Medium-risk security reports

Winti Mäss GmbH operates a regional event website focused on the Winti Mäss event in Winterthur, Switzerland, targeting families and the general public with offerings including gastronomy, live music, and entertainment. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs standard plugins such as Real Cookie Banner for GDPR compliance. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations.

Christkatholische Kirchgemeinde Zürich operates as a Christian Catholic parish serving the Zurich community with religious services, social support, and cultural events. The website is well-structured, providing detailed event information, contact details, and community resources. Technically, it employs modern web technologies such as Bootstrap and jQuery, with a CMS based on ZMS, and uses HTTPS with appropriate security headers. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is strong with no visible vulnerabilities, and WHOIS data confirms the legitimacy of the domain and organization. Overall, the website effectively serves its community audience but should improve privacy compliance to enhance trust and legal adherence.

The website aufholzbauen.de represents the Holzbau-Offensive, an educational initiative focused on timber construction for planners in the Baden-Württemberg region of Germany. It offers courses, webinars, and resources to support professionals in this niche sector. The platform is built on WordPress with WooCommerce integration for course management, indicating a digital maturity aligned with modern CMS and e-commerce technologies. The site is well-branded, consistent, and targets a specialized professional audience with relevant content in German. Technically, the site uses standard web technologies including jQuery and Revolution Slider, and implements GDPR-compliant cookie consent mechanisms via CookieYes. Security posture is adequate with HTTPS and basic security headers, though there is room for improvement in advanced headers and explicit security policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit contact and security policy disclosures.

The website represents the Cluster Forst und Holz BW, a cluster initiative in Baden-Württemberg, Germany, focused on promoting innovation and collaboration within the forestry and wood industry sectors. It serves as a platform for companies and research institutions to access funding programs, project information, and networking opportunities. The site highlights its strong market position with significant economic impact in the region, supported by partnerships with government and EU funding bodies. Technically, the website is built on the Yii framework with Bootstrap and jQuery, hosted on Hetzner servers, and demonstrates good mobile optimization and SEO practices. Security measures include HTTPS enforcement and CSRF protection, though some security headers and policies are not explicitly published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and well-structured, though it lacks direct contact emails and explicit security or incident response policies.

Reisswolf Schweiz is a specialized service provider offering secure, certified, and sustainable destruction of sensitive documents and data carriers across Switzerland. The company targets businesses, public authorities, healthcare providers, and legal firms, providing services compliant with Swiss data protection laws and international standards such as DIN 66399 and ISO/IEC 21964. With multiple regional offices, Reisswolf ensures localized service delivery and strong customer support. The website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance features. Security posture is strong, leveraging HTTPS, certified processes, and secure logistics containers, although incident response contact details are not publicly disclosed. Overall, the company demonstrates high trustworthiness and professionalism in its market niche.

Paprec Group is a leading French company specializing in waste management and recycling services. Established in 1994, it has grown into a major player in the environmental sector, serving both industrial clients and local authorities with a comprehensive range of services including waste collection, sorting, recycling, and energy valorization. The company emphasizes sustainability and circular economy principles, positioning itself as a key contributor to environmental preservation in France. The website reflects a mature digital presence with multilingual support and rich content aimed at educating and engaging its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Matomo analytics. It demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although public security policies and incident response information are not explicitly published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing or not publicly available, which raises minor concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, Paprec Group's website is professional, secure, and compliant, supporting its position as a trusted leader in the recycling industry. Strategic recommendations include publishing explicit security and incident response policies and improving domain registration transparency.

You Manage Consulting AG is a Swiss-based consulting firm specializing in project management services for small and medium-sized enterprises (KMU), with expertise in real estate, finance, and ICT sectors. The company is led by Daniel Honegger, who brings over 20 years of experience in project leadership and business consulting. The website clearly targets KMU clients in Switzerland, offering freelance and fixed mandate consulting engagements. The business model focuses on providing tailored project management and advisory services in niche sectors, positioning itself as a trusted partner for operational efficiency and project success. Technically, the website is built on WordPress using modern frameworks such as Bootstrap 4 and jQuery, enhanced with optimization plugins like Autoptimize. The site demonstrates good mobile responsiveness, SEO optimization, and a moderate performance profile. Structured data is implemented effectively to enhance search engine understanding and trust signals. However, some improvements could be made in accessibility and security headers to strengthen the technical posture. From a security perspective, the site uses HTTPS with an excellent SSL configuration, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of security headers and incident response contact information indicates room for improvement in security best practices. Privacy compliance is addressed with a privacy and cookie policy, though a cookie consent mechanism is missing, which is important for GDPR compliance. No signs of malicious content or vulnerabilities were found, supporting a strong security baseline. Overall, the website presents a professional and trustworthy image with clear business information and contact details. The risk profile is low, with recommendations focusing on enhancing security headers, incident response readiness, and privacy consent mechanisms to further improve compliance and trustworthiness.

Strube Stiftung is a German non-profit foundation focused on encouraging responsible action among individuals and society by initiating and supporting projects in health literacy, European cultural integration, and contemporary dance. The foundation targets audiences interested in healthcare empowerment, European culture, and artistic innovation. The website is built on WordPress using the Divi theme, featuring a professional design with good mobile optimization and clear navigation. Social media presence across major platforms enhances outreach and trust. Security posture is solid with HTTPS, cookie consent mechanisms, and updated software components, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF blocking. WHOIS data is limited but does not raise significant concerns. Overall, the site demonstrates a good balance of professionalism, security, and compliance appropriate for a small non-profit foundation.

The Albert und Barbara von Metzler-Stiftung is a small non-profit foundation based in Germany, focused on supporting children and youth through targeted social projects primarily in Frankfurt and surrounding areas. Established in 1998, the foundation operates with a clear mission to improve societal well-being through financial support and active engagement in projects. The website reflects a professional and consistent brand image, emphasizing transparency and community involvement. Technically, the site is hosted on Colt's infrastructure and likely uses an enterprise CMS, delivering a moderate performance with good mobile optimization and SEO practices. Security-wise, the site implements cookie consent mechanisms and avoids exposing sensitive data, but lacks explicit security policies or incident response information. Overall, the foundation demonstrates a trustworthy online presence with strong business credibility and privacy compliance.

ARAG SE is a well-established German insurance company specializing in legal protection insurance and related services, with a strong market position as the largest family-owned insurer in Germany and a global leader in its niche. The website serves as a professional career portal targeting job seekers interested in joining ARAG, featuring comprehensive content about company values, culture, and job opportunities. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, Matomo analytics, and a proprietary recruitment platform by talentsconnect, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and privacy compliance, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or suspicious activity.

Schaffhauser Fernsehen is a regional television broadcaster serving the Schaffhausen region in Switzerland, providing local news, cultural programming, and entertainment through multiple distribution channels including traditional TV providers and online livestreams. The website reflects a small media business focused on regional content with a modest digital presence. Technically, the site uses the phpwcms content management system and integrates various third-party advertising and tracking scripts, indicating a moderate level of digital maturity. However, the site lacks modern security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The security posture is basic, with no visible vulnerabilities but also no advanced protections or disclosures. Overall, the site is accessible and safe for general audiences but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

Radio Munot is a regional Swiss radio station providing local news, music, and media content to its audience. The website serves as a digital platform for live streaming, media library access, and event information, targeting local listeners. The business operates primarily in the media sector with a small-scale regional focus. Technically, the website is built on a modern Angular framework with integration of Google Tag Manager and Consent Manager for analytics and cookie compliance. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and basic security headers inferred, but lacks explicit published security policies or incident response contacts. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and compliance documentation.

EnArgus is an official German government internet portal managed by the Federal Ministry for Economic Affairs and Energy (BMWi) and Projektträger Jülich (PtJ). It provides comprehensive information on ongoing and completed energy research projects funded under the 7th Energy Research Programme. The portal offers multilingual support, a searchable project database, funding data visualizations, and a wiki for energy research terminology. The website targets researchers, policymakers, and industry stakeholders interested in energy research funding and project details within Germany. Technically, the site employs modern JavaScript frameworks including Bootstrap, Leaflet.js for mapping, and jQuery for DOM manipulation, delivering a responsive and user-friendly experience with moderate performance.

Forschungsnetzwerke Energie is a German government-supported platform facilitating exchange among energy experts, researchers, and policymakers. It provides comprehensive information on energy research networks, events, publications, and webinars, positioning itself as a key knowledge hub in the German energy research sector. The platform is professionally designed, well-branded, and offers clear navigation primarily in German with English options. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Matomo analytics with privacy-conscious settings, and uses HTTPS with good security practices. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

Penzilla is a German-based company specializing in digital solutions for company pension schemes (betriebliche Altersvorsorge). Their platform offers comprehensive services including contract digitalization, automated administration, and consulting tailored for insurance brokers, HR departments, and large enterprises. The website reflects a mature business with strong branding, client trust signals, and integration capabilities with major HR and payroll systems such as DATEV and SAP. Technically, the site is built on WordPress with Elementor and leverages modern marketing and consent management tools like HubSpot and Usercentrics. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

smartaxxess Operation AG operates a comprehensive platform and ecosystem focused on supporting startups and young companies in Germany. Their services include business planning, financial analysis, consulting, insurance, financing, controlling, and liquidity management. The company positions itself as a trusted partner providing access to financing and expert advice, supported by a network of reputable partners such as Allianz and DATEV. The website is professionally designed using WordPress with modern plugins and SEO tools, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, smartaxxess demonstrates a credible and trustworthy online presence with strong business and technical foundations.

Stiftung z'Rieche is a Swiss cultural foundation dedicated to publishing the annual 'Jahrbuch z’Rieche', a yearbook focusing on the history, culture, and societal developments of the Riehen community near Basel. Established in 1961, the foundation serves a niche audience interested in regional heritage and cultural documentation. The website is built on TYPO3 CMS and integrates modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking. The site is well-designed, mobile-optimized, and provides clear navigation to its key offerings including yearbook sales and news updates. However, direct contact information such as emails or phone numbers is not explicitly displayed, relying instead on a contact form.

OneStore is a technology company specializing in AI-powered customer engagement and marketing solutions tailored for e-commerce businesses. Their platform offers a comprehensive suite of tools including abandoned cart recovery, social proof notifications, gamified popups, email and SMS marketing, and integrations with major e-commerce platforms such as Shopify, WooCommerce, and BigCommerce. The company has established a strong market presence with over 150,000 businesses using their services and more than 2,450 five-star reviews on the Shopify App Store, indicating high customer satisfaction and trust. Technically, the website employs a modern technology stack with JavaScript frameworks, analytics tools like Google Analytics and ProfitWell, and customer support integrations such as Crisp chat. The site is hosted behind Cloudflare, ensuring performance and security benefits. The website is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or updates. Cookie consent mechanisms are implemented in compliance with GDPR and CCPA regulations. However, there is no explicit security policy or incident response contact information published, and DNSSEC is not enabled, which could be improved to enhance security posture. Overall, OneStore presents a professional, trustworthy, and technically sound online presence with strong privacy compliance and business credibility. Strategic improvements in security transparency and DNS security would further strengthen their risk profile.

Omnisend operates as an omnichannel marketing platform specializing in email and multi-channel messaging services designed to help businesses engage customers effectively and compliantly. The website analyzed is a minimal landing page primarily used for tracking links from emails sent via Omnisend's platform and providing an abuse reporting contact. The business is positioned as a technology provider in the marketing automation space, founded in 2017, with a medium-sized operational scale. Technically, the website is hosted via Cloudflare with basic HTML, CSS, and JavaScript technologies. The site lacks advanced frameworks or CMS indications and shows moderate performance and basic mobile optimization. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious minimal landing page. From a security perspective, the domain is registered with a reputable registrar and protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. The presence of an anti-abuse contact email demonstrates incident response readiness, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is functional for its purpose but limited in content and compliance documentation. Strategic improvements in security headers, privacy policies, and mobile optimization would enhance trust and compliance posture.

Oceanpayment operates as an online payment service provider targeting global businesses with fast and secure payment processing solutions. The website presents a professional and consistent brand image, emphasizing its position as a leading payment processor. The technical infrastructure is based on WordPress with common analytics and marketing tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. The website is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. However, the absence of WHOIS registration data and lack of explicit contact or security incident information introduces concerns regarding transparency and trustworthiness. Security posture is generally good with HTTPS enabled, but the lack of visible security headers and incident response details suggests room for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

Autistici/Inventati is a volunteer-driven organization founded in 2001 that provides free internet services and digital self-defense tools to activists and grassroots collectives. Their platform emphasizes privacy, non-commercial use, and solidarity, supporting individuals aligned with anticapitalist and digital rights movements. The website content reflects a strong commitment to these principles, with manual service request processing and no commoditization of user data. Technically, the website uses modern frontend technologies including Bootstrap and Typeahead.js, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are not evident. The site does not expose sensitive data and uses HTTPS, but lacks explicit security policy or incident response information. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or tracking scripts. The absence of WHOIS data is consistent with privacy protection, which aligns with the organization's mission. No advertising or analytics services are detected, supporting their privacy-centric approach. Overall, the website is trustworthy, well-structured, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and improving accessibility to further strengthen their security and compliance posture.

The website www.weil-am-rhein.de serves as the official digital presence of the city administration of Weil am Rhein, Germany. It provides comprehensive information and services related to city governance, citizen services, cultural events, environmental initiatives, and urban development projects. The site targets residents, local businesses, tourists, and government stakeholders, offering multilingual support in German, English, and French. The business model is governmental, focusing on public service and information dissemination, positioning itself as the authoritative source for municipal matters in the region. Technically, the website is built on the Komm.ONE CMS platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and bxSlider for interactive and responsive user experience. The site is hosted on netcup servers, uses HTTPS with a Content-Security-Policy header, and demonstrates good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, minimizing risks from mixed content and some injection attacks. No critical vulnerabilities or exposed sensitive data were detected. However, additional security headers like X-Frame-Options and Referrer-Policy could further strengthen the security posture. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a professional, trustworthy, and secure platform for municipal communication and services. It lacks explicit security incident response information and vulnerability disclosure mechanisms, which could be areas for future improvement. The domain registration and hosting details are consistent with the official city identity, reinforcing legitimacy and trustworthiness.

Swatch is a globally recognized watch brand operating an official Finnish e-commerce website offering a wide range of watches. The site is built on Salesforce Commerce Cloud, indicating a mature digital infrastructure supporting e-commerce functionalities such as product search, cart, and checkout. The website demonstrates strong branding consistency and professional design, targeting general consumers in Finland. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools, including Google Tag Manager and TikTok Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers should be verified. WHOIS data was unavailable from the raw output, likely due to query restrictions, but the domain is a well-known brand domain, reducing suspicion. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

OWNBIT GmbH is a Swiss web agency specializing in custom websites and web applications, with a strong focus on user-centered digital solutions. The company targets Swiss SMEs, corporations, and design agencies, offering tailored WordPress and web development services. With over 12 years of market presence and more than 200 clients, OWNBIT holds a reputable position in the local technology sector. The website reflects a professional and consistent brand image, supported by client testimonials and a 5-star Google rating. Technically, the website is built using modern frameworks such as Vue.js and Gridsome, ensuring fast performance and excellent mobile optimization. The use of WordPress for client projects indicates flexibility in CMS solutions. The site includes cookie consent mechanisms and a comprehensive privacy policy, demonstrating good GDPR compliance. However, explicit security headers and SSL configuration details are not evident from the data, suggesting areas for security enhancement. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of detailed security policies and incident response information indicates room for improvement. The WHOIS data is privacy protected, which is justified for this business type, though it limits domain age verification. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with recommendations to strengthen security headers and transparency. Strategically, OWNBIT should focus on enhancing security best practices and publishing vulnerability disclosure policies to further build client trust and compliance readiness.

Gewerbeverein Turbenthal und Umgebung is a local business association representing approximately 130 members from the municipalities of Turbenthal, Wila, Wildberg, and Zell in Switzerland. The association focuses on supporting local businesses across various sectors including retail, manufacturing, hospitality, and services. Their activities include organizing events such as the Gewerbeausstellung GEWA trade exhibition, providing networking platforms, and contributing to the local economy by fostering employment and training young professionals. The website is well-structured, primarily in German, and targets local businesses and residents in the Tösstal region. It uses the ClubDesk CMS platform and integrates modern web technologies such as jQuery, FontAwesome, and Owl Carousel.

Sekundarschule Turbenthal-Wildberg is a small secondary school located in Turbenthal, Switzerland, serving approximately 200 students. The school focuses on fostering student development, responsibility, and mutual respect within its community. The website provides clear contact information and educational content targeted at students, parents, and staff. Technically, the site uses a mix of older and modern JavaScript libraries and frameworks, including jQuery, Alpine.js, and Vue.js, and appears to be built on a custom CMS platform named Escola. The site is mobile optimized and has a moderate performance profile. Security-wise, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, indicating compliance gaps. No vulnerability disclosure or incident response information is present. Overall, the website is professional, trustworthy, and safe for general audiences but would benefit from enhanced privacy and security measures.

Macardo-Club 1904 is a niche hospitality club based in Switzerland, focused on providing an exclusive social and enjoyment experience centered around the Macardo Swiss Distillery brand. The club offers personalized membership cards granting access to a unique honesty bar and cigar lounge, along with events and corporate benefits. The website reflects a professional and consistent brand image with clear contact information and active event promotion. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices, though performance is moderate. Security posture is good with HTTPS and no obvious vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is partial, with a cookie policy and consent mechanism present but no privacy policy page found. Overall, the domain registration and WHOIS data support legitimacy and consistency with the business claims.

St. Franziskus Riehen-Bettingen is a local Roman Catholic parish serving the Basel-Stadt community in Switzerland. The website provides comprehensive information about church services, events, spiritual impulses, and community involvement, targeting parishioners and local residents. The business operates as a non-profit religious organization affiliated with the Römisch-Katholische Kirche Basel-Stadt. Technically, the site uses a modern webIQ CMS framework with common JavaScript libraries such as jQuery and Bootstrap, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though additional security headers and privacy mechanisms could improve compliance. The domain registration data aligns well with the website's claims, supporting legitimacy and trust. Overall, the site is professional, trustworthy, and well-maintained, serving its community effectively.

Offene Kirche Elisabethen Basel operates as a non-profit church organization based in Switzerland, providing community church services and event hosting. The website serves as a platform for event information and booking, leveraging WordPress and the EventPrime plugin for event management. The target audience is the general public interested in church activities and community events. The organization holds a local market position as the first city church in Switzerland, focusing on community engagement rather than commercial activities. Technically, the website is built on a modern CMS with standard plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and nonce-based AJAX security, but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. The site does not employ extensive tracking or advertising, indicating a privacy-conscious approach, though GDPR compliance is incomplete due to missing policies. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and improving accessibility and compliance to strengthen trust and security.

West Fraser Timber Company operates a professional corporate website focused on manufacturing renewable wood building products. The company targets construction professionals and sustainability-conscious customers, positioning itself as a large player in the manufacturing sector. The website is built on Drupal 10, leveraging modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well optimized for mobile and accessibility, with good SEO practices and a clear cookie consent mechanism. Security posture is solid with HTTPS enforced, though explicit security headers are not detected and no vulnerability disclosure policy is published. WHOIS data for the domain is unavailable, which raises transparency concerns but does not negate the professional appearance and trust signals on the site. Overall, the website demonstrates a mature digital presence suitable for a large manufacturing business.

Nordagenda.ch is a regional event and cultural platform operated by SOBAG AG and associated with Meier + Cie AG, focusing on providing comprehensive event listings, cinema programs, gastronomy guides, and cultural information primarily for the Schaffhausen region and neighboring areas in Switzerland and southern Germany. The website offers categorized event data, interactive search and calendar features, and integrates social media channels to engage its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various analytics and advertising services, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some recommended security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy accessible via the contact/impressum page. Overall, the site is legitimate, well-branded, and serves its target audience effectively.

TierWelt is a Swiss-based animal and nature magazine operated by Schweizer Agrarmedien AG, targeting readers interested in animals, nature, and environmental topics. The website offers rich editorial content, subscription services, classifieds, and e-paper access, positioning itself as a reputable media outlet in Switzerland. The business model combines content publishing with advertising and subscription revenue streams. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Flipster, and multiple analytics and advertising integrations. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, security headers, CAPTCHA protections, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Brands for Employees is a Swiss-based platform offering weekly exclusive discount deals targeted at employees of participating companies. The website is built using modern web technologies including React and Next.js, hosted behind Cloudflare, and integrates analytics tools such as Hotjar and Cloudflare Insights. The platform aims to provide value through employee-exclusive offers, positioning itself as a niche service in the employee benefits market. Technically, the site demonstrates good mobile optimization and moderate performance, though accessibility features are basic. Security posture is adequate with HTTPS enforced and use of CDN security, but lacks explicit security headers and visible privacy or cookie policies. Contact information and legal disclosures are absent from the main page, which impacts trust and compliance perception. Overall, the site is safe for general audiences and does not contain adult or questionable content.

The Direction générale de l’enseignement supérieur (DGES) is a governmental entity under the Canton of Vaud, Switzerland, responsible for the strategic oversight and policy development of higher education institutions within the canton. It supports education, research, and innovation, focusing on optimizing conditions for universities and specialized schools. The website serves as an official communication channel providing detailed information on missions, projects, legal frameworks, and contact points for stakeholders including students, academic institutions, and government partners. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap, and integrates analytics tools such as Matomo, Mouseflow, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for a public sector organization. From a security perspective, the site enforces HTTPS and uses some security headers, though explicit security policies and incident response contacts are not published. No vulnerabilities or suspicious content were detected. Privacy compliance is basic, with cookie consent mechanisms and a privacy policy present, but GDPR compliance is not explicitly stated. Overall, the website is trustworthy, professional, and well-maintained, with a strong alignment between domain registration and organizational identity. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving privacy compliance transparency.

Karate Academy Hamburg e.V. is a specialized martial arts dojo located in Hamburg, Germany, offering karate training for children, youth, and adults across various skill levels. The organization emphasizes respect, self-defense, and physical and mental development through karate. The website is built on the Squarespace platform, featuring a professional design with good mobile optimization and clear navigation. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliant but could be improved with explicit cookie management. Overall, the website reflects a trustworthy small business with a focus on community and training services.

Yetkin Mercan-Çağlayansoy | Web Consulting is a small, local German web consulting and social media advisory business based in Köln. The company offers modern, secure, and responsive website creation services alongside social media consulting and support, targeting small business owners and professionals. The website demonstrates a professional presence with clear contact information, client references, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on DomainControl nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent management, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

Gotthilf Benz Turngerätefabrik GmbH + Co KG operates a professional e-commerce platform specializing in sports equipment manufacturing and retail. The company targets a broad audience in Germany and neighboring countries, offering a wide range of sports products with a focus on quality and service. The website is well-branded, consistent, and provides clear contact and business information, reinforcing its market position as a trusted sports equipment provider. Technically, the website leverages Prestashop CMS with modern integrations such as Google Tag Manager, Facebook Pixel, and PayPal SDK, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the business scale. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, including cookie consent and privacy policy. However, explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and accessibility would further strengthen its posture.

The website bewegung-bei-krebs.org is a specialized German-language informational platform focused on the role of sport and physical activity in cancer therapy and rehabilitation. It is supported and funded by the reputable Deutsche Krebshilfe and is part of the IMPLEMENT project. The platform targets cancer patients, their relatives, and healthcare professionals, providing scientifically validated content, therapy offers, and free sports counseling. The site demonstrates a clear mission to support oncological rehabilitation through movement therapy, positioning itself as a trusted resource in this niche healthcare segment. Technically, the website uses modern web technologies including the Scrivito CMS, Bootstrap for styling, and Matomo for privacy-conscious analytics. Hosting appears to be on AWS infrastructure, and the site is mobile-optimized with good SEO practices. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. Cookie consent mechanisms are implemented, and privacy policies are present and GDPR compliant. No critical vulnerabilities or suspicious content were detected. The absence of a security policy or incident response contact is noted as an area for improvement. Overall, the website scores well on content quality, business credibility, and privacy compliance, with moderate scores in technical implementation and security posture. It is a professionally maintained, trustworthy platform serving a sensitive healthcare niche with a clear non-profit orientation.

The website sportlandhessenbewegt.de represents the Landesprogramm SPORTLAND HESSEN bewegt, a government-backed initiative promoting sport, health, and physical activity across all life phases in the German state of Hessen. It serves as an informational and coordination platform for citizens, municipalities, and sports organizations, offering resources such as funding opportunities, projects, events, and networks. The site is well-branded with official Hessen government symbols and provides a professional user experience with clear navigation and accessibility features. Technically, the site is built on Drupal 10, leveraging modern web technologies including lazy loading images and accessible multimedia players. It is hosted within the Hessen state infrastructure, as indicated by the domain's nameservers. The website demonstrates good mobile optimization, SEO practices, and accessibility compliance, though performance is moderate. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy in German, but no explicit cookie consent mechanism was detected. Contact information is primarily via a contact form, with no direct emails or phone numbers found. Overall, the website is a credible, secure, and professional government platform with minor areas for improvement in security headers and cookie consent. It poses low risk and effectively serves its public health promotion mission.

Amplify, operated by PickyStory, is a SaaS growth platform designed specifically for Shopify merchants to increase revenue through AI-powered bundles, upsells, and subscription services. The platform targets e-commerce brands seeking to boost average order value and conversions with intelligent cart and checkout optimizations. The website is professionally built on WordPress using Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy, business-focused, and well-positioned in the e-commerce SaaS market.

Mein Fahrtwind is a promotional website operated by the Sparkassen- und Giroverband Hessen-Thüringen (SGVHT), a public financial association in Germany. The site hosts a contest offering participants the chance to win one of eight electric scooters, targeting residents of Hessen, Thüringen, and parts of Rheinland-Pfalz. The website is professionally designed with comprehensive legal and privacy documentation, reflecting a strong commitment to GDPR compliance and user data protection. The contest employs a double opt-in mechanism to ensure participant consent and data accuracy. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, Adobe Typekit fonts, and a cookie consent management system. Hosting is managed via DomainControl, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security measures include HTTPS and IP masking in analytics, though HTTP security headers are not explicitly detected. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies are detailed and transparent, including a named data protection officer contact. No incident response or vulnerability disclosure policies are found, which could be areas for improvement. Overall, the site presents a low risk profile with strong compliance and trust indicators. Strategically, the site effectively supports the SGVHT's marketing and public engagement goals, leveraging digital tools to promote sustainable mobility. The integration of multiple marketing and tracking tools is balanced with user privacy considerations, positioning the organization as responsible and trustworthy in its digital presence.

The website www.ps-los-sparen.de represents a regional lottery savings product offered by the Sparkassen financial institutions in Hessen and Thüringen, Germany. The business model combines savings with lottery participation, offering cash and prize draws while supporting social projects. The site targets local savers and lottery participants, positioning itself as a trusted regional financial service with strong branding consistency aligned with the Sparkassen group. Technically, the site is built on Concrete CMS with modern frontend technologies including jQuery, Bootstrap, and Vue.js. It employs Matomo analytics for privacy-conscious user tracking and integrates a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and published security policies are absent. The site is accessible without WAF or blocking mechanisms and shows no signs of malicious content or vulnerabilities. Overall, the website demonstrates good content quality, technical implementation, and business credibility, suitable for its regional financial service role.

Markant-Stiftung is a Swiss philanthropic foundation established in 1993, focused on supporting cultural and charitable projects primarily in the Zentralschweiz region and Switzerland at large. The foundation operates with a clear mission to fund projects in music, theater, visual arts, literature, and social initiatives such as youth promotion and support for disadvantaged groups. It maintains a transparent and structured application process via a dedicated online platform, reflecting a mature digital presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a responsive and user-friendly experience. Security posture is solid with HTTPS, CSRF tokens, and no visible vulnerabilities, though some advanced security headers and incident response policies are absent. Privacy compliance is strong, with a comprehensive privacy policy aligned with Swiss and GDPR standards, although cookie consent mechanisms are missing. Overall, the foundation presents a trustworthy and professional online presence aligned with its non-profit mission.

Settelen AG is a well-established Swiss mobility service provider based in Basel, with a history dating back to 1883. The company offers a comprehensive range of services including new and used car sales, garage and repair services, car rental, moving services, and group travel by bus. It holds a strong regional market position and is recognized as a leading Toyota center in Switzerland. The website is professionally designed, content-rich, and targets both private and corporate customers in the Basel region. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with strong branding and user experience.

Bäckerei Kult is a small local bakery business based in Basel, Switzerland, operating multiple physical locations and offering bakery products, ordering services, and event hosting. The website is professionally designed using WordPress and integrates social media channels such as Facebook and Instagram to engage with its local audience. The business targets local customers and partners within the Basel region, maintaining a consistent brand presence and providing clear information about opening hours and locations. Technically, the website uses a modern CMS with SEO optimization and basic accessibility features, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, reflecting a legitimate and established local business.

Theater Basel is a well-established cultural institution in Switzerland offering a diverse range of performing arts including opera, theater, and ballet. The website effectively communicates its offerings with detailed event calendars, production information, and ticket purchasing options. The institution targets a broad audience including families, schools, and general theater enthusiasts. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and security headers, though improvements can be made in privacy compliance by adding cookie consent mechanisms and publishing terms of service. Overall, the website reflects a professional and trustworthy organization with a solid digital presence.

Paprec Schweiz is a well-established Swiss company specializing in sustainable recycling, waste management, and secure data destruction services. With over 125 years of experience and multiple subsidiaries across key Swiss regions such as Aargau, Basel, Geneva, Lucerne, and Zurich, the company offers comprehensive solutions for both corporate and private clients. Their business model focuses on environmental sustainability and resource recovery, leveraging modern technologies and eco-friendly processes. The website reflects a professional and consistent brand image, supported by structured data and active social media presence. Technically, the website is built on WordPress with popular plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized and uses interactive mapping tools to showcase locations. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Analytics usage is minimal and privacy-conscious, with Google Analytics disabled by default. No critical vulnerabilities or security issues were detected. However, the absence of a visible privacy policy and terms of service pages is a compliance gap. Contact information is clearly presented with multiple phone numbers and physical addresses for subsidiaries. Overall, the site demonstrates a mature digital presence aligned with the company's market position. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to further strengthen trust and compliance.

Opferhilfe beider Basel is a regional non-profit organization dedicated to supporting victims of violence in the Basel area of Switzerland. The website serves as an informational and advisory platform, offering guidance, support, and resources for victims of various forms of violence including sexualized violence, domestic violence, hate crimes, and more. The organization targets victims and their close relatives, providing free consultation services as mandated by the Swiss Victim Support Act. The site is multilingual, enhancing accessibility for diverse audiences. Technically, the website is built on a modern WordPress infrastructure using Elementor for design and layout, WPML for multilingual support, and WP Rocket for performance optimization. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices through Yoast SEO integration. However, there is room for improvement in accessibility and explicit security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no evidence of security policy documentation or incident response contacts, which are recommended for enhanced trust and compliance. Privacy and cookie policies are absent, which impacts GDPR compliance and user trust. Overall, Opferhilfe beider Basel presents a trustworthy and professional online presence for a non-profit victim support entity. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response information to strengthen security posture and compliance.

S.E.A. AG operates the website Kulturservice.ch, providing a range of advertising and marketing services across Switzerland, including social media management, poster and flyer advertising, event staffing, and guerilla marketing. The company targets businesses and organizations seeking comprehensive promotional solutions. The website is professionally designed with clear navigation and consistent branding, reflecting a small but established regional player in the media sector. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics for visitor tracking, and employs a cookie consent mechanism to comply with privacy regulations. Mobile optimization and SEO practices are adequately implemented, ensuring a good user experience. Security posture is moderate; HTTPS is used, but security headers and incident response policies are lacking, representing an area for improvement. Overall, the site is trustworthy and compliant with basic GDPR requirements, though it could benefit from enhanced security and transparency measures.

The Geschwister Meier Stiftung is a Swiss non-profit foundation dedicated to supporting music and cultural activities ranging from traditional folk music to avant-garde experimental sounds. The website serves as an informational platform to present the foundation's mission and activities, targeting a general audience interested in arts and culture within Switzerland. The foundation operates in a niche cultural sector with a small organizational size and a focused business model centered on cultural funding and promotion. Technically, the website is built on the Wix platform, utilizing Wix's standard JavaScript libraries and hosting infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The technical stack is modern but limited to Wix's ecosystem, which simplifies maintenance but may restrict advanced customization. From a security perspective, the site benefits from HTTPS and a good SSL configuration. However, it lacks several security best practices such as security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is professionally designed and consistent with the foundation's branding and mission. The absence of contact details and privacy-related policies slightly diminishes trust and compliance posture. Strategic enhancements in privacy compliance, security headers, and contact transparency would strengthen the foundation's digital presence and user confidence.