Medium-risk security reports

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and think tanks targeted at architects, school authorities, and planners. The website is well-positioned as a leading resource in the education construction sector in Germany, supported by a medium-sized company, Cubus Medien Verlag GmbH. The technical infrastructure is based on a modern WordPress CMS with relevant plugins for e-commerce, events, SEO, and multilingual support, hosted under a reputable registrar. Security posture is good with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the site is trustworthy, professionally designed, and content-rich, serving a general audience interested in educational infrastructure.

The website holzbauplus-wettbewerb.info serves as the official platform for the Bundeswettbewerb HolzbauPlus 2025/26, a German federal competition promoting sustainable wood construction projects. It is managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR) under the auspices of the German Federal Ministry of Food, Agriculture and Homeland. The site provides comprehensive information about competition goals, categories, jury, archives, and an online application portal. The content is professionally presented, targeting builders, planners, and stakeholders interested in sustainable building practices in Germany. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Foundation and uses privacy-conscious Matomo analytics with cookies disabled. The site is mobile-optimized and demonstrates good SEO and accessibility basics. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating areas for improvement in security and privacy compliance. From a security perspective, the site shows a solid posture with secure forms and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent could be addressed to enhance compliance and protection. The WHOIS data is malformed and lacks detailed registrant information, likely due to privacy protection, but the website's official nature and government affiliation support its legitimacy. Overall, the website is trustworthy, professionally maintained, and serves an important government function promoting sustainable construction. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to further strengthen trust and compliance.

Kolle.dev is a small digital collaboration service based in Germany, focusing on supporting digital projects through project management, design, programming, and long-term support. The website presents a professional and clean design using modern technologies such as Nuxt.js and Tailwind CSS, indicating a good level of digital maturity. The site is fast, mobile-optimized, and provides clear information about its services and partner projects. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Overall, the risk is moderate with recommendations to improve privacy compliance and security headers to enhance trust and regulatory adherence.

Single.xyz is a specialized e-commerce platform integrated with Shopify, enabling musicians and content creators to sell music, videos, and memberships directly to their audience. Founded in 2020, the company positions itself as a niche player in the digital media sales market, leveraging Shopify's infrastructure to provide seamless sales and livestream capabilities. The website demonstrates a good level of technical maturity, utilizing modern JavaScript frameworks, Shopify Liquid templates, and multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Analytics. Hosting is managed via AWS infrastructure with DNS services from Amazon Route 53, ensuring reliable performance and scalability. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and some security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and functional but would benefit from enhanced privacy and security transparency.

Jensen + Heitz is a creative media production company based in Switzerland, specializing in motion graphics and video content. Their website showcases various projects and collaborations with notable brands, indicating a niche presence in the creative media industry. The site is professionally designed using the Squarespace platform, offering good mobile responsiveness and a visually appealing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website presence. Security measures such as HTTPS and HSTS are properly implemented, but additional security headers and privacy compliance measures are lacking. Contact information is minimal, limited to an email address and Instagram profile, with no phone or physical address provided. Overall, the website demonstrates a moderate level of digital maturity and security posture but requires improvements in privacy compliance and domain registration transparency.

Treestate Productions is a small media production company based in Germany, specializing in film, photography, and 3D content creation. The website presents a professional and visually appealing interface showcasing their media portfolio. The company maintains an active social media presence on LinkedIn, Facebook, and Instagram, reinforcing their brand identity. The site is built on WordPress with modern plugins for SEO and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and functional, serving its niche audience effectively.

Nouvelle Noire Type Foundry is a Swiss-based company specializing in the design, publication, and distribution of high-quality retail and custom typefaces. The company targets designers and corporate clients across various sectors, offering bespoke font solutions and logo refinement services. Their market position is that of a niche, high-quality Swiss type foundry with a focus on elevating design projects through typography. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, utilizing common industry tools such as Google Analytics, Google Tag Manager, and Mailchimp for marketing and analytics. The site demonstrates good mobile optimization and SEO practices, supported by the Yoast SEO plugin and structured data markup. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism, but lacks published privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

Alena Stählin is a Swiss graphic designer operating a small design studio specializing in publications, branding, posters, exhibition design, and web design. The business targets clients primarily in the cultural, educational, and artistic sectors, including museums, schools, institutions, and individual professionals. The website presents a professional portfolio with clear contact information and showcases multiple awards and notable clients, indicating a reputable market position within its niche. Technically, the website is built using modern web technologies, specifically the SvelteKit framework, and demonstrates good mobile optimization and user experience. However, there is a lack of visible security headers, privacy policies, and cookie consent mechanisms, which indicates room for improvement in compliance and security posture. From a security perspective, the site uses HTTPS (implied by the URL), but no additional security policies or incident response contacts are provided. No forms or data collection mechanisms were detected, reducing immediate data protection risks. The absence of privacy and cookie policies, however, may pose compliance risks under GDPR or similar regulations. Overall, the website is professional and trustworthy in terms of business credibility and content quality but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

The website code-zh.com is currently displaying a minimal placeholder page indicating that the PHP version used is no longer supported. The domain is registered since 2012 and is hosted by Hostpoint AG, the largest Swiss web hosting provider managing over a million domain names. The business focus is on web hosting and domain management services targeted primarily at Swiss customers. The website content is minimal and lacks essential elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which negatively impacts user trust and compliance with regulations such as GDPR. Technically, the site uses outdated PHP, jQuery 3.6.0, and standard web fonts but lacks modern security headers and SEO optimizations. Security posture is weak due to the unsupported PHP version and absence of security best practices. Overall, the site is accessible without WAF or security blocks but requires significant improvements in content, security, and compliance to meet professional standards.

it’s mee is a small visual communication agency based in Basel, Switzerland, specializing in conceptualizing and designing visual identities, exhibitions, websites, and publications. The website serves as a professional portfolio showcasing their projects primarily in the cultural and publication sectors. The company appears to be well-established with a domain age consistent with its founding date in 2017. The business targets clients seeking high-quality visual communication services in the local region. Technically, the website is built on WordPress using common libraries such as jQuery, Masonry.js, and MediaElement.js, with SEO optimization via the All in One SEO plugin. Hosting is provided by a German hosting provider. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Analytics are handled by Matomo, indicating some privacy-conscious tracking. From a security perspective, HTTPS is enabled, but DNSSEC is not configured, and no security headers are detected, which are areas for improvement. There is no visible privacy or cookie policy, nor any incident response or security policy pages, indicating compliance gaps especially regarding GDPR. Contact information is clearly provided, but no forms are present on the homepage. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve its risk posture and user trust.

Prolog AG is a Basel-based digital agency specializing in sustainable web solutions that integrate strategy, design, and technology to deliver lasting digital success. The company serves a diverse clientele, including cultural institutions, startups, and established organizations, offering services ranging from UX/UI design and development to digital strategy and e-commerce solutions. The website reflects a mature digital presence with a professional portfolio showcasing recent projects and collaborations. Technically, the site is built on modern frameworks like Nuxt.js and employs best practices such as responsive design and lazy loading for media assets. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking explicit GDPR compliance statements and no cookie consent mechanism. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position in the Swiss digital agency sector.

Supporting Golf is a Swiss non-profit organization established in 2019 that financially supports the golf sport ecosystem in Switzerland. It collaborates with Swiss Golf, ASGI, and Migros GolfCard to fund professional tournaments and support Swiss golf professionals. The website is built on WordPress using Elementor and related plugins, providing a multilingual experience in German, French, and Italian. The site is well-designed with good content relevance and user experience but lacks published privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response information are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

SOLUTRANS is a prominent biennial trade fair and exhibition dedicated to industrial and urban vehicles, held in Lyon, France. It serves as a global crossroads for professionals in road and urban transport, showcasing innovations in energy transition, digitalization, and regulatory compliance. The event is organized by Comexposium and supported by key industry partners such as Michelin and Aramco. The website provides comprehensive information about the event, exhibitors, conferences, and practical visitor details, supported by a modern technical infrastructure including Sitecore CMS, Bootstrap, and compliance tools like OneTrust.

Pädagogische Hochschule Schwyz (PH Schwyz) is a Swiss educational institution specializing in teacher training, continuing education, and educational research. The website presents a comprehensive portfolio of bachelor and master programs, preparation courses, and professional development offerings. It serves educators, school leaders, and educational professionals with a strong regional presence and innovative research institutes. The site is well-branded, professionally designed, and provides clear contact and accreditation information, reinforcing its credibility. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced and appropriate security headers, although explicit security policies and incident response details are not published. Cookie consent mechanisms are in place, supporting GDPR compliance. Overall, the security posture is strong with no evident vulnerabilities or suspicious activity. The domain registration aligns well with the institution's history and location, supporting legitimacy. The website is safe for general audiences, focusing on educational content without any adult or questionable material. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen the security and compliance stance.

The website www.jaschwyz.ch is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. As a result, no business content, metadata, or contact information is available for analysis. The site appears to be protected by Cloudflare's WAF, which blocks automated access and limits visibility into the site's actual content and services. Without access to the underlying content, it is not possible to assess the company's market position, services, or technical infrastructure in detail. The security posture is difficult to evaluate beyond the presence of Cloudflare protection. Overall, the site is currently in a blocked state, preventing comprehensive analysis.

The Niedersächsische Lotto-Sport-Stiftung is a regional non-profit foundation focused on promoting sports and the integration of people with migration backgrounds in Lower Saxony, Germany. The website serves as an information and engagement platform, offering news, project details, funding opportunities, and community initiatives. It targets local organizations, sports clubs, and integration stakeholders. The foundation maintains a professional online presence with clear branding and consistent messaging aligned with its mission. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with performance and mobile optimization rated as good. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. However, some technical improvements are possible, such as implementing security headers and a cookie consent mechanism to enhance GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and no visible vulnerabilities in the HTML content. The absence of explicit security policies or incident response contacts suggests room for maturity in security governance. Overall, the domain registration data aligns well with the foundation's identity, supporting legitimacy and trustworthiness. The website is safe for general audiences, containing no adult or explicit content. It provides valuable resources and engagement channels for its community. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding cookie consent to improve compliance and user trust.

KraLos GmbH is a German cybersecurity company specializing in developing automated solutions to detect and defend against digital threats such as phishing, web attacks, and data breaches. The company targets businesses of all sizes, with a focus on medium-sized enterprises and international customers. Their key offerings include WEBOUNCER for web application protection, PHISHING GUARD for email and message threat detection, SHADOWKEY for encrypted communications, and a Web Surface Scanner for vulnerability discovery. The website is professionally designed, leveraging WordPress and Elementor, and includes GDPR-compliant cookie consent mechanisms. Social media presence on LinkedIn and Instagram supports their brand visibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, KraLos presents a credible and trustworthy business with a solid technical foundation and good privacy compliance.

Hannoversche Sportjugend is a local youth sports organization affiliated with SSB Hannover, providing news updates and equipment rental services for sports and community events in the Hannover region. The website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a moderate level of digital maturity. The site content is primarily in German and targets local sports clubs and youth. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance mechanisms. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional but would benefit from enhanced security, privacy policies, and clearer contact information to improve credibility and compliance.

Stadtsportbund Hannover e.V. is a well-established non-profit organization dedicated to supporting and promoting club sports in Hannover, Germany. The organization provides advisory, funding, training, and networking services to over 350 sports clubs and related stakeholders. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on community engagement. The target audience includes sports clubs, coaches, volunteers, and sports enthusiasts in the Hannover region. Technically, the website uses modern web technologies including JavaScript, jQuery, Owl Carousel, and SVG graphics, managed via the AmphiCMS platform. Accessibility features such as font size changers and visual assistance tools are implemented, and the site is mobile-optimized with good SEO practices. The presence of a consent management platform ensures compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security maturity.

Regionssportbund Hannover e.V. is a well-established regional sports association based in Hannover, Germany, focused on supporting local sports clubs, volunteers, and youth organizations. The website provides comprehensive information about membership, events, funding opportunities, educational programs, and community projects. It serves as a hub for regional sports development and inclusion initiatives. Technically, the site is built on TYPO3 CMS with Bootstrap framework, featuring modern web standards, good mobile optimization, and accessibility enhancements such as the eyeAble assistive technology plugin. Privacy is well addressed with a GDPR-compliant privacy policy, cookie consent mechanism, and use of privacy-respecting analytics (Matomo). Security posture is solid with HTTPS enforced and privacy-enhanced video embedding, though explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, trustworthy, and well-suited for its target audience.

The Wissenschaftsrat website represents a German government advisory council focused on science, research, and higher education policy. It provides expert recommendations, evaluations, and accreditation services to universities and research institutions. The site targets academics, policymakers, and the public with comprehensive, well-structured content in German. The business model is non-profit and advisory, positioning the Wissenschaftsrat as a leading authority in its sector within Germany. Technically, the website is built on the Tremonia DXP CMS platform, using modern web technologies including HTML5, CSS3, JavaScript, and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via EPAG DNS services, indicating a professional infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented. However, the site lacks visible security headers and a published security policy or vulnerability disclosure mechanism. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is good, with a comprehensive privacy policy and cookie banner aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or security risks. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

The Promotionsverband BW website represents an academic consortium focused on managing doctoral promotion rights for applied sciences universities in Baden-Württemberg, Germany. The site provides information about the organization’s role in supervising doctoral projects through its 24 member institutions. The business model is non-profit and education-oriented, targeting academic professionals and institutions. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in transparency and security practices.

The website eye-able.org is currently inaccessible due to a Cloudflare error 525 indicating an SSL handshake failure between Cloudflare and the origin server. This prevents any meaningful content from being delivered to visitors, resulting in a minimal error page with no business or contact information. The domain is very new, registered in March 2024, and hosted via IONOS SE with Cloudflare DNS. The lack of DNSSEC and SSL misconfiguration reduces the trustworthiness and security posture of the site. No privacy, cookie, or terms of service policies are present, and no forms or tracking technologies are detected. Overall, the website is effectively blocked from analysis due to the WAF error page.

Clinic Bad Ragaz is a reputable Swiss rehabilitation clinic specializing in inpatient rehabilitation services across multiple medical disciplines. The clinic combines evidence-based medical care with luxury hospitality, positioning itself as a premium healthcare provider within the Grand Resort Bad Ragaz group. The website reflects a professional and user-friendly digital presence built on TYPO3 CMS, featuring comprehensive service descriptions and clear contact information. Technically, the site employs modern analytics and tag management tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

dailypoint™ is a specialized technology company offering advanced CRM and loyalty solutions tailored for the hospitality industry, particularly hotels and hotel groups. Their platform centralizes guest data from multiple sources, leveraging AI and data cleansing to provide actionable guest insights and personalized marketing capabilities. The company positions itself as a leading #abovePMS solution provider, emphasizing enhanced guest experience and operational efficiency. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager for analytics, and uses a GDPR-compliant cookie consent mechanism. The site is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and published security policies. The absence of WHOIS domain registration data is a notable concern, though the website's professional presence and trust signals mitigate some risk. Overall, the site demonstrates a mature digital infrastructure with room for improvement in security transparency and domain legitimacy verification.

Guidle is a digital advertising and leisure planning platform primarily serving the DACH region, with a focus on providing diverse content such as events, restaurants, museums, and more. The platform targets both end consumers and business clients including municipalities and event organizers, offering services like digital ad mediation, managed content, and sector-specific solutions. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site leverages modern web technologies including Vue.js, Google Analytics, and CDN hosting via Amazon Cloudfront. It implements a comprehensive cookie consent mechanism aligned with GDPR requirements, ensuring user privacy and transparency. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent controls effectively. However, it lacks visible security headers and explicit security or incident response policies, which are recommended for enhanced protection. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate business operation. Overall, Guidle presents a solid digital presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in security headers and incident response documentation would strengthen trust and compliance.

The website bet-pmi.in is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) blocking access with a 403 Forbidden error. This prevents any meaningful content analysis or business information extraction. The site uses HTTPS with modern TLS 1.3 and HTTP/2 protocols, indicating a secure hosting environment, but no visible security headers or policies are present on the blocked page. The lack of accessible content and privacy-protected WHOIS data limits the ability to verify the legitimacy or business details of the domain. Overall, the site appears to be either under strict security controls or potentially inactive, resulting in a low trust and credibility score.

The website ts.domainname.de/piwikstats.de serves as a professional domain brokerage landing page offering the domain piwikstats.de for sale. It is operated by domainname.de, a known domain marketplace in Germany. The site emphasizes secure payment processing, escrow transaction handling, and fast domain transfer, targeting businesses and individuals seeking premium domains. The business model is focused on domain sales with a strong emphasis on trust and security through verified and premium domain badges and customer reviews. Technically, the site uses modern web technologies including Bootstrap and Google reCAPTCHA to ensure usability and spam protection. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and spam protection, though it lacks some advanced security headers and explicit security policies. Privacy compliance is good with clear links to privacy and terms of service, but no cookie consent mechanism was detected. WHOIS data is limited due to DENIC's privacy policies but aligns with the business's German presence. Overall, the site is trustworthy and professionally maintained, suitable for its domain brokerage purpose.

Gemeinde Muttenz operates as the official municipal government website for the town of Muttenz in Switzerland, providing residents and visitors with comprehensive information and digital services including online administrative functions, event listings, political updates, and social and cultural resources. The site targets local citizens and stakeholders, positioning itself as a trusted public sector service provider. Technically, the website leverages modern web technologies including JavaScript modules, CSS, and a Swiss-based CMS platform (i-web.ch), with responsive design and accessibility features ensuring good user experience across devices. Security posture is solid with HTTPS enforced and anonymized web analytics implemented with user consent, though explicit security headers and incident response policies are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a government entity.

Masterstudio Design is an academic online magazine affiliated with the Academy of Art and Design Basel FHNW in Switzerland. It serves as a platform to showcase student projects and provide information about various Masterstudio Design programs. The website targets students, academics, and design professionals interested in contemporary design practices. The business model is educational and informational, positioning itself as a niche academic publication within the Swiss education sector. Technically, the website is built using modern web technologies including Svelte and SvelteKit, with a CMS likely provided by Campus der Kuenste. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, there is room for improvement in accessibility and the implementation of security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks several security best practices such as security headers, a published security policy, and incident response contact details. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is legitimate, professionally maintained, and trustworthy, with a high business credibility score. Strategic improvements in privacy compliance and security posture would enhance its risk profile and user trust.

The website gansub.com is a minimal newsletter subscription landing page branded as 'gansubscribe'. It is powered by the third-party platform getanewsletter.com, indicating a lightweight business model focused on newsletter distribution. The domain is well-established since 2014 and registered with a reputable registrar, but the site itself lacks substantive content, contact information, and compliance documentation. Technically, the site uses basic HTML and CSS with no detected advanced frameworks or CMS. Security posture is weak due to absence of security headers and no visible HTTPS confirmation in the provided data. Privacy and cookie policies are missing, which may expose the business to compliance risks. Overall, the site appears to be a small-scale service with limited digital maturity and minimal security controls.

House of Winterthur operates as a regional promotional entity focusing on tourism, culture, and business development in Winterthur, Switzerland. The website serves as a comprehensive portal for visitors and locals to explore cultural events, city tours, and business opportunities. The organization positions itself as a key regional player with a strong digital presence and partnerships with notable regional and national tourism bodies. Technically, the website is built on the Contao CMS platform, leveraging modern web technologies and third-party marketing and analytics tools such as Google Analytics and HubSpot. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website reflects a professional and trustworthy regional promotion platform with moderate technical sophistication and good compliance practices.

TSO AG is a Swiss-based company specializing in digitalization services for the tourism sector, offering shared-service digital solutions to associations, destinations, transport companies, and hotels. Their business model focuses on automating processes and improving performance for tourism providers. The website reflects a professional and consistent brand presence with clear messaging targeted at tourism industry stakeholders. Technically, the site is built on the Contao CMS platform, leveraging modern technologies such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements standard security headers, and manages cookie consent effectively, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good privacy practices.

The Schweizer Tourismus-Verband website represents a national umbrella organization for the Swiss tourism sector, focusing on interest representation and networking within the hospitality industry. The website content is primarily in German and targets tourism stakeholders in Switzerland. The business model is that of a membership and advocacy association with a medium-sized organizational footprint. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling, indicating a contemporary digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate, with HTTPS presumably enabled but lacking explicit security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy disclosures.

The website www.winti-piano.ch is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. As a result, no business-specific information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's WAF, indicating a focus on security but limiting external visibility. The lack of accessible content prevents a full assessment of the business model, services, or market positioning. Technically, the site uses modern security mechanisms but lacks visible SEO, accessibility, or privacy compliance features due to the block. The security posture is difficult to evaluate fully but benefits from Cloudflare's protection. Overall, the site scores low on content quality and business credibility due to inaccessibility.

Rast Geigenbauer GmbH is a well-established master violin maker workshop located in Zurich, Switzerland, with a history dating back to 1969. The company specializes in the rental, repair, restoration, new construction, and sale of string instruments such as violins, violas, cellos, and double basses. Their market position is that of a trusted local expert with a strong reputation in craftsmanship and personalized service. The website reflects a professional and consistent brand image targeting musicians and enthusiasts in the region. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Google Maps embeds. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Accessibility features are enhanced by the OneTap plugin, indicating a commitment to inclusive design. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes several security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and published security or incident response policies indicates room for improvement in compliance and transparency. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic enhancements in privacy compliance and security policy publication would further strengthen trust and regulatory adherence.

Notenpunkt AG operates a specialized music retail business primarily serving the Swiss market through both physical stores and an online e-commerce platform. The company offers a wide range of music sheets, books, blockflutes, and musical accessories, targeting musicians, educators, and music enthusiasts. The website reflects a well-established regional presence with clear branding and consistent business information. Technically, the site uses a proprietary CMS (NImQ Enterprise Shop Edition) with common JavaScript libraries such as jQuery and slick carousel for UI enhancements. Mobile optimization and user experience are good, supporting a broad customer base. Security posture is adequate with HTTPS and form validation, but lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

Musik Spiri is a small regional retailer specializing in musical instruments including woodwind, brass, string, and percussion instruments, with physical locations in Winterthur and Meilen, Switzerland. The company offers sales, rentals, repair services, and an online shop, targeting musicians and music enthusiasts in the region. The website is built on the cm4all CMS platform and hosted by Hostpoint AG, utilizing legacy JavaScript libraries and Google Analytics for tracking. While the site provides useful business information and event details, it lacks visible contact emails or phone numbers in the HTML content and does not have explicit terms of service or comprehensive privacy compliance mechanisms. Security posture is moderate with HTTPS implied but missing explicit security headers and outdated JavaScript libraries. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

Musikhaus Bucher AG is a well-established Swiss retail business specializing in wind instruments, accessories, rentals, and repairs, operating since 1978. The company targets musicians of all levels primarily in the Zürich Nord region, offering both physical store services and an online shop. Their market position is that of a trusted local specialist with a strong customer service focus and a comprehensive product and service range. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and tracking tools such as Google Analytics and Facebook SDK, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is addressed with visible cookie consent and privacy policies, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's credibility and business goals.

dieGitarre.ch is a Swiss-based online platform dedicated to the world of acoustic guitars, providing both e-commerce services and informational content targeted at guitar enthusiasts and musicians. The website leverages a modern WordPress infrastructure with Kadence theme and blocks, WooCommerce for e-commerce capabilities, and integrates privacy and security tools such as CleanTalk anti-spam and CookieYes for cookie consent. Matomo analytics is used for user tracking with moderate privacy considerations. Security posture is solid with HTTPS and security headers properly configured, though the absence of explicit privacy policy and terms of service pages indicates room for compliance improvement. Overall, the site presents a professional and trustworthy front for a small retail business in the musical instruments niche.

Andys Musicshop is a small retail business based in Uster, Switzerland, specializing in the sale of musical instruments and related equipment such as PA systems, studio recording gear, and keyboard instruments. The company operates both a physical store and an e-commerce platform, targeting musicians and music enthusiasts primarily within Switzerland. The website is professionally designed with consistent branding and clear navigation, providing essential business information including contact details and terms of service. Technical infrastructure indicates use of Shopware CMS and integration of Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic privacy compliance, though improvements are needed in security headers and cookie consent mechanisms. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

RESIGN. Grafikstudio is a well-established small design and web agency based in Winterthur, Switzerland, specializing in WordPress website design, branding, and SEO services. With over 25 years of experience, the company targets businesses and startups seeking modern and professional digital presence solutions. The website reflects a mature digital infrastructure using modern technologies such as Bootstrap, jQuery, and Google Tag Manager, indicating a good level of digital maturity and SEO awareness. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of explicit cookie consent and security policies suggests room for compliance improvement. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as a reliable local web agency.

SpeedAdmin ApS operates a specialized SaaS platform focused on managing accounts and services for music and cultural schools primarily in Denmark and other Nordic countries. The platform facilitates school selection and login for a wide range of educational institutions, indicating a mature and established business with a strong regional presence since 2006. The website serves as a login portal with a clean, professional design and good mobile optimization, supporting accessibility through linked documentation. Technically, the site uses common web technologies such as jQuery and Bootstrap, with custom scripts and styles, delivering moderate performance and a user-friendly experience. Security posture is adequate with HTTPS in use, but lacks DNSSEC and explicit security headers, and no visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site contains no adult or questionable content and targets a general audience of educational institutions and users.

The website www.vszgb-handbuch.ch serves as an informational handbook for municipalities within the canton of Schwyz, Switzerland. It provides comprehensive guidance on municipal law, social services, finance, security, and environmental topics relevant to local government officials and administrative staff. The site is positioned as a niche government-related resource, targeting municipal employees and local authorities. The business model centers on providing updated, non-binding reference material to support municipal governance. The website is small-scale, consistent in branding, and maintains a professional tone with clear contact details and legal notices.

SPOT Agency is a creative digital agency based in St. Moritz, Switzerland, specializing in brand development, digital products, and e-commerce solutions with a focus on tourism, sport, and lifestyle sectors. Established in 1990, the agency combines strategic thinking, creative design, and technological expertise to serve its clients effectively. The company is part of the SPOT Group, indicating a broader organizational structure and resources. Their website reflects a professional and modern digital presence, showcasing their portfolio and services clearly to their target audience of tourism and lifestyle businesses. Technically, the website is built using modern frameworks such as Next.js and React, with media handled via Mux Player and content managed through DatoCMS. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. SEO and metadata are properly implemented, enhancing discoverability and user experience. From a security perspective, the website enforces HTTPS, includes standard security headers, and does not expose sensitive information. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, SPOT Agency presents a trustworthy and professional digital footprint with strong business credibility and technical maturity. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and potentially obtaining recognized security certifications to further boost trust and compliance.

Berlin 2023 is the official website for the Special Olympics World Games held in Berlin from June 17 to 25, 2023. The site serves as a comprehensive information hub for the event, targeting athletes with intellectual disabilities, volunteers, families, and the general public interested in inclusive sports. It provides event details, news updates, venue information, and links to partner sites and social media channels. The website is professionally designed with consistent branding and good content quality, reflecting its role as a major non-profit sports event organizer. Technically, the website employs modern web technologies including HTML5, CSS variables, JavaScript, and web components with polyfills for compatibility. It integrates third-party services such as Google Analytics and Facebook Pixel for tracking and uses privacy-enhanced YouTube embeds. The site is mobile-optimized and includes accessibility features, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and privacy-conscious embeds but lacks visible security headers and explicit privacy or cookie policies in the provided content. No contact information for security or data protection officers is found, and no vulnerability disclosure mechanisms are evident. The WHOIS data is unavailable or privacy protected, which is common for non-profit organizations but limits domain registration transparency. Overall, the website is trustworthy and professionally maintained, with moderate tracking and basic privacy compliance. Strategic improvements include publishing comprehensive privacy and cookie policies, adding security headers, and providing clear contact information for data protection and incident response. These steps would enhance user trust and regulatory compliance.

Kinder stark machen is a German government-backed public health initiative operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). The website provides comprehensive educational resources, tips, and support materials aimed at early addiction prevention for children starting from age four. It targets parents, families, schools, kindergartens, and sports clubs, offering interactive activities, training, and informational campaigns to strengthen children's development and resilience against addiction. The initiative holds a strong market position as a trusted government program in Germany.

The Deutscher Olympischer Sportbund (DOSB) is the national umbrella organization representing sports interests in Germany, focusing on club sports, athlete support, and the Olympic and Paralympic movement. The website serves as an authoritative platform for sports organizations, athletes, and the general public interested in sports in Germany. It provides comprehensive information, news, event details, and resources related to sports governance and promotion. The site is well-positioned in the German sports sector as a large, non-profit government-related entity with strong partnerships and a clear mission. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules and accessibility tools like ReadSpeaker. It uses Matomo for analytics and integrates cookie consent mechanisms compliant with GDPR. The site is fast, mobile-optimized, and accessible, with a professional design and clear navigation. Hosting appears stable and professional, with no blocking or WAF interference detected. From a security perspective, the site enforces HTTPS and employs cookie consent with granular user control. However, explicit security headers and a public security policy or vulnerability disclosure page are absent. No exposed sensitive data or vulnerabilities were detected in the content. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. Overall, the DOSB website demonstrates a strong security posture, excellent content quality, and good privacy compliance. It effectively supports its business goals and target audience with professional presentation and trustworthy information.

The website www.dsj.de represents Deutsche Sportjugend, a well-established German non-profit organization dedicated to youth sports and social engagement. The site is professionally designed using TYPO3 CMS, featuring rich content, accessibility tools like ReadSpeaker, and a clear navigation structure. The organization is positioned as a leading umbrella body for youth sports in Germany, with a history dating back to 1950. Technically, the site uses modern web technologies and hosts static content on Amazon S3, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is lacking explicit privacy and cookie policies, which is a notable gap. Overall, the site is trustworthy, safe, and serves a general audience with no adult or questionable content.

Rehasport Informationen is a German online information portal dedicated to rehabilitation sports, targeting participants, providers, instructors, and physicians. The site is operated as a project by the non-profit association Rehasportwelt e. V. in partnership with the marketing agency Marketingwelt Lipp. It offers comprehensive educational content, news, and marketing tips related to Rehasport, positioning itself as a niche resource within the healthcare and non-profit sectors in Germany. The website maintains a professional and consistent brand presence, supported by active social media channels on Facebook and Instagram.