Security Directory

A

Animals' Angels

animals-angels.de

53

Animals' Angels is a German-based non-profit organization dedicated to the welfare of farmed animals, with a particular focus on protecting animals during transport. The organization operates internationally, advocating for improved animal welfare laws and raising public awareness through reports, publications, and monitoring activities. Their website is professionally designed using TYPO3 CMS, featuring clear navigation, multilingual support, and integration with privacy compliance tools such as Usercentrics. The organization maintains active social media channels and provides transparent contact information, enhancing trust and engagement with supporters. Technically, the website employs modern frameworks and analytics tools like Matomo, ensuring good performance and privacy-conscious tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, Animals' Angels presents a credible, well-maintained digital presence aligned with its mission and audience.

A

AWIN AG

awin.com

73

Awin AG operates a global affiliate marketing platform that connects advertisers, publishers, and agencies to foster online business growth. The company is positioned as a leading enterprise in the affiliate marketing industry, supported by a strong parent company, Axel Springer Group. Their platform offers tailored solutions for various market segments, emphasizing scalability, automation, and data-driven marketing. Technically, the website employs a modern technology stack including Vue.js, Alpine.js, and integrates multiple analytics and marketing tools such as Amplitude, Google Analytics, Hotjar, and Usercentrics for consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and uses a consent management platform to comply with privacy regulations like GDPR. No critical vulnerabilities or exposed sensitive data were detected, indicating a robust security posture. Overall, the website presents a low-risk profile with strong business credibility and compliance adherence. Strategic recommendations include continuous monitoring of third-party scripts, enhancing transparency on data retention, and maintaining up-to-date security policies to sustain trust and compliance.

M

MB Capital Services GmbH

mb-capital-services.de

62

MB Capital Services GmbH is a German-based company specializing in creative event and exhibition services, including design and system stand construction, hostess services, and advertising spaces primarily at Messe Berlin. The website targets businesses and event organizers seeking professional support for trade shows, congresses, and events. The company positions itself as a reliable partner for worldwide implementation of creative corporate and product presentations. Technically, the website uses a combination of jQuery, jQuery UI, Nivo Slider, Fancybox, and a custom video player, hosted on managed infrastructure. The site includes a Usercentrics cookie consent mechanism, indicating some level of privacy compliance, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policy information. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

M

Messe Düsseldorf GmbH

k-online.com

60

The website www.k-online.com represents the official online presence of K 2025, the world's leading trade fair for the plastics and rubber industry organized by Messe Düsseldorf GmbH. It serves industry professionals by providing comprehensive event information, exhibitor and visitor services, and program details. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, it employs modern JavaScript libraries, a consent management platform, and analytics tools, indicating a commitment to user experience and data privacy. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though the absence of security headers and explicit privacy and terms pages suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that slightly detracts from trustworthiness but does not undermine the evident legitimacy of the business. Overall, the site is a credible and authoritative resource for its target audience.

A

Active Nutrition International

active-nutrition-international.com

63

Active Nutrition International is a German-based company specializing in sports nutrition products, as indicated by the website content and metadata. The website is built on WordPress with SEO optimization via Yoast and uses Usercentrics for cookie consent management. Google Analytics is implemented with IP anonymization to track user interactions. The domain was registered in 2016, consistent with the business timeline. However, the website lacks explicit privacy and cookie policy pages, and no direct contact information is provided, which may affect user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and explicit security policies. Overall, the website is functional and moderately optimized but requires improvements in privacy compliance and security transparency.

M

Messe Düsseldorf GmbH

messe-duesseldorf.com

66

Messe Düsseldorf GmbH is a globally recognized trade fair organizer headquartered in Düsseldorf, Germany. The company hosts numerous leading international trade fairs such as K, interpack, drupa, MEDICA, and COMPAMED, serving exhibitors and visitors worldwide. Their business model revolves around organizing and managing trade fairs, providing exhibition services, and expanding into new markets including the Middle East and India. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to industry professionals and international audiences. Technically, the website employs modern web technologies including Vue.js, jQuery, and Matomo Tag Manager for analytics, alongside a consent management platform ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and security practices such as HTTPS enforcement and security headers. From a security perspective, the site demonstrates strong posture with proper SSL configuration and privacy compliance. However, it lacks publicly available incident response contacts and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security readiness. The absence of WHOIS data for the .com domain queried is a minor concern but does not detract significantly from the overall legitimacy given the strong brand presence and content quality. Overall, Messe Düsseldorf's website is a professional, secure, and well-maintained platform supporting its global trade fair operations. Strategic improvements in security transparency and WHOIS data consistency would further strengthen trust and compliance.

P

Powerbar

powerbar.eu

66

Powerbar operates as a specialized e-commerce platform offering sports nutrition products tailored for athletes and fitness enthusiasts. The website presents a professional and consistent brand image, supported by a comprehensive product catalog and community engagement through platforms like Strava and social media channels. The business is positioned as a medium-sized retail entity under the parent company Active Nutrition International GmbH, targeting an international audience with a focus on performance nutrition. Technically, the site leverages the Shopware 6 platform with modern tracking and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is trustworthy, well-maintained, and aligned with industry best practices for e-commerce in the health and fitness sector.

B

boot Düsseldorf

boot.com

56

boot Düsseldorf is the world's largest yacht and watersports exhibition, attracting a large international audience and numerous exhibitors. The website provides comprehensive information about the event, including exhibitor services, visitor preparation, program details, and ticket purchasing options. Technically, the site uses modern JavaScript frameworks and tracking tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found. The absence of WHOIS data for the domain www.boot.com is a concern for domain legitimacy, but the website content and linked domains strongly associate with the reputable Messe Düsseldorf organization. Overall, the site is professional and trustworthy from a content and technical perspective, but domain registration transparency is lacking.

B

Barebells Functional Foods France SAS

vitaminwell.fr

45

Vitamin Well France operates as an e-commerce platform specializing in vitamin-enriched functional beverages targeted at health-conscious and active consumers. The brand is well-established with a domain age of over a decade, supporting its market presence in France. The website is professionally designed, mobile-optimized, and provides comprehensive customer engagement features including reviews, newsletter subscription, and social media integration. Technically, the site leverages WordPress with WooCommerce, enhanced by modern JavaScript libraries and marketing tools such as Google Tag Manager and Klaviyo. Security posture is strong with HTTPS, security headers, and a consent management platform ensuring GDPR compliance. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy and security practices.

M

Messe Düsseldorf GmbH

caravan-salon.de

55

The website caravan-salon.de represents the CARAVAN SALON event organized by Messe Düsseldorf GmbH, a globally recognized trade fair for mobile travel and caravaning. The site provides comprehensive event information, exhibitor services, visitor preparation, and media resources. It targets caravan enthusiasts, industry professionals, and exhibitors, positioning itself as the world-leading event in its sector. Technically, the site uses modern JavaScript frameworks including Vue.js, integrates multiple tracking and advertising services, and implements consent management via Usercentrics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic, with a cookie consent mechanism but no clearly found privacy or terms pages. Overall, the site is professional, trustworthy, and well-structured, but could enhance transparency and compliance documentation.

V

Vitamin Well

vitaminwell.de

56

Vitamin Well Deutschland operates a professional e-commerce website offering functional, low-calorie vitamin-enriched beverages targeting health-conscious consumers in Germany. The brand, founded in 2008 in Sweden, has established a solid market presence with multiple product lines and international reach. The website is built on WordPress with WooCommerce, leveraging modern web technologies and third-party marketing and analytics tools such as Google Tag Manager, Klaviyo, and Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is moderate due to the presence of a cookie consent mechanism but lack of visible privacy and terms policies. Contact is available via a contact form but no direct emails or phone numbers are published. Overall, the site is professional, trustworthy, and safe for general audiences.

B

boot Düsseldorf

boot.de

58

boot Düsseldorf is a leading global water sports and boating trade fair organized by Messe Düsseldorf GmbH in Germany. The website serves as the primary portal for exhibitors, visitors, and partners, offering detailed information about the event, ticket sales, exhibitor services, and programming. The site is professionally designed with clear navigation and good mobile optimization, targeting water sports enthusiasts and industry professionals worldwide. Technically, the site uses modern JavaScript frameworks like Vue.js, integrates privacy-compliant analytics (Matomo), and employs a consent management platform (Usercentrics) to handle cookie consent. Security posture is solid with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages in the provided content. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence.

C

contrastravel

contrastravel.com

68

ContrasTravel is a specialized travel agency focusing on sustainable and authentic travel experiences in northern Europe and the North Atlantic region, including destinations such as Iceland, Greenland, the Faroe Islands, Norway, Sweden, and Finland. The company offers a variety of travel types including group tours, individual trips, and specialized excursions, emphasizing environmental responsibility and personalized service. Their market position is that of a niche provider with a strong commitment to sustainability and customer experience. Technically, the website is built on TYPO3 CMS, uses modern JavaScript modules, and integrates Google Tag Manager and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though some security policy documentation could be improved. Overall, the website is professional, well-structured, and compliant with GDPR, supporting a trustworthy business presence. The WHOIS data is missing or not publicly available, which is unusual but the website content and business information suggest legitimacy.

S

shopware AG

shopware.com

85

Shopware AG operates a leading ecommerce platform designed to empower online businesses with a flexible, open-source solution that supports both B2B and B2C commerce. The platform integrates advanced features such as AI-powered commerce, automation tools, and comprehensive analytics, positioning Shopware as a competitive player in the ecommerce technology market. The company targets ecommerce businesses, developers, and agencies seeking scalable and innovative online store solutions. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates with marketing and analytics tools such as Google Tag Manager and HubSpot, and employs a consent management platform to ensure privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security-wise, Shopware enforces HTTPS, implements robust security headers, and manages cookie consent effectively. However, the absence of explicit incident response and vulnerability disclosure policies, as well as missing WHOIS registration details, slightly reduce the overall trust score. Overall, Shopware presents a professional, secure, and privacy-conscious online presence with strong market credibility.

M

microtech GmbH

cateno.de

59

microtech GmbH is a German-based ERP software provider specializing in flexible and customizable business process solutions. The company targets businesses seeking ERP systems to optimize their operations. The website is professionally designed using WordPress and Elementor, with modern consent management implemented via Usercentrics. Google Analytics 4 is used with privacy-conscious configurations. The technical infrastructure is solid, hosted via INWX nameservers, and the site is mobile-optimized with good SEO practices. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks explicit security policies and headers. No blocking or WAF mechanisms interfere with content access.

G

GetYourGuide

getyourguide.com

77

GetYourGuide is a leading global online platform specializing in booking tours, attractions, and travel experiences worldwide. Founded in 2008, it serves a broad audience of travelers seeking cultural, nature, sports, and food-related activities. The company operates a large-scale marketplace model connecting travelers with local suppliers, emphasizing direct booking and competitive pricing. The website demonstrates a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including Vue.js, Google Tag Manager, Hotjar, and a consent management platform (Usercentrics), ensuring a responsive, fast, and accessible user experience. Security is well addressed with HTTPS, Content Security Policy, and fraud prevention mechanisms like Forter. Privacy compliance is robust, with comprehensive policies and user consent mechanisms in place. While the WHOIS data for the domain is unavailable, which slightly reduces trust, the overall digital footprint, certifications, and social media presence strongly support the legitimacy of the business. No critical security vulnerabilities or compliance gaps were detected. The site is safe for general audiences and does not contain adult or questionable content. Overall, GetYourGuide presents a professional, secure, and user-friendly platform with strategic strengths in the travel and hospitality sector.

D

dm drogerie markt

dm.at

57

dm drogerie markt operates a comprehensive online retail platform focused on drugstore products in Austria, offering a wide range of cosmetics, health, nutrition, and household items. The website reflects a mature e-commerce presence with strong brand consistency and integration of loyalty programs such as PAYBACK. The technical infrastructure leverages modern web technologies, including consent management and tag management systems, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and security headers, though no explicit vulnerability disclosure or incident response contacts are published. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

D

dm-drogerie markt

dm-jobs.de

63

dm-jobs.de is the official career portal for dm-drogerie markt, a leading retail drugstore chain in Germany and Europe. The website provides comprehensive job listings, career information, and application facilities targeting job seekers interested in retail, logistics, and corporate roles. The site is professionally designed, mobile-optimized, and uses modern web technologies such as Vue.js and Nuxt.js, hosted on Firebase and AWS infrastructure. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-aligned with the business's market position.

D

dmTECH

dmtech.tech

66

dmTECH is the IT subsidiary of dm-drogerie markt, specializing in agile software development, project management, IT consulting, and offering career opportunities including apprenticeships and jobs. The company positions itself as a key digital enabler for dm's retail operations, with over 1,400 employees and multiple product teams. The website reflects a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, with integration of Usercentrics for cookie consent and Firebase for job listings. Security posture is solid with HTTPS and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial due to missing explicit privacy and terms pages. Overall, the site is trustworthy, well-branded, and targeted at IT professionals and job seekers in Germany.

D

dm drogerie markt

dm-jobs.it

64

dm-jobs.it is the Italian job portal for dm drogerie markt, a well-established retail chain operating in multiple European countries. The website offers job opportunities, internships, and career growth options primarily targeted at job seekers in Italy. The site is professionally designed with consistent branding and clear navigation, reflecting the company's strong market position in retail employment. Technically, the website leverages modern frameworks such as Vue.js and Nuxt.js, integrates a consent management platform (Usercentrics), and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms denying ad and analytics storage by default, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy, safe, and compliant with privacy regulations, but could improve transparency by publishing privacy policies and incident response information.

D

dm-drogerie markt

dm-jobs.bg

60

The website www.dm-jobs.bg serves as the official career portal for dm-drogerie markt in Bulgaria, a large retail chain specializing in drugstore and personal care products. It provides job listings, information about working at dm, training programs, and company benefits, targeting job seekers in Bulgaria. The site is part of a broader network of country-specific dm career portals, reflecting a strong market position in the retail sector. Technically, the site is built using modern frameworks such as Vue.js and Nuxt.js, hosted on Firebase, and integrates a GDPR-compliant consent management platform (Usercentrics). The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and uses consent mechanisms for privacy compliance but lacks explicit security policies and vulnerability disclosure information. Overall, the domain registration details align well with the business identity, indicating high legitimacy and trustworthiness.

D

dm

dm-jobs.rs

54

The website www.dm-jobs.rs serves as a localized recruitment portal for dm retail operations in Serbia. It provides job listings, company culture insights, and recruitment information tailored to the Serbian market. The site is part of a broader network of dm job portals across Europe, indicating a well-established brand presence. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on Firebase, and integrates a cookie consent management platform (Usercentrics) to comply with privacy regulations. However, the absence of a dedicated privacy policy and terms of service pages limits its full compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. Overall, the site is professional and trustworthy but would benefit from improved privacy disclosures and security hardening.

D

dm drogerie markt

dm-jobs.ro

60

dm drogerie markt operates a professional career website targeting job seekers in Romania, focusing on retail and corporate employment opportunities. The company is positioned as a leading retail brand in Romania with a strong emphasis on employee development and diversity. The website is built on modern technologies including Nuxt.js and Vue.js, managed via the Storyblok CMS, and integrates a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy and terms of service pages are missing. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

D

dm drogerie markt, s.r.o.

dm-jobs.sk

60

The website www.dm-jobs.sk serves as the Slovak recruitment portal for dm drogerie markt, a leading retail drugstore chain with over 160 stores in Slovakia. It offers comprehensive information about job opportunities across retail stores, logistics, and corporate sectors, emphasizing a unique corporate culture based on dialogue and non-traditional hierarchy. The site targets job seekers including students and professionals interested in dual education and internships. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, integrated with Usercentrics for cookie consent and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not published. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and accessibility.

D

dm

dm-jobs.hr

61

The website www.dm-jobs.hr serves as a regional job portal for the dm retail company in Croatia, providing employment opportunities across various sectors including retail stores, logistics, and corporate functions. The site is part of a broader network of country-specific dm job portals, indicating a well-structured regional recruitment strategy. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on AWS infrastructure, and employs Usercentrics for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and no blocking mechanisms detected, though the absence of visible security headers and explicit privacy and terms of service pages suggests room for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate to good technical and security maturity level.

D

dm

dm-jobs.cz

61

The website www.dm-jobs.cz serves as a professional job portal for the dm retail brand in the Czech Republic, focusing on employment opportunities in retail stores, logistics, and administrative sectors. The site is well-branded, multi-lingual, and provides structured navigation to various job categories and application guidance. The technical infrastructure is modern, leveraging Vue.js and Nuxt.js frameworks, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy policies are not evident in the provided data. The absence of WHOIS registrant data suggests privacy protection, which is common and justified for commercial domains. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in transparency and security header implementation.

D

dm

dm-jobs.hu

60

The website www.dm-jobs.hu serves as a career and job listing portal for dm, a large retail company operating in Hungary and Central Europe. It provides detailed information about job opportunities, corporate culture, employee benefits, and salary information targeted at job seekers interested in working for dm. The site is built using modern web technologies including Vue.js and Nuxt.js, with a content management system likely based on Storyblok. The technical infrastructure supports good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and a cookie consent mechanism that denies ad and analytics storage by default, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-branded, but could improve privacy compliance by publishing a dedicated privacy policy and terms of service pages, and by providing clear contact information for users and security incidents.

D

dm drogerie markt GmbH

dm-jobs.at

63

dm drogerie markt GmbH operates a professional and comprehensive career website focused on retail job opportunities in Austria. The company is a large retail entity specializing in beauty, cosmetics, hairdressing, and related sectors. The website demonstrates a mature digital infrastructure using modern frameworks such as Nuxt.js and Vue.js, integrated with a consent management platform and Google Tag Manager for analytics. The site is well-optimized for mobile and accessibility, with clear navigation and rich content promoting company culture and benefits. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

C

CECONOMY

ceconomy.de

56

CECONOMY is a leading European retail platform specializing in consumer electronics, operating prominently through its subsidiary MediaMarktSaturn. The website serves multiple audiences including investors, customers, media representatives, and job seekers, providing comprehensive corporate, financial, and sustainability information. The business model centers on retail and services in consumer electronics with a strong market position in Europe. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, hosted on Akamai CDN infrastructure, ensuring good performance and compliance with GDPR. Security posture is solid with HTTPS and consent mechanisms, though lacking explicit security policy and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, supporting the enterprise's credibility and transparency.

S

Sanicare

sanicare.de

67

Sanicare is a large German online pharmacy offering a wide range of pharmaceutical products, including prescription and non-prescription medications. The website targets general consumers in Germany seeking convenient online access to medications and pharmaceutical services, including electronic prescription fulfillment and pharmaceutical consultation. The company positions itself as a trusted and established player in the online pharmacy market with a significant customer base of one million users. Technically, the website is built on the Shopware 6 e-commerce platform, integrating modern marketing and analytics tools such as Google Tag Manager, Dynamic Yield, and Usercentrics for consent management. Hosting is provided by Arvato Systems, indicating a professional IT infrastructure. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and integrates consent management for GDPR compliance. However, explicit security headers and published security policies are absent. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial due to the absence of explicit privacy and terms of service pages. No incident response or vulnerability disclosure information is available. Overall, Sanicare presents a professional and trustworthy online presence with a solid technical foundation and good security posture. Strategic improvements include publishing comprehensive privacy and security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to strengthen compliance and trust.

I

INTERSPORT Deutschland eG

intersport.de

66

INTERSPORT Deutschland eG operates a comprehensive online retail platform specializing in sportswear and sports equipment, targeting general consumers in Germany. The website demonstrates a mature digital infrastructure with modern technologies such as Algolia search, Usercentrics consent management, and Google Tag Manager for analytics and marketing. The platform is well-optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. Security posture is strong with HTTPS enforcement and consent-based tracking, although explicit security policies and incident response information are not publicly detailed. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business. Strategic recommendations include publishing explicit security policies and vulnerability disclosure mechanisms to further enhance trust and compliance.

D

dm-drogerie markt

dm-jobs.com

62

The website www.dm-jobs.de serves as the official career portal for dm-drogerie markt, a large retail chain specializing in drugstore products primarily in Germany and other European countries. It offers comprehensive job listings, apprenticeship opportunities, and career information targeting job seekers, students, and young professionals. The site is well-branded and consistent with dm's corporate identity, providing a professional user experience with clear navigation and mobile optimization. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Amazon AWS infrastructure, and integrates a cookie consent management platform (Usercentrics) to comply with privacy regulations. The use of Storyblok CMS is inferred from HTML classes, indicating a modern content management approach. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration and DNS setup are consistent with a legitimate enterprise website. Overall, the website presents a low-risk profile with good business credibility and privacy compliance, though improvements in security policy transparency and security headers are recommended to enhance trust and protection.

G

Gjensidige

gjensidige.com

72

Gjensidige is a leading Norwegian non-life insurance company operating primarily in the Nordic and Baltic regions. The company offers a broad range of insurance products including general insurance, pensions, savings, and mobility services. The website reflects a mature and professional digital presence with comprehensive content targeting individuals and businesses. The company maintains an open investor relations section and emphasizes sustainability and social responsibility. Technically, the site uses modern web technologies including JavaScript, SVG graphics, and a cookie consent management platform (Usercentrics). The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and incident response information are not published. The absence of WHOIS data for the domain www.gjensidige.com is a notable anomaly that slightly reduces trust from a domain registration perspective. Overall, the website is professional, trustworthy, and well-maintained, supporting Gjensidige's market position as a major Nordic insurer.

G

Gjensidige

gjensidige.no

73

Gjensidige is a leading Norwegian insurance company offering a broad range of insurance products, pension plans, and fund savings services. The website targets both private individuals and businesses in Norway, providing comprehensive information, customer service access, and online tools such as pension calculators. The company positions itself as customer-centric with strong trust signals and a professional digital presence. Technically, the website is built on a modern platform (Builders Platform) with advanced tag management and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and secure login portals, though explicit security headers and incident response information are not publicly visible. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, supporting Gjensidige's market position as a reputable financial services provider.

C

carsale24

carsale24.com

49

carsale24 operates as a professional online platform facilitating the sale of used cars primarily in Germany, Austria, and Switzerland. The company connects private sellers with a network of verified dealers, offering a streamlined, secure, and convenient car selling experience. Their business model is commission-based, funded by dealers, and includes value-added services such as premium vehicle appraisals and personalized customer support. The website demonstrates strong market positioning with trust signals including customer testimonials, media endorsements, and certification badges. Technically, the website is built on WordPress with a modern tech stack including the Enfold theme, WP Rocket for performance optimization, and Usercentrics for consent management. The site is well-optimized for SEO and mobile responsiveness, ensuring a high-quality user experience. Analytics and marketing tools such as Google Tag Manager are employed with privacy compliance in mind. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit HTTP security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but does not currently undermine the site's legitimacy given the professional content and business presence. Overall, carsale24 presents a trustworthy and mature online service with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around incident response would further enhance their security posture and user trust.

DATAGROUP is a leading German IT service provider offering a comprehensive portfolio of managed IT services, cloud, SAP, security, and digitalization solutions. The company targets businesses in Germany seeking reliable and professional IT support. The website demonstrates a mature digital presence with multilingual support, professional video content, and structured navigation. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPML, and employs Usercentrics for cookie consent management, indicating GDPR awareness. Security posture is solid with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy, though improvements in privacy policy transparency and incident response information are recommended.

G

GKL - Gemeinsame Klassenlotterie der Länder

nkl.de

58

The NKL website represents a large, state-authorized German lottery provider offering multiple lottery products including the NKL-Millionenspiel, Extra-Joker, and Glücksjahre Rentenlotterie. The site is professionally designed with good content quality, clear navigation, and multimedia integration. It targets adult German-speaking lottery players and emphasizes responsible gaming and legal compliance. Technically, the site uses modern JavaScript frameworks, consent management via Usercentrics, and multiple third-party analytics and advertising tools, all loaded conditionally based on user consent. Security posture is good with HTTPS and consent-based tracking, but lacks explicit security headers and a public security policy or incident response contact. The domain registration data is consistent and legitimate, supporting trustworthiness. Overall, the site is a credible, well-maintained digital presence for a regulated lottery business.

H

HORIZONT

horizont.net

68

HORIZONT is a well-established German online media platform specializing in marketing, advertising, media, technology, and communication news. It serves professionals and agencies in the marketing and media sectors by providing up-to-date news, background information, and video content. The platform is part of the Deutscher Fachverlag (DFV) group, a reputable publishing company. Technically, the website employs modern JavaScript libraries, consent management via Usercentrics, and analytics through Piwik PRO, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with strong security headers, reflecting a good security posture. However, the absence of WHOIS registration data raises questions about domain registration transparency, though the website content and branding are professional and consistent. Privacy policies and cookie consent mechanisms are implemented in compliance with GDPR. Overall, the site presents a trustworthy and professional front but would benefit from clearer contact and security incident response information.

S

STARTUPLAND

startupland.de

62

STARTUPLAND is a specialized event and conference organizer focusing on the founder and venture capital ecosystem primarily in Germany. The website promotes their flagship conference, targeting startups, investors, and partners within the technology sector. The business model revolves around event hosting, networking, and ticket sales, positioning itself as a niche player in the startup and VC conference market. Technically, the site is built on WordPress 6.8.3, leveraging modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Tag Manager and Usercentrics for consent management, and uses the Brella widget for ticketing. The site is mobile-optimized with good SEO practices and a professional design. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks some security headers and explicit security policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional but could improve transparency and security documentation.

D

DEG - Deutsche Investitions- und Entwicklungsgesellschaft

deginvest-investments.de

47

DEG - Deutsche Investitions- und Entwicklungsgesellschaft operates as a development finance institution focused on financing, promoting, and supporting companies investing in developing and emerging countries. The website presents a professional investment database with extensive filtering options by region, country, sector, year, and customer, indicating a mature and data-driven business model. The target audience includes investors and companies seeking development financing in emerging markets. The company is positioned as a key player in development finance with a strong focus on emerging economies. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates Usercentrics for cookie consent management, reflecting compliance with privacy regulations. The site uses HTTPS and SVG-based interactive maps for data visualization. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible security headers and published privacy or terms of service documents. No contact information or incident response contacts are found, which could be improved. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance documentation, security header implementation, and clearer contact information to improve user trust and regulatory adherence.

A

Allgaeuer Zeitung

allgaeuer-zeitung.de

55

Allgaeuer Zeitung is a regional media company providing current news and background information focused on the Allgäu region, Bavaria, and broader world events. The website serves as a digital news portal offering political, economic, sports, and cultural content. It operates a subscription-based business model supplemented by advertising revenue, supported by multiple subdomains for events, weather, classifieds, and subscription management. The company maintains a consistent brand presence and targets a general audience interested in regional news. Technically, the website employs modern JavaScript frameworks and integrates third-party services such as Usercentrics for consent management, Piano for paywall and subscription handling, Stroeer and Taboola for advertising, and Cleverpush for push notifications. Hosting is provided by SchlundTech, a German hosting provider, and the site is optimized for mobile devices with good SEO and accessibility practices. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and uses consent management to comply with privacy regulations. However, explicit security headers like CSP and HSTS are not detected, and no public security policy or incident response information is available. No vulnerabilities or exposed sensitive data were found in the analyzed content. The domain registration data is consistent with the business location and operations, indicating a trustworthy and legitimate entity. Overall, the website presents a professional and trustworthy digital presence for a regional news publisher. Strategic improvements in security policies, transparency, and contact information could enhance trust and compliance further.

S

SÜDKURIER GmbH Medienhaus

suedkurier.de

55

SÜDKURIER GmbH Medienhaus operates www.suedkurier.de, a leading regional news website serving the Bodensee, Schwarzwald, and Hochrhein regions in Germany. The site offers comprehensive regional news coverage, subscription-based digital newspaper access, and advertising services. It targets a general audience interested in local and regional news. The business model combines advertising revenue with subscription services, positioning SÜDKURIER as a prominent regional media player with a strong digital presence. Technically, the website employs a modern JavaScript-based tech stack including jQuery, Swiper, and custom CMS frameworks (fcmsJs). It integrates multiple third-party services for analytics (Matomo, Webtrekk), marketing (Usercentrics CMP, Tinypass/Piano), and advertising (Google Ad Manager, Taboola, Stroeer). The site is mobile-optimized with good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were found. The absence of a public security policy or incident response contact is noted. Overall, the security posture is solid but could benefit from additional header implementations and transparency. The domain WHOIS data aligns with the business branding and shows no suspicious patterns. The website content is fully accessible without WAF or blocking mechanisms. Privacy and cookie policies are present and comprehensive, supporting GDPR compliance. Contact information is clearly provided, including email, phone, and physical address. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility compliance to further strengthen trust and compliance.

D

DEG - Deutsche Investitions- und Entwicklungsgesellschaft

deginvest.de

63

DEG - Deutsche Investitions- und Entwicklungsgesellschaft is a large German finance institution specializing in financing, promoting, and advising private companies investing in developing and emerging markets. It operates as a subsidiary of the KfW Bankengruppe, offering tailored financial solutions including loans, equity investments, and advisory services with a strong focus on impact and climate-related projects. The website reflects a professional and well-structured digital presence with comprehensive content targeting German companies, financial institutions, and investors interested in sustainable development and international investments. Technically, the site employs modern JavaScript libraries, analytics tools, and a consent management platform, ensuring good performance, mobile optimization, and privacy compliance. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, DEG demonstrates a credible and trustworthy online presence aligned with its business objectives and regulatory requirements.

K

KfW IPEX-Bank

kfw-ipex-bank.de

63

KfW IPEX-Bank is a specialized financial institution within the KfW Bankengruppe, focusing on international project and export financing primarily for the German and European markets. The bank offers tailored financing solutions including project financing, export credits, and structured trade finance, positioning itself as a key player in supporting sustainable economic growth and infrastructure development. The website reflects a professional and corporate image with clear branding and a focus on sustainability and innovation in financing solutions. Technically, the website employs modern JavaScript libraries, responsive design, and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness, suitable for its target audience of corporate and institutional clients.

A

AWA AUSSENWIRTSCHAFTS-AKADEMIE GmbH

awa-seminare.com

56

AWA AUSSENWIRTSCHAFTS-AKADEMIE GmbH is a specialized education provider focused on customs and foreign trade law, offering seminars, webinars, inhouse trainings, distance learning, and master courses primarily in Germany and neighboring countries. The company is affiliated with the reputable C.H.Beck publishing group and holds recognized certifications such as TÜV Nord and ISO 29993, positioning it as a leading specialist in its niche market. The website is professionally designed, content-rich, and well-structured, targeting professionals and companies involved in international trade compliance and management. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates GDPR-compliant consent management and analytics tools. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the overall trustworthiness given the strong business indicators. Overall, the site presents a credible, professional, and secure platform for its educational services.

BeckAkademie Seminare operates a professional German-language website offering legal education and training seminars, including live webinars and e-learnings, targeting legal professionals such as lawyers, tax advisors, and executives. The company positions itself as a reputable provider with over 700 annual events across 20 legal fields, emphasizing high-quality content and expert speakers. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Microsoft Application Insights, and a GDPR-compliant Usercentrics consent management platform, hosted likely by Deutsche Telekom. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced, but the absence of explicit security headers and a published security policy or vulnerability disclosure reduces the security posture slightly. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

W

WiWi Career

wiwicareer-vahlen.de

57

WiWi Career is a German-language online career platform operated by VAHLEN, targeting students, graduates, and young professionals in economics and business sciences. The platform offers job listings and career services tailored to this niche audience, positioning itself as a specialized resource in the education sector. Technically, the website employs a mix of modern and legacy technologies including jQuery, Bootstrap 3, FontAwesome, and Usercentrics for cookie consent management, hosted on evolver.center infrastructure. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS enforced and consent management implemented, but lacks explicit security headers and published privacy or security policies. Overall, the domain registration and hosting details align with the website's business claims, indicating legitimacy. The site does not contain adult or questionable content and is fully accessible without WAF blocking.

V

Verlag C.H.BECK GmbH & Co. KG

beck-mediasales.de

58

Verlag C.H.BECK GmbH & Co. KG operates as Germany's leading legal specialist publisher, offering a comprehensive portfolio including print, digital, crossmedia advertising, and recruiting solutions targeted at legal and economic professionals. The website reflects a mature digital presence built on WordPress with professional design, SEO optimization, and social media integration. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though no explicit security policy or incident response information is published. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is trustworthy, professional, and well-optimized for its target audience.

beck-shop.de is a specialized German online bookstore focusing on Fachbücher (professional and academic books) primarily in the legal, tax, and economic sectors. The website offers a comprehensive catalog of professional literature with features such as pre-ordering, free shipping within Germany, and invoice payment options. The site targets professionals, students, and institutions in Germany, positioning itself as a niche specialist retailer with partnerships with major publishers like C.H.BECK. Technically, the website employs modern JavaScript libraries, Usercentrics for cookie consent management, Google Tag Manager, and Microsoft Application Insights for telemetry. The site is likely built on the Umbraco CMS and hosted on infrastructure associated with Deutsche Telekom, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service links. Overall, the website is professional, trustworthy, and well-structured, though improvements in transparency and security documentation are recommended.