High-risk security reports

S

Smart Water d.o.o.

smartwater.hr

44

Smart Water d.o.o. is a Croatian company specializing in products and services for water supply companies, construction firms, and design houses. The company represents renowned manufacturers of water supply equipment, positioning itself as a niche B2B provider in the energy sector focused on water management. The website is professionally designed using WordPress with the Divi theme and optimized for SEO with Yoast. It offers content primarily in Croatian with an English alternative, targeting regional business clients. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact information is not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website reflects a legitimate small business with room for improvement in security and privacy transparency.

B

bebold sàrl

bebold.ch

45

bebold sàrl is a Swiss-based digital agency specializing in web development, marketing, and design services primarily serving clients in Martigny and Lausanne. Their website presents a professional image with detailed service offerings across design, web, and marketing domains, targeting businesses seeking comprehensive digital solutions. The company positions itself as a creative and functional partner for digital projects, emphasizing user experience and strategic marketing. Technically, the website employs modern JavaScript libraries, Google Analytics for tracking, Google reCAPTCHA for form security, and a cookie consent mechanism via tarteaucitron.io, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and design quality. Security posture is solid with HTTPS enforced and reCAPTCHA integration, but lacks visible security headers and published security policies, which are areas for improvement. Privacy compliance is partial due to the absence of a privacy policy and terms of service, though cookie consent is implemented. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

A

Agrisano

agrisano.ch

49

Agrisano is a Swiss insurance provider specializing in tailored insurance solutions for farmers and agricultural workers. The company offers a comprehensive range of services including basic health insurance, supplementary insurance, pension plans, and employee global insurance. The website is professionally designed using TYPO3 CMS and targets the German-speaking Swiss agricultural community. The digital infrastructure includes privacy-conscious analytics via Matomo and Google Analytics, with a cookie consent mechanism in place. Security posture is solid with HTTPS and some security best practices observed, though there is room for improvement in security headers and incident response disclosures. Overall, the website is trustworthy, well-branded, and serves its niche market effectively.

D

diagraf GmbH

diagraf.ch

46

diagraf GmbH is a small graphic design atelier based in Bern, Switzerland, specializing in corporate design, branding, illustrative graphics, and web design services. The company targets brands and businesses seeking professional visual communication solutions. The website presents a professional portfolio with clear navigation and detailed references, positioning diagraf as a trusted local design service provider. Technically, the site uses modern web technologies including Svelte and Craft CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced but lacks security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

H

High Altitude Research Stations Jungfraujoch and Gornergrat

hfsjg.ch

49

The High Altitude Research Stations Jungfraujoch and Gornergrat operate as a Swiss international foundation dedicated to supporting scientific research at high altitude locations. The foundation provides infrastructure and facilitates research projects primarily in the fields of atmospheric, environmental, and astronomical sciences. Their market position is specialized and niche, serving academic and research communities with unique facilities. The website reflects a professional and consistent brand image, targeting researchers and scientific institutions. Technically, the website is built on WordPress 6.4.7 with modern JavaScript libraries such as jQuery 3.7.1 and uses optimization plugins like Autoptimize. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX requests, indicating some security awareness. However, the absence of explicit security headers and published security policies limits the overall security posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained, with a strong legitimacy score based on WHOIS data and business consistency. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing incident response policies, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

B

Bolden

bolden.nl

43

Bolden is an independent creative agency based in Amsterdam, specializing in brand strategy, brand identity, digital experiences, and e-commerce design since 2010. The company has established a strong market position with multiple industry awards such as the FONK150 Best Small Design Agency. Their target audience includes brands and businesses seeking professional digital and branding services. The website reflects a high level of professionalism, excellent design quality, and clear navigation, supporting their market reputation. Technically, the website employs modern web technologies including JavaScript ES modules, lazy loading with Lozad.js, and Google Analytics with IP anonymization, indicating a mature digital infrastructure. The site is mobile-optimized and performs well, with good SEO and accessibility features. However, the CMS and hosting provider are not explicitly identified. From a security perspective, the site uses HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy and terms of service exist (in Dutch), there is no cookie consent mechanism or explicit GDPR compliance details. Incident response and security policy pages are absent. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

E

ETH-Rat

ethrat.ch

43

ETH-Rat is the official strategic leadership and supervisory body for the ETH domain in Switzerland, overseeing the two Federal Institutes of Technology (ETH Zurich and EPFL) and four research institutes. The website serves as a government portal providing governance documents, strategic plans, and public information. The site is professionally designed using WordPress with Elementor and Yoast SEO, supporting multiple languages and integrating official social media channels. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is good with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site reflects a mature governmental digital presence with moderate user tracking via Google Tag Manager.

The website triplepundit.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any content or business information. The domain is registered since 2005 with GoDaddy.com, LLC and hosted on Amazon AWS infrastructure, indicating a legitimate and established domain. However, the lack of accessible content, metadata, privacy policies, contact information, and security headers prevents a comprehensive analysis of the business or security posture. The site does not expose any forms, scripts, or external links in the provided HTML content. Due to the blocked status, the technical maturity and security posture cannot be fully assessed, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site currently provides no usable information or trust signals to visitors.

P

Proyecto Ututo

ututo.org

38

Proyecto Ututo is a small, community-driven free software project focused on developing and distributing 100% free GNU/Linux distributions and related simulation software for solar and thermal energy systems. The project has historical recognition and aims to promote knowledge sharing and digital inclusion, especially in developing countries. The website content is primarily in Spanish and provides resources, downloads, and community information related to the Ututo project and SimuSol software. Technically, the site uses CMSimple_XH CMS, older JavaScript libraries, and is hosted on DigitalOcean. Google Analytics and Tag Manager are used for user tracking. Security posture is moderate with some gaps such as lack of DNSSEC and missing security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent with the project’s claims and history, supporting legitimacy.

P

Parabola Project

parabola.nu

48

Parabola GNU/Linux-libre is a community-driven free software operating system distribution based on Arch Linux, emphasizing software freedom and compliance with GNU guidelines. It targets free software enthusiasts and power users seeking a fully libre and hackable OS. The project provides packages, documentation, and community support through forums, mailing lists, and IRC channels. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript with jQuery 1.8.3. The site is accessible, uses HTTPS, but lacks modern security headers and privacy policies, indicating room for improvement in compliance and security posture. No tracking or advertising scripts are present, reflecting a privacy-respecting approach. The WHOIS data for the exact domain www.parabola.nu is unavailable, likely because it is a subdomain or alias, but the project’s long-standing presence since 2009 supports legitimacy. Overall, the website is professional, trustworthy, and safe, but could enhance security and privacy compliance.

The website dragora.org is currently inaccessible beyond a minimal 503 Service Unavailable maintenance page, providing no substantive content or business information. The domain is registered since 2008 with a reputable registrar, indicating a legitimate registration, but the lack of accessible content prevents meaningful analysis of the business or services. Technically, the site lacks metadata, scripts, or security headers, and no privacy or cookie policies are present, indicating a low digital maturity level. Security posture is minimal with only basic SSL configuration inferred from WHOIS data, and no advanced protections or compliance measures are evident. Overall, the site presents a high risk due to lack of transparency, content, and security features, and is currently non-functional for end users.

F

Free Software Foundation, Inc.

nongnu.org

47

Savannah.nongnu.org is a well-established software forge platform dedicated to hosting and supporting free software projects, both GNU and non-GNU. It operates under the auspices of the Free Software Foundation, providing a collaborative environment for developers committed to free software principles. The platform offers project hosting, bug tracking, support requests, task and patch management, serving a community of over 25,000 registered users and nearly 4,000 hosted groups. Its market position is strong within the free software ecosystem, acting as a central hub for development and distribution.

SofaSurfer.org is a personal portfolio and blog website operated by Kilian Bohnenblust, a digital artist and web developer active since 1999. The site showcases various web development projects and digital art, targeting digital art enthusiasts and potential clients seeking web design and development services. The business model is that of a freelance or individual professional offering services and sharing knowledge through a blog. The website is hosted on Hostpoint AG infrastructure and uses modern web technologies including jQuery, Masonry.js, and Piwik/Matomo analytics. The site is mobile optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is implemented. Contact information is minimal, with no explicit emails or phone numbers provided on the homepage, which may impact user trust and compliance. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security headers. The domain is long-standing and consistent with the claimed business history, enhancing trustworthiness. The site content is safe for general audiences with no adult or questionable material detected.

4

404 d.o.o.

somoborac.com

44

SoMo Borac is a well-established digital media event and conference organized by 404 d.o.o., focusing on digital awards and industry trends in the Croatian and regional market. The website presents a professional and consistent brand image, targeting digital professionals and stakeholders. The technical infrastructure is based on WordPress with modern front-end libraries and analytics tools, supporting multilingual content and good mobile responsiveness. Security posture is adequate with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but terms of service and security policies are absent. Overall, the site is trustworthy and professionally maintained, with strong industry partnerships and media presence.

T

Trust Alliance New Zealand

trustalliance.co.nz

43

Trust Alliance New Zealand operates as a membership consortium focused on creating a trusted and verifiable data sharing ecosystem for New Zealand's primary sector including producers, growers, exporters, and retailers. The website presents a professional image with clear messaging about its mission to enable secure data sharing and compliance with evolving global standards. The business model centers on collaboration and data interoperability projects such as the Digital Wallet and Digital Farm Environment Plan. The target audience is primarily New Zealand agricultural stakeholders and related service providers.

F

FIDO Alliance

fidoalliance.org

49

FIDO Alliance is a well-established non-profit organization founded in 2011, dedicated to developing and promoting open authentication standards to reduce reliance on passwords globally. The organization holds a strong market position as a leader in passwordless authentication technologies, serving technology companies, developers, and enterprises. Their key services include standard development, certification programs, and fostering industry collaboration. The website reflects a professional and consistent brand image with good content quality and clear messaging focused on authentication standards. Technically, the website is built on WordPress with modern technologies such as jQuery, Google reCAPTCHA, and Google Tag Manager. It is hosted with Cloudflare DNS services, ensuring good performance and security. The site implements cookie consent mechanisms and uses SEO best practices, although accessibility features could be improved. The technical infrastructure supports a moderate to good user experience with mobile optimization. From a security perspective, the site enforces HTTPS, uses security headers, and integrates CAPTCHA for form protection. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the organization's history, supporting legitimacy and trust. Overall, the website presents a low-risk profile with strong business credibility and a solid security posture. Strategic improvements include publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing accessibility and compliance transparency.

D

Digital Identity New Zealand

digitalidentity.nz

49

Digital Identity New Zealand is a membership-funded organization established in 2018, focused on advancing digital identity and trust ecosystems within New Zealand. The organization provides a platform for collaboration, knowledge sharing, and advocacy through events such as the Digital Trust Hui Taumata, working groups, and educational resources. Their market position is that of a leading entity in the digital identity space in New Zealand, targeting businesses and organizations interested in digital identity innovation and trust economy development. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Owl Carousel. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. From a security perspective, the site uses HTTPS and secure login forms but lacks DNSSEC and important security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but located at an unusual URL and no cookie consent mechanism detected. No incident response or security policy documents are published. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in privacy compliance, security headers, and DNS security would strengthen its security posture and regulatory adherence.

C

Cybersecurity and Infrastructure Security Agency

ndstudio.gov

44

The National Design Studio website represents an official U.S. government initiative led by the Cybersecurity and Infrastructure Security Agency. It focuses on modernizing government interfaces and improving citizen experiences through the America by Design initiative. The site is positioned as a government entity with a clear mission and target audience of American citizens and government service users. The business model is non-commercial, centered on public service and design innovation within government frameworks. Technically, the website employs modern web technologies including Next.js and React, hosted and secured via Cloudflare services. Performance and mobile optimization are good, with a clean and professional design. However, accessibility features are basic and could be improved. The site uses Cloudflare Turnstile for bot protection but lacks DNSSEC and some security headers. From a security perspective, the site benefits from HTTPS and Cloudflare protections but lacks published privacy, cookie, and security policies. No contact information for incident response or data protection officers is provided. The domain WHOIS data aligns well with the government entity, showing consistency and legitimacy. No vulnerabilities or malicious content were detected, but enabling DNSSEC and publishing security policies would enhance trust. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

E

ERPNext Deutschland

erpnext-deutschland.org

48

ERPNext Deutschland is a small technology-focused business providing a modern, open source ERP system tailored for companies in the German-speaking region. The website promotes ERPNext as a comprehensive, customizable, and mobile-friendly ERP solution supported by an active community. Technically, the site is built on WordPress with the Divi theme, hosted with a reputable German registrar and using Cloudflare DNS. The site is accessible, well-designed, and mobile optimized, though it lacks privacy and cookie policies and explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

N

Nicole Pfister

nicolepfister.ch

46

Nicole Pfister's website serves as a portfolio platform showcasing her work as a filmmaker, illustrator, art director, and photographer. The site targets a general audience interested in creative media and artistic projects. The business operates as a small independent creative professional entity based in Switzerland, focusing on visual and media arts. The website content is primarily image-based, highlighting various projects without extensive textual content or interactive features. Technically, the website is built with basic HTML and CSS, lacking modern frameworks, CMS, or advanced scripting. There are no detected analytics, tracking, or advertising technologies, indicating a minimalistic digital footprint. Mobile optimization and accessibility are basic, and SEO practices are minimal but present through meta tags. Performance is moderate given the image-heavy content. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No forms or data collection mechanisms are present, reducing some risk vectors. The WHOIS data aligns well with the website content, showing consistency and legitimacy. However, the absence of HTTPS confirmation and security best practices lowers the security posture. Overall, the website is a straightforward portfolio with moderate technical maturity and limited security measures. Strategic improvements in security headers, HTTPS enforcement, and privacy compliance would enhance trust and protection for visitors.

M

Max Henschel Graphics

mhg.ch

44

Max Henschel Graphics is a small, specialized graphic design agency based in Bern, Switzerland, offering services such as branding, corporate design, logo creation, and illustration. The company targets businesses and organizations seeking professional visual communication solutions. The website presents a professional portfolio and clear contact information, supporting a credible market position within the local media and design sector. Technically, the site uses a moderate technology stack including jQuery, Modernizr, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and privacy compliance mechanisms. Overall, the site is functional and professional but would benefit from enhanced privacy and security policies to improve compliance and trust.

D

deinmagazin.ch

deinmagazin.ch

49

deinmagazin.ch operates as a specialized online editorial system platform designed to facilitate the creation and publication of digital magazines. The service targets organizations and businesses seeking flexible, multi-device optimized digital magazine solutions, positioning itself as a niche SaaS provider within the technology sector in Switzerland. The website presents a professional and consistent brand image with clear navigation and relevant content describing its offerings. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Vimeo for video embedding. The site is mobile optimized and demonstrates good SEO practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, indicating basic compliance with privacy regulations such as GDPR. However, there is a lack of visible security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected, but security headers could be enhanced to improve the security posture. Overall, deinmagazin.ch presents a trustworthy and professional online presence with a solid foundation in privacy compliance and technical implementation. Strategic improvements in security transparency and contact information disclosure would further strengthen its risk profile and user trust.

M

mfe Médecins de famille et de l’enfance Suisse

mfe-actu.ch

46

The website www.mfe-actu.ch serves as the official online magazine for mfe Médecins de famille et de l’enfance Suisse, a specialized organization focused on family and childhood medicine in Switzerland. It provides digital editions, articles, and resources targeted at medical professionals in this sector. The site offers subscription services and maintains a professional editorial team, positioning itself as a trusted source within the Swiss healthcare community. The content is primarily in French with links to German language resources, reflecting the multilingual nature of Switzerland.

C

Coopérative Médecine et Hygiène

medhyg.ch

49

Médecine et Hygiène is a well-established cooperative media group based in Switzerland, specializing in health information for both professionals and the general public in the French-speaking region. The group operates several complementary brands including a leading medical journal, a public health media outlet, a specialized publisher, and a communication service provider. Their market position is strong as the number one health information group in their region, supported by professional editorial boards and a clear business focus. Technically, the website is built on the eZ Platform CMS powered by Netgen, utilizing modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager. The site is mobile optimized and well-structured, though some accessibility features could be improved. Performance is moderate with good SEO practices evident. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No vulnerability disclosure or security.txt files are present. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

F

Fédération Suisse des directrices et directeurs d’Hôpitaux

fsdh.ch

35

The Fédération Suisse des directrices et directeurs d’Hôpitaux (FSDH) is a Swiss non-profit association representing hospital directors and senior executives, primarily serving the French-speaking region of Switzerland. The website provides information about membership, contact details, and association activities, targeting healthcare leadership professionals. The organization positions itself as a key representative body advocating for hospital management interests in Switzerland. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google services for analytics and bot protection. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA; however, it lacks comprehensive security headers and published security or privacy policies, indicating room for improvement in compliance and security transparency. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

I

Infokom GmbH

infokom.info

47

Infokom GmbH is a medium-sized German IT company specializing in software and digital solutions for the building materials trade sector. With over 40 years of experience, they provide modular ERP systems, financial accounting, document management, and cloud telephony services, integrated closely with the EUROBAUSTOFF cooperative. Their website demonstrates a professional digital presence built on TYPO3 CMS, with good SEO and mobile optimization. Security practices include HTTPS and cookie consent with Matomo analytics, though formal security and incident response policies are not publicly documented. Overall, the company presents a credible and trustworthy profile with comprehensive contact information and clear business focus.

I

i&M Bauzentrum

i-m.de

46

i&M Bauzentrum is a well-established Fachhandelsmarke (specialist retail brand) under the EUROBAUSTOFF group, serving the German building materials market with over 130 locations. The company focuses on providing high-quality building materials, expert advice, and comprehensive services to both private customers and professional builders. Their digital presence is powered by TYPO3 CMS with a modern Bootstrap-based design, offering good mobile optimization and user experience. The website includes multimedia content and a cookie consent mechanism aligned with GDPR requirements. Security posture is adequate with HTTPS and cookie management, but lacks some advanced HTTP security headers. No direct contact details are visible on the homepage, but social media channels are active. Overall, the site reflects a professional retail business with strong market positioning in Germany.

H

Hochwasser-Ratgeber

hochwasser-ratgeber.de

32

Hochwasser-Ratgeber is a German-language informational website focused on flood preparedness and building materials, serving homeowners and professionals in Germany. It acts as a partner platform for the Eurobaustoff Fachhändler network, providing comprehensive guidance on flood risk, prevention, and damage mitigation. The site offers key services such as flood preparedness advice, specialist dealer search, and educational content. Technically, the website is built on TYPO3 CMS with a modern tech stack including jQuery, FontAwesome, Google Fonts, and integrates Matomo analytics and Echobot marketing widgets. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices. Security-wise, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and documented security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve its security posture and transparency. The domain WHOIS data is limited but shows no suspicious indicators, supporting the site's legitimacy.

O

OPUS1

opus-1.eu

48

OPUS1 is a German-based company specializing in innovative paint and coating products for both interior and exterior applications. The website presents a professional image with a focus on quality products such as interior paints, facade paints, and lacquers, targeting DIY enthusiasts and professional painters. The company leverages a modern TYPO3 CMS platform with Bootstrap for responsive design, ensuring a good user experience across devices. The presence of a cookie consent mechanism and use of privacy-respecting Matomo analytics indicate a commitment to privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit policies could enhance trust further. Overall, the website is well-structured, content-rich, and trustworthy, reflecting a medium-sized retail business in the home improvement sector.

E

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG

cerabella.de

44

Cerabella is a German-based retailer specializing in high-quality ceramic tiles and related accessories, operating under the EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG umbrella. The company targets both retail customers and professional tile buyers, offering a broad product range including floor and wall tiles, mosaics, and tile accessories. The website reflects a well-structured and professionally designed digital presence, leveraging TYPO3 CMS and Bootstrap frameworks, with moderate performance and good mobile optimization. Matomo analytics is used for user tracking with a compliant cookie consent mechanism in place. Security posture is adequate but could be improved by implementing standard security headers and publishing explicit security policies. Contact information and company details are clearly presented, enhancing business credibility. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF or blocking mechanisms.

S

Software Freedom Conservancy

sfconservancy.org

49

Software Freedom Conservancy is a small, established non-profit organization dedicated to promoting and defending free and open source software rights, including copyleft compliance and software freedom. Their services include legal defense, community support, internships, and advocacy initiatives. The website reflects a mature and consistent brand with excellent content quality and user experience. Technically, the site uses standard web technologies and is hosted via Gandi SAS, with good mobile optimization and SEO. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the organization's history, supporting legitimacy and trustworthiness.

S

Stiftung Science et Cité

science-et-cite.ch

49

Stiftung Science et Cité is a Swiss non-profit foundation dedicated to fostering dialogue between science and society through various projects including citizen science, educational initiatives, and public events. The organization targets a broad audience including the general public, children, and youth, positioning itself as a key player in science communication within Switzerland. The website reflects a professional and consistent brand image with comprehensive content and multilingual support. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Tobii lightbox, and Plyr for media handling. Google Analytics is used with IP anonymization to track user engagement. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling via Mailchimp. However, it lacks explicit security headers and formal security or incident response policies. Privacy compliance is addressed with a comprehensive privacy and cookie policy, though no explicit cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with the foundation's mission. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is good but could benefit from explicit consent mechanisms. No critical vulnerabilities or suspicious elements were detected.

The Schweizerische Akademie der Geistes- und Sozialwissenschaften (SAGW) is a Swiss non-profit academic umbrella organization uniting 63 scientific societies in the humanities and social sciences. It serves as the largest network in these fields within Switzerland, providing services such as networking, research promotion, publications, and event organization. The website is professionally designed, multilingual, and targets academics, researchers, and policy makers in Switzerland and beyond. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for tracking. It employs HTTPS with a cookie consent mechanism, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is trustworthy, well-maintained, and serves its academic audience effectively.

The website at cityu.edu is currently inaccessible due to a 403 Forbidden error, indicating restricted access to the content. The domain appears to be valid and registered until 2027, consistent with a long-standing educational institution. However, the lack of accessible content prevents detailed analysis of business operations, services, or user engagement. The site loads only a Google Fonts resource and displays a custom error page with no metadata, forms, or contact information. Technical infrastructure details such as SSL configuration and security headers are not available from the provided data. Privacy and cookie policies are absent, indicating potential compliance gaps. Overall, the website's digital presence is currently limited by access restrictions, impacting its usability and trustworthiness.

The website www.eteamsponsor.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain indicates no registration record exists, suggesting the domain may not be registered or is expired. Due to the lack of accessible content, no business description, contact information, or security policies are available for analysis. The technical infrastructure cannot be assessed beyond the error page, and no security headers or SSL configuration details are present. Overall, the site presents a high risk due to inaccessibility and lack of domain registration data, severely limiting trust and credibility.

O

outline4

outline4.ch

41

outline4 is a small, specialized web design agency based in Bern, Switzerland, founded in 2003. The company focuses on creating beautiful, user-friendly, and responsive websites with a strong emphasis on CMS solutions such as Craft CMS and Expressionengine, as well as SEO optimization. They maintain a local market presence with partnerships with other Bern-based agencies and offer a portfolio of diverse web design projects. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website uses a modern albeit slightly outdated technology stack including jQuery 1.11.1, Modernizr for SVG detection, and Google Analytics for tracking. The site is served over HTTPS with no visible security issues in the HTML content. However, there is a lack of security headers and the use of an outdated jQuery version poses a potential security risk. The site does not implement privacy or cookie policies, which is a compliance gap especially under GDPR regulations. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no exposed sensitive data, but lacks advanced security headers and incident response information. No forms are present, reducing attack surface. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding date and no privacy protection, which is suitable for this type of business. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and updating JavaScript libraries would enhance the security posture and regulatory compliance. The business is credible and well-positioned locally with a clear service offering and partner ecosystem.

T

Teach Cyber

teachcyber.org

45

Teach Cyber is a specialized non-profit organization focused on empowering high school instructors to deliver cybersecurity curricula. The organization provides a comprehensive suite of educational resources, including curriculum frameworks, professional development courses, teaching modules, and assessment tools. Their market position is that of a niche educational resource provider dedicated to secondary cybersecurity education, supported by partnerships and a clear mission to enhance cybersecurity literacy at the secondary level. Technically, the website is built on a modern WordPress platform using Elementor and WooCommerce for content management and e-commerce capabilities. The site employs Google reCAPTCHA v2 for form security and is hosted by Bluehost Inc. Performance and mobile optimization are good, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured content. From a security perspective, the site benefits from HTTPS encryption and domain transfer protection but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Incident response and vulnerability disclosure information are absent, representing an area for improvement. Overall, the website is trustworthy and professional, with a strong focus on educational content and community engagement. The risk profile is low, but improvements in security headers, privacy compliance, and incident response transparency would strengthen the security posture and regulatory adherence.

A

AQ Viande Suisse / Agriquali

aq-viandesuisse.ch

47

AQ Viande Suisse operates a Swiss quality assurance program focused on meat producers, ensuring adherence to strict agricultural standards and providing certification to member farms. The website serves as an information hub for producers and buyers, offering program details, directives, and ordering options for certification materials. Technically, the site is built on Joomla CMS with Bootstrap and modern web technologies, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

M

mfe Haus- und Kinderärzte Schweiz

mfe-standpunkte.ch

49

The website mfe-standpunkte.ch serves as the official online magazine for mfe Haus- und Kinderärzte Schweiz, a professional association representing general practitioners and pediatricians in Switzerland. It provides timely articles, policy updates, and resources aimed at healthcare professionals within this niche. The site offers downloadable content such as PDFs and e-books and supports user engagement through newsletter subscriptions and social media channels. The content is well-curated, relevant, and professionally presented, targeting medical practitioners concerned with healthcare provision and policy in Switzerland. Technically, the website employs modern web technologies including Google Analytics for traffic analysis, Bootstrap for responsive design, and custom JavaScript for interactive features. The site is hosted securely with HTTPS and includes secure forms with CSRF protection. While the site lacks explicit security headers and a published security policy, it demonstrates good baseline security practices and moderate performance with good mobile optimization. From a security and compliance perspective, the site includes a privacy policy and cookie consent banner compliant with GDPR principles. However, it lacks a formal security policy, incident response contact, and vulnerability disclosure mechanisms. WHOIS data confirms the legitimacy of the domain registration, matching the business entity and location, enhancing trustworthiness. Overall, mfe-standpunkte.ch is a credible, professionally maintained healthcare publication with solid technical and security foundations. Strategic improvements in security transparency and policy publication would further enhance its trust and compliance posture.

Médecins de famille Suisse is a professional association dedicated to representing and promoting the interests of family and childhood physicians in Switzerland. The organization plays a significant role in advocating for healthcare policies, providing member services, and organizing educational events such as Tardoc training and annual assemblies. The website is well-structured, bilingual with French as the primary language, and offers comprehensive information about the association's activities, news, and events. It targets healthcare professionals and stakeholders in the Swiss healthcare system. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates analytics tools like Matomo and Google Tag Manager, indicating a moderate to advanced digital maturity. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and cookie consent mechanisms, which are areas for improvement. Overall, the site is professional, trustworthy, and serves its audience effectively.

S

Scholl Communications AG

scholl.de

35

Scholl Communications AG is a German software manufacturer and web service provider specializing in the Weblication® CMS platform. With over 37 years in the market, the company serves a broad range of business customers including corporations, medium-sized enterprises, and agencies. Their key offerings include CMS software, web development services, and technology partnerships. The website reflects a professional and consistent brand presence targeting German-speaking business clients. Technically, the site is built on their proprietary CMS and uses modern web standards with responsive design, though performance is moderate and accessibility is basic. Security posture is limited due to lack of visible security headers and policies, and privacy compliance is weak as no privacy or cookie policies are found. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims.

S

Scholl Communications AG

weblication.de

38

Weblication® CMS, developed by Scholl Communications AG, is a well-established XML-based content management system with a significant customer base and specialized products targeting web agencies, enterprises, and municipalities. The website presents a professional image with detailed product offerings and a bug bounty program indicating a commitment to security. Technically, the site uses a proprietary CMS platform with modern web technologies and demonstrates good mobile optimization and accessibility. However, the absence of explicit privacy and cookie policies, security headers, and incident response contacts indicates areas for improvement in compliance and security transparency. Overall, the website is credible and functional but would benefit from enhanced privacy and security disclosures to align with best practices.

The website gesundheitundmedizin.ch represents the Forum Gesundheit und Medizin, an organization focused on providing high-quality public conferences and educational programs related to health and medicine, particularly in areas such as palliative care and geriatric medicine. The site targets healthcare professionals and interested individuals in Switzerland, offering detailed event information and downloadable brochures. Technically, the site is built on the Contao CMS platform and uses jQuery for client-side scripting. While the site is accessible and well-structured with good content quality and navigation, it lacks critical privacy and security policies, including privacy and cookie policies, security headers, and explicit contact information such as emails or phone numbers. No WAF or blocking mechanisms were detected, and the site appears safe with no adult or explicit content. The external link to weiterbildung-palliative.ch suggests a partnership or related service in the palliative care education domain. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

The website at mintrmarketing.com is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. As a result, no business description, contact information, or service details are available for analysis. The domain is registered since 2018 with Squarespace Domains II LLC and uses SiteGround name servers, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. Security posture cannot be fully evaluated due to absence of content and headers, but the domain lacks DNSSEC and no security policies or incident response contacts are found. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.

S

Splide - The lightweight, flexible and accessible slider/carousel

splidejs.com

47

Splidejs.com is a technology-focused website providing a lightweight, flexible, and accessible slider/carousel library written in TypeScript. The site targets web developers and frontend engineers seeking performant UI components. It is built using modern web technologies including Gatsby, TypeScript, and CSS Modules, hosted on Japanese infrastructure. The website demonstrates excellent design quality, mobile optimization, and accessibility, reflecting a mature digital presence for a small technology business founded in 2019. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

F

FBIS

static2dynamic.ch

39

FBIS operates the static2dynamic.ch website, offering a PHP-based Web Application Framework designed as a licensing-free alternative to traditional CMS platforms like TYPO3 and Joomla. With over 20 years of experience, the company targets a broad audience including individuals and agencies seeking flexible web solutions. The website is professionally designed, content-rich, and provides clear navigation and contact information, reflecting a small but established technology business based in Switzerland. Technically, the site leverages a proprietary PHP framework (static2dynamic 5.9), standard web technologies (JavaScript, CSS), and includes modern features such as responsive design and cookie consent mechanisms. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers. No major vulnerabilities or exposed sensitive data were detected. Security posture is adequate with cookie consent implemented and no visible security flaws, but lacks explicit security policies or incident response information. WHOIS data confirms domain legitimacy and consistency with business claims. Privacy compliance is supported by a privacy policy and cookie banner, though terms of service and vulnerability disclosure policies are absent. Overall, the website presents a trustworthy and professional front for a niche technology provider. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust.

mfe Haus- und Kinderärzte Schweiz is a professional association representing family and pediatric doctors in Switzerland, focusing on political advocacy and strengthening primary care. The website serves as an information hub for members and stakeholders, offering news, events, and member services. The organization holds a strong market position within the Swiss healthcare sector as a key advocate for family medicine. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools like Matomo, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements are recommended in cookie consent and security policy transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

The website doc.gov is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. No actual business content, contact information, or policies are accessible. The domain appears to be protected by privacy services, limiting registrant transparency. The technical infrastructure relies on Cloudflare's security and analytics services, but no CMS or business platform is identifiable. Due to the WAF challenge, the security posture cannot be fully assessed, but the presence of Cloudflare indicates a baseline of protection. Overall, the site lacks publicly accessible content and business information, resulting in a low trust and quality score.

K

Kur- und Bäder GmbH Bad Dürrheim

solemar.de

47

Kur- und Bäder GmbH Bad Dürrheim operates the Solemar wellness and spa center located in Bad Dürrheim, Germany. The website presents a professional and comprehensive digital presence showcasing their wellness services including the Sole-Therme, Schwarzwald-Sauna, Totes-Meer-Salzgrotte, and WellnessCenter. The company targets general wellness and spa visitors, positioning itself as a regional leader in hospitality and health tourism. The site includes detailed information on services, events, and visitor information, supported by certifications such as ISO 9001 and Wellness Stars, enhancing trust and credibility. Technically, the website is built on WordPress with modern plugins for SEO (Yoast), cookie consent (Borlabs Cookie), and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting is via a commercial provider consistent with the domain's WHOIS data. Privacy compliance is well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response contacts, which could be improved. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the site is trustworthy, professional, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.