e-commerce retailer specializing in pet supplies, gardening products, and agricultural equipment. The website offers a broad catalog of products organized into detailed categories and brands, targeting pet owners, gardeners, and agricultural professionals. The business model is focused on online retail with a medium-sized market presence in Spain. The site demonstrates consistent branding and a professional design that supports a positive user experience. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern frontend technologies and integrating Google Analytics, Google AdWords, and reCAPTCHA for marketing and security purposes. The site is mobile optimized and provides a clear navigation structure, although accessibility features are basic. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks advanced security headers and explicit privacy policies. No contact information or detailed security policies are visible, which may impact user trust and compliance. Overall, the website is safe, professional, and functional but could improve in privacy transparency and security hardening.

D

Direct-Running

direct-running.es

59

Direct-Running is a specialized e-commerce retailer focused on running shoes, sports apparel, and accessories, primarily serving the Spanish and European markets. The website offers a broad catalog of well-known brands such as Adidas, Nike, Saucony, and Puma, targeting runners and sports enthusiasts. The business model is retail-oriented with an emphasis on fast delivery and secure payment options. The website is professionally designed with consistent branding and good navigation, supporting a positive user experience.

P

Pecheur-Store : Tienda de pesca en línea

pecheur-store.es

49

Pecheur-Store is an e-commerce retailer specializing in fishing equipment, targeting Spanish-speaking customers primarily in Spain. The website offers a wide range of fishing products including rods, reels, baits, and accessories, with a focus on fast shipping and secure payment options. The brand operates multiple country-specific domains, indicating a regional market presence. Technically, the site is built on Magento (OpenMage), leveraging modern tracking and marketing tools such as Google Analytics, Google Ads, and reCAPTCHA for security and compliance. While HTTPS is enforced and some privacy consent mechanisms are in place, explicit privacy and terms of service pages were not detected in the provided content, which is a compliance gap. Security headers are missing, which could be improved to enhance security posture. Overall, the site presents a professional and trustworthy e-commerce platform with moderate technical maturity and a good user experience.

M

Made In Paradis

madeinparadis.es

60

Made In Paradis is a medium-sized e-commerce retailer specializing in women's fashion, footwear, and accessories, operating primarily in Spain with multiple European localized domains. The company offers a wide range of products from over 300 brands, targeting women interested in fashion and footwear. Their business model focuses on online retail with fast delivery and secure payment options, supported by a professional website with clear navigation and brand consistency. The presence of multiple sister stores indicates a broader retail group with diversified offerings. Technically, the website is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito marketing automation. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in loading speed and accessibility. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA v3 for bot protection, and uses a consent management platform to comply with GDPR. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The website maintains good privacy compliance with clear privacy and cookie policies. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen their position.

F

Foot-store: Tienda de fútbol 100% | Jerseys y zapatos

foot-store.es

58

Foot-store.es is a specialized e-commerce retailer focused on football-related products including boots, jerseys, and equipment. The site targets football players, fans, and sports enthusiasts primarily in Spain but is part of a broader network of country-specific domains. The business model is retail e-commerce with a focus on fast delivery and competitive pricing. Technically, the website is built on Magento (OpenMage), leveraging modern web fonts and responsive design. It integrates multiple marketing and tracking tools such as Google Analytics, Facebook Pixel, and affiliate tracking via AWIN. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks some security headers and explicit privacy and terms pages. The WHOIS data is not publicly accessible due to Red.es restrictions, which is typical for .es domains, but this limits transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

The website manalyticshub.com presents minimal content, consisting primarily of a single JavaScript inclusion and a generic page title 'Content widget'. There is no visible business description, contact information, or user-facing content. The domain is registered since 2018 with a reputable Russian registrar REG.RU LLC and uses Yandex Cloud for hosting. The lack of content and metadata limits the ability to assess the business model or market position. Technically, the site uses basic JavaScript and has a permissive Content-Security-Policy header that allows unsafe inline scripts, which is a security concern. No HTTPS or SSL configuration details were provided, but the domain uses clientTransferProhibited status, indicating some domain transfer protection. No privacy, cookie, or terms of service policies are present, and no contact or security policies are found, indicating low privacy compliance and business credibility. Overall, the site appears to be either under development or a placeholder with very limited functionality and content.

I

IT Space

itspace.uz

41

IT Space is a small technology company based in Tashkent, Uzbekistan, specializing in the development of Telegram bots, websites, mobile applications, and business utilities. The company offers a broad range of IT services including website creation (business cards, landing pages, e-commerce), bot development, branding design, and CRM integration. Their market position is that of an experienced local developer with a solid portfolio and active client engagement. Technically, the website employs modern frontend technologies such as Bootstrap 5 and jQuery, with integration of Google Analytics and Yandex Metrika for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and secure forms, but lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and business credible but could improve in compliance and security transparency.

S

SPACEFOOT SAS

velo-store.it

62

Vélo-Store is a specialized e-commerce retailer focused on bicycles, cycling apparel, and accessories, primarily targeting the Italian market with a broader European presence through multiple country-specific domains. The company, legally registered as SPACEFOOT SAS in France, operates a professional and well-structured online store with a clear business model centered on retail sales of cycling products. The website demonstrates a good level of digital maturity, leveraging Magento (OpenMage) as its platform, integrated with modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation. The presence of GDPR-compliant consent management and privacy policies reflects a strong commitment to privacy and regulatory compliance.

S

SPACEFOOT SAS

velo-store.se

58

Vélo-Store is a professional e-commerce retailer specializing in bicycles, cycling parts, and accessories, primarily targeting the Swedish and broader European market. The company operates under SPACEFOOT SAS, a French legal entity, with customer service and logistics based in France. The website offers a broad catalog of cycling products, including mountain bikes, BMX, urban bikes, and related equipment, supported by a multi-country presence through sister domains. The business model focuses on online retail with fast delivery and secure payment options, positioning itself as a trusted cycling specialist in Europe. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Ads, reCAPTCHA, and marketing automation tools like Actito. The site is mobile-optimized, SEO-friendly, and integrates GDPR-compliant consent management, reflecting a mature digital infrastructure. Performance is moderate with good accessibility and navigation clarity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and displays secure payment logos, enhancing user trust. However, some security headers are missing, and there is no public security policy or incident response contact information. The WHOIS data is consistent with the business identity, showing a legitimate and transparent domain registration. Overall, Vélo-Store presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and public security policies could further enhance trust and resilience.

S

SPACEFOOT SAS

velo-store.es

60

Vélo-Store is a specialized European e-commerce retailer focused on bicycles, cycling equipment, and accessories. Operated by SPACEFOOT SAS based in France, the company targets cycling enthusiasts primarily in Spain and other European countries through localized domains. The website offers a broad catalog of products including bicycles, parts, apparel, and electronic devices, supported by a professional online shopping experience with secure payment options and customer service. The presence of multiple country-specific domains indicates a strategic market expansion across Europe. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, Google Ads, and marketing automation tools like Actito. The site is mobile optimized with good SEO and accessibility basics, providing a smooth user experience. Security measures include HTTPS enforcement, reCAPTCHA integration, and a consent management platform ensuring GDPR compliance. From a security perspective, the site demonstrates a solid posture with appropriate security headers and encrypted communications. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are well implemented, reflecting compliance with European data protection regulations. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Vélo-Store presents a trustworthy and professional e-commerce platform with a strong market presence in the cycling retail sector. Strategic recommendations include enhancing transparency around security policies, publishing vulnerability disclosure information, and further improving accessibility compliance to strengthen user trust and regulatory adherence.

S

SPACEFOOT SAS

velo-store.pt

60

Vélo-Store is a professional e-commerce retailer specializing in bicycles, cycling equipment, and accessories, targeting cycling enthusiasts primarily in Portugal and other European countries. The company operates under SPACEFOOT SAS, based in France, and maintains a multi-country online presence with localized websites. Their business model focuses on online retail with an emphasis on fast delivery, secure payment, and customer service. The website demonstrates a consistent brand image and provides comprehensive product categories and trusted payment options. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies including Google Analytics, Google Ads, and AppConsent for GDPR compliance. The site is mobile-optimized and features good SEO practices. Security measures include HTTPS enforcement, Google reCAPTCHA v3, and cookie consent management aligned with TCF2 standards. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. The WHOIS data aligns with the business information, supporting legitimacy and trustworthiness. Overall, Vélo-Store presents a secure, professional, and user-friendly e-commerce platform with good compliance and trust indicators. Strategic improvements in security transparency and accessibility could further enhance their posture.

S

SPACEFOOT SAS

trek-expert.ch

67

Trek-Expert is a European e-commerce retailer specializing in outdoor clothing, shoes, and equipment, targeting outdoor enthusiasts primarily in Switzerland and France. The company operates under SPACEFOOT SAS, with a strong multi-country presence and a well-structured online platform. Their business model focuses on providing discounted outdoor gear with secure payment options and customer service based in France. Technically, the website is built on Magento (OpenMage), integrating modern marketing and analytics tools with GDPR-compliant consent management. Security posture is strong with HTTPS, security headers, and reCAPTCHA, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile users.

S

SPACEFOOT SAS

trek-expert.se

56

Trek-Expert is a specialized e-commerce retailer focused on outdoor clothing, footwear, and sports equipment, targeting customers primarily in Sweden and broader Europe. The company operates under SPACEFOOT SAS, with customer service based in France, reflecting a cross-border European business model. The website offers a broad product catalog with multiple country-specific domains, indicating a mature market presence in the outdoor retail sector. Technically, the website is built on a Magento (OpenMage) platform, integrating modern marketing and analytics tools such as Google Analytics, Google Ads, Actito, and GDPR-compliant consent management via AppConsent. The site is mobile responsive and optimized for SEO, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and displays secure payment logos, enhancing user trust. However, there is room for improvement by enabling DNSSEC and adding more comprehensive HTTP security headers. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business information, supporting legitimacy. Overall, Trek-Expert demonstrates a solid digital maturity and security posture suitable for its e-commerce operations. Strategic recommendations include enhancing DNS security, publishing formal security policies, and improving accessibility compliance to further strengthen trust and compliance.

S

SPACEFOOT SAS

trek-expert.es

60

Trek-Expert is a specialized e-commerce retailer focused on outdoor sports apparel, footwear, and equipment. The company operates multiple country-specific domains, indicating a strong European market presence, with its legal entity identified as SPACEFOOT SAS based in France. The website offers a broad product range targeting outdoor enthusiasts including hikers, trail runners, climbers, aquatic sports participants, and fishing hobbyists. Key services include secure online shopping, customer support, and post-sale services with clear return policies.

S

SPACEFOOT SAS

trek-expert.pt

60

Trek-Expert is a specialized e-commerce retailer focused on outdoor sports equipment, footwear, and clothing. Operated by SPACEFOOT SAS based in France, the company serves a European market with localized websites for multiple countries. The business offers a wide range of products including hiking shoes, winter sports gear, trail running apparel, and fishing equipment, targeting outdoor enthusiasts and sports customers. The website is professionally designed with clear navigation and a strong brand presence. Technical infrastructure is based on Magento (OpenMage), integrating modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation. Security posture is strong with HTTPS enforced, GDPR compliance mechanisms, and secure payment options clearly displayed. No critical vulnerabilities or suspicious WHOIS patterns were detected, supporting the legitimacy of the business. Overall, Trek-Expert presents a trustworthy and mature online retail platform with good technical and security standards.

S

SPACEFOOT SAS

trek-expert.it

62

Trek-Expert is a specialized e-commerce retailer focused on outdoor sports apparel, footwear, and equipment. The company operates multiple country-specific websites, targeting outdoor enthusiasts across Europe, with a strong presence in Italy and France. Their business model centers on online retail with secure payment options and customer service based in France. The website is professionally designed, with clear navigation and a comprehensive product catalog catering to various outdoor sports such as hiking, climbing, skiing, trail running, and fishing. Technically, the website is built on the Magento (OpenMage) platform, integrating modern marketing and analytics tools including Google Analytics, Google Ads, Actito marketing automation, and GDPR-compliant consent management via AppConsent. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for bot protection, and displays secure payment logos to build trust. However, some security headers are not explicitly detected, and DNSSEC is not enabled, which could be improved. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the domain registration data aligns well with the business information, indicating legitimacy and trustworthiness. The website is safe for general audiences, with no adult or explicit content. The risk level is low, but recommendations include enhancing security headers and enabling DNSSEC to further strengthen the security posture.