Security Directory

S

STEFE Trnava, s.r.o.

stefetrnava.sk

41

STEFE Trnava, s.r.o. is a Slovak energy and property management company affiliated with the city of Trnava and STEFE SK, a.s. The company offers a broad range of services including energy management, heat supply, property maintenance, and consulting, serving residential and commercial property owners primarily in the Trnava region. The website reflects a well-established local business with over 20 years of experience and ISO 9001:2016 certification, indicating a commitment to quality management standards. Technically, the website is built on WordPress with common plugins and demonstrates moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively.

E

Energie Steiermark AG

e-steiermark.com

67

Energie Steiermark AG is a prominent energy provider based in Graz, Austria, specializing in sustainable energy solutions including electricity, natural gas, district heating, photovoltaics, and electromobility services. The company targets private customers primarily in the Styrian region and holds a strong market position as a top-rated electricity supplier in Austria. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer support, and interactive tools such as a photovoltaic planner and electromobility services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes consent management for privacy compliance. Security posture is solid with HTTPS and CAPTCHA protections, though some security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy and trustworthiness of the business. Strategic recommendations include enhancing transparency around security policies and improving WHOIS registration visibility.

T

True Digital

true-digital.eu

43

True Digital is a small digital agency specializing in website creation, e-commerce solutions, applications, graphic design, video, photo, and advertising services. The company appears to target businesses and individuals in Slovakia and Central Europe seeking custom digital marketing and web development solutions. The website employs common web technologies such as jQuery, Google Analytics, and Slick Carousel, indicating a moderate level of technical maturity. However, the site lacks comprehensive privacy and cookie policies, and no explicit contact information is provided, which may impact user trust and compliance with regulations such as GDPR. The absence of WHOIS registrant data due to privacy protection limits transparency but is common for small businesses. Overall, the website is functional but could benefit from enhanced security practices and clearer compliance documentation.

Blue Atlas Dev is a minimal development or test website owned by Blue Atlas, serving primarily as a placeholder with a link to the main Blue Atlas Marketing website. The site lacks substantive content, contact information, and policy documentation, indicating it is not intended for direct customer engagement or business operations. The domain is newly registered in early 2024 and uses Cloudflare DNS services with GoDaddy as the registrar, reflecting a standard but basic technical setup. Security configurations are minimal, with no DNSSEC enabled and no security headers detected. The absence of privacy and cookie policies, as well as contact details, limits compliance and trustworthiness. Overall, the site functions as a low-risk development environment rather than a public-facing business platform.

W

Webyst

webyst.com

63

Webyst is a specialized Webflow premium partner agency focused on designing and building custom websites for growing service companies and teams. Their market position emphasizes conversion-optimized, lead-generating websites launched quickly and managed easily. The website demonstrates a high level of digital maturity with modern technologies such as Webflow CMS, Google Tag Manager, Microsoft Clarity, and CookieYes for consent management. The technical infrastructure is robust, leveraging Webflow hosting and advanced marketing tools to deliver fast, mobile-optimized, and accessible user experiences. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. The absence of WHOIS data reduces domain trustworthiness and transparency, which is a concern for business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and contact transparency.

Vizua s. r. o. is a Slovak boutique creative marketing agency established in 2010, specializing in branding, performance marketing, PPC advertising, social media, web development, graphic design, copywriting, and video production. The company positions itself as a quality-focused agency with a small dedicated team and holds a Google Partner certification, indicating recognized expertise in Google advertising services. Their client portfolio includes multiple Slovak businesses, demonstrating active market engagement and a niche boutique market position. Technically, the website is built on modern web technologies including Craft CMS, uses Google Analytics for tracking, and employs smooth scrolling and image loading JavaScript libraries. Hosting is provided by Websupport, a Slovak hosting provider, with DNSSEC enabled and HTTPS enforced, reflecting a solid technical foundation. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks explicit security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data is consistent with the business claims, showing a well-aged domain registered since 2010 with no privacy protection, supporting legitimacy. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. Strategic improvements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

S

SENSILAB farmaceutická spoločnosť d. o. o.

sensilab.sk

77

Sensilab Slovensko operates as a premium nutritional supplements e-commerce platform targeting health-conscious consumers primarily in Slovakia and internationally. The company is positioned as an established player with over 3.5 million satisfied customers worldwide, offering natural supplements for hormonal balance, detoxification, and weight management. The website is built on Magento, leveraging modern JavaScript libraries and integrations with leading marketing and analytics tools such as Google Analytics, Klaviyo, and Algolia. Payment processing is handled through reputable gateways including PayU, Adyen, and PayPal, ensuring secure transactions. The site demonstrates good technical maturity with HTTPS enforcement, content security policies, and cookie consent mechanisms aligned with GDPR requirements. Privacy policies are comprehensive and clearly communicated, including a named Data Protection Officer contact. Security posture is strong with no critical vulnerabilities detected, though the absence of a dedicated security policy or vulnerability disclosure page is noted. Overall, the website presents a professional, trustworthy, and compliant digital presence suitable for its business model.

A

Austrotherm, s. r. o.

austrotherm.sk

53

Austrotherm, s. r. o. is a medium-sized manufacturing company specializing in the production and sale of polystyrene thermal insulation products across 11 European countries, including Slovakia. The website serves as a comprehensive platform offering product information, technical documentation, and contact details, targeting construction professionals and end consumers interested in energy-saving insulation solutions. The company is part of the Koncern SIH group, indicating a solid market position within the manufacturing sector. Technically, the website is built on TYPO3 CMS with integration of modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and business credibility. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture.

K

Kinekus, s.r.o.

kinekus.sk

68

Kinekus, s.r.o. operates a retail business focused on garden, household, and workshop products, serving customers primarily in Slovakia through both physical stores and an online e-commerce platform. The website presents a professional and consistent brand image with good content quality and user experience. The business model centers on providing a broad product range with options for home delivery and in-store pickup, targeting general consumers interested in home and garden supplies. Technically, the website employs a moderate technology stack including jQuery, Cookiebot for cookie consent, Google Tag Manager, and various marketing and analytics tools such as MailerLite and Luigis Box. The site is hosted with Amazon Cloudfront CDN, ensuring reasonable performance and availability. Mobile optimization and SEO practices are well implemented, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. Security headers appear to be in place, and no exposed sensitive data or vulnerabilities were detected in the provided content. However, the site lacks explicit security policy and incident response documentation, which could enhance trust and compliance. Overall, the website is trustworthy and professionally maintained with a good security posture and privacy compliance. Recommendations include adding explicit security and incident response policies, updating legacy libraries like jQuery, and improving accessibility to further strengthen the site’s security and user experience.

Z

Zeppelin SK

zeppelin.sk

61

Zeppelin SK is a well-established Slovak company specializing in the sale and rental of construction and agricultural machinery, prominently featuring Caterpillar equipment. Founded in 2004, the company operates a professional website with comprehensive content, targeting construction firms, agricultural businesses, and machinery rental clients in Slovakia. The site reflects a strong market position with consistent branding and multiple service offerings including spare parts and energy systems. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and live chat integrations, ensuring a functional and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and a detailed cookie consent mechanism, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

A

ABB Asea Brown Boveri Ltd

global.abb

72

ABB Asea Brown Boveri Ltd is a global technology leader specializing in electrification and automation solutions. The company serves industrial sectors worldwide, helping customers improve efficiency, productivity, and sustainability. The website reflects ABB's strong market position and commitment to innovation across its four main business areas: Electrification, Motion, Process Automation, and Robotics & Discrete Automation. ABB targets industrial customers, partners, and investors with a comprehensive digital presence and multilingual support. Technically, the website is built on Adobe Experience Manager with React and hosted on AWS infrastructure, ensuring modern, performant, and mobile-optimized delivery. The site integrates multiple analytics and marketing tools while maintaining good privacy compliance with visible cookie consent mechanisms. Security posture is strong with HTTPS, domain transfer protection, and no evident vulnerabilities, though DNSSEC is not enabled. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with ABB's corporate identity.

H

Heineken Slovensko a.s.

heinekenslovensko.sk

48

Heineken Slovensko a.s. is a well-established Slovak brewing company with a rich history dating back to 1969. The company operates a modern brewery in Hurbanovo and markets several prominent beer brands including Heineken, Zlatý Bažant, Desperados, and Krušovice. The website reflects a mature digital presence with a focus on brand promotion, consumer engagement, and compliance with legal requirements such as age restrictions and GDPR. The target audience is adult consumers interested in beer products in Slovakia. The company benefits from being part of the global Heineken group, enhancing its market position and brand recognition. Technically, the website is built on WordPress with modern enhancements including React components, Google Analytics, and Tag Manager integration. It employs standard web technologies and plugins to deliver a responsive and user-friendly experience. The presence of an age gate and cookie consent mechanisms demonstrates attention to regulatory compliance and user privacy. However, some security best practices such as security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS with valid SSL, Google reCAPTCHA for form protection, and cookie consent management. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a long domain age supporting the company's operational history. Overall, the website presents a professional and trustworthy digital front for Heineken Slovensko. Strategically, the company should consider enhancing its security posture by implementing recommended HTTP security headers, publishing a formal security policy, and establishing a vulnerability disclosure program. These steps will strengthen trust and resilience against emerging threats. Continued focus on privacy compliance and transparent user communication will maintain regulatory alignment and customer confidence.

M

McDonald's Slovakia spol. s.r.o.

mcdonalds.sk

70

McDonald's Slovakia spol. s.r.o. operates the official McDonald's website for Slovakia, providing information on menu offerings, promotions, and services such as McDelivery and a mobile app with coupons. The website targets general consumers in Slovakia and maintains a strong brand presence consistent with the global McDonald's identity. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a large retail and hospitality business.

I

iStores

istores.sk

53

iStores is a retail business operating as an Apple Premium Partner in Slovakia, specializing in the sale of Apple products including iPhone, iPad, Mac, Apple Watch, and AirPods. The website serves consumers interested in Apple technology products within the Slovak market. The business model focuses on authorized retail sales and possibly service support for Apple devices. The website's technical infrastructure includes modern CSS grid layouts and uses Amazon Cloudfront CDN for content delivery, indicating a moderate level of digital maturity. However, the site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO practices. Security posture is weak due to the absence of security headers, privacy policies, and incident response information. No WAF or blocking mechanisms were detected, and the site is accessible. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business claims. Overall, the website is functional but requires significant improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance.

K

Kooperativa poisťovňa

kooperativa.sk

51

Kooperativa poisťovňa is a well-established insurance company operating in Slovakia, providing comprehensive life and property insurance services for over 30 years. The website reflects a professional and consistent brand presence with a focus on corporate insurance offerings. The technical infrastructure uses modern web technologies such as Bootstrap 5 and responsive design, ensuring good mobile optimization and user experience. However, the website lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The domain registration data is consistent with the business claims, showing a long-standing and legitimate presence. Overall, the website is functional and professional but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

Allianz SE is a global leader in insurance and asset management, offering a wide range of financial services to individuals and businesses worldwide. The website reflects a mature digital presence with comprehensive content describing their products and services. The company targets a broad audience seeking insurance and asset management solutions, positioning itself as a trusted enterprise in the finance sector. Technically, the site leverages Adobe Experience Manager CMS, Adobe Analytics, and OneTrust for cookie consent, indicating a modern and compliant infrastructure. Security posture is strong with HTTPS, security headers, and GDPR compliance evident. No critical vulnerabilities or exposed sensitive data were detected. However, the lack of WHOIS data limits domain registration transparency, slightly impacting trust assessment. Overall, the site is professional, secure, and compliant, supporting Allianz's market position as a reputable financial services provider.

W

WebLab, s.r.o.

weblab.sk

56

WebLab, s.r.o. is a Slovak-based web design studio specializing in creating websites, e-shops, branding, and online marketing services. With over 19 years of experience, the company targets businesses and individuals seeking professional digital presence solutions. Their market position is that of an established local player with a solid portfolio and positive customer testimonials. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals.

G

GoodApps

good-apps.co

67

GoodApps is a small, specialized SaaS company focused on developing Shopify apps that help e-commerce merchants boost sales, improve customer engagement, and optimize store operations. The company offers a suite of apps with strong user ratings and positive testimonials, positioning itself as a trusted partner for Shopify store owners. Technically, the website is built on Webflow with Cloudflare DNS, leveraging modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present, but lacks terms of service and explicit security policies. Overall, GoodApps presents a professional and trustworthy online presence with room for enhanced security and compliance maturity.

3

3b | Centrum športu a reklamy

3b.sk

45

3b | Centrum športu a reklamy is a Slovak company specializing in the manufacturing of sports jerseys, sportswear, merchandising, and advertising services. The company targets sports clubs, firms, amateurs, and professionals, positioning itself as a leading manufacturer in Slovakia. Their website is built on WordPress using Elementor and integrates modern technologies such as Google reCAPTCHA and Yoast SEO for security and search optimization. The site is well-structured, mobile-optimized, and provides clear navigation with multilingual support. Security posture is solid with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is strong with comprehensive GDPR and cookie policies and an active consent mechanism. Overall, the website reflects a professional and trustworthy business with good digital maturity.

D

Doody

doody.sk

57

Doody is a Slovak-based personal branding and marketing consulting business led by Renáta Dudková. The company specializes in helping entrepreneurs and small business owners build strong personal brands, clarify their marketing strategies, and develop foundational web presence. The website reflects a professional and consistent brand image with comprehensive content and client testimonials, positioning Doody as a niche expert in the Slovak market. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and marketing automation, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Bistro.sk is a well-established online food delivery platform operating primarily in Slovakia, founded in 2013 and owned by the Takeaway.com Group B.V. The platform connects consumers with local restaurants and stores, offering convenient online ordering and delivery services. It holds a strong market position in Slovakia with a large network of over 2,400 partner restaurants and stores. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, including GDPR compliance and cookie consent mechanisms. Social media presence and trust indicators such as a bug bounty program and ethics hotline further enhance its credibility. Technically, Bistro.sk leverages modern web technologies including Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager, Snowplow, and FullStory. The platform is hosted on robust infrastructure likely managed by Just Eat Takeaway, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed. Overall, Bistro.sk demonstrates a mature digital presence with strong business credibility and security practices. The platform effectively balances user experience, privacy compliance, and technical sophistication, making it a trustworthy service for food delivery in Slovakia.

O

okto—digital

okto.digital

65

okto—digital is a Slovakia-based digital agency founded in 2014, specializing in mobile and cloud applications, design, WordPress and WooCommerce development, marketing, consulting, and advanced technologies such as AI, Big Data, and AR/VR. The company positions itself as a trusted partner for businesses seeking digital transformation and growth, supported by ISO 27001 certification which underscores its commitment to data security and information management. The website reflects a professional and modern digital presence with good content quality and clear service offerings. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and reCAPTCHA, hosted on Websupport.sk. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, okto—digital demonstrates a mature digital infrastructure and a strong market position in the technology sector.

Dampfers-Corner.de is a small German-language blog focused on the vaping community, offering an Easy Liquid Calculator tool and affiliate advertising primarily through Amazon. The site operates on WordPress with a basic but functional design and moderate technical infrastructure. It uses HTTPS and includes GDPR-compliant cookie consent and privacy policy pages, but lacks explicit security policies and terms of service. Contact is available only via a form, with no direct emails or phone numbers published. The security posture is moderate with room for improvement in security headers and incident response readiness. Overall, the site is accessible, safe, and serves a niche audience with basic content and tools.

R

Rauch dein Obst OHG

bulletshopberlin.de

50

Bulletshop Berlin operates as a specialized German e-commerce retailer focusing on shishas, e-shishas, tobacco, e-liquids, and related accessories. Founded in 2020, the company positions itself as a niche player serving mature consumers interested in smoking and vaping products. The website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO Premium and Customer Reviews WooCommerce to enhance SEO and customer engagement. Hosting is provided by Timme Hosting, with domain registration consistent with the business founding date. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance in the EU.

The website davapo.de currently presents minimal content, consisting solely of a centered image with no textual or metadata information. The lack of privacy policies, contact information, or business descriptions suggests the site is either under development or serves as a placeholder. The domain is hosted on kasserver.com with standard name servers, and WHOIS data indicates no privacy protection or suspicious registration patterns. Technically, the site lacks modern SEO, accessibility, and security features, including HTTPS and security headers. This results in a low security posture and limited trustworthiness. Strategic improvements are needed to enhance content quality, implement security best practices, and provide clear business and compliance information.

A

Atomhamster.com

atomhamster.com

45

Atomhamster.com is a personal blog operated by Yannick Baierl, focusing on Shisha culture, lifestyle, and related video content primarily in German. The website has been active since 2011 and maintains a niche presence with regular blog posts and integrated YouTube videos. The business model centers on content creation and community engagement rather than direct commerce. Technically, the site runs on WordPress with common plugins such as Yoast SEO and integrates social media platforms including Facebook, YouTube, Instagram, and Twitch. Hosting appears to be provided by netcup, inferred from DNS records. The site is moderately optimized for mobile and SEO, with good content quality and consistent branding.

H

podkings.de

hello-vape.de

48

The website www3.podkings.de is a parked domain landing page primarily monetized through advertising networks such as Google Adsense and DoubleClick. It lacks substantive business content, contact information, or clear branding, indicating it is not an active commercial site. The technical infrastructure relies on standard HTML5 and JavaScript with third-party ad and tracking scripts loaded from multiple external domains. The site is accessible without WAF or security challenges but does not implement HTTPS enforcement or security headers, which weakens its security posture. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, with a high degree of user tracking and advertising but no clear business entity or services.

Dampfshop4u is a German-based online retailer specializing in vaping products including e-cigarettes, e-liquids, aromas, and accessories. The website presents a well-structured e-commerce platform with detailed product categories and a focus on user experience for mature audiences interested in vaping. The business appears to be established since 2014, targeting the German market with a niche product offering. Technically, the site uses modern web technologies and integrates cookie consent management via Usercentrics, indicating compliance with GDPR requirements. Hosting is provided by Timme Hosting, a German provider, which aligns with the business location. Security posture is adequate with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a mature audience with tobacco-related products.

The website www2.vitastik.de is a parked domain primarily used for domain resale and advertising via Sedo's domain parking service. It does not represent an active business or service provider. The site content is minimal, consisting mainly of domain sale notices and advertising placeholders. The technical infrastructure relies on Sedo's scripts and Google Ads for monetization. There is no evidence of a dedicated CMS or business platform. Security posture is weak, with no HTTPS detected and no security headers or policies present. Privacy compliance is minimal, with only a basic privacy policy hosted externally and a simple cookie consent mechanism. Overall, the site lacks business credibility and trust indicators, reflecting its status as a parked domain rather than an operational business website.

C

CannAbisZ

steammachine.eu

50

CannAbisZ operates as a specialized e-commerce retailer focusing on cannabis-derived products such as HHC, H4CBD, and CBD vape pens, alongside lifestyle and headshop accessories. The company positions itself as a leading German distributor in this niche market, emphasizing product quality through lab testing and customer satisfaction via support channels including a hotline and WhatsApp chat. The website is built on the Shopware platform, integrating modern tracking tools like Google Tag Manager and Trusted Shops widgets, reflecting a moderate level of digital maturity. Security practices include HTTPS enforcement and CSRF protection, though explicit security headers and policies are absent. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site presents a professional and trustworthy front for adult consumers interested in cannabis-related products.

T

Tante Dampf

tantedampf.de

52

Tante Dampf is a specialized retailer in Germany offering electronic cigarettes, liquids, aromas, and accessories both online and through a physical store in Berlin. Established in 2014, the company targets adult consumers interested in vaping products, providing a broad product range with nationwide shipping and local pickup options. The website is built on the PrestaShop platform, leveraging modern web technologies such as JavaScript libraries, Font Awesome icons, and tracking tools like eTracker, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. Privacy and cookie policies are present and appear GDPR compliant. Overall, the website demonstrates good content quality, technical implementation, and business credibility, with a moderate security posture and privacy compliance.

H

HLMH Vertrieb UG

ismoker.eu

72

iSmoker.eu is a German-based e-commerce retailer specializing in e-cigarettes, e-liquids, and vaping accessories. Established in 2011, the company has built a solid market position with over 100,000 customers and is recognized for quality products and customer support. The website offers a comprehensive product catalog, detailed business information, and multiple trust signals including Trusted Shops certification and clear contact details. The target audience is adult smokers and vapers primarily in Germany and Europe. Technically, the site is built on Prestashop CMS, uses modern JavaScript libraries, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is good with HTTPS enforced and use of CAPTCHA on forms, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the site is professional, trustworthy, and compliant with relevant regulations.

C

E-Zigaretten für Einsteiger und Profis| Club der Dampfer Shop

clubderdampfer.de

56

Club der Dampfer is a German e-commerce retailer specializing in vaping products including e-cigarettes, liquids, flavors, bases, pods, and accessories. The website targets both beginners and professional vapers, offering a broad product range with frequent promotions. The site is built on the Magento 2 platform, leveraging various third-party modules for enhanced functionality and user experience. The technical infrastructure is modern and mobile-optimized, providing good SEO and accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal policies such as privacy and cookie policies. No contact or incident response information is publicly available, which limits transparency and trust. Overall, the site is functional and professional but could improve compliance and security transparency.

W

Wanna Vapor

wannavapor.de

48

Wanna Vapor is a German-based e-commerce retailer specializing in vaping products including e-cigarettes, liquids, and accessories. The website targets mature consumers interested in vaping and related merchandise. The business operates a niche online retail model with a clear product focus and structured navigation. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and integrates popular payment services such as PayPal and Mollie, hosted behind Cloudflare DNS for performance and security benefits. The site is mobile optimized and provides a generally good user experience, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS and payment SDKs in use, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is publicly available, which may impact trust and compliance. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security best practices.

D

Dampfplanet

dampfplanet.de

40

Dampfplanet.de is a well-established German e-commerce platform specializing in vaping products including e-cigarettes, liquids, aromas, and accessories. The website demonstrates a mature market presence with a comprehensive product catalog and recognized industry awards such as the Computerbild Top-Shop 2023. The target audience is adults interested in vaping, and the business operates primarily in the retail sector within Germany. Technically, the site uses a modern tech stack including jQuery, Matomo analytics for privacy-conscious tracking, and a JTL Shop CMS platform. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses security headers, and secures user input forms, although it lacks explicit security policy pages and incident response contacts. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, with no signs of malicious activity or blocking mechanisms.

D

domainname.de

erette.de

50

The website represents a professional domain brokerage service specializing in the sale of premium domains such as erette.de. It offers a secure, escrow-based transaction process with multiple payment options and fast domain transfer guarantees. The platform targets businesses and individuals seeking valuable domain names, leveraging over 15 years of market experience. Technically, the site employs modern frontend technologies including Bootstrap and Google reCAPTCHA to ensure usability and security. The multi-step negotiation form collects necessary buyer information securely, enhancing user trust. Security posture is strong with HTTPS, security headers, and spam protection, though the absence of a cookie consent banner and explicit security policy pages are noted compliance gaps. Overall, the site is trustworthy, well-designed, and functional, supporting a medium-sized technology business in Germany.

V

VAPE GmbH

hisvape.net

36

hisVape is a small e-commerce retailer specializing in electronic cigarettes, e-liquids, aromas, and self-mixer supplies primarily targeting German-speaking adult consumers in Austria and surrounding regions. The website is built on the Shopware CMS platform and employs modern web technologies including Google reCAPTCHA for form security and an age verification modal to comply with youth protection laws. The business has been established since 2011, consistent with the domain registration data. The site currently displays a message indicating the shop is permanently closed but remains accessible for existing customers to manage orders. Technical infrastructure is moderate with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and CAPTCHA protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding, customer review pages, and a ticket-based contact form, though no direct phone or email contacts are published. Overall, the site is moderately trustworthy but could improve in security and privacy transparency.

D

DampfAlarm - alles für guten Dampf

dampfalarm.de

46

DampfAlarm.de is a German e-commerce website specializing in vaping products including devices, e-liquids, and accessories. The site targets vaping enthusiasts and customers in Germany, operating as a niche online retailer. The website is built on a modern tech stack including jQuery, Bootstrap, and integrates third-party search services like Doofinder. Hosting is provided by Timme Hosting, a reputable German hosting provider. The site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility tool, enhancing user experience for diverse audiences. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though security headers are missing and privacy compliance documentation is absent. The WHOIS data is consistent and transparent, indicating a legitimate domain registration aligned with the business. Overall, the site is professional and functional but would benefit from improved privacy and security policy disclosures and enhanced SEO metadata. Strategic recommendations include adding comprehensive privacy and cookie policies, security headers, and clear contact information to improve trust and compliance.

E

ELFBAR Shop

elfbar.de

57

ELFBAR Shop operates as the official German online retailer for ELFBAR vaping products, including disposable e-cigarettes, pods, and liquids. The website is built on the Shopify platform using the Empire theme, integrating modern e-commerce technologies and third-party services such as Trustpilot for customer reviews. The business targets adult consumers in Germany, offering free shipping for orders above a certain threshold. The site demonstrates good digital maturity with fast performance, mobile optimization, and accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, explicit contact information and security policies are not prominently provided. The security posture is strong with HTTPS enforcement, security headers, and form protection via hCaptcha. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a niche adult market for vaping products.

H

Highendsmoke | E-Zigaretten, Liquids und Aromen online kaufen

highendsmoke.de

53

The website shop.highendsmoke.de is a German-language e-commerce platform specializing in the retail of vaping products including e-cigarettes, liquids, aromas, pod systems, and accessories. It targets adult consumers interested in vaping and nicotine products, positioning itself as a specialized online retailer with a broad product range and promotional sales. The site uses the Shopware e-commerce platform and integrates modern technologies such as jQuery, Doofinder search, Google Tag Manager, and Mollie payment services, indicating a moderate level of digital maturity and technical infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.