Switzerland security reports

F

fairunterwegs

fairunterwegs.org

57

fairunterwegs is a Swiss non-profit organization dedicated to promoting fair and sustainable tourism. The website provides educational content, tips, and resources aimed at consumers interested in environmentally friendly and socially responsible travel. Positioned as a niche player in the sustainable tourism sector, fairunterwegs leverages digital channels and social media to engage its target audience. The organization was founded in 2003 and operates primarily within Switzerland. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google reCAPTCHA, and Cookiebot for consent management. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Hosting and DNS services are provided by reputable providers, though DNSSEC is not enabled, representing a minor security enhancement opportunity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, additional security headers could be implemented to strengthen the security posture. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain. Overall, fairunterwegs presents a professional and trustworthy online presence with a focus on privacy compliance and user consent. Strategic recommendations include enabling DNSSEC, publishing a formal privacy policy and terms of service, and enhancing security headers to improve resilience against web threats.

K

KOVOS

kovos.ch

49

KOVOS is a Swiss non-profit organization representing Catholic religious communities, providing information and support for vocations, retreats, and monastic hospitality. The website serves as an informational platform targeting religious individuals and communities in Switzerland. Technically, the site is built on TYPO3 CMS with modern web technologies and includes tracking via Google Analytics and Tag Manager. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS and nonce usage but lacks visible security headers and published security or privacy policies. No forms or social media links were detected, limiting direct user engagement channels. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

S

Schweizer Bischofskonferenz

bischoefe.ch

48

The Schweizer Bischofskonferenz website serves as the official digital presence of the Swiss Bishops' Conference, providing comprehensive information about the Catholic Church's activities, leadership, and ethical services in Switzerland. The site targets church members, religious communities, and the general public interested in ecclesiastical matters. It offers news, documents, and partner links, positioning itself as a trusted non-profit religious institution with a medium organizational size. Technically, the website is built on WordPress 6.6.2, leveraging common plugins such as Contact Form 7 and Bootstrap for responsive design. The infrastructure supports moderate performance and good mobile optimization, with Google Tag Manager integrated for analytics. However, some accessibility features are basic, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Nonetheless, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy compliance measures and security best practices to strengthen user trust and regulatory adherence.

S

Servizio nazionale «Abusi nel contesto ecclesiale»

abusi-catt-info.ch

10

The website 'abusi-catt-info.ch' is a Swiss institutional platform dedicated to scientific research and reprocessing of sexual abuse cases within the Roman Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations such as the CVS, RKZ, and KOVOS. The site provides detailed information on ongoing research projects, support services for victims, and national measures to combat abuse. The target audience includes victims, researchers, church members, and the general Swiss public interested in this sensitive topic. The business model is non-profit and institutional, focusing on transparency, education, and victim support. Technically, the website employs modern web technologies including SVG graphics, web fonts, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices and clear navigation. However, no major CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response plan. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Contact information is transparent and professional, enhancing trust. Overall, the website presents a low-risk profile with a high trustworthiness rating. Strategic recommendations include implementing security headers, publishing security policies, and adding cookie consent mechanisms to further enhance compliance and security posture.

S

Service national Abus dans le contexte ecclésial

abus-cath-info.ch

50

The website 'abus-cath-info.ch' serves as a national initiative focused on scientific research and treatment of sexual abuse within the Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations including the CES, RKZ, and KOVOS, positioning it as a credible and authoritative source on this sensitive topic. The site provides resources for victims, updates on research projects, and information on church measures to address abuse. The target audience includes victims, researchers, church authorities, and the general public concerned with this issue. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and uses Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS or hosting provider is identified. Performance is moderate with good navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is adequate with a privacy policy present, but no cookie consent mechanism is detected. No forms collecting personal data are found on the homepage. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to improve compliance and security posture.

V

Venuro AG

venuro.com

65

Venuro AG is a Swiss company specializing in the manufacture of frameless sliding windows, combining precision engineering with advanced materials such as carbon fiber and fiberglass. Established in 1973, the company positions itself as a premium provider of architectural sliding masterpieces, targeting architects and discerning clients seeking innovative and aesthetically refined building solutions. The website reflects a high level of professionalism with rich multimedia content, clear branding, and a focus on craftsmanship and innovation. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as GSAP for animations and Swiper for sliders. It employs a cookie consent mechanism compliant with GDPR, integrates Google Analytics for visitor tracking, and is hosted on a reliable CDN infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in features. However, it lacks visible security headers and published security or incident response policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding strongly indicate a legitimate business. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is moderate to low, with recommendations to enhance domain registration transparency, implement security headers, and publish incident response information to strengthen trust and compliance.

M

MHZ Hachtel & Co AG

mhz.ch

53

MHZ Hachtel & Co AG operates a professional website focused on custom window coverings including plissee, rollos, jalousies, curtains, and outdoor sun protection products. The company targets consumers and professionals in Switzerland and neighboring regions, offering a product configurator and multi-language support to enhance user experience. The website is built on TYPO3 CMS with modern frontend technologies and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy policy and terms of service pages are not detected in the provided content. Overall, the website reflects a mature digital presence with good business credibility and technical implementation.

N

Nationale Dienststelle Missbrauch im kirchlichen Kontext

missbrauch-kath-info.ch

49

The website www.missbrauch-kath-info.ch serves as a dedicated platform for the scientific research and transparent processing of sexual abuse cases within the Catholic Church in Switzerland. It is a non-profit initiative backed by major Swiss Catholic organizations such as the Schweizer Bischofskonferenz (SBK), Römisch-Katholische Zentralkonferenz (RKZ), and Katholische Ordensgemeinschaften der Schweiz (KOVOS). The site provides information on ongoing research projects, church measures, support for victims, and updates on the state of processing abuse cases. The target audience includes victims, church authorities, researchers, and the general public interested in this sensitive topic. The business model is non-commercial, focusing on social responsibility and transparency.

S

Swiss Patient Access Pilot

spap.health

50

Swiss Patient Access Pilot (SPAP) is a healthcare-focused program initiated by the Swiss Society for Medical Oncology (SGMO) to facilitate patient access to selected oncology medicines that are medically necessary but rejected by health insurance. The program is supported by pharmaceutical companies such as Roche, Astra Zeneca, and iQone, positioning it as a niche but important healthcare access initiative within Switzerland. The website provides information primarily in German with multilingual support, targeting patients and healthcare professionals seeking exceptional reimbursement pathways for oncology drugs. Technically, the website is built on WordPress CMS, utilizing the Yoast SEO plugin for optimization and the UIkit framework for UI components. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. No major performance issues are evident, and the site is fully accessible without WAF or security challenges. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and published incident response or security policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. WHOIS data is unavailable, likely due to privacy protection, which is justifiable given the healthcare context. Overall, the site presents a professional and trustworthy front for a specialized healthcare program, with moderate technical maturity and a solid security baseline. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and trust.

S

Swiss Society of Hematology

sgh-ssh.ch

10

The Swiss Society of Hematology (SGH SSH) is a professional organization dedicated to representing hematologists in Switzerland. It provides postgraduate and continuous education, supports clinical and laboratory hematology professionals, and organizes key events such as the Swiss Oncology and Hematology Congress. The society targets medical professionals and researchers in hematology, offering membership services and educational resources. The website is built on a modern WordPress platform with a professional design and clear navigation, reflecting a mature digital presence. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a strong security posture with room for improvement in security headers and public policy disclosures. The domain registration data aligns well with the organization's identity, supporting its legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

S

Schweizerische Gesellschaft für Medizinische Onkologie

sgmo.ch

66

The Swiss Society of Medical Oncology (SGMO) operates as a professional association and scientific society dedicated to medical oncologists in Switzerland. The organization focuses on promoting oncology science, regulating training and continuing education, representing professional interests, and fostering networking within the medical community. The website is multilingual, professionally designed, and provides comprehensive information about the society's mission, events, and membership. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is strong, with clear cookie consent mechanisms and a detailed privacy policy. Overall, the site reflects a trustworthy and professional entity with a clear focus on healthcare professionals in Switzerland.

R

Römisch-katholischer Pastoralraum Möhlinbach

moehlinbach.ch

51

The Römisch-katholischer Pastoralraum Möhlinbach is a regional non-profit Catholic church organization serving multiple parishes in the Möhlinbach area of Switzerland. The website provides comprehensive information about its pastoral services, community offerings, and contact details for various parish offices. The organization targets local Catholic community members and offers services such as sacraments, social support, and youth programs. Technically, the website is built on TYPO3 CMS with modern front-end libraries like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its mission, though it could improve in privacy and security transparency.

E

Elektro Lichtin AG

elektrolichtin.ch

48

Elektro Lichtin AG is a small regional electrical services company based in Möhlin, Switzerland, specializing in electrical installations, lighting, safety systems, network infrastructure, and household appliances. The website is primarily in German and targets local customers seeking professional electrical services. The business model focuses on service provision with a clear physical presence and contact information. The company maintains a moderate market position as a trusted local provider. Technically, the website uses standard HTML5 and CSS with JavaScript enhancements, including Google Analytics with IP anonymization and a cookie consent banner, indicating basic digital maturity and privacy awareness. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS indications. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS (assumed from external Google Analytics scripts loaded over HTTPS), but no explicit security headers were detected in the provided data. The presence of cookie consent and anonymized analytics is positive, but the absence of published security policies or incident response information suggests room for improvement. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is low, but strategic improvements in security headers, incident response transparency, and privacy policy detail would enhance compliance and trust.

M

Gestalten und verkaufen mit Print-on-Demand | Spreadshop

myspreadshop.ch

59

The website myspreadshop.ch serves as a landing page for a print-on-demand merchandise platform affiliated with Spreadshop and Spreadshirt. It targets individuals and small businesses interested in creating and selling custom merchandise online. The business model is based on enabling users to open their own merchandise shops with no upfront cost, leveraging print-on-demand fulfillment services. The site is positioned within the e-commerce sector and appears to serve primarily the Swiss and German-speaking markets. Technically, the site is simple, using standard HTML and CSS with web fonts, and is moderately optimized for mobile devices. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts in the provided content. Security posture is weak due to absence of visible security headers, privacy policies, and contact information, which impacts compliance and trust. The domain uses privacy protection, which is common and justified for this business type. Overall, the site is functional but minimalistic, with room for improvement in security, privacy, and user engagement features.

H

hajk

hajk.ch

73

hajk.ch is a Swiss e-commerce retailer specializing in outdoor equipment, clothing, and camping gear, officially affiliated with the Pfadibewegung Schweiz (Swiss scouting movement). The website targets outdoor enthusiasts and scouts in Switzerland, offering high-quality and sustainable products. The business model is retail-focused, leveraging a Magento-based platform with a modern Hyvä frontend theme. The site demonstrates a good level of digital maturity with integrated analytics, cookie consent, and user tracking mechanisms. Security posture is solid with HTTPS, CSRF protections, and deferred script loading, though explicit privacy and terms policies are not found in the provided content. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

G

Gemeinde Therwil

therwil.ch

67

Gemeinde Therwil operates as the official municipal government website for the community of Therwil in Switzerland. It provides residents and visitors with comprehensive information about local administration, education, social services, public safety, events, and waste management. The website serves as a digital portal for accessing municipal services, announcements, and contact information, positioning itself as a trusted local government resource. Technically, the site is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with video content delivered via Video.js. The site demonstrates good mobile optimization and clear navigation, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector role effectively.

The Ehemaligenverein Jungwacht Therwil is a small Swiss non-profit organization dedicated to connecting former leaders and members of the Jungwacht Therwil youth group. The website serves as an informational portal to promote membership, share memories, and provide access to a summer camp archive. The organization is community-focused with a clear founding date and transparent contact information via email. Technically, the website is simple, built with basic HTML and CSS, and integrates Facebook social plugins for community engagement. However, it lacks advanced CMS, security headers, and privacy or cookie policies, indicating room for improvement in compliance and security. The security posture is basic with no visible vulnerabilities but missing standard security best practices. Overall, the site is safe, trustworthy, and serves its niche audience well but would benefit from enhanced privacy compliance and security hardening.

S

Schulsport Burgdorf

schulsport-burgdorf.ch

64

Schulsport Burgdorf is a local educational initiative providing voluntary school sports courses for students in Burgdorf, Switzerland. The website serves as an information and registration portal for 17 different sports courses aimed at students from 1st to 9th grade. The organization positions itself as a bridge between mandatory school sports and club sports, focusing on inclusivity and beginner-friendly offerings. The business model is non-commercial and community-focused, targeting local school children and their families. Technically, the website is built on the Weblication CMS platform, utilizing jQuery and etracker for analytics. The site is well-structured with good mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are adequately implemented. The site uses HTTPS and includes a cookie consent banner, indicating attention to privacy compliance. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing no privacy protection or suspicious registration details, supporting the legitimacy of the domain. Overall, Schulsport Burgdorf presents a trustworthy, well-maintained online presence for a small educational sports initiative. Strategic improvements could include enhancing security headers, publishing security policies, and expanding privacy documentation to further strengthen compliance and trust.

A

ALSO Schweiz AG

also-training.ch

57

ALSO Schweiz AG operates a professional IT training platform focused on providing product and solution trainings, certifications, and e-learning services primarily to IT resellers, service providers, and technical professionals in Switzerland. The company holds a strong market position as a leading wholesale and service provider in the IT sector, offering a broad portfolio of trainings including company-specific and online options. Technically, the website is built on a modern Ruby on Rails framework with standard frontend technologies and integrates analytics and user behavior tracking tools such as Google Analytics and Hotjar. Security posture is moderate with CSRF protections in place but lacks explicit security headers and incident response disclosures. Privacy compliance is supported by comprehensive privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the website is professional, trustworthy, and well-structured, serving a clear business purpose with good user experience and content relevance.

A

ALSO Schweiz AG

product-finishing.ch

48

ALSO Schweiz AG operates the Product Finishing website offering value-added IT hardware services such as staging, labeling, bundling, unpacking, and inventorying. The company targets business customers who require efficient hardware preparation services to focus on their core operations. The website is professionally designed with clear service descriptions, video content, and multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins including Yoast SEO and Complianz for GDPR compliance, and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. The domain registration aligns well with the business identity, enhancing trustworthiness. Overall, the website demonstrates a solid business and technical foundation with good privacy and security practices.

C

Création Baumann

creationbaumann.com

66

Création Baumann is a Swiss family-owned business specializing in high-quality textiles and curtain systems, serving both private and contract markets. The company offers a wide range of products including curtain fabrics, upholstery, outdoor and functional textiles, as well as acoustic solutions and curtain systems. The website reflects a mature and professional digital presence with a focus on product showcasing and customer engagement through an online textile finder and detailed product categories. The domain age of over 25 years supports the company's established market position. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by Yoast SEO Premium for search optimization and CookiePro for privacy compliance. The site is mobile-optimized, accessible, and performs moderately well. Security is adequate with HTTPS enforced and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers could be implemented. From a security and compliance perspective, the site includes a cookie consent mechanism but lacks explicit privacy policies, terms of service, and security incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing security headers to further strengthen the security posture.

S

StopPauvreté

stoppauvrete.ch

10

StopPauvreté is a Swiss non-profit organization focused on raising awareness about poverty and injustice within Christian communities. The website serves as a platform to engage churches and individuals through educational content, events, and a boutique. The organization positions itself as a niche player in the non-profit sector with a clear mission and target audience. Technically, the website is built on WordPress using popular plugins such as WooCommerce and Elementor, indicating a modern and maintainable infrastructure. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Social media presence on Facebook and Instagram supports community engagement. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit.ch

66

Training-Fit.ch is an e-commerce retailer specializing in fitness, muscle building, crossfit, yoga, and martial arts equipment and apparel. The website offers a broad catalog of products from well-known brands, targeting fitness enthusiasts primarily in Switzerland and neighboring regions. The business model focuses on online sales with fast shipping options and secure payment methods. The site demonstrates consistent branding and a professional design, supporting a medium-sized retail operation. Technically, the website is built on the Magento OpenMage platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, explicit security headers are not clearly present, and there is no published security policy or incident response contact. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy and security transparency. Strategic improvements in policy publication, security headers, and contact information would enhance trust and compliance.

S

Smash-Expert

smash-expert.ch

67

Smash-Expert is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, table tennis, and squash. The website offers a broad catalog of products from multiple well-known brands, targeting sports enthusiasts and athletes primarily in Switzerland. The business model is retail-oriented with emphasis on fast delivery and secure payment options. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation, with consent management implemented via the IAB TCF framework. Security posture is strong with HTTPS enforced and use of Google reCAPTCHA, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies in the visible content. Overall, the site is professional, well-structured, and trustworthy, but could enhance transparency and compliance documentation.

P

Pet & Garden – Ihre Online-Zoohandlung und Ihr Gartencenter

pet-and-garden.ch

67

Pet & Garden is an established Swiss online retailer specializing in pet supplies, garden products, and agricultural equipment. The website offers a broad catalog of products with a focus on fast shipping and customer service, targeting pet owners, gardeners, and farmers primarily in Switzerland and German-speaking regions. The business model centers on e-commerce retail with a medium-sized market presence and a consistent brand image. Technically, the website is built on a Magento-based platform (OpenMage variant) and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a consent management platform for GDPR compliance. However, explicit privacy and cookie policies are missing, and no direct contact information or security incident response details are provided, which are areas for improvement. Overall, the website is secure, professional, and trustworthy, but enhancing transparency and compliance documentation would strengthen its security posture and user trust.

P

Pecheur-Store

pecheur-store.ch

66

Pecheur-Store is a German-language e-commerce retailer specializing in fishing equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, spinning, and sea fishing. The website targets fishing enthusiasts primarily in Switzerland and German-speaking regions, offering a broad product catalog with fast shipping and secure payment options. The business operates as a small retail entity with a focused niche market position. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Tag Manager, Google Analytics, Google Ads conversion tracking, and reCAPTCHA v3 for bot protection. The site demonstrates good mobile optimization and SEO practices, although some accessibility features are basic. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and employs reCAPTCHA and a consent management platform for GDPR compliance. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no privacy policy or terms of service are present on the homepage, which are areas for improvement. WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy disclosures and security header implementation to improve compliance and security posture.

M

Made In Paradis

madeinparadis.ch

67

Made In Paradis is a Swiss-based e-commerce retailer specializing in women's fashion, including clothing, shoes, sportswear, accessories, and beauty products. The website offers a broad catalog with over 300 brands, targeting female consumers interested in fashion and sportswear. The business operates primarily online with a medium-sized market presence in Switzerland and neighboring European countries. Technically, the website is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, reCAPTCHA, and secure payment methods, though some security headers and policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected. The site maintains active social media channels and partners with several related retail domains.

D

Daily Bikers

daily-bikers.ch

67

Daily Bikers is a specialized e-commerce retailer based in Switzerland focusing on motorcycle equipment and parts. The website offers a broad catalog of products including helmets, jackets, gloves, and accessories targeting motorcycle enthusiasts primarily in German-speaking regions. The business model is retail-oriented with an emphasis on fast delivery and secure payment options. The website demonstrates a good level of digital maturity with modern tracking and advertising technologies integrated, including Google Analytics, Google Tag Manager, and reCAPTCHA for bot protection. The platform is built on Magento (OpenMage variant), providing a robust e-commerce infrastructure. Security posture is solid with HTTPS enforced and bot protection mechanisms, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic, with a consent mechanism present but no explicit privacy or cookie policy pages detected in the provided content. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

T

Tripnbikers

tripnbikers.ch

67

Tripnbikers is a specialized e-commerce retailer focused on motorcycle luggage and accessories, including top cases, saddlebags, and rider backpacks. The website targets motorcycle enthusiasts primarily in Switzerland and German-speaking regions, offering products from well-known brands such as Givi, Shad, and SW-Motech. The business operates a professional online store with a clear product catalog and marketing presence. Technically, the site is built on Magento (OpenMage) with modern frontend technologies and integrates Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site uses HTTPS and has a cookie consent mechanism, indicating basic GDPR compliance, though explicit privacy and terms of service pages were not detected in the provided content. Security posture is good with no obvious vulnerabilities or exposed sensitive data, but could be improved by adding explicit security headers and publishing security policies. Overall, the website is professional, trustworthy, and safe for general audiences.

H

House of Rugby

house-of-rugby.ch

67

House of Rugby is a specialized e-commerce retailer focused on rugby sportswear, equipment, and official club and national team merchandise. The website targets rugby players and fans primarily in Switzerland and French-speaking regions, offering a wide range of products including jerseys, shoes, and protective gear. The business model centers on online retail with fast shipping and secure payment options, positioning itself as a niche market leader in rugby apparel and accessories. Technically, the website is built on the Magento OpenMage platform, leveraging modern frontend technologies such as Google Tag Manager, Google Analytics, Google Ads, and reCAPTCHA v3 for bot protection. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with a well-structured navigation system and consistent branding. From a security perspective, the site enforces HTTPS and uses consent management platforms to comply with privacy regulations. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are available. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy and cookie policies are not explicitly found, though consent mechanisms are implemented. Overall, the website presents a professional and trustworthy e-commerce platform with a solid security posture but could enhance transparency and compliance by publishing privacy, cookie, and security policies. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

Handball-Store: Online-Handball-Spezialist

handball-store.ch

66

Handball-Store.ch is a specialized e-commerce retailer focused on handball sports equipment, including shoes, balls, clothing, and accessories. The website targets handball players, teams, and clubs primarily in German-speaking regions, offering a comprehensive product catalog with fast shipping options. The business operates in the retail sector within Switzerland, maintaining a consistent and professional online presence. Technically, the site is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The website is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses reCAPTCHA for bot protection, but lacks some security headers and explicit security policies. Privacy compliance is partially implemented with a consent mechanism but lacks visible privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced transparency and security documentation.

S

SPACEFOOT SAS

galopp-store.ch

58

Galopp-Store is a well-established e-commerce retailer specializing in equestrian equipment, pet supplies, and breeding animal products, targeting horse owners, riders, and pet enthusiasts primarily in Switzerland and France. The company operates under SPACEFOOT SAS, with customer service based in France, reflecting a strong European market presence. The website offers a broad product catalog with clear navigation and multiple product categories, supported by a consistent brand identity and trust signals such as secure payment options and customer service contacts. Technically, the site is built on a Magento (OpenMage) platform, leveraging modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation, with GDPR-compliant consent management implemented via AppConsent CMP. Security posture is strong with HTTPS enforced, reCAPTCHA protection on forms, and visible secure payment logos, although explicit security and incident response policies are not published. Overall, the website is professional, user-friendly, and trustworthy, with moderate to good performance and mobile optimization.

F

Foot-store

foot-store.ch

65

Foot-store.ch is a specialized e-commerce platform focused on football-related products including shoes, jerseys, and accessories. The website targets football enthusiasts primarily in Switzerland and Europe, offering a wide range of branded sportswear and equipment with fast shipping options. The business model is retail e-commerce with a niche focus on football gear, positioning itself as a trusted provider with customer service in France and secure payment options. Technically, the site is built on Magento OpenMage with a modern frontend, leveraging Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site demonstrates good digital maturity with responsive design and structured navigation. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though explicit privacy and terms pages are missing. Overall, the site is professional and trustworthy with moderate tracking and advertising practices. Recommendations include publishing clear privacy and terms policies, adding contact information, and enhancing accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trust.

D

Direct-Volley : Nummer 1 Website für Online-Volleyball

direct-volley.ch

67

Direct-Volley.ch is a German-language e-commerce website specializing in volleyball equipment, apparel, and accessories. It positions itself as the leading online volleyball shop, targeting volleyball players and enthusiasts primarily in German-speaking regions such as Switzerland and Germany. The site offers a broad catalog including shoes, clothing, balls, protective gear, and club equipment, supported by a structured navigation and search functionality. The business model is retail-focused, leveraging an online platform to reach its audience efficiently. Technically, the website is built on the Magento OpenMage platform, integrating modern web technologies such as Google Analytics, Google Ads, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and no visible privacy policy or terms of service pages were found in the provided content. Contact information for security incidents or data protection officers is also absent, indicating areas for improvement in compliance and transparency. Overall, the website is professional and trustworthy for its retail purpose but would benefit from enhanced privacy disclosures, security header implementation, and clearer contact channels to improve its security posture and compliance with GDPR requirements.

D

Direct-Running: Laufschuhe, Lauftextilien, Laufausrüstung

direct-running.ch

67

Direct-Running.ch is a specialized e-commerce retailer focused on running shoes, sports apparel, and related equipment primarily targeting German-speaking customers in Switzerland. The website offers a broad catalog of well-known brands such as Adidas, Saucony, Puma, and Mizuno, emphasizing fast shipping and secure payment options. The business model is retail-oriented with a clear focus on the running and fitness market segment. Technically, the site is built on a Magento-based platform (OpenMage variant) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses reCAPTCHA to mitigate bot activity. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partially addressed through a consent mechanism, but no dedicated privacy or terms of service pages were detected in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the business claims, indicating a trustworthy online presence. Overall, the site is professional and secure but would benefit from enhanced privacy disclosures and security transparency.

S

SPACEFOOT SAS

golf-and-co.ch

67

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, serving primarily the Swiss and broader European markets. The company operates under the legal entity SPACEFOOT SAS based in France, with customer service also located there. Their website offers a wide range of golf-related products including clubs, balls, bags, shoes, clothing, gloves, and accessories from well-known brands. The business model is retail e-commerce with a strong regional presence indicated by multiple country-specific domains. The site is professionally designed with clear navigation and product categorization, targeting golf enthusiasts and players.

B

Basket-Center

basket-center.ch

67

Basket-Center.ch is a professional e-commerce platform specializing in basketball equipment, apparel, and accessories. It serves primarily the Swiss market with official partnerships with major brands such as Mitchell & Ness, Spalding, Adidas, and Wilson. The website offers a broad catalog including NBA merchandise, basketball shoes, and lifestyle products. The business model focuses on retail sales with an emphasis on fast shipping and secure payment options. Technically, the site is built on Magento (OpenMage) with integration of Google Analytics, Google Tag Manager, and Google Ads for marketing and tracking. The site uses reCAPTCHA v3 to mitigate bot traffic and has implemented a consent management platform for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit privacy and terms of service pages are not found in the provided content, which is a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

Home | Hallo Bibel

hallobibel.ch

7

The website www.hallobibel.ch appears to be a small-scale informational or religious site hosted on the Wix platform. The content is minimal with no explicit business descriptions, contact information, or privacy policies visible in the provided HTML content. The technical infrastructure relies on Wix's Thunderbolt platform with standard polyfills and scripts, indicating a modern but basic technical setup. Security posture is moderate with no explicit security headers detected, but HTTPS is assumed due to Wix hosting. Privacy compliance is low due to absence of privacy and cookie policies. Overall, the site is functional but lacks comprehensive business and security information, limiting trust and credibility.

F

fragdoch.ch

fragdoch.ch

10

fragdoch.ch is a Swiss-based niche online platform focused on providing anonymous question and answer services related to love, sex, and relationships. The website offers users the ability to submit questions anonymously and receive answers, targeting a general adult audience interested in these topics. The business model appears to be a free service platform with potential community engagement. Technically, the site is built on WordPress using modern plugins such as Formidable Forms and Breakdance Builder, with integration of Google Tag Manager for analytics and event tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses anti-spam measures in forms but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is legitimate, well-structured, and serves its niche effectively, though improvements in security and privacy compliance are recommended.

S

StopArmut

stoparmut.ch

51

StopArmut is a Swiss non-profit organization dedicated to raising awareness about poverty and injustice within Christian communities. The website serves as an engagement platform offering educational courses, events, and resources to encourage social justice and mercy as expressions of Christian love. The organization targets churches, individual Christians, and socially conscious individuals. Technically, the website is built on WordPress using Elementor and WooCommerce, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes social media integration for broader outreach. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit security policies. Privacy compliance is limited due to the absence of clear privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

W

World Vision Schweiz und Liechtenstein

myworldvision.ch

47

World Vision Schweiz und Liechtenstein operates as a humanitarian non-profit organization focused on child welfare and development aid. The website myWorldVision.ch serves as a portal for donors and sponsors, providing login access, donation links, and contact information. The organization holds a reputable market position within Switzerland's NGO sector, targeting individuals and entities interested in supporting children and humanitarian causes. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Visual Website Optimizer. Security measures include HTTPS enforcement and RSA encryption for login forms, though explicit security policies and headers are lacking. Privacy compliance is indicated by cookie consent mechanisms and links to comprehensive privacy policies on the main domain. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

D

digris AG

digris.ch

51

digris AG is a Swiss-based telecommunications company specializing in digital radio broadcasting via dab+ technology. They operate a significant dab+ network in Switzerland with over 20 transmission areas and extend their services to France and the UK. Their offerings include network planning, audio encoding, multiplexing, and software defined radio development, positioning them as a key player in the digital radio broadcasting market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses modern web technologies including Vue.js, Google Analytics, and is hosted on DigitalOcean infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's credibility in the telecommunications sector.

D

DABCOM SA

dabcom.ch

58

DABCOM SA is a Swiss company operating a DAB+ digital radio network serving the French-speaking region of Switzerland. The company holds a concession to operate this network, targeting radio broadcasters and listeners transitioning from FM to digital radio. The website presents a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage implied, but lacks advanced security headers and updated libraries. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve compliance and security practices.

R

Romandie Médias SA

romandiemedias.ch

58

Romandie Médias SA is a Swiss company specializing in the transport and diffusion of DAB+ digital radio signals across the French-speaking region of Switzerland. Established in 2014, it operates a network of over 60 transmitters broadcasting 15 private radio stations, positioning itself as a key regional digital radio infrastructure provider. The website is professionally designed, mobile-optimized, and provides clear information about the company's services and coverage. Technically, the site uses WordPress CMS with Bootstrap framework, integrates Google Maps API for coverage visualization, and employs Google Analytics with IP anonymization for user tracking. Security posture is solid with HTTPS enforcement and standard security headers, although there is room for improvement in incident response and vulnerability disclosure transparency. Privacy compliance is good, featuring a cookie consent banner and a privacy policy page in French. Overall, the website reflects a trustworthy and credible business with a moderate to good digital maturity level.

Broadcast.ch is a specialized portal dedicated to providing uninterrupted reception information and support for SRG broadcasting programs in Switzerland. The website is developed by Intersim AG, a Swiss company, and serves as an information hub offering tips, technical insights, and news updates related to radio, television, and internet streaming services. The target audience includes general users interested in SRG program reception and related broadcasting technologies. The business model focuses on delivering informational content and technical support rather than direct commercial services. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. Usercentrics is employed for cookie consent management, indicating a commitment to privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant technical issues detected. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers such as Content Security Policy or HSTS, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy or terms of service pages. Overall, Broadcast.ch presents a professional and trustworthy online presence with a clear focus on broadcasting information. To enhance security and compliance posture, the site should publish comprehensive privacy and security policies, implement security headers, and provide clearer contact information. These improvements would strengthen user trust and regulatory compliance while maintaining the site's role as a reliable resource for SRG program reception.

D

DAB+

dabsy.ch

49

The website dabsy.ch/login is a minimal login page titled 'DAB+'. It appears to be a user authentication portal with no publicly available business description, contact information, or policies. The site uses modern JavaScript modules and the Quill rich text editor library, indicating some level of technical maturity. However, the lack of privacy, cookie, and terms of service policies, as well as absence of contact or security information, limits trust and compliance assessment. No WAF or blocking mechanisms were detected, and the content is accessible and safe for general audiences. The domain WHOIS is privacy protected, which restricts transparency about ownership and legitimacy. Overall, the site shows basic technical implementation but lacks critical security and compliance disclosures.

O

Opferberatung Zürich

onlineopferberatung.ch

47

The website www.onlineopferberatung.ch serves as an online platform for victim support and counseling services primarily in the canton of Zürich, Switzerland, with expanding cooperation across multiple Swiss cantons. It offers confidential, free, and anonymous chat and online counseling for victims of various forms of violence including domestic, sexual, and traffic-related incidents. The service is operated by Opferberatung Zürich, a non-profit organization under Stiftung Opferhilfe Zürich, and is supported by several cantonal and federal entities. The platform is designed to be accessible to adults, youth, children, and their relatives, emphasizing confidentiality and ease of access. Technically, the website employs a modern but straightforward technology stack including HTML5, CSS3, JavaScript with jQuery and Bootstrap 4 for responsive design. It includes a cookie consent mechanism compliant with EU cookie directives. The site is well-structured with clear navigation and good mobile optimization, although accessibility features are basic. No advanced CMS or analytics tools are detected, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly verified here) and implements cookie consent. However, no explicit security headers or incident response contacts are provided. The site does not expose sensitive data or vulnerable libraries. The WHOIS data is privacy protected, which is justified given the sensitive nature of the service. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy, professional, and well-aligned with its mission to provide victim support. It scores well on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended to further strengthen its posture.

U

UPC

upc.ch

73

UPC, now part of Sunrise, is a major telecommunications provider in Switzerland offering mobile, internet, and TV subscription services with 5G capabilities and bundled offers. The website is professionally designed and targets Swiss consumers seeking telecommunications services. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Adobe Marketing Cloud tools including Adobe Analytics and Target, alongside Google Analytics and Facebook Pixel for tracking and marketing. The security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and published security policies are absent. Privacy compliance is basic with no visible privacy or cookie policies in the provided content. Overall, the website is credible and trustworthy with consistent WHOIS data supporting legitimacy.

S

Swissmediacast

swissmediacast.ch

54

Swissmediacast is a Swiss media company specializing in broadcasting and media distribution services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure is standard for small to medium-sized media businesses, with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and safe but could improve in transparency and security practices.

D

DAB+

dabplus.ch

47

DAB+ is a Swiss digital radio information platform focused on educating and assisting the public and industry stakeholders in the transition from UKW to DAB+ broadcasting. The website offers comprehensive content including FAQs, tutorials, news, and a chatbot to support users. It holds a strong market position as a leading source for DAB+ information in Switzerland, targeting radio listeners, automotive users, media professionals, and garages. The platform is well-branded, professionally designed, and consistently maintained with a clear focus on user experience and accessibility. Technically, it is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools while maintaining GDPR compliance through a robust cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Contact information is available via email, phone, and a validated contact form. No critical issues or suspicious elements were detected, supporting a high trustworthiness rating.