Retail security reports

M

Malu Wilz Beauty Centre

malu-wilz.de

50

Malu Wilz Beauty Centre operates an e-commerce platform specializing in beauty and skincare products, targeting consumers interested in cosmetics and personal care. The website offers a range of products including makeup, skincare collections, and accessories, with a focus on a professional and user-friendly online shopping experience. The business is positioned as a niche retailer within the German market, leveraging a multilingual website to reach both German and English-speaking customers. Technically, the website is built on the OXID eShop Community Edition platform, utilizing common JavaScript libraries such as jQuery and FlexSlider for enhanced user interaction. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism aligned with GDPR requirements. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses secure login forms, but lacks visible HTTP security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and privacy compliance is well addressed through accessible privacy and cookie policies. The absence of direct contact emails or phone numbers reduces immediate contactability but is mitigated by a contact form. Overall, the website presents a trustworthy and professional e-commerce presence with solid privacy compliance and a moderate security posture. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's resilience and user trust.

G

Glitzerladen.de

glitzerladen.de

52

Glitzerladen.de is a specialized online retailer offering personalized and fashion jewelry primarily targeting the German market. The company provides a broad range of products including engraved bracelets, necklaces, rings, and accessories, with a focus on customization and affordable pricing. The business leverages trusted partnerships with payment providers such as PayPal and Klarna and is certified by Trusted Shops, enhancing customer trust and satisfaction. The website is professionally designed, mobile-optimized, and offers a smooth user experience with clear navigation and comprehensive product information. Technically, the website is built on the Shopware platform, hosted by Rackspeed, and integrates modern web technologies including Google Tag Manager, Google Analytics, and Trusted Shops widgets. Security measures include HTTPS enforcement, CSRF tokens, and cookie consent management, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates strong adherence to best practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR-aligned consent mechanisms. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, Glitzerladen.de presents a trustworthy and professional e-commerce platform with a solid security posture and compliance framework. Strategic enhancements in security policy transparency and accessibility could further strengthen its market position and customer confidence.

Wandlounge.de is a German retail business specializing in decorative wall products such as wall tattoos, stickers, and posters. The website indicates that the e-commerce shop has been closed and products are no longer sold online, but the company continues to produce high-quality products. The business is a small entity operating under the parent company prior Verkaufsförderung + Merchandising GmbH. The website is simple and static, with basic content and minimal technical sophistication. Contact information is clearly provided, but no social media or advanced marketing tools are used. The site lacks modern security features such as HTTPS confirmation, security headers, and cookie consent mechanisms, which impacts its security posture and privacy compliance.

B

BOECK Jagd & Outdoor

boeck-jagd-outdoor.de

44

BOECK Jagd & Outdoor operates a German-language e-commerce website specializing in hunting, outdoor, camping, and survival equipment. The site targets outdoor enthusiasts, hunters, and sports shooters with a niche retail business model. The platform is built on the Gambio e-commerce framework and integrates PayPal for payment processing, indicating a moderate level of digital maturity. The website is well-structured with good navigation and mobile optimization, providing a positive user experience. However, explicit privacy policies and terms of service are not found in the provided content, which may impact compliance and user trust. Security posture is adequate with HTTPS and secure payment integration but lacks visible security headers and incident response information. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures.

H

Hats-Trends

hats-trends.de

64

Hats-Trends is a small, established German retailer specializing in fashionable hats, beanies, caps, and related headwear for men, women, and children. Founded in 1992, the company operates an e-commerce platform powered by Jimdo CMS, complemented by presence on marketplaces such as Ebay and Amazon. The business emphasizes handmade quality and trendy designs, targeting fashion-conscious customers seeking affordable headwear. Technically, the website uses modern web technologies including jQuery UI and integrates Google Analytics and POWr.io widgets for analytics and marketing. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site projects a trustworthy and professional image with positive trust signals such as Händlerbund membership and extensive customer reviews. No critical vulnerabilities or blocking mechanisms were detected.

W

Wasserpfeifen und mehr

wasserpfeifenundmehr.de

52

Wasserpfeifen und mehr operates a specialized e-commerce platform focused on selling premium water pipes, shishas, shisha tobacco, and related accessories primarily to the German market. The company positions itself as a niche leader offering exclusive and high-quality products, supported by strong customer service and a VIP loyalty program. The website content is professionally presented with clear navigation and comprehensive product information, targeting mature shisha enthusiasts. Technically, the site leverages the Gambio CMS platform, integrates modern JavaScript libraries, and uses PayPal for secure payment processing. Hosting is provided by Estugo Webhosting, with stable DNS configurations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, enhancing trustworthiness.

A

AlteZeitschriften.de

altezeitschriften.de

42

AlteZeitschriften.de operates a specialized e-commerce platform focused on selling original vintage German magazines and print media dating from the 1930s to present. The business targets collectors, educators, and gift buyers seeking authentic print issues across diverse categories including erotica, youth magazines, automotive, history, and comics. The website is built on PrestaShop CMS and integrates modern payment options such as Amazon Pay, with customer trust reinforced by Trusted Shops certification and Trustpilot reviews. The site offers low shipping costs and a growing archive, positioning itself as a niche market leader in vintage magazine retail. Technically, the website employs a modern tech stack including jQuery, Google Analytics, and trusted third-party widgets. It is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional, trustworthy, and user-friendly platform for vintage magazine sales. Security and privacy practices are solid but could benefit from enhancements in cookie consent and explicit security policies. The domain WHOIS data aligns with the website's branding and business claims, supporting legitimacy. No WAF or blocking mechanisms interfere with access, allowing full content analysis.

G

Geschenk & Korb OHG

geschenkundkorb.de

47

Geschenk & Korb OHG operates a specialized e-commerce platform focused on selling curated gift baskets and gift boxes for various occasions, primarily targeting customers in Germany and the EU. The company emphasizes quality, personalized service including greeting cards and scheduled delivery, and caters to both private and corporate clients. The website reflects a mature business with over 25 years of experience, supported by trust seals and customer testimonials. Technically, the site uses standard web technologies with responsive design and structured data for SEO, though it lacks advanced security headers. The security posture is adequate with HTTPS and cookie consent but could be improved with additional headers and published security policies. Overall, the site is professional, trustworthy, and privacy-conscious with no signs of malicious activity or content blocking.

C

CukiDrip

cukidrip.com

68

CukiDrip is a newly established e-commerce retailer specializing in premium crypto-themed apparel and streetwear, targeting the Bitcoin, Ethereum, and Web3 enthusiast communities. The business operates primarily online via a Shopify platform, offering hoodies, t-shirts, and caps with a strong brand identity centered on crypto culture. The company emphasizes free worldwide shipping and maintains active social media channels to engage its niche audience. Technically, the website leverages modern e-commerce technologies and marketing tools, including Google Tag Manager, Microsoft Clarity, and various Shopify apps, ensuring a performant and mobile-optimized user experience. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and use of hCaptcha for form protection, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned within its niche market, though it would benefit from enhanced security disclosures and DNS security improvements.

ZE-BRAND is a small, specialized branding consultancy with over 30 years of experience focused on the Central and Eastern European (CEE) market. The company offers brand consulting, packaging design, and special project services primarily targeting fast-moving consumer goods (FMCG), beauty, hygiene, health, and nutrition sectors. Their website reflects a professional business with clear service offerings and a regional focus. Technically, the site is built on the Weebly platform using legacy JavaScript libraries and includes standard analytics and tracking tools. Security posture is moderate but could be improved by updating libraries and implementing security headers. The absence of privacy and cookie policies and missing WHOIS registration data are notable gaps that impact trust and compliance. Overall, the website is functional and professional but requires enhancements in security and privacy transparency to align with best practices.

Unilever Česká republika operates as a regional branch of the global consumer goods giant Unilever PLC, providing a wide range of well-known brands in food, home care, and personal care sectors. The website reflects a mature enterprise-level digital presence with a focus on user experience, accessibility, and compliance with privacy regulations such as GDPR. The site employs modern web technologies including the Astro framework and integrates cookie consent management via OneTrust, alongside Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for performance and SEO.

M

Marks & Spencer

marksandspencer.com

68

Marks & Spencer is a large, established UK-based retail company specializing in fashion, home goods, beauty products, and food & drink. The website serves as a comprehensive e-commerce platform targeting a broad general audience with a focus on quality and trend-conscious consumers. The business model centers on multi-category retail with online shopping capabilities including delivery and collection options. The site demonstrates strong branding consistency and professional content quality. Technically, the website is built using modern web technologies including React with Next.js framework, and integrates multiple third-party analytics and marketing tools such as Google Tag Manager, mParticle, AppsFlyer, Optimizely, and Dynatrace RUM. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience across devices. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and content strongly indicate legitimacy. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts and data retention policies.

C

Coty

coty.com

59

Coty is a leading global beauty company specializing in fragrance, color cosmetics, skin, and body care products. The website reflects a strong market position with a comprehensive portfolio of iconic brands. The digital infrastructure leverages modern web technologies such as React and Next.js, supported by Adobe Launch for analytics and OneTrust for privacy compliance, indicating a mature and well-managed technical environment. Security posture is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response details are not publicly available. The absence of WHOIS data is unusual but does not detract from the overall legitimacy given the professional presentation and known brand presence. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust and compliance.

R

raumzeit.cc

raumzeit.cc

45

Raumzeit.cc is a specialized e-commerce platform focused on natural material interior design products such as stone, moss, wood, glass, wall films, and acoustic solutions. The company targets premium partners, architects, and customers seeking high-quality natural design elements, positioning itself as a niche leader in the German-speaking retail market. The website is built on the Shopware CMS platform, hosted by Vautron Rechenzentrum AG, and employs modern web technologies including HTTPS and cookie consent mechanisms, ensuring a secure and user-friendly experience. While DNSSEC is not enabled, the overall security posture is solid with no critical vulnerabilities detected. The site provides comprehensive legal and contact information, enhancing business credibility and GDPR compliance. No adult or questionable content is present, making it suitable for general audiences.

A

Aspekte GmbH

djkshop.de

52

The DJK Shop, operated by Aspekte GmbH, is an e-commerce platform specializing in merchandise for the DJK Sportverband and DJK Sportjugend communities. The website offers a range of branded sports articles available for online purchase, targeting members and affiliates of the DJK sports organizations in Germany. The business operates as a niche retailer with a direct-to-consumer model, emphasizing exclusive distribution through Aspekte GmbH.

R

ROSEN Lichtwerbung

rosen-lichtwerbung.de

44

ROSEN Lichtwerbung is a German-based company specializing in illuminated advertising products including illuminated letters, advertising elements, pylons, towers, special constructions, and LED technology. The company targets business customers and resellers, positioning itself as a specialized provider in the retail sector for signage solutions. The website is professionally designed using WordPress with modern plugins for SEO and multilingual support, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. Overall, the website is trustworthy and well-structured, though improvements in privacy compliance and security transparency are recommended.

R

REWE Group

rewe-group.com

63

REWE Group is a large German retail and tourism conglomerate serving approximately 12 million customers daily across supermarkets, discount stores, DIY stores, and travel services. The company has a strong market position in Germany and Europe with a history dating back to 1927. Their website reflects a mature digital presence with comprehensive content focused on corporate governance, sustainability, investor relations, and career opportunities. Technically, the site is built on WordPress with modern performance and SEO optimizations, leveraging Google Tag Manager, Adobe Launch, and a consent management platform to ensure privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is understandable for a large enterprise. Overall, the site is professional, secure, and compliant with GDPR, providing a trustworthy digital experience.

K

KÜHN Sicherheit GmbH

shop-fuer-sicherheit.de

52

Shop für Sicherheit - KÜHN Sicherheit GmbH operates a specialized e-commerce platform focused on security products such as door locks, locking cylinders, and related safety technology. The company holds reputable certifications including VdS and DIN EN 9001 and is a member of recognized industry associations, positioning it as a trusted player in the German security retail market. The website targets both private and business customers seeking high-quality security solutions. Technically, the site is built on the Shopware platform, utilizing modern web technologies like jQuery and FontAwesome, and integrates analytics tools such as Google Tag Manager and Matomo for user tracking and marketing insights. The site is mobile-optimized with good navigation and content quality, supporting a positive user experience. Security posture is strong with HTTPS enforced, CSRF protection on forms, and a comprehensive cookie consent mechanism, although some HTTP security headers could be improved. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

L

LV - Buchweltshop

buchweltshop.de

52

LV.Buch operates an e-commerce platform specializing in books centered around country life, nature, cooking, and lifestyle themes, targeting primarily German-speaking customers. The website is built on a mature Magento 2 platform with a comprehensive technical infrastructure including RequireJS, jQuery, Google Tag Manager, and Usercentrics for cookie consent management. The site demonstrates good digital maturity with modern technologies and integrations for marketing and security, such as invisible Google reCAPTCHA and cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is partial due to the absence of explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

B

Baustoffmarkt-Gruppe

baustoffmarkt-gruppe.de

51

Baustoffmarkt-Gruppe is a German company specializing in building materials, targeted modernization, and sustainable renovation services. The website serves as a digital presence to inform and attract customers interested in construction and renovation projects. The company appears to operate in the retail sector with a medium-sized business profile. Technically, the website is built on WordPress using the Divi theme, with common plugins for enhanced functionality and tracking. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie policy and consent mechanism, but no clear privacy policy or terms of service pages were found. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

A

Aspekte GmbH Ludwigsburg

aspektegmbh.de

52

Aspekte GmbH Ludwigsburg is a small German company specializing in advertising concepts, promotional products, and marketing services, with a niche focus on DJK-related merchandise distribution. The website is built on WordPress with a responsive design and includes accessibility and GDPR compliance features, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though additional security headers and formal policies could enhance protection. Overall, the site is professional and trustworthy, serving business clients primarily in Germany.

P

Pfadfinderinnenwerk St. Georg e.V.

psg-boutique.de

61

PSG Boutique is an e-commerce website operated by Pfadfinderinnenwerk St. Georg e.V., a German scouting organization. The site offers a variety of scouting-related merchandise including clothing, badges, work materials, and special campaign items. The business targets members and supporters of the organization, providing niche products tailored to this community. The website is built on WordPress with WooCommerce and uses modern plugins and themes to deliver a professional shopping experience. SEO and structured data are well implemented, enhancing discoverability and user experience. Contact information and privacy policies are clearly presented, supporting trust and compliance.

R

RIESENRAT

riesenrat.eu

10

RIESENRAT is a German-based company specializing in high-quality office furniture, including prospect cabinets, office shelves, library shelves, locker cabinets, and a variety of lecterns with accessibility features. The company also offers rental services for height-adjustable lecterns and supports large projects with delivery options to Switzerland, Austria, and Liechtenstein. Their website is built on WordPress with WooCommerce, indicating a mature e-commerce infrastructure. The site is well-structured with clear product categories and contact information, targeting business customers in need of office furniture solutions. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. WHOIS data is privacy protected, which is common but reduces transparency slightly. Overall, the website presents a professional and trustworthy business presence with room for improvement in security and compliance documentation.

I

Ingka Group

ingka.com

75

Ingka Group operates as a major franchisee and operator of the IKEA brand, focusing on retail, real estate, and investments. The website presents a professional and comprehensive digital presence, highlighting their business areas, sustainability efforts, and corporate news. Technically, the site is built on WordPress with modern SEO and security tools, including Google Tag Manager and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given the strong brand presence and professional content. Overall, the site is well-maintained, trustworthy, and compliant with privacy regulations.

H

Hrdo a srdcom #praveslovenske

hrdoasrdcom.sk

44

Hrdo a srdcom #praveslovenske is a Slovak-based e-commerce website specializing in retailing culturally themed products such as mugs, socks, and clothing featuring Slovak folk motifs and regional designs. The site targets Slovak consumers and enthusiasts of Slovak culture, offering a niche product range with custom options and bundled collections. The business operates primarily online with a focus on Slovak heritage and tourism promotion. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging common web technologies like jQuery and Bootstrap. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. Security-wise, the website uses HTTPS and implements several security headers, indicating a good security posture, though it lacks a dedicated security policy or incident response page. Privacy compliance is well addressed with GDPR and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals, though there is room for improvement in security transparency and accessibility.

D

Diamant Schuhfabrik Otto Müller KG

diamant.net

61

Diamant Schuhfabrik Otto Müller KG is a well-established German family-owned company specializing in the manufacture and sale of high-quality dance shoes for women, men, and children. The company emphasizes German craftsmanship and sustainability, producing its products in Bad Soden am Taunus and exporting worldwide. Their website reflects a professional e-commerce platform targeting dance enthusiasts with a broad product range and certified online shops. Technically, the website is built on a modern Angular framework with integration of Google Analytics, Google Tag Manager, Stripe Checkout, and CookieYes for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. However, no explicit security headers or published security policies were detected, and no incident response contacts are provided. The WHOIS data is missing or privacy protected, which slightly reduces trustworthiness but does not outweigh the professional presentation and business legitimacy. Overall, the website presents a low-risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust and security posture.

C

corporate benefits Nederland BV

corporate-benefits.nl

62

Corporate Benefits Nederland BV operates as a European market leader in employee benefits solutions, providing tailored discount platforms and attractive offers from strong brands to enhance employee satisfaction. The company targets employers and retailers, offering B2B services with a strong presence in multiple European countries. Their website is professionally designed, multilingual, and built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager and Hotjar. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in explicit security headers and incident response disclosures. Overall, the website reflects a mature digital infrastructure supporting a large enterprise with over 40,000 company clients and 15.6 million users.

C

corporate benefits Benelux BV

corporate-benefits.be

62

Corporate Benefits Benelux BV operates as a European market leader in employee benefits solutions, providing tailored discount platforms and attractive offers from strong brands to over 40,000 companies and 15.6 million registered users. Their business model focuses on B2B and B2C services targeting employers, retailers, and employees across multiple European countries. The website is professionally designed, multilingual, and built on TYPO3 CMS, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with cookie consent mechanisms and secure form validations, though lacking explicit security headers and vulnerability disclosures. WHOIS data is restricted, limiting domain ownership verification, but the overall trust indicators such as TÜV IT certification and consistent branding support legitimacy. The site integrates Google Tag Manager and analytics for marketing and tracking purposes with GDPR-compliant consent.

D

dm-drogerie markt GmbH + Co. KG

lust-an-zukunft.de

68

The website 'Lust an Zukunft' is a community engagement platform operated by dm-drogerie markt GmbH + Co. KG, a large retail company in Germany. The site focuses on supporting local initiatives for a livable and open society, aligning with the company's corporate social responsibility efforts. The platform is well-branded and consistent with dm's retail and community values, targeting a general audience interested in social initiatives and retail services. Technically, the site employs modern web technologies including JavaScript modules and CSS, with a self-hosted Matomo analytics solution integrated via Cookiebot for GDPR-compliant user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks explicit security headers and a published security policy. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the brand identity. Overall, the website demonstrates a mature digital presence with strong privacy compliance and a trustworthy business profile.

K

Kérastase

kerastase.cz

64

The website www.kerastase.com/hair-salon-locator serves as a professional hair salon locator for the Kérastase brand, a premium hair care line under the L'Oréal Group. It targets consumers seeking expert hair diagnosis and tailored hair and scalp care routines. The site leverages modern web technologies including Vue.js and Google Maps API to provide an interactive and user-friendly experience. The presence of OneTrust cookie consent indicates attention to privacy compliance, although no explicit privacy policy or terms of service were found on the analyzed page. Security posture is moderate with HTTPS implied but lacking visible security headers and vulnerability disclosures. WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the branding and content align with the known Kérastase brand, suggesting authenticity. Overall, the site is professionally designed, mobile-optimized, and provides relevant services to its target audience.

R

Rüsthaus GmbH & Co. KG

ruesthaus.de

49

Rüsthaus GmbH & Co. KG operates a specialized e-commerce platform focused on scouting and outdoor equipment, serving primarily the German market. The website offers a broad range of products including scouting uniforms, tents, outdoor gear, and related accessories, targeting scouting groups and outdoor enthusiasts. The company maintains a medium-sized retail operation with a clear brand presence and consistent messaging. Technically, the website is built on the Shopware CMS platform, leveraging modern web technologies and providing a responsive user experience optimized for mobile devices. Security is well-managed with HTTPS enforced and CSRF protections in place, although some standard security headers are missing. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The site uses Piwik (Matomo) for analytics, reflecting a moderate level of user tracking. Overall, the website is professional, trustworthy, and well-positioned within its niche market.

I

IJ Willtrinken e.U.

willtrinken.at

52

IJ Willtrinken e.U. operates an e-commerce platform focused on nighttime beverage delivery in Vienna, Austria. The website offers a wide range of alcoholic and non-alcoholic drinks including beer, wine, spirits, and party packages, targeting adult consumers seeking fast delivery services. The business positions itself as a local night delivery service with a focus on convenience and quick service. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

Sviečky - zdravé sviečky zo Slovenska pre váš domov | svetlusa.sk

svetlusa.sk

59

The website svetlusa.sk is an e-commerce platform specializing in healthy candles produced in Slovakia, targeting general consumers interested in home decor and wellness products. The business appears to be a small local retailer established in 2021, with a clear focus on selling natural and healthy candles. The website uses modern web technologies including Bootstrap 5, Google Tag Manager, Microsoft Clarity, and other marketing and analytics tools, indicating a moderate level of digital maturity. Hosting is provided by websupport.sk, a Slovak hosting provider, and the domain is secured with HTTPS and DNSSEC, reflecting good technical infrastructure. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is functional and professional but could improve transparency and compliance by adding privacy and security policies and explicit contact information.

B

Bratiska

bratiska.sk

59

Bratiska.sk is an e-commerce website specializing in quality textiles and unique gifts primarily for home use, targeting a general audience in Slovakia. The business appears to be a small retail operation established in 2013, with a consistent brand presence and a focus on home-related products. The website uses modern web technologies including Bootstrap and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Cookie consent is managed via CookieHub, indicating some level of privacy compliance. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are explicitly visible, which may affect user trust and support accessibility. Overall, the site is functional and professionally designed but could improve in privacy transparency and security best practices.

Z

Zlaté šperky s dušou: Ručne vyrobené príbehy od roku 1957

zlatokov.sk

50

The website represents a small Slovakian business specializing in handcrafted gold jewelry with a long heritage dating back to 1957. The site is designed with modern responsive technologies such as Bootstrap 5, providing a good user experience and clear navigation for its target audience. However, the website lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or social media presence was detected in the provided content, limiting direct communication channels. The domain registration data is consistent and supports the business's legitimacy and history, enhancing trustworthiness. Overall, the website is functional and professionally designed but requires improvements in security and privacy compliance to meet modern standards.

S

Sedačky na mieru a nábytok od slovenského výrobcu

sedacka.sk

59

The website sedacka.sk represents a Slovak small business specializing in custom sofa manufacturing and furniture retail. The site is designed with modern technologies such as Bootstrap 5 and integrates common marketing and tracking tools including Google Tag Manager and CookieHub for cookie consent management. The business appears to be locally focused with a domain age consistent with a company founded in 2019. The website content is relevant and professionally presented, targeting general consumers interested in custom furniture solutions. From a technical perspective, the website uses a solid tech stack with responsive design and moderate performance. Hosting is provided by SmartWeb, a known hosting provider in the region. Security posture is adequate with HTTPS and DNSSEC enabled; however, the absence of security headers and formal privacy or terms of service documents indicates room for improvement in compliance and security best practices. Security-wise, no WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious patterns are evident from the data. The site uses tracking pixels from Pinterest, Facebook, and Google Ads, indicating moderate user tracking. Privacy compliance is basic, with a cookie consent mechanism present but lacking a visible privacy policy. Overall, the risk level is moderate with recommendations to enhance security headers, publish privacy and terms documents, and improve contact transparency. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, establishing a vulnerability disclosure process, and enhancing accessibility and SEO features to improve trust and compliance. These steps will strengthen the website's security posture and business credibility in the competitive furniture retail market.

K

K-moto s.r.o.

chigee.sk

42

K-moto s.r.o. operates an e-commerce website specializing in motorcycle accessories and technology products under the brand Chigee. The website targets motorcycle enthusiasts primarily in Slovakia, offering a range of products including smart navigation systems, protective gear, and related accessories. The business model is retail-focused, leveraging an online platform built on PrestaShop CMS. The site demonstrates a moderate level of digital maturity with integration of modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Klaviyo. Security posture is solid with HTTPS enforced and secure form tokens, but lacks advanced security headers and visible privacy or cookie policies, which are compliance gaps. Overall, the website is professional and trustworthy, but could improve privacy compliance and security transparency.

S

Scrubdesignz

scrubdesignz.com

51

Scrubdesignz is a specialized e-commerce business focused on providing high-quality graphics kits, plastics kits, and seat covers for motocross and dirt bikes. Established in 2014 and based in Slovakia, the company targets motocross enthusiasts and professional riders globally. The website is built on the Magento platform, leveraging modern JavaScript libraries and tools such as RequireJS, KnockoutJS, and Slider Revolution to deliver a responsive and visually appealing user experience. Social media integration and Google Analytics are used for marketing and user behavior tracking. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

I

Ingka Centres Holding B.V.

avion.cz

64

Avion Shopping Park is a large retail shopping center located in Ostrava, Czech Republic, operated under the parent company Ingka Centres Holding B.V. The website presents a professional and well-structured digital presence showcasing a variety of retail shops, restaurants, services, and events aimed at the general public and local community. The business model focuses on providing retail space and customer services, supported by a strong brand association with IKEA. Technically, the website leverages modern web technologies including React and Gatsby, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website reflects a trustworthy and professional retail business with moderate to good technical maturity and security awareness.

J

JYSK

jysk.cz

58

JYSK.cz is the Czech Republic branch of the well-established JYSK retail group, specializing in furniture and home goods. The website offers a comprehensive online shopping experience complemented by physical stores, targeting general consumers in the Czech market. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on Drupal 10, leveraging modern analytics and marketing tools such as Google Tag Manager, Dynamic Yield, and Salesforce Chat, hosted on a robust CDN infrastructure via Akamai. Security posture is strong with HTTPS enforced, security headers present, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

K

Klaveness Footwear

klaveness.no

66

Klaveness Footwear is a specialized retailer focused on prescription, orthopaedic, medical, rehabilitation, and custom footwear, primarily serving the Nordic market. Established in 1999, the company offers a broad range of footwear products tailored for comfort and medical needs, leveraging an e-commerce platform built on Magento 2. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content that targets customers requiring specialized footwear solutions. Technically, the site uses modern JavaScript libraries and Magento's PageBuilder for content management, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the site demonstrates a high level of business credibility and privacy compliance, with clear contact information and social media presence. Recommendations include enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

E

Ein Netz für Kinder

enfk.de

39

Ein Netz für Kinder is a German-language family lifestyle website focused on providing practical advice, product recommendations, and creative ideas for parents and families with children from pregnancy through childhood. The site positions itself as a trusted companion for family life, offering curated content and reviews primarily in the retail sector related to children's products and parenting. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries, hosted on kasserver.com. The site demonstrates good SEO practices and mobile optimization but lacks some privacy compliance features such as cookie consent mechanisms. Security posture is solid with HTTPS and secure login forms, though security headers are missing and no explicit security policies are published. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

P

PONATURE s.r.o.

shopkilpi.cz

58

Kilpi.cz is the official e-commerce website of the Kilpi brand, specializing in outdoor and sports apparel. The company operates both online and through physical stores in the Czech Republic, offering a wide range of products including jackets, pants, footwear, and accessories. The website targets outdoor enthusiasts and general consumers seeking quality sportswear. The business model is direct-to-consumer retail with a focus on customer loyalty and fast delivery. The brand is well-established with consistent branding and trust signals such as customer testimonials and physical store presence. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, Microsoft Clarity, and other marketing and analytics tools. It uses AWS Cloudfront CDN for hosting and demonstrates good mobile optimization and SEO practices. The site is moderately performant with basic accessibility features. From a security perspective, the site enforces HTTPS and uses several third-party scripts for analytics and marketing. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. However, no explicit security or incident response policies were found. Overall, the website presents a low-risk profile with a legitimate business presence. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type. Recommendations include enhancing security headers and publishing explicit security policies to improve trust and compliance.

A

AWG Mode

awg-mode.de

69

AWG Mode is a German-based e-commerce retailer specializing in affordable fashion for the entire family, including women, men, and children, as well as home decoration, traditional costumes, and sportswear. The company positions itself as a provider of quality yet budget-friendly clothing with fast shipping and a focus on top brands. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to family consumers. Technically, the site leverages modern technologies including Shopware CMS, Cookiebot for consent management, Google Analytics 4, and various marketing and tracking tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies in German, reflecting GDPR adherence. However, contact information and explicit security policies are not readily found, which could be improved. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

H

hagebau Gebrüder Ott Baustoffe GmbH

hagebau-ott.de

67

hagebau Gebrüder Ott Baustoffe GmbH is a well-established regional building materials retailer in Germany, operating since 1928 with locations in Kirchheim and Nürtingen. The company offers a broad range of construction and building supplies, supported by digital tools such as configurators and integrated data interfaces to optimize customer ordering processes. The website reflects a mature digital presence with modern technologies including SAP Hybris Commerce, Usercentrics for consent management, and Piwik PRO for analytics. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers could be improved. Privacy compliance is partially addressed via a consent management platform, but explicit privacy and terms of service pages were not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

K

KÖ8 Shopping Center Köngen

koe8.de

55

KÖ8 Shopping Center Köngen is a local retail and family activity center based in Germany, targeting general audiences with offers and events for families. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers, Cookiebot for consent management, and responsive design, hosted on UI-DNS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Privacy compliance is good with a clear privacy policy and cookie consent dialog. Overall, the site is trustworthy and well-maintained for its business scope.

R

Romina Mineralbrunnen GmbH

romina.de

48

Romina Mineralbrunnen GmbH is a well-established mineral water bottling company based in Reutlingen-Rommelsbach, Germany, with a strong regional presence primarily in Baden-Württemberg and neighboring regions. The company produces and distributes popular mineral water brands EiszeitQuell and SilberBrunnen, operating multiple production lines and employing around 130 staff. Their business model focuses on manufacturing and regional distribution through beverage and food retail channels, including bio markets and hospitals. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website is built on WordPress using standard JavaScript libraries such as jQuery and Swiper.js. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The site uses HTTPS with no detected blocking or WAF challenges, and includes a cookie consent mechanism compliant with GDPR requirements. Analytics tracking via Google Analytics is implemented but disabled by default pending user consent. From a security perspective, the site employs HTTPS and cookie consent best practices but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, Romina Mineralbrunnen GmbH presents a trustworthy and professional online presence with good compliance and security posture for its business size and sector. Recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

S

Stuttgarter Verlagskontor SVK GmbH

svk.de

44

Stuttgarter Verlagskontor SVK GmbH operates as a full-service publishing distributor primarily serving the German book trade and resellers. The company distributes products from over 50 publishers and provides an online order portal and service centers tailored for trade customers and publishers. The website is professionally designed, content-rich, and clearly targeted at its business audience. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and legal disclosures.

Petrella is a medium-sized, family-owned German company specializing in the production of cream cheese and plant-based alternatives, with a strong emphasis on freshness, regional sourcing, and sustainability. The company has a history dating back to 1991 and actively engages consumers through recipes, promotions, and a broad social media presence. The website is well-designed, mobile-optimized, and provides comprehensive product and company information. Technically, it is built on the Contao CMS platform using modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and session protections, though additional security headers and explicit security policies could enhance trust. No blocking or WAF challenges were detected, allowing full content access and analysis.

M

Markthalle Hannover

markthalle-in-hannover.de

54

Markthalle Hannover operates as a central marketplace and gastronomic hub in Hannover, Germany, offering a diverse range of fresh produce, international foods, and a social meeting place for locals and visitors. The website reflects a medium-sized retail and hospitality business with a strong local presence and cultural significance. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving its community effectively.