Training-Fit.ie is an e-commerce website specializing in fitness and bodybuilding equipment, offering a wide range of products including cardio devices, professional fitness machines, bodybuilding accessories, crossfit gear, yoga apparel, fighting sports equipment, clothing, shoes, and related accessories. The site targets fitness enthusiasts, athletes, and consumers seeking quality fitness products from well-known brands. The business model is retail-focused, leveraging online sales with fast delivery and secure payment options. The domain is newly registered in December 2023, indicating a recent market entry or brand launch.
Technically, the website is built on Magento (OpenMage), utilizing modern web technologies such as Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for security and marketing. The site is hosted with Gandi, with HTTPS enabled and a clientTransferProhibited domain status, indicating basic domain security. Mobile optimization and navigation are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags.
From a security perspective, the site uses HTTPS and reCAPTCHA, and implements a consent management platform to comply with privacy regulations. However, no DNSSEC is enabled, and security headers are missing, which are areas for improvement. No privacy policy or terms of service were found, which is a compliance gap. No contact information for security incidents or data protection officers is provided, limiting incident response readiness.
Overall, the website presents a professional and trustworthy e-commerce platform with moderate security posture and technical maturity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.
Scanned ·
3 of 7 checks could not complete. The site may be unreachable or blocking automated scans, so the results below cover only what could be checked. Try a rescan later.
NIS2 and GDPR posture
NIS2 outside view
Not assessed
GDPR outside view
Not assessed
Both readouts depend on the site's pages, which could not be loaded in this scan.
Priority findings
1 finding rated critical or high. Fix these first.
SSL/TLS
TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.
High
Weak Protocols Supported
Server supports weak protocols: TLSv1.1
What to do: Disable TLS 1.0, TLS 1.1, and all SSL versions
This scan found 14 issues across 4 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.
Daily monitoring
Recommended
€25per month
TLS certificates and expiry
DNS records
SPF, DKIM and DMARC
Security headers
GDPR and NIS2 posture
Exposed services
Third-party trackers
Security score drift
Email alerts on material changes and an exportable JSON history of every change.
Billed monthly to your card. Cancel anytime. The full timeline opens with your unlock code.
Full report
€39.90one-time
The complete analysis as a PDF you can cite
Email delivery with an unlock code
Lifetime access to this report
Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.
Results by check
Each check with its score, findings and the evidence it collected.
How this score is calculated
The security score runs 0–100, higher is better. It is the plain average of the security checks that completed in this scan, each counted equally. A check that could not run is left out: it counts neither as a pass nor as a fail.
Counted in this score
SSL/TLS
72
Email security
70
DNS health
70
Network security
100
Average
78
After the cap
75
Not counted
Security headers: did not complete in this scan.
GDPR outside view: did not complete in this scan.
NIS2 outside view: Re-weights evidence from the TLS, email, DNS, network and hygiene checks, so counting it would count that evidence twice. Shown on its own.
OffSeq Observations: An AI reading of the site, useful context but not reproducible evidence. Shown on its own.
Findings that cap the score at 49
Each of these is serious on its own, so while any is present the site cannot rate better than high risk, however good the other checks are.
The certificate is not trusted by browsers
The website is not served over HTTPS
A database, remote desktop, file-sharing or Telnet service is reachable from the internet
The page loads a script from a compromised source
The domain registration has expired
SPF authorises every server to send mail as the domain
Partial scans
When the site blocks Guard or most checks cannot run, the score covers only the checks that ran (usually DNS and email), is capped at 75 and is shown as partial, without a risk level.
Risk levels
Critical0–25
High26–49
Medium50–75
Low76–100
Breach exposure
Leaked credentials and lookalike domains from OffSeq Breach. The counts are free; the detailed lists are paid add-ons.
Dark web exposure
Add-on
Leaked records that mention training-fit.ie, from OffSeq Breach.
No leaked records found
Breach holds no records for training-fit.ie right now. New leaks arrive continuously, so monitoring on Breach alerts you if that changes.
Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.
Business context
Business profile
Training-Fit.ie operates in the competitive fitness and bodybuilding e-commerce market, focusing on a broad product range from fitness devices to apparel and accessories. The site emphasizes well-known brands such as adidas, Nike, Mizuno, and Bodytone, positioning itself as a comprehensive supplier for fitness needs. The business model is direct online retail with promotional offers and fast shipping, targeting individual consumers and possibly fitness professionals. The presence of a related domain (training-fit.com) suggests a broader brand ecosystem or regional targeting. The company is likely a medium-sized enterprise given the product breadth and technical infrastructure. Growth potential exists through enhanced marketing and expanded product lines. Partnerships with major brands and use of marketing tools like Actito indicate a strategic approach to customer engagement.
Security posture
The website demonstrates a baseline security posture with HTTPS enforced and reCAPTCHA implemented to prevent automated abuse. The domain status clientTransferProhibited adds protection against unauthorized domain transfers. The use of a consent management platform shows awareness of privacy regulations. However, the absence of DNSSEC and security headers such as Content-Security-Policy, X-Frame-Options, and Strict-Transport-Security reduces defense-in-depth. No explicit privacy policy or terms of service are published, which is a compliance and transparency concern. Lack of visible incident response contacts or security policies limits preparedness for security events. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is moderate but can be significantly improved by adopting recommended security headers, publishing comprehensive privacy and security policies, and enabling DNSSEC.
Recommendations
Publish a comprehensive privacy policy and terms of service accessible from the website footer or main navigation.
Enable DNSSEC on the domain to enhance DNS security and prevent spoofing.
Implement essential security headers including Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Strict-Transport-Security.
Provide clear contact information for security incidents and designate a Data Protection Officer or privacy contact.
Enhance accessibility features to improve compliance and user experience for all users.
Site observations
Automated reading of the public site. Ratings are indicative.
Business
Description
Bodybuilding equipment, accessories and fitness equipment...The biggest brands at the best price. Fast delivery ✓ Secure payment
Key services
Online sales of fitness and bodybuilding equipment, Fast delivery, Secure payment
Content quality
good
Branding
consistent
Technology
Stack
Google Analytics, Google Tag Manager, Google Ads, reCAPTCHA, Actito, Slick Carousel, Magento (OpenMage variant)
Performance
moderate
Mobile
good
Accessibility
basic
SEO
good
Security
Observed score
75/100
Good practices seen
HTTPS enabled
Use of reCAPTCHA
Consent management platform (CMP) implemented
ClientTransferProhibited domain status
Analytics and tracking
Services
Google Analytics, Google Tag Manager
Tracking level
moderate
Privacy practices
basic
Advertising
Ad networks
Google Ads, Google DoubleClick
Tracking pixels
Google Ads Conversion Tracking
Marketing tools
Actito
Transparency
good
Site quality
Design
good
User experience
good
Content relevance
good
Navigation
good
Professionalism
good
Trustworthiness
moderate
Key observations
Website is a professional e-commerce platform specializing in fitness and bodybuilding equipment.
No explicit privacy policy or terms of service found on the homepage or main navigation.
Consent management platform is implemented with default denied consent for analytics and ads.
Multiple product categories and brands are well organized with clear navigation.
No direct contact emails or phone numbers found in the provided HTML snippet.
Use of modern web technologies and Google marketing/analytics tools.
Domain is newly registered with a reputable registrar and no DNSSEC enabled.
No security headers detected in the provided data; opportunity for improvement.
No visible vulnerabilities or exposed sensitive data in the HTML content.
Technical notes
Notes
The website is built on Magento (OpenMage), a widely used e-commerce platform, indicating a mature and scalable infrastructure. It uses modern fonts, CSS, and JavaScript libraries including Slick Carousel for UI components. Google Analytics, Google Tag Manager, and Google Ads are integrated for marketing and analytics purposes. The site is hosted with Gandi, a reputable registrar and hosting provider. Performance is moderate with preloading of fonts and asynchronous loading of scripts. Mobile optimization is good with responsive design elements. However, accessibility is basic and could be improved. SEO is supported by meta tags and structured navigation. No critical technical debt or vulnerabilities were detected in the provided HTML content.
Standards and sources
Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.
Reviews of this site
Share your experience with training-fit.ie. Every review is verified by email and published after moderation.
Community rating
No published reviews yet. Be the first to review training-fit.ie.