Security Directory

Kaserne Basel is a prominent cultural venue in Switzerland specializing in contemporary theater, dance, performance, and popular music. The website serves as a platform to showcase upcoming events, artist residencies, workshops, and discourse series, targeting a broad audience interested in the arts. The business model revolves around event hosting, cultural programming, and community engagement, positioning Kaserne Basel as a key player in the Swiss cultural landscape. Technically, the website is built using modern web technologies including SvelteKit and leverages cloud storage and third-party services like MailerLite for newsletters and Google Analytics for minimal user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Hosting appears to be provided by Infomaniak, a reputable Swiss provider. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes several security headers. Google Analytics is configured with privacy-conscious settings such as IP anonymization and disabled ad personalization. However, the absence of explicit privacy and cookie policies, as well as lack of incident response contact information, represent compliance and transparency gaps. Overall, the website is professional and trustworthy with a solid security posture but would benefit from improved privacy compliance and clearer user consent mechanisms. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing a security.txt file, and enhancing accessibility and incident response transparency.

TouristDataShop AG operates as a specialized provider of digital tourism data and booking solutions in Switzerland, primarily focusing on the Holidu Smart Destination platform. The company targets destinations, cities, and accommodation providers, offering services including sales, support, shared services, and helpdesk functions. Their market position is that of a niche player within the Swiss tourism technology sector, leveraging partnerships and integrations to enhance their offerings. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a professional and trustworthy business presence with room for enhancements in security and privacy transparency.

D

Duesenberg

duesenberg.de

60

Duesenberg is a German manufacturer and retailer of premium guitars and related musical instruments, known for combining traditional craftsmanship with modern design and artist collaborations. The website positions the brand as a niche player targeting musicians and guitar enthusiasts globally, with a strong emphasis on quality and innovation. The digital infrastructure is built on modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and user experience. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and privacy-enhanced video embeds, though some security headers and incident response details are missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

Dissenter GmbH is a Swiss-based small technology company specializing in the creation of web applications, interactive exhibits, apps, and print design services. Founded in 2006 and currently led by experienced professionals, the company serves a diverse clientele including government entities and well-known corporations. Their service offerings span web design, app development, interactive POS solutions, and print media, positioning them as a niche provider in the digital and classical communication space. Technically, the website employs modern web technologies such as HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but missing explicit security headers and incident response information. Overall, the domain registration data aligns well with the company's claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

M

Musik Spiri

spiri-shop.ch

43

Musik Spiri is a specialized retail and rental business focused on musical instruments and accessories, operating primarily in Switzerland with physical stores in Winterthur and Meilen. The website serves as an e-commerce platform showcasing a wide range of products including harps, woodwind, brass instruments, percussion, and related accessories. The business targets musicians and music enthusiasts in the regional market, offering both sales and rental services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and reCAPTCHA, ensuring a functional and user-friendly experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of CAPTCHA, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with cookie consent and privacy policy available. Overall, the website is professional, trustworthy, and well-positioned for its market segment.

S

Spiri AG

spiri-trompete.ch

52

Spiri AG is a Swiss-based manufacturer specializing in custom and modular trumpets, leveraging a unique System Vario to cater to diverse musical needs. The company targets musicians and trumpet enthusiasts seeking personalized instruments, positioning itself as a niche player in the manufacturing sector. The website reflects a professional and consistent brand image with clear contact channels and product information. Technically, the site is built on the cm4all CMS platform, hosted by Hostpoint, and uses legacy JavaScript libraries alongside modern tools like Google Tag Manager. While the site is mobile-optimized and accessible, it lacks some modern security headers and explicit privacy compliance mechanisms. Security posture is solid with HTTPS and secure forms, but could be improved with additional headers and incident response information. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

F

FundCom AG

fundcom.ch

57

FundCom AG is a small, owner-managed marketing and fundraising agency based in Zurich, Switzerland, founded in 2018. The company specializes in marketing communication and fundraising consultancy, targeting non-profit organizations and institutions seeking effective communication and fundraising strategies. The website is professionally designed using WordPress with Elementor and optimized for performance with NitroPack, reflecting a modern digital infrastructure. The presence of structured data and social media links enhances their online credibility. Security posture is strong with HTTPS, security headers, and cookie consent via Cookiebot, although explicit privacy and terms of service policies are missing. Overall, the website and WHOIS data align well, indicating a legitimate and trustworthy business.

G

Gemeinde Muttenz

hagnau-schaenzli.ch

51

The website www.hagnau-schaenzli.ch serves as an official municipal government portal for the community of Muttenz, Switzerland, focusing on urban development projects in the Hagnau and Schänzli areas. It provides detailed information about cooperative neighborhood planning procedures and private construction concepts, targeting local residents and stakeholders interested in community development. The site is positioned as a trusted source for project updates and community engagement within the local government sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking and performance monitoring. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and professional design. However, it lacks some advanced accessibility features and explicit SEO enhancements beyond basic meta tags. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics, which is a positive privacy measure. Nonetheless, it lacks critical HTTP security headers and does not implement a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure policies are published, and no contact information is readily available on the homepage, which could hinder user trust and support. Overall, the website is a reliable and professional municipal information portal with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and transparent contact channels would strengthen its trustworthiness and regulatory adherence.

S

Swiss Public Services

publicjobs.ch

53

Publicjobs.ch is a specialized Swiss job portal focusing on socially meaningful jobs within the public administration sector and related organizations such as non-profits, healthcare, education, and energy. The platform offers job listings, employer profiles, and candidate account management primarily targeting job seekers interested in public sector employment in Switzerland. The website is well-branded and consistent, with a clear focus on its niche market. Technically, it uses a combination of Bootstrap, jQuery, and various third-party analytics and tracking services, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and secure login forms, but lacks some security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism despite extensive tracking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

The website 'Bewegen.Integrieren.Fördern' serves as a crowdfunding platform operated by the Niedersächsische Lotto-Sport-Stiftung, focusing on supporting sports projects within Lower Saxony, Germany. It provides a digital venue for local sports clubs and initiatives to raise funds, featuring project listings with progress tracking and community engagement features. The platform leverages modern web technologies including React and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Technically, the platform is built on a proprietary or custom CMS with integration of third-party services such as Google Analytics (with IP anonymization) and Eye-Able accessibility scripts. Hosting and DNS are managed via DomainControl (GoDaddy), and the site uses HTTPS with a good SSL configuration. However, there is a lack of visible HTTP security headers which could be improved to enhance security posture. From a security perspective, the site demonstrates good baseline practices including encrypted connections and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally maintained. Strategically, the platform is positioned as a regional niche crowdfunding service for non-profit sports projects, supported by a lottery sports foundation. It targets sports clubs and community members in Lower Saxony, providing a valuable service to facilitate funding and engagement. The business model is straightforward, relying on project hosting and donation facilitation. The site’s digital maturity is moderate with room for technical and security enhancements to further strengthen trust and compliance.

2

Application error: a client-side exception has occurred

24h-camions.com

54

The website www.24h-camions.com is positioned as the official portal for the 24 Heures Camions truck racing event scheduled for September 2026. It aims to provide event news, multimedia content, schedules, results, and ticketing information primarily targeting French-speaking motorsport enthusiasts. However, the current site is non-functional due to a client-side JavaScript error, severely impacting user experience and content accessibility. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted likely on Google Cloud Storage with CDN support, and integrates a consent management platform (Didomi) for cookie compliance. Despite these modern tools, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS and consent mechanisms in place but lacks visible security headers and comprehensive privacy documentation. Overall, the site requires urgent remediation of technical errors and improved transparency to enhance trust and usability.

F

Febetra

febetra.be

45

Febetra is a well-established Belgian federation representing transporters and logistics service providers, founded in 1996. The organization provides professional assistance, legal support, and information services to its members, positioning itself as a key player in the Belgian road transport sector. The website reflects this professional stature with comprehensive content, clear navigation, and multiple contact channels. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

E

Eurexpo Lyon | Lyon events

eurexpo.com

63

The website www.gl-lyonevents.com/fr/eurexpo-lyon serves as an informational platform focused on events at Eurexpo Lyon, a major event venue in Lyon, France. The site appears to target event organizers and attendees interested in Lyon-based events, providing venue details and event-related content. The business model centers on event promotion and support services, although explicit business details and company information are not disclosed on the site. Technically, the site is built on Drupal 10 CMS and integrates modern web technologies including YouTube APIs, lazy loading for images, Matomo analytics, and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, contributing to a moderate user experience and performance level. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site is functional but would benefit from enhanced security practices, clearer business disclosures, and compliance documentation to improve trust and credibility.

A

AFTRAL

aftral.com

64

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

M

Michelin

michelin.fr

60

Michelin is a globally recognized enterprise specializing in the manufacturing and retail of tires for automobiles, motorcycles, bicycles, and related mobility products. The website serves as a comprehensive platform offering product information, dealer locators, promotions, and expert advice targeted at a broad audience including individual consumers and professionals. The brand maintains a strong market position as a leader in the transportation sector with consistent branding and high-quality content. Technically, the website leverages modern frameworks such as Astro and Svelte, integrates advanced consent management tools like Didomi, and employs performance optimization via CDNs and asynchronous loading of scripts. Security posture is robust with HTTPS enforcement, comprehensive security headers, and GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent user experience and trustworthiness, suitable for an enterprise of Michelin's stature.

P

proHolzBW GmbH

proholzbw.de

62

proHolzBW GmbH is a regional organization dedicated to promoting the use of wood in Baden-Württemberg, Germany. It serves a broad audience including forestry operators, construction clients, architects, and planners by providing information, consulting, and support services. The organization is well-positioned in its niche with strong backing from EU and regional funding bodies, as evidenced by displayed logos and certifications. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on sustainability and wood industry promotion. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. No direct contact emails or phone numbers are publicly listed, relying instead on contact forms and social media channels. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

S

Schweizer Milchproduzenten SMP Genossenschaft

swissmilk.ch

66

Swissmilk is the official online platform of the Schweizer Milchproduzenten SMP Genossenschaft, a Swiss dairy cooperative focused on promoting Swiss milk and milk products. The website serves as an online cookbook featuring seasonal recipes, kitchen tips, healthy nutrition information, and competitions, targeting a general audience interested in Swiss dairy products. The cooperative holds a strong market position within Switzerland as a trusted promoter of local dairy. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Cloudinary for media and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

M

Meier AG

meier.ch

54

Meier AG is a specialized communication and web development agency based in Schaffhausen, Switzerland, with a history rooted in the predecessor agency SOBAG since 1999 and formally established as Meier AG in 2019. The company offers a comprehensive suite of services including consulting, web development, web design, communication and PR, social media management, and ongoing support. Positioned as a reliable and innovative partner, Meier AG targets a broad range of clients from startups to large enterprises within Switzerland. The website reflects a professional and consistent brand image with clear navigation and rich content, supporting its market position effectively. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and integrates modern technologies such as Google Analytics, Google Tag Manager, and Google Maps API. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and an explicit cookie consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, showing transparency and legitimacy. Overall, Meier AG presents a trustworthy and professional digital presence with solid technical infrastructure and privacy compliance. Strategic improvements in security policy publication and enhanced accessibility could further strengthen its posture.

F

firma.de

firma.de

65

firma.de is a German-based digital platform specializing in company formation and business services, targeting entrepreneurs and startups. The website offers a comprehensive suite of services including various legal forms of company formation, bookkeeping, payroll, tax consulting, and legal advice. With over 25,000 firm foundations supported, firma.de holds a strong market position as a trusted partner for business founders in Germany. The platform emphasizes ease of use, transparency, and expert support throughout the business lifecycle. Technically, the website leverages modern web technologies such as Google Tag Manager, Stripe for payments, and AWS Cloudfront for content delivery, ensuring fast and responsive user experience across devices. Security posture is good with HTTPS enforced and secure third-party integrations, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. Overall, firma.de presents a professional, trustworthy, and user-friendly platform with a solid business model and digital maturity.

F

Feratel Medien Technologien GmbH

feratel.de

67

Feratel Medien Technologien GmbH is a medium-sized technology company specializing in comprehensive tourism marketing and data management solutions. The company operates multiple country-specific domains, indicating a strong international presence in the tourism sector. Their business model focuses on providing B2B software and services tailored to tourism marketing, upselling, service, data strategies, communication, and interfaces. The website content is professionally presented, targeting tourism industry stakeholders and marketing professionals. Technically, the site is built on TYPO3 CMS, integrates Cookiebot for GDPR-compliant cookie management, and uses Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with detailed cookie policies and consent mechanisms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

F

Feratel

feratel.nl

64

Feratel is a medium-sized technology company specializing in B2B solutions across marketing, upselling, service, data strategy, communication, and interface integration. The company operates in multiple European countries with localized domains, indicating a strong regional presence. Their website is built on TYPO3 CMS, demonstrating a mature technical infrastructure with modern consent management via Cookiebot and analytics integration using Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence suitable for its business audience.

F

Feratel Medien Technologien AG

feratel.it

69

Feratel is a medium-sized technology company specializing in providing digital solutions primarily for the tourism and media sectors. Their offerings include marketing, up-selling, assistance, data strategy, communication, and interface development services. The company has an established market presence with a professional and consistent brand image. The website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The technical infrastructure is solid with good SSL configuration and security headers, ensuring a secure browsing experience for users. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the site lacks visible contact information and a terms of service page, which could be improved to enhance business credibility and user trust. Overall, the website reflects a mature digital presence aligned with business goals and regulatory requirements.

F

feratel media technologies AG

feratel.at

67

Feratel media technologies AG is a specialized provider of digital destination management and marketing solutions primarily serving the tourism industry. The company offers a comprehensive suite of services including marketing, upselling, service, data strategies, and communication tailored to enhance digital tourism experiences. Positioned as a key player in Austria and surrounding markets, Feratel targets tourism stakeholders and destination managers with B2B digital solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party tools such as Cookiebot and Google Tag Manager to manage consent and analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are absent. Overall, the site demonstrates good compliance with GDPR through detailed privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

B

Berner Generationenhaus

begh.ch

51

Berner Generationenhaus is a Swiss non-profit community and cultural center located in Bern, focused on fostering intergenerational dialogue and providing social services. The website presents a well-structured platform offering information about events, exhibitions, social institutions, and room rentals, targeting a broad audience across generations. The organization maintains a strong local presence with clear contact details and active social media channels. Technically, the site is built on Drupal 11 with modern libraries and analytics tools, showing good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal security policies. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and serves its community role effectively.

W

Webspatz Webdesign GmbH

webspatz.ch

51

Webspatz Webdesign GmbH is a small, specialized web design and SEO agency based in Zürich, Switzerland. The company focuses on creating modern, responsive WordPress websites, Shopify shops, and providing SEO optimization services including local SEO. Their market position is that of a boutique agency offering personalized and high-quality digital services to small and medium-sized businesses. The website demonstrates a strong digital maturity with a well-structured WordPress platform, modern technologies such as Bootstrap and Slider Revolution, and integration of analytics tools like Google Analytics and Microsoft Clarity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

E

Eventfactory

valley-eventfactory.ch

48

Eventfactory operates an exclusive event and conference location known as The Valley, situated in the historic Maggi-Areal in Kemptthal, Switzerland. The company targets corporate, private, and public event organizers, offering a range of event spaces with an industrial-modern ambiance. The website reflects a professional and consistent brand image with strong visual content and customer testimonials, positioning the business as a reputable venue provider in the hospitality sector. Technically, the website leverages modern marketing and analytics tools including Google Tag Manager, Google Analytics, HubSpot, and Google reCAPTCHA v3 for bot protection. It is built on the CMSBox 3.0 platform and integrates Google Maps for location display. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and includes bot mitigation measures but lacks visible security headers and published security policies. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms, which poses a compliance risk under GDPR. Contact information is clearly provided, but no contact forms or incident response contacts are found. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures, security hardening, and accessibility improvements to reduce risk and improve compliance.

S

Sportversicherungskasse

sportversicherungskasse.ch

57

The Sportversicherungskasse (SVK) is a specialized non-profit insurance provider serving active members of the Swiss Gymnastics Federation (STV) since 1919. It offers accident and liability insurance tailored to the needs of gymnasts and their clubs, emphasizing rapid financial and advisory support in case of accidents during STV activities. The website reflects a mature, well-established organization with a clear focus on its niche market within Switzerland. Technically, the website is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager and YouTube APIs for enhanced user engagement and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies and incident response contact information, which could be improved to enhance trust and compliance. No critical vulnerabilities or suspicious activities were detected. Overall, the SVK website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security transparency and incident response readiness are recommended to further strengthen its security posture and stakeholder confidence.

O

OCHSNER SPORT

ochsnersport.ch

67

OCHSNER SPORT is a prominent Swiss sports retail company operating a comprehensive e-commerce platform offering over 30,000 sports articles and top brands. The website targets sports enthusiasts in Switzerland, providing a broad range of sportswear and equipment with value-added services such as free shipping and free in-store returns. The business model is focused on online retail complemented by physical stores, positioning itself as a leading player in the Swiss sports retail market. Technically, the website leverages modern web technologies including Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and integrates marketing and analytics tools such as Google Tag Manager and Dynamic Yield. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. Cookie consent is managed via a consent manager, indicating some privacy compliance efforts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable security posture but with opportunities for enhancement. Overall, the website is professional and trustworthy with a strong business presence. However, it would benefit from publishing clear privacy and terms of service policies and implementing additional security headers to strengthen its security and compliance posture.

V

Verlagshaus24.com | Bücher, Magazine, Verlage

verlagshaus24.com

55

Verlagshaus24.com is a German-language e-commerce platform specializing in the sale of books, magazines, calendars, and subscription services. The website targets German-speaking readers and hobbyists interested in various thematic worlds such as travel, history, DIY, and more. The business operates primarily as an online retailer leveraging a Magento 2 infrastructure, integrating multiple marketing and tracking tools to optimize customer engagement and sales. The platform offers a broad catalog with clear navigation and thematic categorization, supporting a medium-sized retail operation in the publishing sector. Technically, the website is built on a modern Magento 2 CMS with extensive use of RequireJS, jQuery, and integrations such as Google Tag Manager, Facebook Pixel, Taboola, Hotjar, and GetResponse. The site is mobile-optimized and employs security measures including HTTPS and invisible reCAPTCHA on forms. However, explicit security headers are not fully implemented, and privacy policy documentation is not clearly accessible, which may impact compliance and user trust. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks visible security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which is a critical trust factor. No vulnerabilities or malicious content were detected in the accessible content, and the site does not contain adult or explicit material. Overall, Verlagshaus24.com presents as a professional and functional e-commerce platform with good content quality and marketing sophistication. The primary risks relate to incomplete domain registration transparency and privacy compliance documentation. Strategic improvements in security headers, privacy policy visibility, and domain registration clarity would enhance trust and compliance.

M

MVB GmbH

isni-service.de

59

MVB GmbH operates as an official ISNI agency providing services to uniquely identify authors and creators in the book trade, enhancing product visibility. The company holds a strong market position within the German media and publishing sector, offering key services such as ISNI search and registration, metadata management, and related book trade solutions. The website reflects a professional and consistent brand image targeting publishers, authors, and book trade professionals. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Tag Manager and CookieFirst for consent management. Hosting is managed via Anexia, indicated by the nameservers. The site is mobile optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy and professionally maintained with a high legitimacy score. Strategic improvements include implementing security headers, publishing a security policy, and adding a security.txt file to enhance transparency and incident response readiness.

A

all about FUNGI

allaboutfungi.net

45

all about FUNGI is a small German e-commerce business specializing in the sale of vital mushroom products such as Lions Mane, Cordyceps, and Reishi. The website is built on a modern WordPress platform using WooCommerce and Elementor, providing a professional and user-friendly shopping experience. The company appears to be well-positioned in a niche market focused on natural health supplements. Technically, the site uses common industry tools including Google Analytics, Klaviyo, and Borlabs Cookie for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with cookie consent mechanisms but no visible privacy policy or terms of service. Contact information is not readily available, which may impact user trust. Overall, the site is safe, well-branded, and functional, but could improve transparency and security practices.

H

Hawlik GmbH Pilzbrut

pilzbrut.de

53

Hawlik GmbH Pilzbrut operates an e-commerce website specializing in mushroom cultivation products, including mushroom spawn, cultivation kits, dried mushrooms, spices, and educational materials. The website targets consumers interested in home and garden mushroom cultivation, primarily in Germany. The business model is retail-focused with a niche market position supported by a well-structured online shop and product categorization. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Ads, and a consent management platform, hosted on Rackspeed infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, consent management implemented, and secure login forms, though some security headers and explicit policies are missing. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service pages. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation. No WAF or blocking mechanisms were detected, and no adult or questionable content is present.

S

Schinkels Brauerei

bier-moment.de

69

Schinkels Brauerei operates a regional e-commerce platform specializing in organic craft beers and related merchandise, targeting customers primarily in Germany. The business emphasizes regional and organic quality, offering a variety of beer styles and additional services such as brewery tours and event ticketing. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations for analytics and marketing. The digital infrastructure is robust, with good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are absent. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

T

Telefónica

telefonica.es

49

Telefónica is a leading telecommunications company in Spain, offering a broad range of telecom and digital services. The website reflects a mature and professional digital presence, targeting both general consumers and business customers. It emphasizes sustainability, talent, and innovation as key pillars of its business. The technical infrastructure is based on WordPress with modern tracking and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-maintained, and aligned with the company's established market position.

D

Deutscher Tennis Bund

mypadel.de

75

mypadel.de is an official platform dedicated to the sport of Padel in Germany, operated under the Deutscher Tennis Bund. It provides comprehensive information including news, club and coach directories, event details, and partner information, serving players, coaches, clubs, and partners. The website is professionally designed with consistent branding and clear navigation, targeting the German Padel community. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is strong with HTTPS enforced and secure form implementations, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with official federation backing and partner endorsements.

B

BrandShelter™

safebrands.com

10

BrandShelter™ is a specialized service provider focused on protecting brands and intellectual property through comprehensive domain management, monitoring, and enforcement solutions. As part of Team Internet PLC, a major player in domain management, BrandShelter leverages industry expertise and global reach to serve businesses and trademark owners worldwide. Their offerings include brand protection, domain registration, SSL certificates, DNS services, and legal enforcement support, positioning them as a trusted partner for safeguarding online brand assets. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot, Google Tag Manager, and Visual Website Optimizer, ensuring good performance, mobile optimization, and SEO readiness. The site employs multiple analytics and marketing tools with appropriate privacy and cookie policies, reflecting a mature digital infrastructure. From a security perspective, BrandShelter demonstrates strong practices such as HTTPS enforcement and ISO/IEC 27001 certification. However, the absence of visible security headers and a public incident response policy suggests room for improvement. The WHOIS data is unavailable or not found, which may be due to privacy protection or querying issues, but the website's professional presentation and association with Team Internet PLC mitigate concerns about legitimacy. Overall, BrandShelter presents a secure, professional, and trustworthy online presence with comprehensive brand protection services. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and clarifying WHOIS registration details to strengthen trust further.

D

Deutscher Tennis Bund (DTB)

tennis.de

11

tennis.de is the official digital platform for tennis in Germany, operated under the Deutscher Tennis Bund (DTB). It serves as a centralized hub for tennis players, clubs, fans, and stakeholders, offering services such as player profiles, tournament and league searches, training offers, news, and licensing for ranked players. The platform is well-positioned as the authoritative source for tennis-related activities in Germany, leveraging partnerships with major tennis equipment brands and regional tennis federations. Technically, the website is built on Adobe Experience Manager, hosted on Adobe's cloud infrastructure, and integrates modern JavaScript frameworks and advertising technologies. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS and secure form handling, though it lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, tennis.de is a professional, trustworthy, and comprehensive platform for the German tennis community.

C

ClubDesk

clubdesk.ch

11

ClubDesk is a Swiss-based SaaS provider offering an online club management software tailored for various types of associations including sports clubs, cultural groups, and fan clubs. The platform provides comprehensive modules such as member management, accounting, event calendars, and website creation, positioning itself as a leading solution with over 20,000 clubs using its services. The website is professionally designed, mobile-optimized, and offers extensive support resources including FAQs, tutorials, and a user forum. Technically, it leverages Contao CMS and modern JavaScript libraries, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed. Overall, ClubDesk demonstrates a mature digital presence with solid business credibility and trustworthy domain registration.

The website 'Natur & Freizeit' is a Swiss non-profit organization focused on promoting respect for wildlife during snow sports activities. It provides educational content, guidelines, and resources to protect wildlife in designated areas, supported by Swiss federal and cantonal authorities. The site targets outdoor enthusiasts and nature conservation supporters, positioning itself as a niche environmental advocacy platform within Switzerland. Technically, the website is built on the Contao CMS platform, utilizing common JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial, with a privacy policy likely located on the Impressum page but no explicit cookie consent found. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

W

World Sailing

sailing.org

10

World Sailing is the official international governing body for the sport of sailing, providing comprehensive information on sailors, international regattas, events, boat classes, member federations, and rankings across multiple sailing disciplines including fleet racing, match racing, para sailing, and e-sailing. The organization serves a global audience of sailing enthusiasts, athletes, and affiliated federations, positioning itself as the authoritative source for sailing governance and event information worldwide. The website reflects a medium-sized, professional non-profit entity with consistent branding and good content quality. Technically, the website employs modern web technologies such as Vue.js and is hosted on a CDN infrastructure (Amazon CloudFront), ensuring moderate to good performance and mobile optimization. The presence of Google Tag Manager indicates active analytics and marketing tracking, although privacy compliance measures such as cookie consent and privacy policies are not evident in the provided content. From a security perspective, the site enforces HTTPS and follows some best practices but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or suspicious elements were detected in the content. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature, and does not raise immediate concerns. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy compliance and security header implementation are recommended to enhance trust and regulatory adherence.

S

Stiftung Schweizer Sporthilfe

sporthilfe.ch

11

Stiftung Schweizer Sporthilfe is a well-established Swiss non-profit organization dedicated to financially supporting over 1,200 Swiss athletes, especially in youth, elite, and less commercially visible sports sectors. The website reflects a mature digital presence with strong branding, clear calls to action for donations and memberships, and a comprehensive content strategy highlighting their mission and impact. The organization maintains a reputable market position within Swiss sports promotion and athlete development.

I

Indiana Paddle & Surf

indiana-paddlesurf.ch

54

Indiana Paddle & Surf is a Swiss-based small retail company specializing in premium water sports equipment, including SUP boards, foil boards, paddles, wings, and surfboards. Founded in 2010, the company positions itself as an innovator in the water sports niche, targeting enthusiasts primarily in Switzerland and the EU. The website is built on Magento 2 with several WeltPixel extensions, integrating marketing and analytics tools such as Google Tag Manager and Klaviyo. The site is professionally designed with good navigation and mobile optimization, though it lacks visible privacy and cookie policies, which impacts compliance ratings. Security posture is solid with HTTPS enforced, but missing security headers and vulnerability disclosure information are areas for improvement. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is a functional and credible e-commerce platform with room to enhance privacy compliance and security best practices.

ペライチは日本を拠点とするホームページ作成ツールのSaaS企業で、専門知識不要で誰でも簡単に高品質なホームページやランディングページを作成できるサービスを提供しています。600種類以上のテンプレートやフォーム、決済、予約、メールマガジンなど多彩な機能を備え、個人事業主や中小企業、フリーランスを主なターゲットとしています。技術的にはNext.jsを利用したモダンなフロントエンドを持ち、AWSのDNSを利用してホスティングされており、Google AnalyticsやFacebook Pixel、Mixpanelなど多様なマーケティング・分析ツールを活用しています。セキュリティ面ではHTTPSが有効でドメインは安定的に管理されていますが、DNSSEC未設定やセキュリティヘッダーの欠如、プライバシーポリシーやクッキーポリシーの不備が見られます。全体として高品質で信頼性の高いサービスですが、プライバシーとセキュリティの強化が推奨されます。

G

Go-Ahead Nordic

go-aheadnordic.no

52

Go-Ahead Nordic operates as a regional train service provider in Norway, connecting major cities such as Oslo, Stavanger, and Kristiansand. The company is part of the larger Go-Ahead Group and focuses on delivering passenger rail services with an emphasis on travel information and customer support. The website serves as a portal for travelers to plan journeys, check train status, and access company news. Technically, the site is built on a modern React single-page application hosted on Microsoft Azure, integrating analytics and marketing tools such as Google Analytics, Bing Ads, and Telia ACE Web SDK. The site demonstrates good mobile optimization, accessibility, and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies would enhance trust. Overall, the domain registration aligns well with the business profile, indicating legitimacy and consistency. The site is safe for general audiences and does not contain any adult or questionable content.

Lavenham Leisure Ltd. operates a professional e-commerce website specializing in premium quilted jackets and waistcoats, manufactured in-house at their Suffolk factory. The company positions itself as a British factory brand with a focus on quality and craftsmanship, targeting men and women seeking high-quality outerwear. The website is built on the Shopify platform, leveraging modern technologies such as React, Google Analytics, Facebook Pixel, and OneTrust for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data raises concerns about domain legitimacy, suggesting the need for further verification. Overall, the site demonstrates strong business credibility and technical implementation with room for improvement in transparency and security documentation.

B

Bank Avera

bank-avera.ch

74

Bank Avera is a Swiss banking institution offering a broad range of financial services including accounts, credit cards, mortgages, loans, asset management, pension solutions, and e-banking. The website targets both private and corporate clients primarily in Switzerland, positioning itself as a regional bank with a focus on personalized banking solutions. The digital infrastructure supports online account opening and integrates modern web technologies such as Concrete CMS, Google Tag Manager, and Mapbox for location services. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and token-based form submissions, reflecting a mature security posture. However, the absence of explicit cookie consent and published security policies suggests areas for compliance improvement. Overall, the website is professional, trustworthy, and well-structured, supporting the bank's credibility and customer engagement.

A

Andermatt Sedrun Disentis

disentis-sedrun.ch

66

Andermatt Sedrun Disentis operates as a regional tourism destination website promoting the Disentis Sedrun area in Switzerland. The site targets tourists interested in mountain sports, cultural events, and leisure activities. The business model focuses on destination marketing and providing information and services related to tourism. The website is built on modern web technologies including Nuxt.js and integrates Google Analytics and Tag Manager for tracking. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is good with HTTPS and security headers implemented, but lacks visible privacy and cookie policies, which impacts compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact information. Strategic recommendations include adding comprehensive privacy and cookie policies, improving accessibility, and publishing security and incident response information.

V

Val Surses

valsurses.ch

66

Val Surses is a regional tourism website promoting winter sports, accommodations, and events in the Val Surses area of Switzerland, including Savognin and Bivio. The site targets tourists interested in skiing, ski tours, and local cultural events. The business model focuses on providing information and booking services to visitors, positioning itself as a key regional tourism facilitator. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as Swiper.js, and integrates Google Tag Manager and Fusedeck for analytics and tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

ペライチは日本市場向けに特化したホームページ作成ツールを提供する中規模テクノロジー企業であり、2013年創業の安定した事業基盤を持っています。600種類以上のテンプレートと多彩な機能を備え、専門知識不要で誰でも簡単に高品質なWebサイトを作成可能です。技術的にはAWSを基盤とし、Next.jsを含むモダンな技術スタックを活用し、Google AnalyticsやMixpanelなど複数の分析ツールを導入してデータドリブンな運営を行っています。セキュリティ面ではHTTPSを完全に実装し、ドメインの移管保護も設定されていますが、DNSSEC未導入やセキュリティポリシーの公開不足が改善点です。プライバシー面ではプライバシーポリシーは整備されているものの、クッキー同意メカニズムが未実装であり、GDPR対応は限定的です。全体として高品質で信頼性の高いサービスを提供しているものの、さらなるセキュリティ強化とプライバシー対応の充実が推奨されます。

H

Heureka Group a. s.

dendopravyzdarma.sk

67

Heureka Group a. s. operates a comprehensive e-commerce service platform primarily serving Slovakia and the Czech Republic. The company offers advertising solutions, data analytics, affiliate programs, and marketplace services tailored for e-shops and brands. Their blog and webinar content demonstrate active engagement with their target audience, focusing on e-commerce growth and marketing strategies. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Visual Website Optimizer, and Didomi, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and incident response contacts, which are recommended for improvement. The WHOIS data is privacy protected, a common practice for commercial entities, and the domain appears legitimate based on content and business consistency. Overall, the website presents a professional, trustworthy, and compliant digital presence with room for enhanced security transparency.