Medium-risk security reports

Region Leimental Plus is a regional governmental association in Switzerland representing a cluster of municipalities in the Basel-Landschaft canton. The website provides information about the association's formation, member municipalities, and regional projects. The site is hosted on WordPress.com and uses standard WordPress technologies and plugins. The technical infrastructure is modern and adequate for the site's purpose, with good mobile optimization and moderate performance. Security posture is acceptable with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

Atelier Spolia GmbH is a small architectural and design atelier based in Bern, Switzerland. The company focuses on exploring architecture and design through a process of learning and rethinking, offering bespoke projects that encourage freedom of use and appropriation. Their market position is niche, targeting clients interested in innovative and open architectural solutions. The website is built on WordPress using the Lay Theme, incorporating modern JavaScript libraries such as jQuery and Swiper.js, indicating a moderate level of technical maturity. Mobile optimization is good, and the site uses HTTPS with valid SSL certificates, ensuring secure communication. However, the absence of privacy and cookie policies, security headers, and analytics tools suggests room for improvement in compliance and marketing sophistication. Security posture is adequate but could be enhanced by implementing standard security headers and formal incident response mechanisms. Overall, the website presents a professional image with clear contact information but lacks comprehensive privacy and security disclosures.

Bajour is a Swiss media company specializing in community journalism focused on Basel and its local community. The website offers news articles, community engagement features, and membership options, positioning itself as a trusted local media outlet. The content is professionally presented with a modern design and clear navigation, targeting residents interested in local news and cultural topics. Technically, the site is built on modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy business entity.

Mediacampus Frankfurt is an established educational institution specializing in seminars, training, and educational programs for the book trade and media industry in Germany. The website presents a professional and well-structured platform offering a variety of courses, webinars, and training sessions targeting professionals, newcomers, and specialists in publishing and media sectors. The institution maintains a strong social media presence and provides detailed event information, enhancing its market position as a key player in media education. Technically, the website employs modern web technologies including JavaScript, Algolia Search for site search functionality, and Google Tag Manager for analytics, which is loaded conditionally upon cookie consent. The site is hosted on Anexia servers, uses HTTPS with good SSL configuration, and is optimized for mobile devices with good accessibility and SEO practices. However, some security headers are not explicitly detected, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-aware analytics loading. No vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns with the business claims, showing consistent domain registration and hosting. Privacy and cookie policies are not explicitly found in the provided content, which is a compliance gap. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy disclosures and security policy transparency.

À la lyonnaise is a French lifestyle media company focusing on the city of Lyon, offering content related to food, shopping, cultural discoveries, and leisure activities. The website serves as a digital platform complementing their print magazine editions, targeting residents and visitors interested in Lyon's local culture and lifestyle. Their market position is that of a niche local media outlet with a consistent brand presence and active social media engagement. Technically, the website employs modern JavaScript libraries, Matomo and Google Analytics for tracking, and uses HTTPS with cookie consent mechanisms, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security headers and public security policies, suggesting room for improvement in security posture. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency around terms of service and incident response. Strategic recommendations include implementing security headers, publishing security policies, and improving SEO and accessibility compliance.

The website www.visiterlyon.com serves as the official tourism portal for Lyon and its metropolitan area, operated by the Office du Tourisme et des Congrès de la métropole de Lyon. It provides comprehensive tourism information, online booking services for hotels, restaurants, leisure activities, and city passes such as the Lyon City Card. The site targets tourists, families, business travelers, and groups, positioning itself as an authoritative and trusted source for visiting Lyon. The content is rich, professionally presented, and available in multiple languages, enhancing accessibility and user experience. Technically, the website employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and MapLibre GL for mapping. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement, security headers, and secure forms, although explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, WHOIS data for the domain is missing or unavailable, which is unusual for an official entity and slightly impacts trustworthiness. Despite this, the website's certifications, social media presence, and comprehensive content support its legitimacy. Overall, the website is a high-quality, secure, and user-friendly platform for promoting tourism in Lyon. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further enhance trust and transparency.

CDTI is a Spanish government agency dedicated to promoting technological development and innovation among Spanish companies. It acts as a key national funding and support body for R&D projects, international cooperation, and innovation financing. The website reflects a mature digital presence with comprehensive content targeting entrepreneurs, companies, and research entities in Spain. The site is well-structured, professionally designed, and provides clear navigation and access to services and information. Technically, it is built on Drupal 9 with modern libraries and includes privacy-conscious analytics via Matomo and a consent manager (Klaro). Security posture is strong with HTTPS, security headers, and no evident vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Business credibility is high, supported by official domain registration and alignment with government entities. Overall, the site is trustworthy and serves its public mission effectively.

The website speaz.com currently presents an empty HTML page with no visible content, metadata, or interactive elements. The domain is registered with OVH sas since April 2020 and is locked against unauthorized transfers or deletions, indicating some level of domain management maturity. However, the lack of any website content or policies suggests the site is either under development or abandoned. There are no contact details, privacy policies, or security disclosures available, which limits the ability to assess the business or security posture comprehensively. Technically, the site is hosted by OVH but lacks modern web technologies, SEO optimizations, or accessibility features. Security headers and DNSSEC are not implemented, and SSL configuration is basic. Overall, the site scores low on content quality, technical implementation, privacy compliance, and business credibility.

ProveSource operates as a SaaS provider specializing in social proof and live sales notification tools designed to boost online sales conversions. The company positions itself as a market leader in this niche, targeting e-commerce businesses and online marketers. The website reflects a modern WordPress-based infrastructure with Elementor and Yoast SEO plugins, supported by AWS hosting inferred from DNS servers. The technical setup includes multiple analytics and marketing scripts such as Mixpanel, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap for GDPR and other regulations. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

SAIO is a small ecommerce service provider specializing in Shopify development, offering custom themes, live webshop tweaks, and app development. The company positions itself as an industry leader trusted by thousands of shop owners worldwide. The website is built on Squarespace, leveraging standard web technologies and Google Analytics for tracking. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is incomplete and privacy-protected, which limits transparency but is common for small businesses. Overall, the website is professional and trustworthy with room for improvement in security and compliance documentation.

Schinkels is a regional German brewery and hospitality business offering craft beers, a restaurant experience, and event hosting services. The company emphasizes quality, sustainability, and creating memorable moments for its customers. Their website is professionally designed using WordPress with SEO and event management plugins, providing a rich user experience and structured event data. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing. Overall, the site reflects a mature digital presence suitable for their business model and target audience.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

WebThinker GmbH is a small German technology service provider specializing in web design, online marketing, web development, tracking, analysis, and consulting. The company holds reputable certifications such as Google Partner and Shopware Partneragentur, positioning it well in the digital services market. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the business demonstrates legitimacy and trustworthiness with clear contact information and positive customer testimonials.

The Holzbau-Offensive Baden-Württemberg website is a well-established government initiative promoting sustainable and climate-friendly construction using wood. It serves as an information hub offering details on funding, practical support, education, research, and events related to wood construction in the Baden-Württemberg region. The site targets architects, engineers, planners, and public sector stakeholders, positioning Baden-Württemberg as a leader in sustainable building practices. Technically, the site employs modern web technologies including Yii Framework, Bootstrap, jQuery, and Slick Carousel, ensuring a responsive and accessible user experience. Security measures such as HTTPS and CSRF tokens are implemented, though some HTTP security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the website's governmental purpose, supporting high legitimacy and trustworthiness.

The EFRE Baden-Württemberg website serves as the official regional government portal for the European Regional Development Fund (EFRE) in the German state of Baden-Württemberg. It provides comprehensive information on funding programs, project examples, current news, and guidance for applicants. The site targets a broad audience including citizens, businesses, and public institutions interested in regional development funding. The portal is well-positioned as a trusted government resource, supported by official branding and EU co-funding acknowledgments. Technically, the website employs a modern technology stack including jQuery, Matomo analytics, and custom CMS solutions tailored for Baden-Württemberg's government portals. It demonstrates good mobile optimization, accessibility compliance, and moderate performance. The hosting and DNS infrastructure aligns with regional academic and government networks, enhancing trustworthiness. From a security perspective, the site enforces HTTPS, uses captcha mechanisms to prevent automated abuse, and implements cookie consent in line with GDPR requirements. While no explicit security policy or incident response contacts are published, the site shows good baseline security hygiene with no visible vulnerabilities or exposed sensitive data. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to further strengthen trust and security maturity.

Economic Promotion Valais is a regional government-affiliated entity focused on supporting entrepreneurs, startups, investors, and companies in the Canton of Valais, Switzerland. The website serves as a strategic platform offering services such as assistance to enterprises, innovation support, financial aid, and land or facility search to foster regional economic development. The site is professionally designed with consistent branding and clear navigation, targeting a broad audience of business stakeholders interested in the Valais economy. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies like jQuery and Swiper.js for interactive elements. The site is mobile-optimized and implements SEO best practices, including structured data for enhanced search visibility. Performance is moderate with good mobile responsiveness. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Cookie consent is implemented via the Complianz GDPR plugin, indicating some level of privacy compliance. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements include publishing comprehensive privacy and security policies, adding direct contact information, and implementing a vulnerability disclosure mechanism to enhance transparency and trust.

Tablet Hotels operates as a specialized online booking platform focusing on boutique and luxury hotels worldwide. Affiliated with the MICHELIN Guide since 2018, it offers curated hotel selections, verified reviews, concierge-level service, and exclusive member benefits through its Tablet Plus program. The website targets discerning travelers seeking unique and memorable lodging experiences. Technically, the site leverages a modern React-based single-page application architecture, supported by a headless CMS (Strapi) and CDN hosting via Amazon CloudFront. It integrates multiple third-party analytics and marketing tools including Google Tag Manager, Facebook SDK, and Kameleoon for A/B testing. Security posture is strong with HTTPS enforced and tokenization for payment data, though explicit security headers and published security policies are absent. Privacy compliance is partial, lacking visible privacy and cookie policies despite consent mechanisms being present. Overall, the site demonstrates high professionalism, good performance, and strong branding consistency.

Lexware, a division of the Haufe Group since 1993, is a leading German software provider specializing in business and accounting software for self-employed individuals, freelancers, and small to medium-sized enterprises. The company offers a comprehensive suite of products including invoicing, bookkeeping, payroll, e-invoicing, and integrated business banking solutions. With over one million customers and multiple industry certifications, Lexware holds a strong market position as a trusted provider in the German SME software market. The website reflects a mature digital presence with modern technologies, strong branding, and extensive customer engagement features.

Seelsorge Polizei und Rettungskräfte Zürich SPuR is a specialized non-profit organization providing confidential and free counseling services to police and emergency personnel in Zurich. The website serves as an informational and contact platform, offering support for stressful work or personal situations and special life events. The organization maintains a local presence with clear contact details and event announcements, positioning itself as a trusted support resource within its niche. Technically, the website is built on WordPress using common plugins and frameworks, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced compliance and security measures.

Bahnhofkirche Zürich is a small non-profit organization providing a spiritual and contemplative space in Zurich. The website offers information about the chapel, pastoral care, community groups, and daily reflections called Weg-Wort. It targets the general public and spiritual seekers in the local community. The business model is focused on community service and donations, positioning itself as a trusted local spiritual resource. Technically, the website is built on WordPress using common plugins such as WPForms and MailPoet for forms and newsletters. The site is served over HTTPS, has a moderate performance profile, and is mobile optimized. However, it lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good basic practices with HTTPS and secure form handling but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie policy or terms of service. The domain uses privacy protection, which is justified for this type of non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and maintaining plugin updates to improve security posture and compliance.

Solidara Zürich is a well-established non-profit organization founded in 1862, dedicated to providing social support and professional counseling to socially disadvantaged individuals in Zürich. Their key services include the Café Yucca, a welcoming meeting place; Isla Victoria, a counseling center for sex workers; and assistance for people in emergency situations. The organization maintains a transparent and professional online presence with clear contact information and social media engagement. Technically, the website is built on WordPress with modern themes and SEO plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website reflects a trustworthy and credible organization with a focus on social welfare.

The website www.stadtkloster.ch is a small-scale, community-oriented site hosted on the Wix platform, primarily serving a Swiss audience. The site uses Wix's Thunderbolt framework and standard JavaScript libraries, indicating a modern but basic technical infrastructure. The content is minimal with no visible business or contact information, privacy policies, or terms of service, which limits its professional and compliance stature. Security posture is basic with no advanced headers or policies detected, and no forms or data collection mechanisms are apparent. Overall, the site appears safe and suitable for general audiences but lacks critical compliance and security features.

Mosaic Church und Fachstelle Zürich is a small non-profit religious organization affiliated with the reformierte Kirche Zürich, focusing on providing a welcoming church community and educational resources for LGBTIQ+ individuals. Their services include church gatherings, theological education, and community support. The website is built on Squarespace, featuring a modern and responsive design with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, complemented by a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is trustworthy, professional, and well-aligned with its mission.

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

The Bayerische Botanische Gesellschaft e.V. is a long-established non-profit botanical society based in Munich, Germany, founded in 1890. The organization focuses on the scientific study and conservation of Bavaria's native flora, offering members educational programs, excursions, and publications. The website serves as an informational portal for members and interested parties, highlighting the society's history, activities, and protected areas it manages. Technically, the site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the site is functional and professionally presented, mobile optimization and accessibility are basic, and there is room for improvement in SEO and privacy compliance. Security posture is adequate with HTTPS and standard headers, but lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and suitable for its audience but could benefit from enhanced privacy and security features.

MVB GmbH operates as a central technology and information provider in the book industry, offering digital platforms and media formats to publishers, booksellers, self-publishers, and service providers primarily in Germany and internationally. The company has a strong market position as a connector within the book industry, supported by a professional and content-rich website that reflects its business focus and international presence. Technically, the website employs modern web technologies including FontAwesome, Google Tag Manager, and a cookie consent management system, hosted on Anexia infrastructure. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and established entity.

Heitech Service GmbH is a small German web agency specializing in web design, hosting, and consulting services primarily for regional clients. Their website is professionally designed using the Contao CMS and offers hosting under the Lausitz-Hosting brand. The technical infrastructure includes modern JavaScript libraries and a cookie consent mechanism, indicating GDPR awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information. Overall, the website is functional and trustworthy in appearance but requires verification of domain registration and enhanced security practices.

National Geographic Partners, LLC operates the National Geographic website, a globally recognized media organization specializing in science, exploration, geography, and environmental journalism. The website serves a broad audience interested in educational and documentary content, supported by flagship publications and television programming. Owned by The Walt Disney Company, it maintains a strong market position with consistent branding and high-quality content. Technically, the website employs modern web technologies including React and integrates advanced monitoring and consent management tools such as New Relic and OneTrust. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit vulnerability disclosure and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with excellent content quality and user experience, suitable for a large enterprise media entity.

National Geographic España operates as a prominent media brand delivering high-quality content focused on science, nature, history, and travel. The website serves a broad general audience with a mix of free and subscription-based content, supported by advertising partnerships and e-commerce through affiliated domains. The brand is well-established in Spain, leveraging multimedia content and digital subscriptions to maintain market relevance. Technically, the website employs a modern tech stack including advanced advertising technologies, consent management via Didomi, and multimedia delivery through JWPlayer. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a mature digital infrastructure. However, some areas such as explicit privacy policy publication and accessibility could be improved. Security posture is solid with HTTPS enforcement and consent mechanisms, but lacks visible vulnerability disclosure or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and branding strongly indicate legitimacy. Overall, the site presents a low-risk profile with good content quality and technical implementation, but should enhance transparency around privacy, contact information, and security disclosures to strengthen trust and compliance.

BOSS TONE EXCHANGE is a specialized online platform launched in 2022 that enables users of BOSS musical products to share original Livesets globally. The platform targets musicians and music producers who use BOSS gear, providing a community-driven service focused on content sharing. The website is professionally designed with good SEO and mobile optimization, leveraging modern web technologies and third-party services such as Google Analytics and OneTrust for cookie consent management. Hosting appears to be on AWS infrastructure, ensuring reliable performance. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, DNSSEC is not enabled and security headers are missing, representing areas for improvement. No direct contact information or detailed security policies are published, which could impact user trust. Overall, the domain registration is consistent and legitimate, supporting the platform's credibility. The site contains no adult or questionable content and maintains a safe environment for general audiences.

Krüger + Co. AG is a Swiss medium-sized company specializing in heating, cooling, humidification, dehumidification, and water damage drying solutions, serving both industrial and residential markets across 21 locations. The company offers a broad range of products and services including emergency heating, climate systems, and consulting, positioning itself as a reliable regional player in the energy sector. Technically, the website is built on WordPress with WooCommerce, enhanced by modern plugins for SEO, multilingual support, and GDPR compliance. Analytics tools like Microsoft Clarity, Google Tag Manager, and Hotjar are used for user behavior insights. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, with transparent contact information and compliance with privacy regulations.

Schulthess Maschinen AG is a well-established Swiss manufacturer and retailer specializing in washing machines, dryers, and dishwashers. The company emphasizes innovation rooted in tradition, targeting both homecare and professional customers primarily in Switzerland and German-speaking regions. Their business model combines product sales, service contracts, and an online shop for wash cards, positioning them as a trusted brand in the household appliance sector. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement tools. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, secure, and compliant, supporting the company's market position effectively.

ANSARO is a Swiss-based coffee roastery specializing in freshly roasted coffee beans and retailing coffee products. The company positions itself as a local Swiss quality brand with a focus on authentic taste and craftsmanship. The website is professionally designed using the Wix platform, indicating a moderate level of digital maturity suitable for a small retail business. The technical infrastructure leverages Wix's Thunderbolt framework, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security features to meet compliance standards. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving accessibility.

The website coolandclean.ch represents a national youth sports prevention program operated under the auspices of Swiss Olympic. It focuses on promoting healthy behaviors, fair play, and substance abuse prevention among young athletes and their leaders. The platform offers educational content, training tips, a material shop, and community support including regional ambassadors and consultation services. The site is well-branded, professionally designed, and targets youth sports organizations and their stakeholders in Switzerland. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Google Maps API, likely built on a CMS such as Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not visible. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

Swiss Olympic Association is the official national Olympic organization representing Swiss athletes and promoting Olympic values such as Excellence, Respect, and Friendship. The website highlights their involvement in Olympic missions, including the upcoming Milano Cortina 2026 Winter Games, and showcases athlete stories and official partners. The organization operates as a non-profit entity focused on supporting athletes and the Olympic movement within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, JWPlayer, and Slick Carousel. The site appears to be built on a CMS platform with structured content and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, security headers are not explicitly detected and incident response contact details are absent, which could be improved. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It provides clear contact information, partner listings, and social media integration, supporting a positive user experience and business credibility.

natelo is a Swiss-based retail and e-commerce company specializing in mobile subscriptions, smartphones, buyback, repairs, and accessories. The company operates both online and through four physical locations, targeting Swiss consumers seeking mobile technology products and services. The website presents a professional and consistent brand image with a clear focus on the Swiss market. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO and payment processing. It employs HTTPS and security best practices such as Google reCAPTCHA and cookie consent management, indicating a mature digital infrastructure. However, the absence of a dedicated privacy policy and terms of service pages represents a compliance gap. Security posture is strong with appropriate headers and no visible vulnerabilities, but incident response and security policy documentation are lacking. Overall, natelo demonstrates a solid market presence with good technical and security foundations but should enhance privacy compliance and transparency to improve trust and regulatory adherence.

SWISS is a major international airline operating under the Lufthansa Group, providing comprehensive flight booking and travel services globally. The website is professionally designed, mobile-optimized, and offers a rich user experience with clear navigation and extensive travel-related content. Technically, the site leverages modern JavaScript frameworks, Adobe Helix RUM for performance monitoring, and Tealium for tag management, hosted on Akamai CDN ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, secure login mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the Lufthansa Group's reputation.

The Swiss Paraplegic Group is a well-established non-profit organization based in Switzerland, dedicated to supporting individuals with spinal cord injuries through a comprehensive network of services including rehabilitation, advocacy, and education. The website reflects a professional and trustworthy presence with clear communication of their mission and services. Technically, the site is built on modern frameworks such as Gatsby and React, leveraging reputable third-party services for analytics and consent management, ensuring a fast and accessible user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although a formal security policy and incident response information could enhance trust further. Privacy compliance is robust, with a detailed cookie policy and consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high business credibility and technical maturity, suitable for its healthcare and non-profit sector audience.

The domain suddl.ch currently hosts a Wix error page indicating that the domain is not connected to an active website. There is no business information, contact details, or privacy policies present, which suggests the domain is either unused or under development. The website is built on the Wix platform using AngularJS and jQuery libraries, but no custom content or services are offered. The technical infrastructure is basic and lacks modern SEO and accessibility features. Security posture is minimal with no detected security headers or policies, and the domain registration is privacy protected, limiting transparency. Overall, the site presents a low trust profile and minimal business presence.

KAFILAND is a small local retail business specializing in coffee machines located in Altendorf SZ, Switzerland. The website is built on the Wix platform and uses Wix's Thunderbolt framework and standard JavaScript polyfills. The business targets local consumers and businesses seeking coffee machines. The website provides basic business information including phone number and physical address but lacks email contact and online forms. The technical infrastructure is modern for a small business, with HTTPS enabled and moderate performance. However, privacy and cookie policies are missing, which is a compliance gap. Security posture is adequate with HTTPS and some script-based security hardening but lacks explicit security headers and incident response information. Overall, the website is functional and trustworthy but could improve privacy compliance and contact options.

The website stefan-aufdermaur.ch serves as a personal or professional portfolio site for Stefan Auf der Maur, likely showcasing artistic or photographic work. The site is minimalistic with limited metadata and no structured data, focusing primarily on visual content. The target audience appears to be general visitors interested in the individual's work, with no commercial or transactional features evident. Technically, the site uses basic HTML, CSS, and JavaScript with lazy loading for images, but lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak, with no visible security headers or privacy policies, and no HTTPS status confirmed from the provided data. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

Julian Salinas Fotografie is a small photography business based in Switzerland, focusing on artistic and commissioned photography services primarily in Basel and Zurich. The website presents basic information about the business and its offerings, including art works, commissioned projects, exhibitions, portraits, and video projects. The target audience is general, including art enthusiasts and potential clients seeking photography services. Technically, the website is built using React and standard web technologies such as JavaScript and CSS. The site appears moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There are no detected content management systems or third-party analytics or advertising tools integrated. From a security perspective, the website lacks visible security headers and privacy or cookie policies, indicating a low maturity level in security and compliance. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also limiting user engagement. The absence of HTTPS information prevents a full SSL configuration assessment. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a basic but functional online presence for a small photography business. Key recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

Christine Moser's website serves as an online portfolio showcasing her art exhibitions and objects, primarily targeting art enthusiasts and museum visitors. The site highlights projects such as 'Double Face' at the Museum für Gestaltung Zürich, positioning her as a niche artist in the contemporary art and design space. The business model is centered on artistic presentation rather than commercial sales or services. Technically, the website employs modern frontend technologies including Svelte and Swiper.js for interactive galleries, indicating a moderate level of digital maturity. The site appears mobile-optimized with good design quality and navigation clarity, although accessibility features are basic. No CMS or hosting provider details are evident. From a security perspective, the site lacks key security headers and explicit privacy or cookie policies, which lowers its compliance posture. The absence of contact information and incident response details further limits trust and security transparency. However, no vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, privacy compliance, and clearer contact information to improve trustworthiness and regulatory adherence.

The website mirjamplattner.ch appears to be a minimal personal or professional portfolio site built using the SvelteKit framework. The content is very limited, primarily displaying a logo image with no additional textual or metadata content. There is no evidence of privacy policies, cookie consent mechanisms, or terms of service, indicating a basic digital maturity level. The technical infrastructure is modern in terms of framework choice but lacks visible SEO, accessibility, or performance optimizations. Security posture is minimal with no detected security headers or HTTPS confirmation in the provided data, and no contact or incident response information is available. Overall, the site presents a low-risk profile due to minimal content and no suspicious elements, but it lacks many standard compliance and security features expected for professional or business websites.

3 Mai Avocates is a small, multilingual law firm based in Geneva, Switzerland, specializing in criminal law, torts and contracts, and public law. The firm is led by founding partners Xenia Rivkin and Sofia Suarez-Blaser and serves clients in French- and German-speaking Switzerland as well as in international disputes. The website is professionally designed with good content quality and clear navigation, supporting multiple languages to cater to a diverse client base. Technically, the site uses modern frameworks such as SvelteKit and integrates Google Maps for location display, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a trustworthy and professional image but would benefit from enhanced compliance and security documentation.

Miranda Roux is a Danish artist based in Geneva, specializing in figurative art that explores surrealism, classical sculpture, and taboo themes. The website serves as a portfolio showcasing her selected works, biography, news, texts, and contact information. The site targets art enthusiasts, collectors, and galleries interested in contemporary European art. Technically, the website is built using the modern Svelte framework, hosted by Infomaniak Network SA, and employs HTTPS with domain transfer protection. However, it lacks DNSSEC and a defined Content-Security-Policy header, which are recommended for enhanced security. The site does not provide privacy or cookie policies, nor does it include direct contact emails or phone numbers, relying solely on a contact form for communication. No tracking or advertising technologies are detected, indicating a privacy-conscious approach but also a lack of compliance documentation. Overall, the website is professional and well-structured but would benefit from improved security headers and privacy compliance measures.

The website reuse-rlp.de is a non-profit platform dedicated to promoting and facilitating the practice of reuse in the construction sector within Rheinland-Pfalz, Germany. It targets professionals and stakeholders interested in sustainable construction and reuse practices. The platform provides information about actors and buildings involved in reuse, as well as specialist information relevant to the sector. The site is well-branded and presents content in German with a clear and consistent design. Technically, the website is built using modern technologies such as SvelteKit and employs Matomo analytics with DoNotTrack enabled, reflecting a moderate level of digital maturity and privacy awareness. The site appears to be mobile-optimized and offers a good user experience with clear navigation. However, there is a lack of visible security headers and no explicit SSL configuration data was provided, which suggests room for improvement in security hardening. From a security perspective, the site does not expose sensitive data and uses privacy-conscious analytics, but it lacks critical compliance elements such as privacy and cookie policies, contact information for incident response, and vulnerability disclosure mechanisms. The WHOIS data indicates the domain is likely affiliated with an academic or regional institution, supporting its legitimacy. Overall, the security posture is moderate but could be enhanced by implementing standard security headers, privacy documentation, and contact channels. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies to improve GDPR compliance, implementing security headers to harden the site, providing clear contact information for security incidents, and establishing a vulnerability disclosure policy. These steps will enhance trust, compliance, and security culture, supporting the platform's mission and user confidence.

The eMuseum website serves as the digital archive platform for the Museum für Gestaltung Zürich and the Archive of the Zurich University of the Arts (ZHdK). It provides extensive access to a large collection of design and art objects, positioning itself as the largest Swiss online database in this domain. The platform targets researchers, curators, designers, collectors, and the general public interested in design and art history. The business model is non-profit, focusing on cultural preservation and digital access rather than commercial activities. Technically, the website is built on a custom CMS leveraging the Apache Tapestry framework, with frontend technologies including Bootstrap, jQuery, OpenLayers, and Font Awesome. It employs Matomo for analytics and AddToAny for social sharing. The site is mobile-optimized with moderate performance and basic accessibility features. SEO optimization is basic, with room for improvement in structured data and meta tags. From a security perspective, the site enforces HTTPS and uses secure form tokens, but lacks several security headers and published policies such as privacy, cookie, and incident response. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the institutional identity, confirming legitimacy and trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

Beisheim Holding operates as a holding and capital management company with a professional online presence focused on corporate stakeholders and investors. The website is structured using modern web technologies including Nuxt.js and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and GDPR-compliant cookie practices. The site lacks explicit contact information, terms of service, and security policies, which limits transparency and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Overall, the website is functional and compliant in privacy aspects but would benefit from enhanced transparency and security disclosures.

STATION UG (haftungsbeschränkt) operates a regional digital platform serving the FrankfurtRheinMain startup and innovation ecosystem. The website provides news, event information, programs, awards, and networking opportunities targeting startups, innovators, and ecosystem participants in the region. The business positions itself as a central hub for regional startup support and information dissemination. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Revolution Slider, and WP Jobsearch, hosted by Raidboxes. It employs Google Analytics for visitor tracking and Mailchimp for newsletter management. The site is mobile-optimized and SEO-friendly, with a consistent brand presence and active social media channels. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and a security policy page.