Security Directory

K

Kunsttage Basel

kunsttagebasel.ch

59

Kunsttage Basel is a well-established cultural event organizer focused on contemporary and modern art in Basel, Switzerland. The website showcases a comprehensive program of exhibitions, workshops, talks, and performances involving over 60 institutions. The event targets art enthusiasts and the local cultural community, providing rich content and multiple engagement channels including social media and newsletters. Technically, the site is built on modern frameworks such as Nuxt.js and integrates Mapbox for location services, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, though cookie consent and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve privacy compliance and incident response transparency.

L

LiveSurface

livesurface.com

64

The website 'LiveSurface' presents a professional front focused on product visualization and design tools, as indicated by the page title and styling. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or recent registration status. The technical infrastructure includes use of Google Tag Manager for analytics, but lacks visible security headers and privacy compliance documentation. No contact information or business details are provided, limiting trust and transparency. Overall, the site appears functional and visually coherent but lacks critical security and compliance elements.

A

Avacon AG

avacon-shop.de

66

Avacon AG operates the Avacon Shop, an e-commerce platform specializing in energy-related products and services including electromobility, photovoltaic systems, energy storage, and electrical installations. The website targets consumers and businesses in Germany seeking comprehensive energy solutions. The platform is built on the Shopware CMS and hosted by Hetzner, leveraging modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. The site features a professional design with good navigation and mobile optimization, supporting customer account management and product browsing. Security posture is adequate with HTTPS and secure forms, though lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

W

Worldsoft AG

worldsoft.info

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, they serve a broad business audience across Europe, positioning themselves as a reliable and professional provider. Their website reflects a mature digital presence with clear branding, extensive product offerings, and strong customer trust indicators such as high Google review ratings and multiple certifications. Technically, the website employs modern web technologies including progressive web app capabilities, custom CMS, and third-party widgets for enhanced user engagement. The site is well-optimized for mobile devices, fast loading, and SEO-friendly. However, some security best practices like explicit security headers and published incident response policies could be improved. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and professional, supporting business credibility. Overall, the website and business demonstrate a strong security posture and digital maturity, though there is room for improvement in formalizing security policies and enhancing transparency around vulnerability disclosures. The domain WHOIS data is privacy protected, which is typical for this business type and does not raise immediate concerns. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure information, and maintaining ongoing security audits to sustain trust and compliance.

K

Kniv-Web GmbH

kniv-web.ch

65

Kniv-Web GmbH is a Swiss-based digital agency specializing in web design, e-commerce solutions, SEO, and online marketing services. With over 25 years of experience, the company targets small and medium-sized businesses primarily in the March and Höfe districts of Switzerland. Their service offerings include professional website development, progressive web apps, online shops, branding, and video production, positioning them as a comprehensive digital partner for local businesses. Technically, the website leverages modern web technologies including PWA capabilities, Google Fonts, and integrates with analytics and cookie consent management tools. Hosting is provided by a Swiss company, Worldsoft AG, ensuring local infrastructure alignment. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence with strong business credibility. Strategic enhancements in security transparency and formal incident response processes would further strengthen their security posture and client trust.

W

Worldsoft AG

worldsoft.ch

68

Worldsoft AG is a well-established Swiss technology company specializing in comprehensive web project solutions including domain registration, website building, email marketing, online shops, CRM, and hosting services. With over 25 years of experience, the company targets businesses and professionals seeking integrated digital tools to enhance their online presence. Their market position is strengthened by strong customer satisfaction, certifications, and a broad product portfolio. Technically, the website demonstrates a modern and performant infrastructure using proprietary CMS technology, progressive web app features, and integration with third-party widgets for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for further strengthening the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the risk assessment is low with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing transparency around incident response to further build trust and resilience.

M

Messen.de

messen.de

53

Messen.de is a well-established online platform providing a comprehensive calendar and overview of trade fairs and exhibitions primarily in Germany, Austria, Switzerland, and the Netherlands. It serves exhibitors, visitors, event organizers, and service providers by offering detailed event information, ratings, and news updates. The platform positions itself as a key resource in the German-speaking trade fair market, leveraging structured data and a user-friendly interface to deliver relevant content without requiring login. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager, and uses a consent management platform to comply with GDPR regulations. Advertising and tracking are managed through reputable networks such as Criteo and Sourcepoint. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with privacy standards, making it a reliable resource for its target audience.

L

Landeshauptstadt Hannover

herrenhausen.de

52

The website 'Herrenhäuser Gärten - Hannover.de' serves as the official online presence for the Herrenhäuser Gardens and the Museum Schloss Herrenhausen, operated by the Landeshauptstadt Hannover (City of Hannover). It provides comprehensive visitor information, event details, group tours, and ticketing services, targeting tourists, families, and cultural enthusiasts. The site is well-positioned as a leading cultural and botanical attraction in Hannover, supported by consistent branding and professional content. Technically, the website employs modern web standards including HTML5, CSS3, SVG graphics, and JavaScript, with Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The CMS appears custom or proprietary, typical for government sites. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are recommended for enhanced GDPR compliance and transparency. Overall, the website is trustworthy, professionally maintained, and provides a safe user experience. Strategic improvements in privacy consent and security transparency would further strengthen its compliance and user trust.

H

Hannover Marketing und Tourismus GmbH

visit-hannover.com

61

Visit Hannover is an official tourism portal managed by Hannover Marketing und Tourismus GmbH, providing comprehensive information on hotels, sightseeing, events, congresses, and regional attractions in Hannover, Germany. The website targets tourists, business travelers, and event attendees, offering booking options and cultural highlights. Technically, the site uses modern JavaScript libraries, Matomo analytics, and Google advertising scripts, with a likely CMS based on eZ Platform. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and consent management, though explicit security headers and policies are missing. WHOIS data is unavailable, which slightly reduces trust but the website content and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR.

Z

zinnobergruen gmbh

bestarchitects.de

50

The website bestarchitects.de represents the 'best architects award', a prestigious European architecture award recognizing outstanding architectural achievements. The site serves architects, industry professionals, and enthusiasts by providing award results, news, and a bookshop for related publications. The business model centers on award organization and publication sales, positioning itself as a recognized authority in the European architecture sector. Technically, the site is built on depage CMS with modern web standards, includes responsive design, and uses Google Analytics for visitor insights. Security posture is solid with HTTPS, CSRF protection on forms, and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency on security and incident response. No blocking or WAF interference was detected, allowing full content access and analysis.

B

Beer Merz AG

beermerz.ch

61

Beer Merz AG is a small architecture firm based in Basel, Switzerland, specializing in architectural design, building renovations, and project competitions. The website presents a professional portfolio of projects primarily focused on real estate and urban development. The firm targets a general audience interested in architectural services within the Basel region. Technically, the website is built using React and modern JavaScript, with a custom CMS or framework. It shows moderate performance and good mobile optimization but lacks some accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. Cookie consent is implemented, and Google Analytics is used for tracking. However, no explicit contact information, terms of service, or security policies are present on the site. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

Truwant + Rodet + is a small architecture and design studio based in Basel, Switzerland, specializing in innovative architectural projects, competitions, research studios, and exhibitions. Their portfolio includes a variety of projects primarily in Switzerland with some international collaborations, emphasizing adaptive reuse, artistic installations, and academic design studios. The website reflects a professional and artistic brand image targeting architecture professionals, clients, and academic institutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and GSAP, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. The presence of Google Analytics without a configured tracking ID and absence of privacy compliance mechanisms indicate areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

8

820

820.ch

56

820 is a Zurich-based architecture studio specializing in innovative designs that integrate technology and environmental considerations. Led by Nicolas König and Lewis Horkulak, the studio emphasizes techno-environmental synergies and speculative spatial scenarios to foster deeper environmental integration. Their portfolio showcases a range of projects, competitions, and installations, highlighting a strong presence in the architectural design community with multiple awards and exhibitions. Technically, the website is built on the Cargo Collective platform, utilizing modern web standards including HTML5, CSS3, and JavaScript. The site is well-optimized for mobile devices and presents a professional, visually rich portfolio. However, there is room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, reducing attack surface. Nonetheless, it lacks important security headers and does not provide explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional architecture studio with a strong digital presence but would benefit from enhanced privacy, security, and compliance disclosures to align with best practices and regulatory requirements.

D

dorsa

dorsa.cc

55

Dorsa is a small, collaborative architecture practice based in Zurich, Switzerland, specializing in innovative architectural design, research, and installations. The website showcases a comprehensive portfolio of projects, academic collaborations, and exhibitions, positioning the collective as a niche player in the architecture and real estate sectors. The technical infrastructure is modern, leveraging Cargo CMS and standard web technologies, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and incident response transparency.

A

Andreas Gminder

myko-service.de

71

Myko-Service, operated by Andreas Gminder, is a small specialized e-commerce business focused on providing products and literature related to mycology and botany. The website targets a niche audience of scientists, hobby mycologists, and mushroom pickers, offering a broad range of items including microscopy supplies, truffle products, and creative materials. The business operates primarily in Germany and has been active since 2020. The website is multilingual, enhancing accessibility to an international audience. Technically, the website is built on the Epages e-commerce platform, utilizing modern JavaScript frameworks and is hosted on servers associated with rzone.de. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO is basic but functional, and the site includes essential legal pages and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks visible advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with GDPR-aligned policies and cookie consent. However, no explicit security or incident response policies are published. Overall, the website presents a trustworthy and professional front for a small niche retailer. Strategic improvements in security headers and explicit security policies could enhance trust and compliance further.

F

Felix Hampe, Pilzkurse und Kartierung

pilz-wissen.de

57

Felix Hampe operates a specialized educational and consulting business focused on mycology, offering mushroom courses, guided walks, consulting, and mapping services primarily in Hessen, Germany. The website presents a clear market position as a niche expert serving mushroom enthusiasts and nature lovers. The business model centers on direct service provision through seminars and personalized courses. Technically, the website is built on a modern stack with a CMS named MyWebsite, featuring responsive design and good SEO practices. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers are absent and could be improved. Overall, the website is professional, trustworthy, and safe for general audiences.

PilzCoach Badenweiler is a small, specialized business focused on mushroom coaching, education, and related product sales in the Badenweiler region of Germany. The company offers mushroom identification workshops, educational outreach to schools and kindergartens, and sells mushroom-related books and products. Their market position is niche and local, targeting mushroom enthusiasts and nature lovers. The website is built on the One.com Web Editor platform and hosted by One.com, featuring a moderate technical infrastructure with basic SEO and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is basic but present, with cookie consent and privacy policy pages available. Overall, the website is professional, trustworthy, and content-rich for its niche audience.

K

Kieler Pilzfreunde e.V.

kieler-pilzfreunde.de

56

Kieler Pilzfreunde e.V. is a small non-profit association based in Germany focused on mushroom education, conservation, and community engagement. The website provides information about mushroom identification, courses, exhibitions, and artistic projects involving fungi. It targets mushroom enthusiasts, nature lovers, and local community members including adults and children. The business model relies on memberships, donations, and event participation. Technically, the website is built using Incomedia WebSite X5 CMS with jQuery and standard web technologies. The site has moderate performance and basic mobile optimization. SEO is reasonably addressed with meta tags and structured navigation. However, there is no visible cookie consent mechanism or advanced accessibility features. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the provided data, which lowers its security posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie banner. No incident response or security policies are published. Overall, the website is functional and trustworthy for its non-profit educational purpose but would benefit from improved security practices, HTTPS verification, and enhanced privacy compliance to strengthen user trust and regulatory adherence.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.

W

Westermann Gruppe

hoelzel.at

75

Westermann Gruppe is a well-established educational publisher in Austria, offering a broad range of educational media including school books, digital learning platforms, and specialized services such as the OMNIA Schularbeitengenerator. The website targets educators, parents, students, and therapists, providing comprehensive digital and physical educational resources. The company maintains a consistent brand presence and integrates modern digital services to enhance user engagement and learning experiences. Technically, the website employs modern JavaScript frameworks, responsive design, and analytics tools, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

W

Westermann Gruppe

westermann.at

75

Westermann Gruppe is a well-established educational publisher in Austria, offering a broad range of educational media including schoolbooks, digital learning platforms, and educational services targeted primarily at educators, parents, and students. The website reflects a mature digital presence with integrated services such as digital libraries, learning media, and user account management. The company maintains a consistent brand identity and provides comprehensive customer support and engagement channels. Technically, the website employs modern web technologies, responsive design, and analytics tools while ensuring GDPR compliance through detailed privacy and cookie policies. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience.

W

Westermann Schweiz AG

westermann-schweiz.ch

72

Westermann Schweiz AG is a reputable Swiss educational publisher offering a wide range of print and digital learning materials across all school levels. Their portfolio includes well-known imprints such as SCHUBI, WSS, and KLV, targeting educators, parents, students, and therapists. The company maintains a strong market position within the Swiss education sector, supported by a professional website with comprehensive product information, customer services, and digital learning solutions. Technically, the website employs modern JavaScript frameworks, analytics tools, and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

The website 'Tajas Welt 2053' offers an interactive exploration experience themed around a futuristic world in the year 2053. It targets a general audience, including children, providing an educational and engaging map-based interface. The site is built using modern web technologies such as Nuxt.js and Leaflet.js, indicating a moderate level of digital maturity. However, the absence of business contact information, privacy policies, and security headers suggests limited compliance and security posture. The WHOIS data is incomplete due to TLD restrictions, which affects domain trustworthiness assessment. Overall, the site is functional and content-rich but lacks critical security and compliance elements.

Cowiki is a non-profit project affiliated with anstiftung and the Verbund offener Werkstätten, providing a structured knowledge base platform aimed at supporting open workshops and collaborative communities in Germany. The website serves as a community resource with links to partner organizations and open source code repositories, reflecting a niche market position focused on knowledge sharing and collaboration. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Umami Analytics for minimal user tracking, indicating a moderate level of digital maturity. The website is accessible, mobile-optimized, and presents a consistent brand image aligned with its non-profit mission. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

N

NDK Wurzen

leerstellen-lkl.de

47

The website leerstellen-lkl.de is a well-structured non-profit project focused on documenting cases of right-wing violence in the Leipzig district. It provides a digital memorial and educational resource through a web documentary, peer networks, and workshops primarily targeting youth and affected communities. The project is funded by reputable organizations and operated by NDK Wurzen, indicating a credible and mission-driven initiative. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

K

kollygujer

kollygujer.ch

48

kollygujer.ch is a website representing a small creative studio or agency based in Switzerland, focusing on showcasing creative work, offering a shop, and sharing content such as gossip and about pages. The business model appears to be service-oriented with an e-commerce component. The website uses basic web technologies including HTML, CSS, JavaScript, and the p5.js library for interactive graphics. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS was found in the provided data. Contact information is limited to a single email address and an Instagram social media link. The domain WHOIS is privacy protected, which is common and justified for small creative businesses. Overall, the website is functional but basic in design and security.

G

Get a Newsletter: Skapa och skicka snygga nyhetsbrev

getanewsletter.com

62

Get a Newsletter is a Swedish-language focused SaaS platform that enables users to create and send visually appealing newsletters. The website is built on WordPress using Elementor and integrates Cookiebot for cookie consent management and Google Tag Manager for analytics. The domain is well-established since 2007, indicating a mature presence in the newsletter service market. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for trust and compliance. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices but could improve security by enabling DNSSEC and adding security headers.

H

Hochschule für Gestaltung und Kunst FHNW

campusderkuenste.ch

57

Campus der Künste is an educational and cultural platform operated by the Hochschule für Gestaltung und Kunst FHNW, located in Basel, Switzerland. The website serves as a hub for arts and design education, cultural events, and collaboration among various creative institutions. It targets students, artists, and cultural professionals, positioning itself as a regional leader in arts education and cultural engagement. The business model focuses on providing educational services and fostering a vibrant cultural community. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js and includes polyfills for compatibility. It uses Matomo analytics for privacy-conscious user tracking. The site is moderately performant, mobile-optimized, and has a consistent branding approach. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional and trustworthy with a good security posture but could improve privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing accessibility.

E

Eisen Optikergeschäft AG

eisen-optiker.ch

49

Eisen Optikergeschäft AG is a small retail optical business based in Winterthur, Switzerland, specializing in eyewear, contact lenses, and related optical services. The website serves as an informational and promotional platform showcasing their products, team, and services, targeting local customers seeking quality optical solutions. The company maintains a consistent brand presence with clear contact details and social media engagement on Instagram and Facebook. Technically, the site is built on the Zeta Producer CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript with jQuery and FlexSlider for UI components. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies, indicating room for improvement in security posture and GDPR compliance. No cookie consent mechanism is present, and privacy policy coverage is basic. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ö

Öpfelchasper GmbH

oepfelchasper.ch

64

Öpfelchasper GmbH is a small Swiss company specializing in the delivery of organic fruits and vegetables to urban customers, including offices and private homes. Their business model centers on eco-friendly bicycle courier delivery, emphasizing bio-quality and CO2-neutral logistics. The company offers subscription services, gift vouchers, and extras to enhance customer experience. Their market position is that of a niche local provider with a strong sustainability focus. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted behind Cloudflare CDN, ensuring good performance and security. The website is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Contact information is transparent and consistent with WHOIS data, supporting business credibility. Overall, the website presents a trustworthy, professional, and user-friendly platform for its target audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and adding incident response contacts to further strengthen security posture.

C

Coucou

coucoumagazin.ch

53

Coucoumagazin.ch is an independent cultural and city magazine serving the residents of Winterthur, Switzerland. It provides critical, pointed descriptions and information about local culture, including a comprehensive online event calendar. The website is built on the WebZen CMS platform and uses standard web technologies including Google Analytics and Google Tag Manager for visitor tracking. The site is well-structured with good navigation and mobile optimization, targeting local cultural enthusiasts and residents. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing some security headers and no visible vulnerability disclosure or security contact information. Overall, the site is a legitimate, small media publication with a focus on local culture and events.

R

Revendo

revendo.ch

78

Revendo is a Swiss-based e-commerce platform specializing in the buying and selling of used and refurbished Apple devices such as iPhones, iPads, MacBooks, and iMacs. The website positions itself as a trusted reseller offering free shipping and warranty services, targeting consumers looking for affordable, quality used electronics. The platform leverages Shopify's robust infrastructure and integrates with trusted third-party services like Trustpilot for reviews and Klaviyo for marketing, indicating a mature digital presence. Technically, the site is well-implemented with modern frameworks, fast performance, and good mobile optimization. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates secure payment options including Apple Pay and Shopify Payments. Privacy compliance is strong with clear policies and cookie consent mechanisms. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Revendo presents a professional, trustworthy, and secure e-commerce experience with a solid market position in Switzerland.

V

Verein Horizonte

horizonte.ch

51

Verein Horizonte is a Swiss non-profit organization founded in 1990, dedicated to providing housing and employment opportunities for people with mental disabilities who face challenges accessing these services in the open market. The website serves as an informational platform primarily targeting individuals in need of social support and their networks. Technically, the site is built on WordPress using the Divi theme and WooCommerce plugin, with moderate performance and good mobile optimization. It employs Google Analytics for visitor tracking and includes a cookie consent mechanism, reflecting basic privacy compliance. Security posture is adequate with HTTPS enabled and some bot detection scripts, but lacks published security policies or incident response contacts. Overall, the domain registration data aligns well with the organization's claims, indicating legitimacy and trustworthiness.

W

Weyell Zipse

weyellzipse.ch

44

Weyell Zipse is a Swiss architecture studio specializing in architectural design, competitions, exhibitions, and academic guest critiques. The firm has a strong presence in Switzerland and Germany, with a portfolio including schools, residential buildings, and public spaces. Their market position is that of an established, award-winning practice engaged in both professional projects and academic discourse. Technically, the website is built on WordPress with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

S

Sparkasse Hannover

sparkasse-hannover.de

68

Sparkasse Hannover is a prominent regional bank serving Hannover and its surrounding region, offering a broad spectrum of financial services including online banking, investment products, insurance, real estate financing, and personalized advisory services. The website reflects a mature digital presence with comprehensive content tailored to private, corporate, and young customers. The bank holds recognized certifications and awards, underscoring its market leadership and customer service excellence. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

H

Hannoversche Volksbank eG

hannoversche-volksbank.de

63

Hannoversche Volksbank eG is a regional cooperative bank in Germany focused on providing local banking and financial services. The website reflects a professional and consistent brand presence, targeting local customers with a clear business model centered on cooperative banking. The digital infrastructure uses modern web technologies including Angular framework and integrates marketing consent management and analytics tools such as Adobe Launch and OneTrust. Security posture is solid with HTTPS enforced and monitoring scripts in place, though explicit security headers and published security policies are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the website is trustworthy and well-positioned in its market segment, with room for improvement in transparency and security documentation.

R

Roomcard

roomcard.com

64

Roomcard is a UK-based digital hotel gift card platform offering access to over one million hotels worldwide. The service allows users to purchase personalized hotel gift cards that can be delivered digitally at a chosen time, with options for custom greetings and wrapping. Positioned as a sophisticated and global solution, Roomcard targets consumers seeking flexible and unique gifting options in the hospitality sector. The platform is supported by its parent company, HotelMap, and leverages a modern technical infrastructure including AWS hosting and multiple third-party analytics and marketing tools. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNS security and security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, user-friendly, and trustworthy, with extensive content and clear business information.

Radpass Hannover is a small, community-focused organization dedicated to promoting cycling sports and organizing cycling events in Hannover, Germany. The website serves as a hub for event information, registration links, and showcases partner cycling clubs. Technically, the site is built on WordPress with modern plugins for gallery display, GDPR compliance, and lightweight analytics. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the site presents a trustworthy and professional image suitable for its local community audience.

D

DOSB New Media GmbH

sportdeutschland.tv

60

Sport Europe, operated by DOSB New Media GmbH, is a German-based media platform specializing in streaming and broadcasting European sports content. The website targets sports fans primarily in Europe, offering live and on-demand sports media services. The business is relatively young, founded in 2018, and operates with a medium-sized organizational footprint. The domain registration details align well with the company's German origin and media focus, indicating legitimacy and consistency in business operations. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap framework, and Font Awesome icons, ensuring a responsive and visually appealing user experience. Hosting is provided by IONOS SE, a reputable provider. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR regulations. No contact information or incident response details were found, limiting transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a professional and functional sports media platform with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

The website lsb-nds.net serves as the official portal for the LandesSportBund Niedersachsen, a regional sports association in Germany. It primarily facilitates members in applying for funding and accessing educational and administrative services related to sports. The site targets members of the LandesSportBund Niedersachsen and operates as a non-profit government-related entity. The business model focuses on providing digital access to sports-related funding and educational resources within the Niedersachsen region. Technically, the website employs basic web technologies including HTML5, CSS, and JavaScript, with a custom MD5-based challenge-response login mechanism. The infrastructure is moderate in performance and mobile optimization, with hosting linked to InterNetX GmbH and DNS servers under htp-tel.de. However, the site lacks modern security enhancements such as DNSSEC and security headers, and uses outdated cryptographic methods for authentication. From a security perspective, while the domain registration is consistent and legitimate, the use of MD5 hashing and absence of DNSSEC and security headers present vulnerabilities. No explicit privacy or cookie consent mechanisms are implemented, though a privacy policy is linked externally. The site is accessible without WAF or blocking mechanisms, but improvements in security posture and privacy compliance are recommended. Overall, the website is functional and serves its intended audience but would benefit from modernization of security practices, enhanced privacy compliance, and improved technical implementation to strengthen trust and resilience against threats.

A

active elements GmbH

active-elements.de

57

active elements GmbH is a well-established German agency specializing in web design, print design, SEO, and digital marketing services. With nearly two decades of experience, the company serves businesses and organizations seeking comprehensive digital and print marketing solutions. Their offerings include modern web development using TYPO3 and WordPress, creative print projects, SEO optimization, Google AdWords campaign management, and client training through e-learning and on-site sessions. The company emphasizes personalized service and full support, positioning itself as a trusted partner in the regional market around Hannover and Garbsen. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and CMS platforms TYPO3 and WordPress. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with privacy-conscious analytics via Matomo. Cookie consent and GDPR-compliant privacy policies are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, active elements GmbH presents a professional, trustworthy, and technically sound online presence. The company demonstrates good compliance with privacy regulations and offers a comprehensive suite of services for digital and print marketing. Strategic improvements in security transparency and incident response readiness would further strengthen their security posture.

S

Stafftastic GmbH

ausbildungsradar.de

56

Ausbildungsradar.de is a German educational platform focused on supporting companies and associations in retaining and recommending applicants within regional or association-based training programs. The platform is positioned as a niche service enhancing digital collaboration in apprenticeship and training sectors. The business is likely small-sized and operates primarily in Germany, with Stafftastic GmbH as the associated company. Technically, the website employs modern JavaScript technologies, Cookiebot for GDPR-compliant cookie management, and Plausible Analytics for privacy-friendly traffic analysis. Hosting is via Google Cloud DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with a comprehensive privacy policy linked on a partner domain. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

P

PING

ping.com

73

PING is a well-established golf equipment manufacturer and retailer with a mature online presence dating back to 1993. The company offers a broad range of golf clubs, bags, accessories, and apparel, targeting golf enthusiasts and players of all levels. Their business model combines e-commerce retail with custom fitting and trade-in services, positioning them strongly in the golf retail market. The website demonstrates a professional design, clear navigation, and comprehensive product information, supporting a positive user experience. Technically, the site leverages modern JavaScript libraries, analytics tools, and integrates with reputable payment gateways, hosted likely on Microsoft Azure with Kentico CMS. Security posture is solid with HTTPS, domain transfer protections, and consent management via Osano, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is trustworthy, privacy compliant, and well-optimized for performance and accessibility.

F

Fachagentur Nachwachsende Rohstoffe e.V.

bauerhubert.de

41

Bauer Hubert is an educational website operated by Fachagentur Nachwachsende Rohstoffe e.V., a German non-profit organization focused on renewable raw materials. The site targets children and parents by providing educational stories, games, comics, and audio plays to promote awareness of sustainable resources. The website is well-branded, consistent, and supported by official German government and agency partners, reflecting a strong market position in educational content for renewable energy and sustainability. Technically, the website is built on TYPO3 CMS with Foundation CSS and uses jQuery and Matomo analytics with cookies disabled, indicating a privacy-conscious approach. The site is hosted on servers associated with agenturserver domains, suggesting professional hosting. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, Bauer Hubert enforces HTTPS and disables cookies in analytics, which is positive. However, it lacks visible security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the website's claims, showing legitimacy and stable domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal security policies.

K

kolle.dev

kolle.dev

50

Kolle.dev is a small digital collaboration service based in Germany, focusing on supporting digital projects through project management, design, programming, and long-term support. The website presents a professional and clean design using modern technologies such as Nuxt.js and Tailwind CSS, indicating a good level of digital maturity. The site is fast, mobile-optimized, and provides clear information about its services and partner projects. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Overall, the risk is moderate with recommendations to improve privacy compliance and security headers to enhance trust and regulatory adherence.

S

Single: the music & video app for Shopify

single.xyz

68

Single.xyz is a specialized e-commerce platform integrated with Shopify, enabling musicians and content creators to sell music, videos, and memberships directly to their audience. Founded in 2020, the company positions itself as a niche player in the digital media sales market, leveraging Shopify's infrastructure to provide seamless sales and livestream capabilities. The website demonstrates a good level of technical maturity, utilizing modern JavaScript frameworks, Shopify Liquid templates, and multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Analytics. Hosting is managed via AWS infrastructure with DNS services from Amazon Route 53, ensuring reliable performance and scalability. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and some security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and functional but would benefit from enhanced privacy and security transparency.

J

Jensen + Heitz

jensenheitz.com

57

Jensen + Heitz is a creative media production company based in Switzerland, specializing in motion graphics and video content. Their website showcases various projects and collaborations with notable brands, indicating a niche presence in the creative media industry. The site is professionally designed using the Squarespace platform, offering good mobile responsiveness and a visually appealing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website presence. Security measures such as HTTPS and HSTS are properly implemented, but additional security headers and privacy compliance measures are lacking. Contact information is minimal, limited to an email address and Instagram profile, with no phone or physical address provided. Overall, the website demonstrates a moderate level of digital maturity and security posture but requires improvements in privacy compliance and domain registration transparency.

L

Laurids Jensen Photographer

lauridsjensen.com

48

Laurids Jensen operates a professional photography portfolio website showcasing editorial, commissioned, and moving image works. The business is positioned as a niche creative service provider in the media industry, targeting clients and collaborators in the art and editorial sectors. The website content is well-structured and visually oriented to highlight the photographer's work, with a consistent branding approach and good user experience. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted by cyon.ch. It employs Google Analytics and Google Tag Manager for visitor tracking but lacks advanced CMS or frameworks. The site is mobile optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, and no incident response contacts are provided, indicating gaps in compliance and security readiness. The use of tracking scripts without visible consent mechanisms also raises privacy concerns. Overall, the website is a legitimate, small-scale professional portfolio with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance trust and reduce risk.

A

Alena Stählin

alenastaehlin.ch

61

Alena Stählin is a Swiss graphic designer operating a small design studio specializing in publications, branding, posters, exhibition design, and web design. The business targets clients primarily in the cultural, educational, and artistic sectors, including museums, schools, institutions, and individual professionals. The website presents a professional portfolio with clear contact information and showcases multiple awards and notable clients, indicating a reputable market position within its niche. Technically, the website is built using modern web technologies, specifically the SvelteKit framework, and demonstrates good mobile optimization and user experience. However, there is a lack of visible security headers, privacy policies, and cookie consent mechanisms, which indicates room for improvement in compliance and security posture. From a security perspective, the site uses HTTPS (implied by the URL), but no additional security policies or incident response contacts are provided. No forms or data collection mechanisms were detected, reducing immediate data protection risks. The absence of privacy and cookie policies, however, may pose compliance risks under GDPR or similar regulations. Overall, the website is professional and trustworthy in terms of business credibility and content quality but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.