High-risk security reports

E

Euromontana

euromontana.org

48

Euromontana is a European multi-stakeholder network dedicated to sustainable development and improving quality of life in mountain areas. It serves as a recognized voice for European mountain communities, providing policy advocacy, networking, research promotion, and event organization. The website reflects a professional and consistent brand image targeting policymakers, researchers, and local stakeholders in mountain regions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some security headers and formal security policies. Privacy compliance is partially met with a privacy policy but no cookie consent mechanism. WHOIS data is unavailable, limiting domain trust analysis, but the site content and presentation suggest legitimacy. Overall, the site is well-maintained, informative, and trustworthy for its audience.

E

engage.ch

engage.ch

49

engage.ch is an online platform dedicated to enabling youth participation in political and social issues within Switzerland. It offers a user-friendly interface for young people to submit their concerns and ideas, facilitating engagement at municipal, cantonal, and national levels. The platform is closely affiliated with the Dachverband Schweizer Jugendparlamente (DSJ), which supports its credibility and mission. The website is multilingual, primarily in German, and provides news, campaigns, and contact options to its users. Technically, the site is built on Drupal 8 CMS, leveraging modern web technologies such as Google Fonts, Plausible Analytics for privacy-focused tracking, and EU Cookie Compliance modules. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security is well-handled with HTTPS enforced and spam traps in forms, although explicit security policies and incident response contacts are not published. Overall, engage.ch presents a trustworthy and professional digital presence with strong privacy compliance and user engagement features. It serves a niche audience effectively, with clear business and social objectives aligned with youth civic participation in Switzerland.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

M

mybuxi AG

mybuxi.ch

49

mybuxi AG operates a sustainable on-demand driving service primarily targeting rural areas in Switzerland. The company leverages a mobile app and web platform to provide flexible regional transport solutions, positioning itself as a mobility startup focused on ecological and community-oriented transport. The website reflects a professional and consistent brand image with clear navigation and multilingual support, enhancing accessibility for diverse users. Technically, the site is built on WordPress with Elementor and uses modern libraries such as Swiper.js and Bootstrap, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is comprehensive, including multiple regional emails and a customer hotline, supporting business credibility. Overall, the website is trustworthy and well-positioned but could improve in privacy and security transparency.

InnovationsTransfer Zentralschweiz is a regional Swiss organization focused on promoting innovation and supporting startups, SMEs, and private individuals in Central Switzerland. Their services include startup acceleration, innovation coaching, digital financing, patent and trademark consulting, and funding programs. The website is built on WordPress using the Breakdance theme and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. While the site uses HTTPS and has a cookie consent mechanism, the specific requested page is missing (404 error), and no privacy policy or terms of service are found, which impacts compliance and user trust. Security headers are not detected, indicating room for improvement in security posture.

I

INOS – Innovationsförderung für Ostschweizer KMU

inos.swiss

45

INOS is a Swiss innovation support organization focused on fostering innovation in small and medium-sized enterprises (SMEs) in Eastern Switzerland. Affiliated with the University of St. Gallen, INOS offers professional innovation coaching and platforms for cross-company networking and resource pooling. The website is well-structured, primarily in German, and targets regional SMEs seeking innovation support. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, indicating a mature digital infrastructure. However, the domain is currently expired but pending renewal, which poses a risk to service continuity. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but requires improvements in security and privacy transparency.

B

Bundesamt für Statistik (BFS)

dashboard-agglomeration.ch

43

The website dashboard-agglomeration.ch is an official Swiss government portal managed by the Bundesamt für Statistik (BFS), providing detailed statistical data and visualizations about the 52 agglomerations in Switzerland. It serves researchers, policymakers, urban planners, and the general public interested in Swiss urban development and demographic statistics. The site uses modern web technologies including JavaScript, TailwindCSS, and a specialized visualization library (dynvis.js) to deliver interactive content. The technical infrastructure appears solid with good mobile optimization and accessibility, though performance is moderate and SEO optimization is basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and published security policies. Privacy compliance is low due to absence of privacy and cookie policies or consent mechanisms. Business credibility is high given the official government affiliation and consistent domain registration data. Overall, the site is trustworthy and safe for general audiences but could improve in privacy and security transparency.

MADixel GmbH operates a specialized tracking tool designed to support sales teams by identifying companies visiting their websites and providing insights into visitor interests. The company positions itself as a niche provider in the technology sector focused on GDPR-compliant marketing analytics solutions. The website presents a professional and consistent brand image with clear contact details and a downloadable data protection report, indicating a focus on privacy and compliance. Technically, the site uses a modern frontend stack including Bootstrap and jQuery, with good mobile optimization and moderate performance. However, the absence of visible security headers and privacy/cookie policies suggests room for improvement in security and compliance transparency. No blocking or WAF mechanisms were detected, allowing full content access and analysis.

1

10dencehispahard, S.L.

eumiesawards.com

49

EUmies Awards is a specialized platform dedicated to promoting excellence in European architecture through awards, exhibitions, and related cultural events. The organization operates primarily in Spain and targets architecture professionals, emerging talents, and cultural institutions. The website serves as a comprehensive resource for award procedures, jury information, and event dissemination. Technically, the site is built on WordPress with modern technologies such as Vue.js and D3.js, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements like DNSSEC and security headers are recommended. Overall, the site demonstrates a professional and trustworthy presence with strong compliance to privacy regulations.

A

Architecture Foundation

architecturefoundation.org.uk

46

The Architecture Foundation is a well-established UK-based non-profit organization dedicated to uniting the global architecture community through events, podcasts, tours, and publications. Founded in 1991, it operates as an independent charity with a strong presence in the architecture sector, supported by numerous reputable partners and supporters. The website reflects this mission with rich content targeting architects, clients, and professionals interested in the built environment. Technically, the website employs a modern yet straightforward technology stack including jQuery, Bootstrap, and Google reCAPTCHA Enterprise for form security. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, it lacks some advanced security headers and formal privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and spam protection on forms. There are no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's history. Overall, the Architecture Foundation's website is professional, trustworthy, and content-rich, though it would benefit from enhanced privacy compliance and additional security headers to further strengthen its posture.

N

New Generations

newgenerationsweb.com

36

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

H

Hochparterre

hochparterre.ch

46

Hochparterre is a Swiss media platform specializing in architecture, planning, and design news, publications, and events. It serves professionals and enthusiasts in the Swiss architecture and design community, offering news articles, event information, subscription services, and an online shop. The website is built on TYPO3 CMS with modern frontend technologies and integrates multiple advertising and tracking services. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is good with HTTPS and secure form practices, but lacks visible privacy and cookie policies, as well as explicit security and incident response policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is a reputable media outlet with room for improvement in privacy compliance and security transparency.

S

Stellare Agency

stellare.global

49

Stellare Agency is a small technology-focused digital agency based in St. Moritz, Switzerland, specializing in web development, SEO, and Webflow solutions. The website presents a professional but minimal online presence targeting local businesses or individuals seeking digital services in the Engadin region. The technical infrastructure is built on the Webflow platform with jQuery, indicating a modern but straightforward tech stack. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional but lacks comprehensive security and privacy features, limiting its credibility and compliance standing.

C

Complemedia AG

comple-media.ch

44

Complemedia AG is a Swiss-based full-service agency specializing in golf-related advertising and solutions, serving golf courses and brands across Switzerland and neighboring countries. The company offers a comprehensive range of services including consulting, marketing, installation, and maintenance, supported by a multinational team. Their market position is solid with partnerships in five countries and a recognized Swiss PGA recommendation. Technically, the website is built on a modern WordPress platform using Elementor and optimized with Autoptimize, featuring Google reCAPTCHA for form security. However, some security best practices like security headers and cookie consent mechanisms are missing. Overall, the site is professional, well-structured, and trustworthy, with clear contact information and good SEO practices. Strategic improvements in privacy compliance and security posture would enhance their digital maturity and trustworthiness.

G

graubünden Bike

graubuendenbike.org

47

Graubünden Bike is a regional project initiative focused on advancing bike tourism and sustainable mobility in the Graubünden region of Switzerland. The project is positioned as a pioneer in the bike tourism sector, aiming to enhance the region's attractiveness through development of bike offerings, training, and community engagement. The website serves as an information hub with event calendars, news, and project documentation, targeting cyclists, local stakeholders, and tourists. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Matomo analytics, providing a good user experience with mobile optimization and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms. The domain registration is recent but consistent with the project timeline and shows no suspicious patterns. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

B

Burgergemeinde Bern

bgbern.ch

48

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of community services including social welfare, environmental stewardship, cultural activities, urban development, sports, education, and scientific engagement. The website reflects its role as a public sector organization with clear communication and community outreach. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of Matomo analytics indicates a privacy-conscious approach to user data collection. Security posture is solid with HTTPS enforced and CSRF protections in place, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its governmental mission.

4

41 Campus gGmbH

forty.one

46

FORTYONE is a niche media platform operated by 41 Campus gGmbH, focusing on the charitable activities and stories related to Dirk Nowitzki and his foundations in Germany and the USA. The website serves as a communication and donation platform, supported by sponsors such as ING. The content is professionally presented with a focus on storytelling and foundation updates, targeting a general audience interested in sports philanthropy and Dirk Nowitzki's legacy. Technically, the site is built on WordPress with modern plugins for donations and GDPR compliance, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though improvements like DNSSEC and CSP headers are recommended. Privacy compliance is well addressed with clear cookie consent and policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

T

Tobias Erlach

tobiaserlach.com

47

Tobias Erlach operates a professional web presence focused on providing conversion-focused web design and marketing integration services under the brand The Web Accelerator. The website positions Tobias as a creative business consultant and designer, targeting businesses seeking to improve their online sales through effective website design. The site includes a portfolio, newsletter, and YouTube channel to engage the audience and share insights. Technically, the website is built on WordPress with a modern theme and uses Cloudflare DNS and Google Analytics for tracking. The site is well-optimized for SEO and mobile devices, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled, though DNSSEC is not enabled and security headers are not detected, representing areas for improvement. No explicit security or incident response policies are published, and no contact emails or phone numbers are listed, relying on a contact form instead. Overall, the website is professional, trustworthy, and safe for general audiences.

B

bewegt-sein.ch Praxis für Osteopathie | Jacqueline Labèr

bewegt-sein.ch

42

bewegt-sein.ch is a small healthcare practice specializing in osteopathy and physiotherapy services located in Bubikon, Switzerland. The website provides detailed information about the practitioner Jacqueline Labèr, her qualifications, and the range of osteopathic treatments offered, targeting local clients seeking holistic healthcare solutions. The business operates a private practice with a focus on musculoskeletal and pediatric conditions. Technically, the website uses a traditional web stack with jQuery, Google Maps API, and several UI libraries such as Owl Carousel and Magnific Popup. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content quality. However, there is no detected CMS or advanced platform integration. From a security perspective, the website uses HTTPS but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not use analytics or tracking scripts, indicating minimal user tracking. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

T

Homeland

thisishomeland.com

49

The website 'Homeland' is a small business or brand site created in 2020, built using the Framer platform. It presents minimal content focused on marketing slogans emphasizing customer satisfaction but lacks detailed business descriptions, contact information, or legal policies. The technical infrastructure relies on Framer hosting and content delivery, with basic HTTPS security but missing advanced DNS and HTTP security features. No privacy or cookie policies are present, indicating low compliance with data protection regulations. The absence of contact details and security disclosures limits trust and business credibility. Overall, the site is functional but minimalistic, suitable for a startup or brand awareness but requires enhancements for professional and secure online presence.

S

S AM Schweizerisches Architekturmuseum

sam-basel.org

49

S AM Schweizerisches Architekturmuseum is a Swiss cultural institution dedicated to architecture, located in Basel. The website provides information about exhibitions, events, educational programs, and a shop, targeting architecture enthusiasts and the general public interested in cultural heritage. The museum maintains a professional online presence with multilingual support and active social media channels. Technically, the site is built on Drupal 7 with modern JavaScript libraries and uses Cookiebot for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and CMS updates. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Studio Céline Baumann

studiocelinebaumann.com

46

Studio Céline Baumann is a specialized landscape architecture studio based in Switzerland, active since at least 2018. The website serves as a portfolio and news platform showcasing their projects, awards, publications, and exhibitions. The studio targets professionals and enthusiasts in landscape architecture and urban planning, offering design, consultancy, and academic teaching services. Technically, the website is built on WordPress using the FoundationPress theme, with modern frontend libraries like jQuery and FlexSlider. The site is moderately performant and mobile-optimized but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. No contact emails or phone numbers are explicitly provided, limiting direct communication. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

B

Bund der Selbständigen Bayern

bds-bayern.de

45

Bund der Selbständigen Bayern is a well-established membership association founded in 1874, representing the interests of self-employed individuals and the independent middle class in Bavaria, Germany. The organization operates as a non-partisan, cross-industry network providing advocacy, legal advice, educational programs, and member services. Their market position is strong regionally with a history of over 150 years and a comprehensive service offering including academies, competence centers, and event organization. The website reflects a professional and consistent brand image targeting self-employed professionals and SMEs in Bavaria.

O

ostseepilze.de

ostseepilze.de

47

The website ostseepilze.de is currently inaccessible, returning a 403 Forbidden error with a generic Jimdo error page. The site appears to be hosted on the Jimdo platform, a DIY website builder service, but contains no business-specific content, contact information, or policies. The lack of accessible content and security features severely limits the ability to assess the business or security posture. Technically, the site uses Jimdo's hosting and CSS assets but lacks HTTPS confirmation and security headers. No analytics or tracking scripts are present, indicating minimal digital maturity. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be inactive or under construction, resulting in a low trust and credibility score.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.

M

MOBILEE

mobilee-plattform.de

43

MOBILEE is a German non-profit platform dedicated to social work through sport and movement. It serves as a networking and resource hub for initiatives, organizations, and individuals working at the intersection of social work and sports. The platform is supported by notable foundations and sport organizations, enhancing its credibility and reach within its niche. The website is professionally designed using WordPress and Elementor, featuring rich content, event information, and partner links. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

A

Afeefa - Digitaler Zusammenhalt e.V.

afeefa.de

48

Afeefa - Digitaler Zusammenhalt e.V. operates a non-profit digital platform focused on social integration and community engagement in Leipzig, Germany. The website provides multilingual access to information about social services, volunteer opportunities, and local offers for people with diverse backgrounds. The platform positions itself as a local community hub fostering inclusion and participation. Technically, the website uses modern frontend technologies such as Vue.js and MapLibre GL for interactive maps, indicating a moderate level of digital maturity. However, the site lacks visible security headers and explicit privacy or cookie consent mechanisms, which are areas for improvement. Social media presence on Instagram and Facebook supports community outreach. Overall, the security posture is basic with no critical vulnerabilities detected but improvements are recommended to enhance compliance and trust. The domain registration data is consistent and supports the legitimacy of the website. Strategic recommendations include implementing security headers, cookie consent, and clearer contact information to improve user trust and regulatory compliance.

N

NDK Wurzen

leerstellen-lkl.de

47

The website leerstellen-lkl.de is a well-structured non-profit project focused on documenting cases of right-wing violence in the Leipzig district. It provides a digital memorial and educational resource through a web documentary, peer networks, and workshops primarily targeting youth and affected communities. The project is funded by reputable organizations and operated by NDK Wurzen, indicating a credible and mission-driven initiative. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

K

kollygujer

kollygujer.ch

48

kollygujer.ch is a website representing a small creative studio or agency based in Switzerland, focusing on showcasing creative work, offering a shop, and sharing content such as gossip and about pages. The business model appears to be service-oriented with an e-commerce component. The website uses basic web technologies including HTML, CSS, JavaScript, and the p5.js library for interactive graphics. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS was found in the provided data. Contact information is limited to a single email address and an Instagram social media link. The domain WHOIS is privacy protected, which is common and justified for small creative businesses. Overall, the website is functional but basic in design and security.

T

CMS und Webseiten Lösung speziell für Tourismus - TourismusWeb

tourismusweb.site

48

TourismusWeb is a specialized modular open-source CMS and website solution tailored specifically for the tourism industry. It offers a flexible content management system with integrated content hubs, image databases, AI tools, and various integrations designed to meet the needs of tourism organizations, destinations, associations, and related sectors. The platform leverages the Contao Open Source CMS and is supported by modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The website presents a professional and consistent brand image, targeting primarily tourism-related businesses in Denmark and possibly broader European markets.

T

TSO AG

digital.fitness

42

Digital.Fitness® is a Swiss-based software solution focused on providing digital maturity assessments and benchmarking tools for businesses. Operated by TSO AG, the platform offers a modular SaaS product that includes a digital fitness app, a 7-C model framework developed in partnership with Fachhochschule Westschweiz (HES-SO), and a network membership for consultants, system providers, and educational institutions. The website targets business consultants, system providers, and educational entities seeking to evaluate and improve digital transformation levels within companies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics tools like Google Analytics and Plausible. The site is mobile-optimized and well-structured, providing a professional user experience.

E

Eisen Optikergeschäft AG

eisen-optiker.ch

49

Eisen Optikergeschäft AG is a small retail optical business based in Winterthur, Switzerland, specializing in eyewear, contact lenses, and related optical services. The website serves as an informational and promotional platform showcasing their products, team, and services, targeting local customers seeking quality optical solutions. The company maintains a consistent brand presence with clear contact details and social media engagement on Instagram and Facebook. Technically, the site is built on the Zeta Producer CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript with jQuery and FlexSlider for UI components. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies, indicating room for improvement in security posture and GDPR compliance. No cookie consent mechanism is present, and privacy policy coverage is basic. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Radio Stadtfilter

stadtfilter.ch

46

Radio Stadtfilter is a community-focused radio station based in Winterthur, Switzerland, providing live streaming, archived shows, and a variety of cultural and music programming. The website serves as a hub for listeners to access streams, program schedules, and community engagement features. The business operates as a small non-profit entity with a clear local audience and a mission to promote local culture through media. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site is trustworthy and professionally maintained, with no critical security issues detected.

H

Hans Späti AG Wohnkultur

spaetiwohnkultur.ch

41

Hans Späti AG Wohnkultur operates a retail business specializing in design furniture, lighting, and textiles with physical showrooms in Wil and Winterthur, Switzerland. The company offers consulting services in planning, furnishing, and interior architecture, targeting design-conscious consumers and professionals. The website reflects a professional retail presence with good design and navigation but lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, with Google Analytics for tracking. Security posture is adequate with HTTPS enabled but missing important security headers and privacy policies. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

S

scherrer

designmoebel.ch

45

The website designmoebel.ch represents 'scherrer', a small retail business specializing in high-end design furniture and interior planning services in Winterthur, Zürich, and the Eastern Switzerland region. The company partners with renowned furniture brands such as USM, Vitra, Cassina, and Alias, positioning itself as a niche player in the Swiss design furniture market. The website content is primarily in German and targets consumers and businesses interested in premium furniture solutions. Technically, the site is built on the cm4all CMS platform hosted by Hostpoint, utilizing older JavaScript libraries and standard web technologies. While the site offers good content quality and clear navigation, it lacks modern security headers and privacy compliance elements such as a privacy policy or terms of service. The cookie policy is present but lacks an explicit consent mechanism. Security posture is moderate with room for improvement, especially in updating libraries and implementing security best practices. Overall, the site is legitimate and professional but would benefit from enhanced privacy and security measures.

W

Weyell Zipse

weyellzipse.ch

44

Weyell Zipse is a Swiss architecture studio specializing in architectural design, competitions, exhibitions, and academic guest critiques. The firm has a strong presence in Switzerland and Germany, with a portfolio including schools, residential buildings, and public spaces. Their market position is that of an established, award-winning practice engaged in both professional projects and academic discourse. Technically, the website is built on WordPress with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

HANSEPILZ is a small local business specializing in mushroom consulting and educational mushroom walks primarily serving the Northern Germany region including Hamburg, Schleswig-Holstein, and Niedersachsen. The website also showcases mushroom photography, appealing to enthusiasts and learners interested in mycology. The business maintains a niche market position with a focus on education and community engagement, supported by media appearances and active social media channels on Instagram and Facebook. Technically, the website is built on WordPress using the Twenty Seventeen theme, with standard plugins such as Contact Form 7 and CleanTalk for spam protection. Hosting is provided by 1blu, as indicated by the nameservers. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and anti-spam measures in place, but lacks important security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features to improve compliance and user trust.

D

Deutscher Olympischer Sportbund e.V.

sportdeutschland.de

44

Sportdeutschland is the official digital platform of the Deutscher Olympischer Sportbund e.V., Germany's leading sports organization. It promotes sports participation nationwide, offering digital tools such as an interactive sports club map, a club app, and website services tailored for sports clubs and associations. The platform supports Olympic and Paralympic initiatives and targets sports enthusiasts, clubs, and volunteers across Germany. Technically, the website is built on TYPO3 CMS with modern front-end libraries and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the site is trustworthy and authoritative in its domain.

B

BOTAX Steuerberatungsgesellschaft mbH

botax.de

49

BOTAX Steuerberatungsgesellschaft mbH is a German tax consulting firm offering a range of services including corporate, private individual, employee, association, and testament-related tax consulting. The company positions itself as a trusted advisor with certifications and memberships in professional organizations, targeting businesses and private clients in Germany. The website is built on WordPress using the Themify Ultra theme and employs common plugins such as Contact Form 7 and GDPR Cookie Compliance, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

SoVD-Landesverband Niedersachsen e.V.

inklusionspreis-niedersachsen.de

48

The website www.inklusionspreis-niedersachsen.de represents a regional non-profit initiative jointly managed by the SoVD-Landesverband Niedersachsen e.V. and the LandesSportBund Niedersachsen e.V. It focuses on promoting and awarding projects that foster inclusion and equal participation of people with and without disabilities in Niedersachsen, Germany. The site provides detailed information about award categories, past winners, and event highlights, targeting volunteers, media professionals, sports clubs, and the general public interested in inclusion. The business model is centered on recognition and awareness rather than commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Slick Slider for interactive content. It demonstrates good digital maturity with mobile responsiveness, accessibility features, and SEO optimization. The cookie consent mechanism is implemented with clear user options, reflecting compliance with GDPR requirements. Hosting appears to be managed via Your-Server.de, with secure HTTPS enforced. From a security perspective, the site benefits from HTTPS and a cookie consent framework but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate non-profit entity. Overall, the security posture is solid but could be enhanced by adding security headers and formal incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing contact information transparency to further build trust and compliance.

Radpass Hannover is a small, community-focused organization dedicated to promoting cycling sports and organizing cycling events in Hannover, Germany. The website serves as a hub for event information, registration links, and showcases partner cycling clubs. Technically, the site is built on WordPress with modern plugins for gallery display, GDPR compliance, and lightweight analytics. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the site presents a trustworthy and professional image suitable for its local community audience.

E

eichels GmbH

marathon-hannover.de

45

The ADAC Marathon Hannover website represents a well-established regional sports event organizer specializing in marathon and related running events in Lower Saxony, Germany. The business is operated by eichels GmbH and enjoys strong partnerships with reputable sponsors and regional organizations such as ADAC. The website provides comprehensive event information, registration options, media galleries, and community engagement features, targeting runners, sponsors, and local participants. Technically, the site is built on TYPO3 CMS with a modern yet slightly dated technology stack including Bootstrap 3 and jQuery 3.2.1. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with strong SSL configuration and employs spam protection for email addresses. However, it lacks some advanced security headers and a formal security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is transparent and includes multiple channels. No suspicious or malicious content is detected, and the site is free from adult or NSFW content. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and modernization of the tech stack could further enhance the site's security and resilience.

W

Wilhelm Hirte Stiftung

wilhelm-hirte-stiftung.de

42

The Wilhelm Hirte Stiftung is a small non-profit foundation based in Hannover, Germany, focused on supporting projects in youth aid, sports, and social sectors. The website clearly communicates its mission and provides donation information, targeting a general audience interested in charitable activities. The foundation appears to have a stable market position within its local/regional context, with a business model centered on funding and supporting community projects. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with additional anti-spam measures like Honeypot. The hosting provider is inferred to be netcup based on DNS data. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. However, some technical improvements could enhance security and privacy compliance. From a security perspective, the site uses HTTPS and implements basic anti-spam protections. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. The absence of a cookie consent mechanism despite using Google Analytics indicates a gap in privacy compliance. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image for a non-profit foundation but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and user trust.

N

Niedersächsische Bingo-Umweltstiftung

bingo-umweltstiftung.de

46

The Niedersächsische Bingo-Umweltstiftung is a well-established non-profit foundation based in Lower Saxony, Germany, dedicated to environmental protection and development cooperation. The foundation supports various projects and initiatives aimed at sustainability and community engagement. The website reflects a professional and consistent brand presence, targeting residents and organizations interested in environmental causes within the region. The foundation operates with a transparent and accessible digital presence, including multilingual accessibility features and comprehensive content about its activities and funding opportunities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and accessibility enhancements, hosted on a professional hosting provider (hostpress.de). The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is strong for a non-profit organization, with no critical vulnerabilities detected. The site lacks explicit public security policies or incident response contacts, which could be enhanced. The domain registration is consistent and trustworthy, supporting the legitimacy of the foundation. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular updates and audits to sustain security and compliance standards.

P

PluSport Behindertensport Schweiz

plusport.ch

49

PluSport Behindertensport Schweiz is a well-established Swiss non-profit organization dedicated to promoting sports and inclusion for children, youth, and adults with disabilities. Founded in 1960, it serves as the national competence center offering a wide range of services including sport camps, clubs, education, elite sports, and events. The organization targets individuals with disabilities as well as inclusive participants, supported by a strong partnership network including Swiss Olympic and Swiss Paralympic. The website reflects a professional and accessible digital presence with multilingual support and clear navigation.

Restaurant TS Green Inn is a small hospitality business located in Switzerland offering European-Asian fusion cuisine with facilities for dining and event hosting. The website presents a professional design built on WordPress with the Divi theme, providing clear navigation and relevant content such as menus and event information. Technically, the site uses standard web technologies and is mobile optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and trustworthy with room for improvement in security and compliance.

B

BRAUEREI FALKEN AG

falken.ch

48

Brauerei Falken AG is a Swiss brewery company based in Schaffhausen, specializing in the production and retail of beers, spirits, and related merchandise. The company operates an online shop and offers event services, targeting adult consumers and beer enthusiasts primarily in Switzerland. The website is professionally designed, featuring clear navigation, age verification for alcohol compliance, and active social media engagement. Technically, the site is built on TYPO3 CMS with Bootstrap and Font Awesome, integrating Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the website reflects a mature digital presence consistent with a medium-sized regional brewery.

N

Nailfashion by Theresa Richard

nailtheresa.ch

42

Nailfashion by Theresa Richard is a small local nail studio business based in Rapperswil, Switzerland, specializing in professional nail care and creative nail designs including natural nails, French Pearl nails, and Gellack. The website presents a professional and consistent brand image targeting local customers seeking quality nail services. The business has been established since 2016, with clear contact information and a user-friendly website built on WordPress. Technically, the site uses common WordPress plugins for galleries, testimonials, and sliders, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

P

Umleitung

pccaddie.net

49

The domain pccaddie.net currently serves as a simple redirect to https://www.pccaddie.de/, providing no direct content or business information on its own. The domain is well-established, having been registered since 2002, which suggests a mature business presence. However, the lack of content, metadata, or security and privacy policies on this domain limits the ability to assess its direct security posture or compliance. Technically, the site is minimal with no scripts or tracking detected, indicating a low digital footprint on this domain itself. Security posture cannot be fully evaluated due to the absence of content and security headers. Overall, the domain appears legitimate but functions solely as a redirect, pushing users to the main business site.

F

Fachagentur Nachwachsende Rohstoffe e.V.

bauerhubert.de

41

Bauer Hubert is an educational website operated by Fachagentur Nachwachsende Rohstoffe e.V., a German non-profit organization focused on renewable raw materials. The site targets children and parents by providing educational stories, games, comics, and audio plays to promote awareness of sustainable resources. The website is well-branded, consistent, and supported by official German government and agency partners, reflecting a strong market position in educational content for renewable energy and sustainability. Technically, the website is built on TYPO3 CMS with Foundation CSS and uses jQuery and Matomo analytics with cookies disabled, indicating a privacy-conscious approach. The site is hosted on servers associated with agenturserver domains, suggesting professional hosting. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, Bauer Hubert enforces HTTPS and disables cookies in analytics, which is positive. However, it lacks visible security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the website's claims, showing legitimacy and stable domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal security policies.