Security Directory

C

CCFA | Comité des Constructeurs Français d'Automobiles

ccfa.fr

53

The Comité des Constructeurs Français d'Automobiles (CCFA) is a professional association representing major French automotive manufacturers including Stellantis, Renault, and Renault Trucks. Founded in 1898, it serves as a key industry body advocating for economic and industrial interests nationally and internationally. The organization also operates AAA DATA, a subsidiary providing automotive data solutions. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations, targeting industry professionals and stakeholders. Contact information and legal policies are clearly presented, supporting transparency and compliance. Security measures include HTTPS and hCaptcha integration, with GDPR cookie consent mechanisms in place, though explicit security policies and incident response details are absent.

O

OTRE Occitanie

otre-occitanie.org

55

OTRE Occitanie is a regional professional organization representing road transporters in the Occitanie region of France. The website serves as a platform to provide information about the organization's services, partnerships, and news relevant to transport professionals. The business model focuses on advocacy and service provision for transporters, positioning itself as a key regional player in the transportation sector. The website content is primarily in French and targets transport professionals and stakeholders in the region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Fonts. The site is hosted by OVH sas, a reputable hosting provider. Performance and mobile optimization are good, with SEO optimization evident through meta tags and structured data. Cookie consent is implemented via tarteaucitron.io, indicating attention to privacy compliance, although explicit privacy and terms of service pages are not found. From a security perspective, the site uses HTTPS and has domain status protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No vulnerability disclosure or incident response policies are visible, and no direct contact emails or phone numbers are provided, which could impact user trust and security communication. Overall, the website presents a professional and trustworthy front for the organization, with moderate technical maturity and security posture. Strategic improvements in privacy policy transparency, security headers, and DNSSEC implementation would enhance compliance and trustworthiness.

G

GedMouv

gedmouv.com

63

GedMouv is a specialized B2B platform offering shared traceability solutions for the transport and logistics industry, enabling real-time data exchange and delivery tracking among customers, carriers, and drivers. The company operates under the parent entity B2PWeb and targets transport companies, freight forwarders, and shippers primarily in France. The website is professionally designed using WordPress with modern technologies such as Bootstrap, jQuery, and slick carousel, and integrates multiple analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in HTTP security headers and explicit security policies are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the overall business presence and content quality support a trustworthy profile.

T

Transportez-Vous Bien

transportezvousbien.fr

55

Transportez-Vous Bien is a French health prevention program specifically designed for non-executive employees in the transport sector. Managed by Carcept Prévoyance, it offers a range of free health-related services including coaching, workshops, and support to improve employee well-being. The website is professionally designed, content-rich, and targets both employees and transport companies. It leverages WordPress CMS with modern plugins and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the business legitimacy is supported by detailed content and partner references.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

jung-und-schwanger.de

65

jung-und-schwanger.de is a German government-backed informational website operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides comprehensive support and guidance for young pregnant individuals and young fathers, focusing on pregnancy, childbirth, parenting, education, and legal matters. The site is well-positioned as an authoritative resource in its niche, offering telephone helpline services and online counseling referrals. Technically, the website is built on TYPO3 CMS and uses Matomo for privacy-conscious analytics. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS, anonymizes IPs in analytics, and uses a cookie consent banner, though it lacks explicit security headers and published security policies. Overall, the site demonstrates a strong commitment to privacy and user support, with no adult or explicit content, making it safe for general audiences.

M

Musikbüro Basel

musikbuerobasel.ch

64

Musikbüro Basel is a regional non-profit organization dedicated to promoting pop music and supporting the music community in the Basel region of Switzerland. The organization offers various funding programs, workshops, infrastructure support, and networking opportunities to musicians, bands, clubs, and event organizers. Their website reflects a clear focus on community engagement and cultural support, positioning them as a key player in the local music scene. Technically, the website is built on Magnolia CMS and uses modern web technologies including HTML5, CSS, and JavaScript. It integrates Google Analytics with IP anonymization and provides a cookie consent mechanism, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and offers good navigation and content relevance. From a security perspective, the site uses HTTPS with a good SSL configuration and anonymizes user IPs in analytics. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, suggesting a solid but improvable security posture. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations such as GDPR. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance their security and compliance stance.

U

Uptown – Verein für Musik, Kunst, Kultur und Gesellschaft

vereinuptown.ch

68

Uptown is a small non-profit association based in Basel, Switzerland, focused on promoting music, art, culture, and society. Founded in 2020 during the COVID-19 pandemic, it aims to strengthen cultural infrastructure and support cultural creators in the Basel region, particularly around the Kaschemme venue. The website is built on WordPress and presents a professional design with clear navigation and relevant content about projects, support, and partners. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing security policies and headers. No forms or tracking scripts are present, indicating minimal data collection and user tracking. Overall, the site is trustworthy and serves its community purpose well but would benefit from enhanced privacy and security measures.

The Römisch-Katholische Kirche Basel-Stadt website serves as the official online presence of the Roman Catholic Church in Basel-Stadt, Switzerland. It provides comprehensive information about church activities, pastoral care, social services, and community engagement. The site targets local residents and members of the Catholic community, offering resources and news relevant to their spiritual and social needs. The business model is non-profit, focusing on religious and community services within the regional government and non-profit sectors. Technically, the website employs a modern web application framework (webIQ 6.1) and integrates popular JavaScript libraries such as jQuery and Bootstrap for responsive design. It uses multiple analytics platforms including Matomo, Microsoft Clarity, and Google Analytics, alongside a robust privacy consent management system powered by Truendo. The site is mobile-optimized and demonstrates good performance and accessibility basics. From a security perspective, the website enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional, trustworthy, and secure platform for its intended audience, though improvements in privacy policy transparency, security header implementation, and contact information visibility are recommended.

D

digitaleheimat GmbH

digitaleheimat.de

60

digitaleheimat GmbH is a German digital agency specializing in comprehensive online marketing solutions including SEA, SEO, social media marketing, and programming services. Established in 2011, the company has a strong market presence supported by certifications such as Google Premium Partner and a portfolio of over 1000 campaigns. The website reflects a mature digital infrastructure built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking explicit security policies and headers. Overall, the business demonstrates credibility and professionalism with room for improvement in privacy and security transparency.

The website novamatrix.de is a small, German-language blog focused on philosophy, branded as 'Mindblown: a blog about philosophy.' It operates on the WordPress platform using the default 'twentytwentythree' theme with minimal content and no evident business or commercial activity. The site lacks essential business contact information, privacy policies, and terms of service, indicating a personal or hobbyist nature rather than a commercial enterprise. Technically, the site uses modern web standards and is mobile-optimized with good accessibility features, but it lacks advanced SEO and security headers. HTTPS is enabled, providing a secure connection. Security posture is basic with no detected vulnerabilities but missing security best practices such as security headers and incident response information. Overall, the site is safe with no adult or questionable content detected.

V

Verband Deutscher Naturparke e.V.

naturparke.de

51

Verband Deutscher Naturparke e.V. is a German non-profit umbrella organization dedicated to the preservation, development, and public awareness of nature parks in Germany. The website serves as an informational and educational platform, providing extensive resources about nature parks, their projects, and programs. It targets nature enthusiasts, members, partners, and the general public interested in environmental conservation and sustainable regional development. The organization holds a strong national position as the voice of German nature parks and collaborates closely with partner organizations such as Nationale Naturlandschaften e.V.

B

Bayerische Mykologische Gesellschaft

pilze-bayern.de

63

The Bayerische Mykologische Gesellschaft (BMG e.V.) is a regional non-profit organization dedicated to the research and education of native mushrooms in Bavaria, Germany. Their website serves as an informational platform targeting mushroom enthusiasts, mycologists, and the general public interested in mycology. The organization focuses on mushroom consulting, research, and training mushroom consultants, positioning itself as a specialized entity within the regional scientific and educational community. Technically, the website is built on WordPress 6.8.3 using the Astra theme and several plugins including Yoast SEO and Smart Slider 3, indicating a modern and maintainable infrastructure. The site is mobile-optimized and employs SEO best practices, although some accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent banner, but lacks explicit security headers and detailed privacy or security policies. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and compliance. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is a well-structured, professional platform for a small non-profit organization with moderate security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and contact information would enhance its trustworthiness and compliance posture.

S

Sedo.com

onteam.de

71

Sedo.com operates as a well-established domain marketplace platform, offering domain sales, transfers, and brokerage services. The website analyzed is a sales landing page for the domain onteam.de, providing clear pricing, purchase options, and contact information. Sedo has a strong market position with over 26 years of experience and a high volume of domain transfers monthly, targeting domain buyers and sellers globally. The business model focuses on facilitating domain transactions with personal assistance and multiple payment methods. Technically, the site uses modern JavaScript modules, Cloudflare DNS, and HTTPS with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms policies on this page. Overall, the site is professional, trustworthy, and safe for general audiences.

M

M. DESAX AG

mdesaxag.ch

54

M. DESAX AG is a Swiss family-owned company established in 1999 specializing in the sale, rental, and installation of construction elevators and transport platforms. The company serves the Swiss construction and event markets with a broad product range including transport platforms, material elevators, and rope winches. Their market position is solid with a large rental fleet and references from significant projects, indicating reliability and expertise. Technically, the website uses a proprietary CMS (admiralCX) with modern technologies such as jQuery, FontAwesome, Google Analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides clear contact information. Security posture is good with HTTPS and standard security headers, but lacks explicit security policies or incident response contacts. Privacy compliance is supported by a detailed cookie consent mechanism, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and suitable for its target audience.

H

Hutterli AG

hutterli-ag.ch

44

Hutterli AG is a Swiss-based manufacturing company specializing in precision CNC machining services including milling, turning, 3D and 5-axis machining, and measurement. With over 35 years of experience since its founding in 1979, the company serves industrial clients requiring high-quality, complex single and series parts. The website reflects a medium-sized, established business with a focus on quality and technical expertise. Technically, the site is built on WordPress using common plugins such as Yoast SEO and WPBakery Page Builder, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

Arenenberg is a culturally significant hospitality and educational estate located in Switzerland, owned by the Canton of Thurgau since 1906. The website presents a comprehensive offering including hotel accommodations, dining, museum visits, seminars, events, wine experiences, and public courses. The business targets tourists, cultural visitors, and local community members seeking educational and leisure activities. Technically, the website is built on WordPress with WooCommerce and uses modern libraries and plugins to provide multilingual support, booking integration, and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and formal policies are missing. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

E

Elisabeth Böhni

praxis-boehni.ch

49

Praxis Böhni is a small natural medicine healthcare practice based in Kreuzlingen, Switzerland, specializing in holistic treatments including hormonal dysregulation, allergies, metabolic disorders, musculoskeletal pain, autoimmune diseases, and tumor support. The website is professionally designed using WordPress with Elementor and provides clear contact information and a contact form for patient inquiries. The business targets local patients seeking alternative medical treatments. Technically, the site uses modern WordPress plugins and themes but lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security. The site is served over HTTPS with a valid SSL certificate, ensuring secure communication. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy and professional but could enhance privacy compliance and security best practices.

G

Gemeinde Turbenthal

turbenthal.ch

68

Gemeinde Turbenthal operates as the official municipal government website for the Turbenthal community in Switzerland, providing residents and visitors with access to local government services, community news, events, and administrative information. The site is well-positioned as a trusted local authority with a focus on energy sustainability, as evidenced by its Energiestadt Gold certification. The website targets local residents and stakeholders seeking municipal services and information.

D

Die Urologie

dieurologie.ch

47

Die Urologie is a specialized urology medical center based in the Thurgau region of Switzerland, offering comprehensive urological services including consultation, operative treatments, men's health checks, and second opinions. The website presents a professional image with detailed information about doctors, services, and multiple physical locations, targeting patients in the local German-speaking community. The business is positioned as a leading urology provider in the region with experienced specialists and FMH membership credentials. Technically, the website is built on WordPress with common plugins such as Yoast SEO, WPBakery Page Builder, and Contact Form 7, providing a modern and responsive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, suitable for its healthcare audience.

E

ERMARINE GmbH

ermarine.ch

48

ERMARINE GmbH operates as a specialized boat service provider and dealer located in Switzerland, serving the Boden- and Zürichsee regions. Their offerings include boat winter storage, repairs, rentals, sales, and motorhome rentals, targeting boat owners and leisure travelers. The company maintains a professional online presence with clear contact details and social media engagement, positioning itself as a trusted local partner in the transportation sector. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries such as jQuery and Bootstrap, and is mobile responsive with moderate performance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is professional and trustworthy but lacks some compliance and security best practices.

M

Macardo Swiss Distillery GmbH

macardo.ch

61

Macardo Swiss Distillery GmbH operates a professional and well-branded website focused on premium spirits production, hospitality services including a bed and breakfast, and event hosting in the Thurgau region of Switzerland. The company positions itself as a premium Swiss distillery with a strong local presence and an e-commerce platform for direct sales. The website demonstrates a mature digital infrastructure built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, indicating legitimacy and transparency. Overall, the website reflects a trustworthy and credible business with room for enhanced security policies and incident response disclosures.

F

fahrion&partner gartenbau ag

fp-gartenbau.ch

45

fahrion&partner gartenbau ag is a Swiss small business specializing in garden construction, landscaping, and maintenance services primarily targeting private homeowners and residential developers in the Kreuzlingen region. Their website presents a professional and consistent brand image with clear service offerings including garden design, planting, pool installation, and garden care. The company positions itself as a passionate and reliable local expert in garden services. Technically, the website uses a modern Bootstrap 4 framework with jQuery and integrates Google Analytics and a consent management platform to comply with privacy regulations. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly provided with a physical address, phone number, and company email. Overall, the website is trustworthy and professionally maintained but could improve in security transparency and technical hardening.

G

Gemeinde Ermatingen

ermatingen.ch

48

Gemeinde Ermatingen operates as the official municipal government website for the community of Ermatingen in Switzerland. It provides residents and visitors with comprehensive information about local government services, community events, public notices, and administrative contacts. The website targets local citizens and stakeholders, serving as a central hub for municipal communication and service delivery. The business model is typical of a government entity, focusing on transparency, accessibility, and community engagement. From a technical perspective, the website employs a modern technology stack including jQuery, Bootstrap, Isotope, Fancybox, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and features interactive elements such as digital tours and event calendars. The CMS appears to be a custom or specialized system (Simpli CMS), supporting structured content management. Security posture is adequate with HTTPS enforced and no visible exposure of sensitive data. However, the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. The use of Matomo analytics reflects a privacy-conscious approach to user tracking, though GDPR compliance could be enhanced by adding explicit cookie consent and privacy notices. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The risk level is low, but strategic enhancements in security policies, privacy compliance, and technical hardening are recommended to maintain and improve trust and regulatory adherence.

G

Gemeinde Salenstein

salenstein.ch

58

Gemeinde Salenstein operates as the official municipal government website for the Salenstein area in Switzerland, providing residents and visitors with comprehensive information about local governance, services, infrastructure, social programs, and community events. The site serves as a digital portal for accessing municipal services including online applications, contact information, and public announcements. The target audience primarily consists of local residents, businesses, and visitors seeking official information and services. Technically, the website is built on a modern CMS platform (i-web.ch) with a responsive design optimized for mobile devices. It employs standard web technologies such as HTML5, CSS3, JavaScript, and Bootstrap framework components. The site includes accessibility features and SEO optimizations, with a moderate performance profile. Security is enforced through HTTPS, secure login forms, and an opt-in consent mechanism for anonymized web analytics. From a security perspective, the website demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS registration data and website content, indicating legitimacy. The site is free from suspicious content or security red flags, making it a reliable source of municipal information. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure to further strengthen the security posture.

T

Tertianum Management AG

tertianum.ch

57

Tertianum Management AG operates a professional senior living and care services business in Switzerland, offering residences, apartments, and specialized care with a strong focus on quality of life and well-being. The website demonstrates a mature digital presence built on HubSpot CMS, integrating modern marketing and analytics tools, and providing multi-language support. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and website content align well, indicating a trustworthy and established business.

A

Auto Lang AG

autolang.ch

53

Auto Lang AG is a well-established Swiss automotive company with a history spanning over 95 years. It operates multiple locations in Switzerland and represents several major automotive brands including Mercedes-Benz, smart, Peugeot, Citroën, DS Automobiles, and Fuso. The company offers a comprehensive range of services including vehicle sales, maintenance, repairs, rentals, and vehicle care. The website reflects a professional and consistent brand image targeting both individual and business customers in the transportation sector. Technically, the site is built on the Contao CMS platform and employs modern web technologies and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, cookie consent, and anonymized analytics, though it lacks explicit security policies or incident response information. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

K

Klingen Gastro GmbH

burghohenklingen.com

66

Restaurant Burg Hohenklingen operates a historic medieval castle venue near Stein am Rhein, Switzerland, offering French cuisine, event hosting including weddings and banquets, and unique cultural experiences. The business targets local residents, tourists, and event organizers seeking a distinctive location. The website is built on WordPress with modern SEO and marketing integrations, including Google Analytics and Mailchimp, reflecting a moderate digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. The domain registration is consistent with the business history, enhancing trustworthiness. Overall, the site presents a professional and credible online presence for a small hospitality business.

T

Thurgau Tourismus

thurgau-bodensee.ch

60

Thurgau Tourismus operates a regional tourism website promoting the Thurgau and Bodensee region in Switzerland, focusing on nature experiences, culture, and family-friendly activities. The website provides travel tips, hotel recommendations, and leisure activity suggestions, targeting tourists and families interested in this Swiss region. The business model centers on tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on the Contao Open Source CMS with Bootstrap for styling and includes modern integrations such as Weglot for multilingual support, Cookiebot for GDPR-compliant cookie management, Plausible Analytics for privacy-friendly visitor tracking, and Google Tag Manager for marketing tags. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses a robust cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for regional tourism information. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.

The website www.seetickets.com is currently inaccessible, presenting an Access Denied error page with no visible content or metadata. This prevents any meaningful analysis of the business, technical infrastructure, or security posture. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy mechanisms that block WHOIS queries. Due to these factors, the website's legitimacy and operational status cannot be verified. The lack of accessible content and WHOIS data results in a very low trust and credibility score. From a technical perspective, the absence of accessible HTML content means no technologies, frameworks, or hosting details can be identified. The site appears to be blocked by a generic access control mechanism, possibly a firewall or server configuration, which severely limits any security or compliance evaluation. No security headers, SSL information, or privacy policies are available for review. Security posture assessment is not feasible given the lack of data. The domain's unregistered or inaccessible status is a critical risk indicator. Without contact information, privacy policies, or incident response details, the site does not meet basic compliance or trust standards. Overall, the site is currently non-operational or heavily restricted, and further investigation or direct contact with the domain owner or hosting provider is recommended. Strategic recommendations include resolving access issues to restore website availability, registering or updating domain WHOIS information, implementing standard security and privacy policies, and establishing clear contact and incident response channels to improve trust and compliance.

I

Infomaniak Network SA

infomaniak.cloud

74

Infomaniak Network SA is a Swiss-based technology company specializing in cloud infrastructure services, including public cloud IaaS solutions. The company targets businesses and developers seeking reliable, automated, and cost-effective cloud hosting. Infomaniak positions itself as a leading Swiss cloud provider with a strong emphasis on privacy, security, and sustainability, offering CHF 300 free credit to new users to encourage adoption. Technically, the website is built on modern frameworks such as React and Gatsby, ensuring fast performance, excellent mobile optimization, and good SEO practices. The infrastructure appears self-hosted with strong security configurations, including HTTPS enforcement and comprehensive security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, Infomaniak demonstrates maturity with ISO 27001 certification and transparent incident response contacts. No vulnerabilities or exposed sensitive data were detected. The main concern is the absence of publicly available WHOIS domain registration data, likely due to privacy protection, which slightly impacts transparency but does not undermine overall trust. Overall, Infomaniak presents a professional, secure, and privacy-conscious cloud service platform with strong business credibility. Strategic recommendations include enhancing public vulnerability disclosure, maintaining up-to-date third-party libraries, and continuing to improve transparency around data retention and incident response.

K

Kulturhuus Häbse

haebse.ch

70

Kulturhuus Häbse is a small cultural venue based in Basel, Switzerland, offering a variety of events including theater performances and community gatherings. The website is professionally designed using Squarespace, featuring clear navigation, event listings, and ticket purchasing options. The technical infrastructure is modern and leverages standard web technologies with good mobile optimization and performance. Security posture is solid with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but terms of service and security policies are absent. Overall, the website presents a trustworthy and professional image suitable for its cultural and community-focused business model.

24 Stops is a cultural and artistic project focused on guided walks, events, and installations, supported by regional partners such as Fondation Beyeler and others. The website provides information about the project, event registration, and partner links, targeting a general audience interested in culture and art. The technical infrastructure includes common web technologies such as jQuery, Cookiebot for consent management, Google Tag Manager, and Vimeo for video content. The site is hosted behind AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is good with a visible privacy policy and cookie consent mechanism. Overall, the website is professionally presented with consistent branding and trustworthy partner associations, but could improve in technical security and contact transparency.

P

Papoo Software & Media GmbH

ccm19boros.de

47

The website ccm19boros.de serves as a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH. The business focuses on providing software solutions to help website operators manage cookie consent in compliance with privacy regulations. The site targets businesses requiring cookie consent management and offers a multilingual login interface. The market position appears niche, with a small company footprint and limited publicly available business information. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The infrastructure is hosted on servers indicated by the nameservers your-server.de and second-ns.de. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected beyond custom theme scripts. From a security perspective, the site uses HTTPS (assumed from URL) and a POST login form with autocomplete attributes. However, no security headers such as Content-Security-Policy or HSTS are present, and no privacy or cookie policies are visible on the login page. There is no contact information or incident response details provided, which limits transparency and trust. The WHOIS data is minimal, showing only nameservers without registrant details, reducing domain trustworthiness. Overall, the website is functional for its login purpose but lacks comprehensive privacy, security, and business transparency features. The risk level is moderate due to missing policies and security headers. Strategic improvements in privacy compliance, security hardening, and business information disclosure are recommended to enhance trust and compliance.

C

Collettivo A/I

noblogs.org

55

NoBlogs.org is a niche, non-commercial blogging platform focused on radical activism, privacy, and social justice. Operated by the Collettivo A/I, it provides a space for activists and like-minded individuals to communicate and publish content without commercial influence. The platform is multilingual and emphasizes privacy and antifascist, antisexist values. Technically, the site runs on WordPress with a modern but modest tech stack, hosted by autistici.org, a known activist collective. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced DNS security and published security policies. Privacy compliance is good with a clear cookie banner and privacy policy, though no terms of service or incident response information is provided. Overall, the site is trustworthy and well-aligned with its mission but could improve in security transparency and technical hardening.

D

Druckkollektiv Phönix

phoenixdruck.ch

49

Druckkollektiv Phönix is a small, self-managed copy shop and printing business located in Basel, Switzerland. Founded in 2015, it offers digital and letterpress printing services both in-store and through an online webshop. The website is professionally designed using WordPress and WooCommerce, providing a good user experience with clear navigation and relevant content in German. The business targets local customers seeking printing and copying solutions with convenient online ordering and local pickup options. The company maintains a consistent brand presence and provides comprehensive contact and legal information, enhancing trustworthiness. Technically, the website leverages a modern WordPress infrastructure with popular plugins such as WooCommerce and WPBakery Page Builder. It uses HTTPS with good SSL configuration, includes structured data for SEO, and integrates Google Analytics for traffic monitoring. The site is moderately performant and mobile-optimized, though accessibility features are basic. There is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the HTML content. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the site demonstrates a reasonable security posture for a small retail business but should address cookie consent and security headers to improve compliance and protection. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and maintaining regular updates. These steps will enhance trust, compliance, and security culture, supporting the business's continued growth and customer confidence.

Velo Willi is a small local bicycle workshop and sales business based in Switzerland, operating under the subdomain velowilli.weebly.com hosted on the Weebly platform. The business offers new and used bicycles, repairs, custom builds, and limited edition music-related products. The website is designed with a clear structure, good navigation, and mobile optimization, providing relevant content for local bicycle customers. Technically, the site uses Weebly CMS with jQuery 1.8.3, Google Analytics, and Snowplow for analytics. While HTTPS is implied, no advanced security headers are detected, and the use of an outdated JavaScript library presents potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a phone number, with no email or detailed business registration data available. Overall, the site is functional and trustworthy for its business purpose but would benefit from improved security and privacy practices.

V

Verein «sur le pont» Basel

surlepont.ch

46

sur le pont is a small non-profit collective based in Basel, Switzerland, focused on organizing community events, sports activities, and cultural programs. The organization operates through collective coordination and relies on donations to sustain its activities. The website serves as an information hub for upcoming events and donation requests, targeting local community members interested in social and cultural engagement. Technically, the website is built on WordPress using the Lay Theme 4.1.8 and employs modern JavaScript libraries such as jQuery, Backbone.js, and Swiper.js. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure communication. However, there is a lack of privacy and cookie policies, and no visible security headers, which are areas for improvement. No forms or analytics scripts were detected, indicating minimal data collection and tracking. Overall, the website presents a trustworthy and community-focused presence but would benefit from enhanced privacy compliance and security best practices.

Kollektiverhalt is a small non-profit initiative based in Basel, Switzerland, focused on supporting self-organized cultural and political collectives financially impacted by the COVID-19 pandemic. The platform serves as a fundraising hub and information source for various collectives and venues, promoting solidarity and collective action within the local community. The website offers multilingual content (German, English, French) and includes a newsletter subscription form to engage supporters. Technically, the website is built with basic HTML and JavaScript, utilizing Google Fonts and Mailchimp for newsletter management. The site is functional but lacks advanced technical features such as modern frameworks or CMS platforms. Mobile optimization and accessibility are basic, and SEO practices are minimal. No advanced analytics or tracking beyond Mailchimp are present, indicating a low level of user tracking. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were detected in the provided data. There is no privacy or cookie policy, which is a compliance gap, especially under GDPR. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the non-profit nature and community focus, but the lack of privacy and cookie policies and security headers are notable gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile responsiveness, and enhancing accessibility to improve compliance and user trust.

M

Multimedia ABC GmbH (hilfmir.ch)

hilfmir.ch

51

Multimedia ABC GmbH, operating the website hilfmir.ch, is a Swiss-based small enterprise founded in 1999 specializing in multimedia projects, IT consulting, PC/MAC support, web development, livestreaming, and VoIP telephony services. The company targets private clients, SMEs, and associations, offering a diversified portfolio including remote support and podcast production. The website reflects a professional and consistent brand presence with clear contact information and a user-friendly interface. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Kuhn Organ Builders Ltd is a Swiss-based company specializing in the manufacturing, restoration, and maintenance of pipe organs. With a heritage spanning approximately 150 years, the company emphasizes Swiss craftsmanship and quality, producing organs entirely in Switzerland. Their website reflects a professional and well-structured digital presence, targeting musicians, churches, concert halls, and cultural institutions worldwide. The company maintains a consistent brand image and provides clear contact information and multilingual support, enhancing its international appeal. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Swipe.js for interactive features. The site is mobile-optimized with good SEO practices, though performance is moderate. Security-wise, HTTPS is used, but explicit security headers and policies are not evident. No cookie consent mechanism or detailed privacy compliance indicators are present, suggesting room for improvement in GDPR adherence. The security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the absence of a published security policy or incident response contact limits transparency. The WHOIS data aligns well with the company's claims, showing a consistent and legitimate registration. Overall, the website is trustworthy, professional, and safe, with minor gaps in privacy and security policy disclosures.

G

Gemeinde Riehen

schulraum-riehen.ch

64

The website www.schulraum-riehen.ch serves as the official municipal portal for the community of Riehen, Switzerland, focusing primarily on the school space strategy and related educational infrastructure planning. It targets local residents, families, and stakeholders interested in municipal development and education. The site is built on the Weblication CMS platform and uses jQuery for client-side scripting. The design is professional and consistent, with good navigation and mobile optimization. Structured data is implemented for SEO benefits. Security posture is adequate with HTTPS enabled and some meta security policies, but lacks comprehensive security headers and privacy compliance documentation. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. The domain registration data aligns well with the municipal government entity, supporting high legitimacy. Overall, the website is trustworthy and serves its informational purpose effectively, though it would benefit from enhanced privacy and security policy disclosures.

IdéeSport is a Swiss non-profit foundation dedicated to promoting physical and mental health through sports and community programs targeting youth, children, and families. The organization offers a variety of structured programs such as CoachProgramm, MiniMove, OpenSunday, MidnightSports, and others, operating across multiple cantons in Switzerland. The website reflects a well-established entity with consistent branding and a clear mission to foster health and social inclusion through sports activities. Technically, the website employs modern web technologies including Google Tag Manager and Google Maps API, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. WHOIS data confirms the legitimacy and transparency of the domain registration, aligning with the organization's non-profit status. Overall, the website is professional, trustworthy, and serves its target audience effectively, but could enhance compliance and security transparency.

K

Kulturbüro Riehen

riehenevents.ch

69

Riehen Events is a municipal cultural event platform operated by the Kulturbüro Riehen, serving the local community and visitors by providing comprehensive event listings, cultural information, and support for event organizers. The website is positioned as a trusted local hub for cultural engagement in Riehen, Switzerland, with a focus on accessibility and community involvement. Technically, the site is built on Drupal 10 with modern JavaScript frameworks and includes privacy-conscious analytics via Matomo. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good digital maturity and professionalism, supporting its role as a public service platform.

G

Gemeinde Riehen Kulturbüro

riehen-tourismus.ch

65

The website www.riehen-tourismus.ch serves as the official tourism portal for the municipality of Riehen in Switzerland. It provides comprehensive information about local attractions, cultural sites, events, parks, dining, and accommodations, targeting tourists and visitors interested in exploring the region. The site is recognized by Switzerland Tourism and the Federal Office of Culture, enhancing its credibility and market position as a trusted local tourism authority. The business model focuses on destination marketing and visitor information services, supporting local tourism growth and cultural engagement. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries such as Splide.js for UI components and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism ensuring GDPR compliance. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data aligns well with the website's municipal identity, showing consistent registration information and no suspicious patterns. Overall, the website is professional, trustworthy, and well-suited for its purpose as a tourism information portal. Strategic improvements include publishing formal security and incident response policies and adding vulnerability disclosure information to strengthen user trust and security readiness.

Q

quanta

quanta.io

66

Quanta is a technology company specializing in web performance optimization and digital sobriety solutions aimed at improving conversion rates and reducing environmental impact. The company serves a B2B market with a SaaS model, trusted by over 500 sites worldwide including notable brands such as Veepee, Cultura, Michelin, and Orange. Recently acquired by Centreon, Quanta positions itself as a key player in digital observability and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, enhanced with modern technologies like jQuery, Google reCAPTCHA, and HubSpot forms. The site is well-optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and use of CAPTCHA, though security headers and explicit security policies are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a clear market focus and modern digital infrastructure.

The website bestview.ch currently serves as a placeholder page indicating that the site is no longer available. It provides minimal content limited to a logo and a message in German stating the unavailability of the page along with a contact email address. There is no business description, no services listed, and no additional contact information such as phone numbers or physical addresses. The website uses basic HTML and CSS with Google Fonts for typography but lacks any advanced technical infrastructure or CMS. No analytics, tracking, or advertising technologies are detected. Security posture is weak due to absence of visible security headers and no confirmation of HTTPS usage. Privacy and cookie policies are missing, and no GDPR compliance indicators are present. The domain WHOIS data is privacy protected, limiting transparency about the registrant and domain age. Overall, the site appears inactive or abandoned with very limited business or security information available.

L

LANKELEISI

lankeleisi.com

69

LANKELEISI operates a professional e-commerce platform specializing in electric bikes, including dual motor, cargo, and mountain e-bikes, supported by a three-year warranty. The company targets consumers interested in high-performance and all-terrain electric bikes, positioning itself as a niche player in the transportation and outdoor adventure market. The website is built on Shopify, leveraging modern web technologies and third-party integrations for marketing, analytics, and customer reviews. The digital infrastructure is mature, with good performance and mobile optimization, though some security enhancements like DNSSEC and security headers could be improved. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but lacks explicit security policy and incident response details. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

L

LANKELEISI.CO.UK

lankeleisi.co.uk

65

LANKELEISI.CO.UK operates as the official UK online store for Lankeleisi electric bikes, specializing in dual motor e-bikes, all-terrain models, and accessories. The business is relatively young, founded in 2021, and leverages the Shopify platform for e-commerce operations. The website presents a professional and consistent brand image with a focus on quality products backed by a three-year warranty. The target audience includes UK consumers interested in electric bikes and related gear. Technically, the site uses modern web technologies and integrates multiple third-party services for marketing, reviews, and shipping protection, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but lacking a visible privacy policy. Overall, the site is trustworthy and functional but could enhance transparency and contact accessibility.

L

lankeleisi.eu

lankeleisi.eu

67

Lankeleisi.eu operates as an e-commerce platform specializing in the sale of high-performance electric bikes, including dual motor, all-terrain, fat tire, and city commuter models. The business emphasizes product quality with a three-year warranty, targeting consumers interested in electric mobility solutions. The website is built on the Shopify platform, leveraging various third-party marketing and analytics tools to enhance customer engagement and sales performance. The technical infrastructure is modern and moderately optimized for performance and mobile use, with a consistent and professional brand presentation. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but could benefit from enhanced security headers and published security policies. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a legitimate and professional e-commerce business with room for improvement in privacy and security transparency.

W

Wirtschaftsförderung Region Hannover

roboticscity.de

57

Robotics City Hannover is a regional robotics innovation network supported by the economic development agency of the Hannover region. It serves as a platform to promote robotics technology, support educational and startup initiatives, and foster collaboration among industry, academia, and government. The website is professionally designed, mobile-optimized, and provides comprehensive information about robotics projects, events, and news relevant to the Hannover region. The technical infrastructure includes modern JavaScript libraries and privacy-respecting Matomo analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site reflects a credible and trustworthy regional government initiative with a focus on technology and innovation.