Low-risk security reports

Renault Trucks Eesti operates as a regional distributor and service provider for Renault Trucks in Estonia, offering a comprehensive range of transport solutions and commercial vehicles tailored to various sectors such as distribution, construction, and heavy haulage. The website reflects a professional and consistent brand presence aligned with the parent company Renault Trucks. Technically, the site is built on Drupal CMS and integrates modern marketing and analytics tools including Google Tag Manager, Matomo, HubSpot, and OneTrust for cookie consent, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

Renault Trucks Hrvatska is a regional subsidiary of the global Renault Trucks brand, specializing in commercial truck sales and transport solutions within Croatia. The website presents a professional and well-structured digital presence, targeting transport industry professionals and businesses. It offers a range of services including truck sales, driver training, maintenance, fleet management, and financing. The technical infrastructure is based on Drupal CMS with integration of modern analytics and marketing tools such as Google Analytics, Matomo, HubSpot, and OneTrust for cookie consent, indicating a mature digital marketing approach. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of explicit privacy and terms of service pages is a gap in compliance documentation. WHOIS data confirms domain legitimacy and consistency with the business location and ownership. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

Renault Trucks Österreich is a regional subsidiary of the global Renault Trucks group, specializing in providing a comprehensive range of transport solutions including diesel and electric trucks tailored for the Austrian market. The website reflects a professional and consistent brand presence with a focus on commercial vehicle sales and services. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Matomo, and HubSpot, alongside a compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit privacy and security policies are not published. Contact options are primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the transportation sector.

Gemeinde Kemmental operates as a municipal government portal serving the residents and stakeholders of the Kemmental community in Switzerland. The website provides comprehensive information about local governance, administrative services, political activities, community life, and upcoming events. It positions itself as an essential public service platform with a focus on accessibility and user engagement through online services such as the Online-Schalter. Technically, the site leverages modern web technologies including jQuery, Font Awesome, and the GOViS CMS tailored for eGovernment solutions, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and privacy compliance demonstrated through a detailed privacy policy and cookie consent mechanism. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with its public service mission.

Holidu GmbH operates a sophisticated online vacation rental search engine and booking platform, specializing in verified vacation homes, villas, cabins, and condos primarily across Europe. The website presents a professional, user-friendly interface with extensive listings and features tailored for families, pet owners, and travelers seeking specific amenities. Technically, the site leverages modern JavaScript frameworks, including React, and integrates multiple analytics and marketing tools such as Google Analytics and Tag Manager, ensuring robust data collection and user engagement tracking. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration details slightly impacts trust but is mitigated by the website's professional presentation and comprehensive privacy and cookie policies. Overall, Holidu demonstrates a mature digital infrastructure and a secure, privacy-conscious approach suitable for its hospitality industry role.

SV Werder Bremen operates a professional football club website providing fans and stakeholders with news, match schedules, ticketing, and media content. The site is built on a modern Nuxt.js framework with Tailwind CSS styling and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics. The website demonstrates good technical maturity with responsive design and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The domain registration aligns well with the business's German origin, supporting legitimacy. Overall, the site is professional, trustworthy, and well-positioned to serve its audience effectively.

Pixel-Puls is a small German graphic design business based in Herrenberg, specializing in creative and professional graphic design services including logo creation, print media, wedding marketing, and web design. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The site is well-designed, mobile-optimized, and provides a clear navigation structure, although it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and professional, serving local clients with a focus on quality and transparency.

Auto Lang - Shop operates a specialized e-commerce platform focused on Mercedes-Benz branded automotive accessories and lifestyle products, targeting primarily German-speaking customers in Switzerland. The website presents a professional and consistent brand image with a clear market niche in premium automotive merchandise. The business model revolves around online retail with fast shipping and a curated product selection. Technically, the site leverages Shopify's robust e-commerce infrastructure, modern JavaScript modules, and integrates multiple marketing and analytics tools such as Facebook Pixel and Klaviyo, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections, although explicit privacy and terms of service documentation are missing, which could impact compliance. Overall, the site is trustworthy and well-implemented but would benefit from enhanced transparency and compliance documentation.

Basler Kantonalbank is a well-established regional Swiss bank providing a broad range of financial services to private customers. The website targets private clients with offerings including accounts, cards, investment advisory, mortgages, and pension planning. The bank maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies and implements cookie consent via OneTrust, ensuring compliance with basic privacy standards. Security posture is strong with HTTPS enforced and good SSL configuration, although explicit security headers and incident response information are not publicly available. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution, with room for improvement in transparency around privacy policies and security disclosures.

PTV Logistics operates as a global leader in providing advanced software solutions for route planning, optimization, real-time transport visibility, and delivery management. Their SaaS offerings target logistics and transport managers aiming to improve efficiency, reduce costs, and support sustainable road logistics. The company emphasizes a self-learning SaaS suite backed by over 40 years of expertise, positioning itself strongly in the transportation software market. Technically, the website is built on Drupal 10 with modern frontend technologies including Tailwind CSS and JavaScript frameworks. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and bot protection via reCAPTCHA. However, the absence of explicit incident response contacts, vulnerability disclosure, and terms of service pages indicates areas for improvement. The lack of WHOIS data limits domain trust verification, though the professional website presence suggests legitimacy. Overall, the website presents a secure, professional, and privacy-compliant front for PTV Logistics, with recommendations to enhance transparency and domain trustworthiness.

Creanet Internet Service AG is a Swiss-based web agency specializing in web design, IT security, cloud solutions, and digital signage, primarily serving the regions of Luzern, Sursee, Zug, Basel, and Zürich. The company positions itself as a regional expert offering tailored IT and web services to small and medium-sized enterprises, emphasizing project planning, execution, and ongoing support. Their service portfolio includes web development, SEO, online marketing, IT security solutions such as ESET and SonicWALL, and cloud services, supported by a professional and user-friendly digital presence. Technically, the website is built on the CONTENS CMS platform and leverages modern web technologies including jQuery, Flickity for carousels, and Lottie for animations. Analytics are implemented via Google Analytics and Matomo, with a robust cookie consent mechanism powered by CookieHub, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. While explicit security headers are not evident, the company promotes IT security services and uses reputable security products. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Creanet Internet Service AG presents a professional, trustworthy, and well-structured online presence with strong regional market positioning. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility standards to further strengthen their security posture and compliance.

Blickwinkel AG is a marketing, design, and communication agency based in Luxembourg, offering pragmatic and creative solutions in branding, content creation, print, and online media. The website is professionally designed, targeting businesses seeking marketing services, and is presented primarily in German. The technical infrastructure includes modern JavaScript libraries such as three.js, jQuery, and Swiper, and the site is managed via CONTENS CMS. The website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR, reflecting a good level of privacy compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. No explicit contact emails or phone numbers were found in the provided content, which slightly impacts business credibility. Security posture is moderate with HTTPS enforced but lacks visible security headers in the provided data. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and contact information.

Uptown is a small non-profit association based in Basel, Switzerland, focused on promoting music, art, culture, and society. Founded in 2020 during the COVID-19 pandemic, it aims to strengthen cultural infrastructure and support cultural creators in the Basel region, particularly around the Kaschemme venue. The website is built on WordPress and presents a professional design with clear navigation and relevant content about projects, support, and partners. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing security policies and headers. No forms or tracking scripts are present, indicating minimal data collection and user tracking. Overall, the site is trustworthy and serves its community purpose well but would benefit from enhanced privacy and security measures.

Sedo.com operates as a well-established domain marketplace platform, offering domain sales, transfers, and brokerage services. The website analyzed is a sales landing page for the domain onteam.de, providing clear pricing, purchase options, and contact information. Sedo has a strong market position with over 26 years of experience and a high volume of domain transfers monthly, targeting domain buyers and sellers globally. The business model focuses on facilitating domain transactions with personal assistance and multiple payment methods. Technically, the site uses modern JavaScript modules, Cloudflare DNS, and HTTPS with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms policies on this page. Overall, the site is professional, trustworthy, and safe for general audiences.

Gemeinde Turbenthal operates as the official municipal government website for the Turbenthal community in Switzerland, providing residents and visitors with access to local government services, community news, events, and administrative information. The site is well-positioned as a trusted local authority with a focus on energy sustainability, as evidenced by its Energiestadt Gold certification. The website targets local residents and stakeholders seeking municipal services and information.

Infomaniak Network SA is a Swiss-based technology company specializing in cloud infrastructure services, including public cloud IaaS solutions. The company targets businesses and developers seeking reliable, automated, and cost-effective cloud hosting. Infomaniak positions itself as a leading Swiss cloud provider with a strong emphasis on privacy, security, and sustainability, offering CHF 300 free credit to new users to encourage adoption. Technically, the website is built on modern frameworks such as React and Gatsby, ensuring fast performance, excellent mobile optimization, and good SEO practices. The infrastructure appears self-hosted with strong security configurations, including HTTPS enforcement and comprehensive security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, Infomaniak demonstrates maturity with ISO 27001 certification and transparent incident response contacts. No vulnerabilities or exposed sensitive data were detected. The main concern is the absence of publicly available WHOIS domain registration data, likely due to privacy protection, which slightly impacts transparency but does not undermine overall trust. Overall, Infomaniak presents a professional, secure, and privacy-conscious cloud service platform with strong business credibility. Strategic recommendations include enhancing public vulnerability disclosure, maintaining up-to-date third-party libraries, and continuing to improve transparency around data retention and incident response.

Kulturhuus Häbse is a small cultural venue based in Basel, Switzerland, offering a variety of events including theater performances and community gatherings. The website is professionally designed using Squarespace, featuring clear navigation, event listings, and ticket purchasing options. The technical infrastructure is modern and leverages standard web technologies with good mobile optimization and performance. Security posture is solid with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but terms of service and security policies are absent. Overall, the website presents a trustworthy and professional image suitable for its cultural and community-focused business model.

Riehen Events is a municipal cultural event platform operated by the Kulturbüro Riehen, serving the local community and visitors by providing comprehensive event listings, cultural information, and support for event organizers. The website is positioned as a trusted local hub for cultural engagement in Riehen, Switzerland, with a focus on accessibility and community involvement. Technically, the site is built on Drupal 10 with modern JavaScript frameworks and includes privacy-conscious analytics via Matomo. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good digital maturity and professionalism, supporting its role as a public service platform.

LANKELEISI operates a professional e-commerce platform specializing in electric bikes, including dual motor, cargo, and mountain e-bikes, supported by a three-year warranty. The company targets consumers interested in high-performance and all-terrain electric bikes, positioning itself as a niche player in the transportation and outdoor adventure market. The website is built on Shopify, leveraging modern web technologies and third-party integrations for marketing, analytics, and customer reviews. The digital infrastructure is mature, with good performance and mobile optimization, though some security enhancements like DNSSEC and security headers could be improved. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but lacks explicit security policy and incident response details. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

Volvo Trucks Belgium operates as a market leader in the heavy truck manufacturing and transport solutions sector, providing reliable and environmentally conscious vehicles. The website is professionally designed, bilingual (Dutch and French), and targets transport industry professionals and customers in Belgium. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Adobe marketing and analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the website reflects a legitimate and trustworthy business entity consistent with Volvo's global brand.

Gemeinde Riehen operates as the official municipal government website for the community of Riehen in Switzerland. It provides residents and visitors with comprehensive information about local services, cultural events, education, environmental initiatives, and political administration. The site positions itself as a trusted source for community engagement and municipal governance. Technically, the website is built on the Weblication® CMS platform, utilizing common web technologies such as jQuery and FontAwesome, and demonstrates good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the website is professional, trustworthy, and serves its public sector role effectively, though it should enhance privacy compliance and security transparency to meet modern standards.

Freizeitzentrum Landauer is a community leisure center based in Riehen, Switzerland, providing a wide range of indoor and outdoor activities, event hosting, and social spaces for children, youth, and adults. The website reflects a local government or non-profit operated facility focused on community engagement and cultural activities. The digital infrastructure is built on Drupal 10 with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the website's community focus, indicating legitimacy and trustworthiness.

Museum Tinguely Basel is a cultural institution dedicated to the largest collection of kinetic works by Jean Tinguely. The museum offers a variety of services including exhibitions, events, guided tours, workshops, and digital multimedia content. It targets a broad audience including families, schools, and art enthusiasts, positioning itself as a leading museum in Basel, Switzerland. The website reflects a professional and well-structured digital presence with comprehensive event listings and visitor information. Technically, the site uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management, likely built on Adobe Experience Manager CMS. The site is mobile optimized, accessible, and SEO friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, supporting the museum's mission and visitor engagement.

Kulturhuus Häbse is a small, community-focused cultural venue based in Basel, Switzerland, offering theater performances, events, and gastronomy services. The website is professionally designed using the Squarespace platform, featuring good mobile optimization and clear navigation. It integrates ticket sales through partner platforms and maintains active social media channels. The technical infrastructure is modern and secure, with HTTPS and HSTS properly configured. Privacy compliance is addressed through a cookie consent banner and a data protection page, though explicit terms of service and security policies are absent. Overall, the site reflects a trustworthy and legitimate cultural institution with a solid digital presence.

EasyGov is an official Swiss government digital platform designed to streamline administrative and regulatory processes for companies operating in Switzerland. It offers a comprehensive suite of services including company registration, VAT and social insurance registration, debt enforcement proceedings, trade mark protection, and electronic signing with qualified electronic signatures. The platform is positioned as a trusted, centralized online desk supported by the Swiss Confederation, cantons, and municipalities, aiming to reduce administrative burdens and costs for businesses and authorities alike. Technically, EasyGov employs a modern Angular framework with responsive design, ensuring accessibility across devices. The site integrates privacy-compliant cookie consent mechanisms and embeds privacy-enhanced YouTube videos. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding explicit security headers and publishing a security.txt file. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for Swiss businesses.

BOSS Corporation operates a comprehensive global website showcasing its world-leading product lineup of guitar effects processors, multi-effects, loop stations, and related audio equipment. The brand is well-established in the music technology industry, targeting musicians and audio professionals worldwide. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Kentico CMS, Adobe Analytics, and OneTrust for privacy compliance. Security posture is solid with HTTPS enforced and a vulnerability disclosure policy publicly available, though explicit security headers could be improved. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given its strong brand presence and professional content. Overall, the site demonstrates a mature digital infrastructure with moderate user tracking balanced by privacy mechanisms.

Roland Corporation operates a comprehensive global website showcasing its leadership in manufacturing and distributing electronic musical instruments and related audio equipment. The company targets musicians, producers, and audio professionals with a broad product portfolio including keyboards, synthesizers, guitars, percussion, and digital recording tools. The website demonstrates a mature digital presence with rich multimedia content, clear navigation, and integration of modern web technologies such as Adobe Analytics and OneTrust for privacy compliance. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contact details could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the evident legitimacy of the brand and its digital assets. Overall, the site reflects a professional, enterprise-grade digital footprint aligned with Roland's market position.

The website stadtautobahn.ch serves as the official information portal for the renewal of the Stadtautobahn in St. Gallen, Switzerland, managed by Astra, the Federal Roads Office. It provides timely updates on construction, traffic conditions, and community engagement through news articles and an SMS notification service. The site targets local residents and commuters, offering clear and relevant content about the infrastructure project. Technically, the site is built on WordPress with Yoast SEO for optimization, uses Matomo for privacy-conscious analytics, and integrates Google reCAPTCHA to secure user input forms. The design is professional, mobile-optimized, and user-friendly, with consistent branding and trust indicators such as official logos and HTTPS encryption. Security posture is solid with HTTPS and form protections, though it lacks some advanced security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration aligns well with the website's governmental purpose and project timeline, indicating high legitimacy and trustworthiness.

Schinkels Brauerei operates a regional e-commerce platform specializing in organic craft beers and related merchandise, targeting customers primarily in Germany. The business emphasizes regional and organic quality, offering a variety of beer styles and additional services such as brewery tours and event ticketing. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations for analytics and marketing. The digital infrastructure is robust, with good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are absent. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

Zammad is a medium-sized technology company founded in 2012, specializing in open source helpdesk and ticketing software designed to streamline customer service operations. The company positions itself as a provider of powerful yet user-friendly solutions that integrate multiple communication channels and offer extensive features such as multilingual support, automation, and various integrations. Their market presence is supported by strong branding, customer testimonials, and a focus on digital sovereignty. Technically, the website demonstrates a modern and responsive design with fast performance and good SEO practices. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. Security-wise, the site enforces HTTPS and employs domain transfer protections, but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and security transparency are recommended.

mypadel.de is an official platform dedicated to the sport of Padel in Germany, operated under the Deutscher Tennis Bund. It provides comprehensive information including news, club and coach directories, event details, and partner information, serving players, coaches, clubs, and partners. The website is professionally designed with consistent branding and clear navigation, targeting the German Padel community. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is strong with HTTPS enforced and secure form implementations, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with official federation backing and partner endorsements.

Telia Company is a leading telecommunications provider operating primarily in the Nordic and Baltic regions. The company offers a broad range of connectivity and digital services targeting both consumer and enterprise customers. Their market position is strong, supported by a consistent brand presence and a focus on sustainability and corporate governance. The website reflects a mature digital presence with modern technologies and a professional design. The technical infrastructure is built on React and modern web standards, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the website and company demonstrate a high level of professionalism and trustworthiness.

Entur AS operates as Norway's national travel planner, consolidating multiple modes of public transportation including bus, train, boat, tram, metro, and flights into a single platform. The company provides comprehensive travel search, ticketing, and real-time departure information, positioning itself as the leading travel planning service in Norway. The website is professionally designed, mobile-optimized, and offers a seamless user experience for a broad audience of travelers within Norway. Technically, the site leverages modern frameworks such as React, Firebase backend services, and integrates mapping services via Mapbox. Privacy and cookie compliance are well implemented with Usercentrics consent management, and analytics are handled through PostHog and Firebase Analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, Entur demonstrates a mature digital presence aligned with its business goals and regulatory requirements.

DNEG is a globally recognized leader in visual effects, animation, and creative technologies, serving the film, TV, and immersive content industries. With over 25 years of experience and multiple Academy Awards, DNEG partners with top filmmakers and studios to deliver cutting-edge digital production services. Their website reflects a mature digital presence with rich multimedia content and strong branding. Technically, the site uses modern frameworks like Next.js and React, integrates Vimeo for video hosting, and employs TrustArc for cookie consent management. However, some security best practices such as explicit security headers are not evident in the provided data. The absence of WHOIS registration details reduces transparency but does not detract significantly from the company's credibility given their established market position and external partnerships. Overall, DNEG demonstrates a solid security posture with room for improvement in security headers and incident response visibility.

The website www.wetzikon.ch is the official municipal portal for the city of Wetzikon in the Zürcher Oberland region of Switzerland. It provides comprehensive information about the city, including tourism, culture, events, and local services. The site targets residents, visitors, and local businesses, serving as a central information hub. The business model is that of a government municipal service, with a medium-sized scope and a focus on public service and community engagement. Technically, the website is built using the Weblication® CMS platform, indicating a professional and structured content management approach. The site uses modern web technologies including Font Awesome icons and JavaScript, and it is optimized for mobile devices with good accessibility features. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site uses HTTPS with a strict referrer policy, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the provided data. Overall, the website is trustworthy and professional, with a strong business credibility score. However, it would benefit from enhanced privacy compliance, improved security headers, and explicit policies to better align with GDPR and modern security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to improve transparency and security posture.

Bank Avera is a Swiss banking institution offering a broad range of financial services including accounts, credit cards, mortgages, loans, asset management, pension solutions, and e-banking. The website targets both private and corporate clients primarily in Switzerland, positioning itself as a regional bank with a focus on personalized banking solutions. The digital infrastructure supports online account opening and integrates modern web technologies such as Concrete CMS, Google Tag Manager, and Mapbox for location services. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and token-based form submissions, reflecting a mature security posture. However, the absence of explicit cookie consent and published security policies suggests areas for compliance improvement. Overall, the website is professional, trustworthy, and well-structured, supporting the bank's credibility and customer engagement.

The Deutscher Tennis Bund (DTB) operates the official tennis federation website for Germany, providing comprehensive information on national teams, training programs, membership offers, and tennis events. The site targets tennis enthusiasts, players, coaches, and fans within Germany, positioning itself as the authoritative source for tennis-related content in the country. The business model is non-profit and focused on sports promotion and community engagement. Technically, the website leverages Adobe Experience Manager (AEM) as its CMS, hosted on Adobe's cloud infrastructure, and integrates modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and Smart AdServer for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the use of reputable third-party services and secure hosting suggests a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing visible security policies, publishing incident response contacts, and verifying security headers to further strengthen trust and security culture.

Clientis AG operates as a leading outsourcing provider for banks in Switzerland, enabling clients to focus on their core business while benefiting from cost advantages and innovations. The website presents a professional and consistent brand image, targeting banking institutions and their customers. The technical infrastructure leverages modern web technologies including React and Liferay CMS, with integrated analytics tools such as Matomo and Microsoft Clarity to monitor user interactions. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced further. Security posture is solid with HTTPS enforced and standard security headers implied, but explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website reflects a mature digital presence appropriate for a medium-sized financial services company.

Basler Kantonalbank is a well-established Swiss cantonal bank providing a broad range of financial services to private customers, including banking accounts, investment advisory, mortgages, and pension planning. The website reflects a professional and consistent brand presence targeting private banking clients primarily in Switzerland. The technical infrastructure uses modern web technologies with a cookie consent mechanism implemented via OneTrust, ensuring basic privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF interference was detected, allowing full content access. Overall, the website demonstrates a mature digital presence suitable for a large financial institution.

Thurgauer Kantonalbank (TKB) is a well-established Swiss universal bank serving primarily the canton of Thurgau. Founded in 1871, it offers a broad range of financial services including retail banking, investment products, mortgage financing, and digital banking through its OLIVIA platform. The website reflects a mature digital presence with comprehensive product information, clear navigation, and strong branding consistency. The bank positions itself as a trusted regional financial institution with a focus on personalized advisory and modern digital services. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

RaiseNow operates a professional SaaS platform focused on enabling nonprofits, associations, and changemakers to efficiently collect donations and manage payments both locally and globally. The website demonstrates a strong market position with over 54,000 organizations trusting their technology, including well-known NGOs such as UNICEF and Amnesty International. The platform offers a comprehensive suite of fundraising tools, payment acceptance solutions, community engagement features, and integration capabilities, positioning itself as a key player in the nonprofit technology sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized, well-structured, and includes SEO best practices. Cookie consent mechanisms and privacy policies indicate a good level of GDPR compliance. However, explicit security headers are not clearly visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS registrant data is a concern but does not currently undermine the site's legitimacy given the professional presentation and reputable client base. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, RaiseNow's website reflects a mature digital presence with solid business credibility and moderate technical sophistication. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around incident response. Monitoring the WHOIS data situation is advised to ensure ongoing trustworthiness.

Revive Adserver is an open source ad serving platform targeting advertisers, publishers, and ad networks. It positions itself as a popular free alternative in the ad serving technology space, providing software for managing and delivering ads. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. The technical infrastructure is modern and mobile-optimized, though hosting details are not disclosed. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and branding appear professional and trustworthy. Overall, the site is safe for general audiences and serves a niche technology market.

Spider AF is a specialized technology company founded in 2017 that provides digital marketing security solutions focused on combating ad fraud, invalid clicks, fake leads, and website risks. The company targets digital marketers and businesses seeking to optimize ad spend and protect marketing budgets. Their platform is trusted by over 500 companies and offers an all-in-one SaaS solution with a free trial option. Technically, the website is built on Webflow and hosted on AWS infrastructure, integrating multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Intercom, HubSpot, and Visual Website Optimizer. The site is mobile optimized and designed with good user experience and SEO practices. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and explicit security headers, indicating room for improvement in hardening. Privacy compliance is basic, with a cookie consent banner but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security headers.

Spider AF is a specialized digital marketing security company focused on combating ad fraud, click fraud, and invalid leads. The company offers a SaaS platform trusted by over 500 companies to protect marketing budgets by detecting and preventing fraudulent activities. Their key services include ad fraud detection, invalid click filtering, fake lead detection, and website risk monitoring. The website is professionally designed, targeting digital marketers and advertisers concerned with marketing security. Technically, the site is built on Webflow and leverages modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, PostHog, and Visual Website Optimizer, hosted on AWS infrastructure. The site is mobile optimized and performs moderately well.

enercity AG is a large, established German energy provider with a history dating back to 1825. The company offers a broad portfolio of energy-related services including electricity, gas, solar solutions, heating, water supply, telecommunications, and electromobility. It serves a wide audience including private customers, businesses, and municipalities primarily in Germany, with a strong regional focus on Hannover. The website reflects a mature digital presence with modern technologies such as React and Next.js, and implements GDPR-compliant consent management. Multiple industry awards and high customer ratings reinforce its market position and trustworthiness. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, user-friendly, and compliant with privacy regulations, supporting enercity's reputation as a reliable energy partner.

Continental AG is a leading global automotive supplier and tire manufacturer headquartered in Germany. The company focuses on innovation for safe, connected, and sustainable mobility, offering products and solutions primarily for automotive manufacturers and industrial customers. The website reflects a mature digital presence with comprehensive information for investors, job seekers, partners, and customers. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and consent management for GDPR compliance. Security posture is strong with HTTPS enforced and content security policies in place, although additional headers could enhance protection. The absence of public WHOIS data is noted but likely due to privacy protection, not detracting from the site's legitimacy. Overall, Continental AG's website demonstrates professionalism, compliance, and a robust corporate identity.

Börsenblatt.net is a leading German trade magazine website serving the book industry, providing news, background information, and services for book retailers and publishers. The site is professionally designed, mobile-optimized, and integrates multiple analytics and advertising technologies, including Google Analytics, Matomo, and Revive Adserver. The website demonstrates a mature digital infrastructure with comprehensive cookie consent management and GDPR compliance. However, the WHOIS data for the domain is unavailable, which raises moderate concerns about domain registration transparency. No explicit contact emails or phone numbers are present on the site, which could impact user trust and business credibility. Overall, the website is secure with proper HTTPS and security headers, and it maintains a high level of content quality and user experience.

Schule für Gestaltung Basel is a well-established educational institution based in Basel, Switzerland, specializing in design and art education. The website presents a comprehensive range of courses and programs targeting talented young individuals, experienced professionals, and anyone interested in developing their creative skills. The institution offers foundational courses, vocational training, higher education, and public continuing education, positioning itself as a key regional player in design education. Technically, the website is built on modern frameworks such as Next.js and uses DatoCMS for content management, ensuring a responsive and user-friendly experience. Cookie consent is managed via Cookiebot, reflecting awareness of privacy regulations. However, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with excellent SSL configuration but does not implement common security headers or publish incident response contacts or vulnerability disclosure policies. No signs of WAF or blocking mechanisms were detected, and no analytics or tracking scripts beyond cookie consent were found, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.