Security Directory

P

Potpuri

potpuri.org

52

Potpuri.org is an independent publishing platform and collaborative initiative focused on experimental research methodologies, investigative journalism, and production, primarily serving the Albanian diaspora and social issues between Kosovo and Switzerland. The website is hosted on the Cargo.site platform and uses modern web technologies including JavaScript frameworks and responsive design. The site is multilingual and includes partner acknowledgments from the European Union and local initiatives. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. However, contact information and terms of service are missing, which impacts business credibility and user trust. Overall, the site is functional, professionally designed, and serves a niche media and research audience.

S

STUDIO RR

studio-rr.info

46

STUDIO RR is a small creative studio specializing in various artistic disciplines including choreography, photography, installation art, publications, video, and research. The website is professionally designed using WordPress and supports multiple languages (German, English, French), targeting an audience interested in arts and culture. The technical infrastructure includes modern web technologies such as jQuery and Swiper.js, with a custom WebGL slideshow enhancing the user experience. The site is mobile optimized and presents a consistent brand image with custom fonts and styling. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and suitable for its niche audience, though improvements in security and privacy transparency are recommended.

M

MOULURE MAGAZINE

mouluremagazine.ch

49

MOULURE MAGAZINE is a small interdisciplinary art and design collective based in Switzerland, providing a platform for artists and designers to share their creative processes and works. The website serves as an online magazine and includes an online shop, targeting artists, designers, and art enthusiasts. The platform is hosted on Cargo Collective and integrates Stripe for payment processing. The technical infrastructure is modern and functional, with good mobile optimization and a clean design. Security posture is adequate with HTTPS and secure payment integration, but lacks advanced security headers and formal privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

F

Flavia Sistiaga

flaviasistiaga.com

40

The website flaviasistiaga.com serves as a professional portfolio for the artist Flavia Sistiaga, showcasing her exhibitions, publications, projects, and commissioned works. The site is hosted on the Cargo Collective platform and presents a clean, well-structured design suitable for art enthusiasts and potential collaborators. The business model focuses on portfolio presentation and artistic promotion, targeting a niche audience interested in contemporary art. The domain is registered since 2018 with a reputable registrar and shows consistency with the website content. From a technical perspective, the site uses standard web technologies including JavaScript, Google Analytics, and WebFont Loader, with hosting likely provided by Cargo Collective. The performance is moderate with basic mobile optimization and accessibility features. SEO optimization is minimal but present through meta tags and Open Graph data. Security posture is adequate with HTTPS enabled and domain transfer protection active. However, the absence of DNSSEC and security headers such as Content-Security-Policy and Strict-Transport-Security represents areas for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies and no visible consent mechanisms. No contact information or incident response details are provided, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance measures to improve trust and regulatory adherence.

The website represents the Institute Experimental Design and Media Cultures (IXDM), part of the Basel Academy of Art and Design FHNW in Switzerland. It focuses on experimental design, media cultures, and related publishing activities. The site targets students, academics, and professionals interested in media and design culture. The business model is educational and research-oriented, with a niche market position within the academic sector. Technically, the site is built on WordPress 6.8.3 using modern JavaScript and Google Analytics for tracking. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

C

Cartoonmuseum Basel

cartoonmuseum.ch

62

The Cartoonmuseum Basel is a specialized cultural institution in Switzerland dedicated exclusively to the art of narrative drawing, including cartoons, comics, and graphic novels. It holds a unique market position as the only Swiss museum focused on this art form, offering exhibitions, educational programs, events, and a shop. The website reflects a professional and well-structured digital presence, targeting art enthusiasts, educational institutions, and the general public interested in narrative art. The museum operates as a non-profit entity with a clear focus on cultural education and community engagement. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Craft CMS likely used as the content management system. It demonstrates good performance, mobile optimization, and accessibility. The site uses Google Analytics for visitor tracking and Campaign Monitor for newsletter management. Security best practices are observed, including HTTPS enforcement and secure form handling, although there is room for improvement in cookie consent mechanisms and explicit security policy disclosures. From a security standpoint, the site has a solid posture with appropriate security headers and no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain registration, matching the museum's identity and location in Switzerland. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent could be enhanced. Overall, the Cartoonmuseum Basel website is a trustworthy, professional, and well-maintained digital asset supporting the museum's mission. Strategic recommendations include implementing explicit cookie consent, publishing a security and incident response policy, and considering a vulnerability disclosure statement to further enhance trust and compliance.

The website curamagazine.com is currently inaccessible due to a BitNinja Web Application Firewall (WAF) security challenge page that requires CAPTCHA validation before access is granted. This indicates the site is protected against automated or potentially malicious traffic. The domain is registered since 2009 with Tucows Domains Inc., showing a long registration period and transfer/update protections, but no registrant details are publicly available. The site content is minimal, showing only the security challenge with no visible business or contact information, privacy or cookie policies, or terms of service. The meta tags indicate legacy CMS usage (Joomla 1.5 and WordPress 2.5), suggesting outdated technology. The technical stack includes AngularJS and jQuery, but no modern analytics or advertising tools are detected. Security headers are absent, and DNSSEC is not enabled, representing areas for improvement. Overall, the site lacks transparency and business credibility information, limiting trust and compliance assessment.

The website tott.ch serves as an online presence for Thomas Ott, a Swiss comic artist and cartoonist. The site primarily functions as a portfolio or promotional platform showcasing his artistic work. The content is minimal on the main domain and is delivered via a frameset loading content from an external domain (trinity.ch). The business model is focused on artist promotion and engagement with fans and art enthusiasts. The site targets a niche audience interested in comics and graphic art, with a small-scale operation based in Switzerland. From a technical perspective, the website uses a legacy frameset structure, which is outdated and limits mobile optimization and accessibility. There is no evidence of modern CMS or frameworks, and no analytics or tracking scripts were detected. The hosting appears to be provided by trinity.ch. SEO and accessibility are poor due to minimal content and lack of meta descriptions or structured data. Security posture is weak, with no visible security headers or policies, and no HTTPS confirmation in the provided data. There are no privacy, cookie, or terms of service policies, and no contact or incident response information. The WHOIS data is consistent with the website's Swiss artist identity, indicating legitimacy. Overall, the site lacks modern security and privacy compliance features, which could expose it to risks and reduce user trust. Recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness and accessibility, and providing clear contact and incident response information to enhance trust and compliance.

H

Heissi Schnitte – Catering

heissi-schnitte.ch

51

The website heissi-schnitte.ch appears to represent a small Swiss business, likely in the bakery or food sector, based on the domain and language context. The site is built on WordPress using the Elementor page builder, indicating a moderate level of digital maturity with a focus on visual presentation. The content is primarily in German (Switzerland) and is business-oriented but lacks detailed business information, contact details, and formal policies such as privacy or cookie policies. Technically, the site uses HTTPS, which is a positive security indicator, but lacks important security headers and formal privacy compliance mechanisms. No analytics or tracking scripts were detected, suggesting minimal user tracking. The absence of contact information and security policies reduces the overall trust and compliance posture. The domain WHOIS data is consistent with the website's Swiss origin and shows no privacy protection, supporting legitimacy. Overall, the website is functional and visually adequate but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

S.P.A is a small artisanal wine producer and retailer located in Basel, Switzerland, offering handcrafted wines through an online shop and local presence. The business emphasizes honest and artisanal wine production with a community focus. The website uses modern web technologies including Craft CMS, Snipcart for e-commerce, and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and an age verification gate for alcohol sales, but lacks security headers and explicit privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is legitimate and trustworthy but could improve privacy compliance and security practices.

Azienda Agricola Rio del Lupo is a small family-owned winery and agriturismo located in the Monferrato region of Piedmont, Italy. The business focuses on producing high-quality traditional wines such as Monferrato Rosso (Nebbiolo), Monferrato Bianco (Arneis), and Dolcetto D'Asti, combining traditional viticulture with modern techniques. The website is primarily in German, targeting wine enthusiasts and tourists interested in agriturismo experiences. The company markets its wines internationally and offers accommodations integrated into the vineyard setting. Technically, the website uses an older jQuery version and custom scripts for UI effects but lacks modern frameworks or CMS. It is hosted on rzone.de servers and shows basic mobile optimization and SEO practices. However, there is no evidence of HTTPS usage or security headers, which weakens the security posture. No analytics or tracking scripts are present, and no forms collect personal data, reducing privacy risks but also limiting user interaction. From a security perspective, the site lacks critical protections such as HTTPS and security headers, and no formal privacy or cookie policies are provided beyond a basic statement. There is no incident response or vulnerability disclosure information. The WHOIS data is minimal but consistent with the business profile. Overall, the site is functional and professional but requires improvements in security and privacy compliance. The overall risk is moderate, with recommendations to implement HTTPS, security headers, and formal privacy and cookie policies to enhance trust and compliance. Adding vulnerability disclosure and incident response contacts would further strengthen security culture.

Nacha Vollenweider Illustration is a small-scale artistic portfolio website showcasing the illustrator's comic and illustration works, including various series, exhibitions, and live drawing events. The site targets art enthusiasts and cultural audiences, positioning itself as a niche platform for creative expression and promotion. Technically, the website is built on the Jimdo Creator platform, leveraging its hosting and content management capabilities. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements basic cookie consent mechanisms but lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy and cookie control present but no terms of service or detailed GDPR compliance indicators. Overall, the website is trustworthy and professional for its scope but could improve in security and compliance documentation.

Stretcher is a small, artist-run exhibition project based in Basel, Switzerland, founded in 2023 by artists Karin Borer and Daniel Kurth. The project focuses on contemporary art exhibitions, artist editions, readings, and collaborative art events, operating within the InfoSpace collective art community. The website provides detailed program information, contact details, and event schedules, targeting a general audience interested in contemporary art. Technically, the website is built with standard HTML and CSS, uses Google Fonts, and integrates a newsletter subscription via Mailchimp. The site is mobile-optimized with good navigation and content relevance but lacks advanced technical frameworks or CMS. Security posture is moderate with no explicit HTTPS or security headers information available, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

M

Moritz Schermbach

moritzschermbach.ch

42

Moritz Schermbach is a Swiss-based professional photographer specializing in photography and cinematography services including still lifes, portraits, fashion, and landscapes. The website serves as a portfolio showcasing artistic works primarily targeting a general audience interested in visual arts. The business operates on a small scale with a niche local market focus in Basel, Switzerland. Technically, the website employs older versions of jQuery and Bootstrap frameworks, alongside Google Analytics and Tag Manager for visitor tracking. The site is mobile responsive and has a moderate performance profile but lacks modern CMS or advanced frameworks. Security posture is basic with no visible security headers or HTTPS enforcement details in the provided content. Privacy compliance is minimal with no privacy or cookie policies present, and no GDPR compliance indicators. Contact information is limited but present in meta tags. Overall, the site is functional and professional but requires improvements in security, privacy, and technology modernization to enhance trust and compliance.

M

mosaik

mosaikzeitschrift.at

46

mosaik is a small non-profit cultural platform and magazine based in Austria, focusing on new literature and culture. The website serves as a hub for literary publications, cultural events, and community engagement, targeting German-speaking literature enthusiasts. The business model relies on subscriptions, memberships, and event participation, positioning mosaik as a niche cultural media entity within the Austrian and broader German-speaking market. Technically, the website is built on WordPress using the Uncode theme, leveraging standard web technologies such as jQuery and MediaElement.js. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. SEO practices are adequately implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and a formal vulnerability disclosure policy. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent mechanisms are absent. Contact information is primarily via contact forms, with no direct emails or phone numbers published. Overall, mosaik presents a trustworthy and professional online presence for a cultural non-profit. The absence of WHOIS data limits full domain trust analysis, but the website's content quality and social media presence support legitimacy. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and compliance standing.

Innenzines.com is an online platform dedicated to the promotion and sale of independent art publications, including zines, magazines, posters, and other cultural materials. The website serves a niche audience of art enthusiasts and collectors, providing a comprehensive catalog of artists and publications. The business appears to be small-scale and focused on the art media sector, with a domain registration dating back to 2007, indicating an established presence in its niche. Technically, the website is built using the Indexhibit CMS and utilizes jQuery for client-side scripting. The site lacks modern security implementations such as HTTPS, security headers, and privacy policies, which indicates a low level of digital maturity and security posture. The website's performance and mobile optimization are basic, and no advanced analytics or tracking mechanisms are detected. From a security perspective, the absence of HTTPS and security headers, along with missing privacy and cookie policies, poses risks to user data protection and compliance with regulations such as GDPR. No incident response or security contact information is provided, limiting the site's readiness to handle security events. The WHOIS data shows a consistent and legitimate domain registration, supporting the business's credibility. Overall, the website is functional and content-rich but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and protect users. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact information for security and business inquiries.

P

Palazzina

palazzina.ch

63

Palazzina is a small cultural venue based in Switzerland specializing in contemporary art exhibitions and cultural events. The website serves as a platform to showcase recent and upcoming exhibitions, book launches, and other artistic activities primarily located in Basel. The target audience includes art enthusiasts, local visitors, and artists. The business model appears to be non-profit or cultural organization focused on community engagement through art. Technically, the website is built with standard HTML, CSS, and JavaScript, likely using a custom CMS. It is mobile optimized with moderate performance and basic SEO and accessibility features. The site uses HTTPS and includes CSRF tokens in forms, indicating some security awareness. However, it lacks security headers and privacy/cookie policies, which are important for compliance and security. From a security perspective, the site has a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security headers are notable gaps. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, minimizing privacy risks. Overall, the website is professional and trustworthy with a moderate security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance its security and compliance standing.

HUMBUG is a cultural venue based in Basel, Switzerland, focusing on queer, feminist, and alternative cultural events. The website provides a comprehensive program of past and current events, showcasing a vibrant community engagement. Technically, the site uses standard web technologies including Google Analytics and Tag Manager for tracking, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, though the content and event listings indicate a legitimate operation. Security posture is moderate with room for improvement in privacy compliance and security best practices.

The website 'chrummibei.ch' presents minimal content limited to a single logo image and a title 'Chresta & Willi, Dateninsel'. There is no descriptive business information, contact details, or policies available, indicating the site may be a placeholder or under development. The lack of metadata, forms, or external links further supports this assessment. Technically, the site lacks modern web features, security headers, and HTTPS, which negatively impacts its digital maturity and security posture. The WHOIS data is privacy protected, limiting transparency about the registrant and domain age. Security posture is weak due to absence of HTTPS and security policies, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, resulting in a low AI score of 28. Strategic improvements are needed to enhance trust, security, and user engagement.

M

Mixlr Ltd

mixlr.com

60

Mixlr Ltd operates a specialized live audio broadcasting platform that enables users to create, distribute, and host professional-quality live audio streams globally. Founded in 2010, the company has established itself as a trusted provider in the live audio streaming niche, serving diverse audiences including sports teams, podcasters, educators, and faith groups. The platform emphasizes ease of use, reliability, and professional sound quality without the complexity of traditional broadcasting tools. Technically, Mixlr leverages a modern tech stack including Ruby on Rails, Turbo, StimulusJS, and AWS infrastructure with Cloudfront CDN, ensuring fast and scalable performance. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR. Overall, Mixlr presents a credible, professional, and secure online presence with moderate user tracking for analytics and marketing purposes.

M

Merkur Druck AG

merkurmedien.ch

52

Merkur Druck AG is a Swiss-based company specializing in sustainable printing products, creative media project design, and innovative digital solutions. Positioned as a regional leader in manufacturing and media services, the company targets businesses seeking environmentally responsible and creative media services. The website reflects a professional and consistent brand image with clear contact information and a focus on sustainability. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics tools such as Microsoft Clarity and Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices to meet modern compliance standards.

P

ProgrammZeitung Verlags AG

proz.online

70

PROZ.online is a regional cultural media platform operated by ProgrammZeitung Verlags AG, founded in 2022, focusing on providing comprehensive event listings, exhibitions, and magazine content for the Basel area. The website serves a culturally engaged audience interested in arts, theater, music, and literature. It offers subscription services, event submissions, and advertising opportunities, positioning itself as a key local media resource with support from Swiss cultural institutions. Technically, the site uses the open-celements CMS with a modern JavaScript stack including jQuery, Prototype.js, and Matomo analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and explicit security headers. No incident response or security policy is published, which could be improved. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

K

Kunstbulletin

kunstbulletin.ch

52

Kunstbulletin is a leading Swiss art magazine providing comprehensive coverage of contemporary art through print and digital channels. The website supports multiple languages and offers subscription services, event agendas, public art mapping, and video archives. Technically, it is built on Drupal 10 with modern frontend libraries and integrates marketing and analytics tools such as Google Analytics and Mailchimp. The security posture is solid with HTTPS and secure forms, but lacks visible security policies and cookie consent mechanisms, which impacts privacy compliance. Overall, the site is professional, trustworthy, and well-positioned in the Swiss art media market.

S

Stiftung Liste Basel

liste.ch

57

Liste Art Fair Basel is a Swiss-based non-profit foundation organizing a well-established contemporary art fair event in Basel. The website serves as an information portal for visitors, artists, partners, and press, providing event details, application information, and contact channels. The business is positioned as a key cultural event with long-term partnerships, notably with E. Gutzwiller & Cie, Banquiers. Technically, the site is built on Magnolia CMS, uses modern web standards, and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, indicating a basic level of privacy compliance. Security posture is good with HTTPS enforced, but lacks advanced security headers and dedicated security policy disclosures. Overall, the website is professional, trustworthy, and serves its audience effectively.

K

Kanton Basel-Landschaft

bl.ch

58

Kanton Basel-Landschaft operates an official government website serving the residents and stakeholders of the Basel-Landschaft canton in Switzerland. The site provides governmental information, public services, and news updates relevant to its audience. The website is built using modern web technologies such as Nuxt.js and Vue.js, with a responsive design and good user experience. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of clear privacy and cookie policies. Overall, the website is trustworthy and professional, reflecting its governmental nature.

G

GGG Basel

ggg-basel.ch

58

GGG Basel is a well-established non-profit organization based in Basel, Switzerland, with a history dating back to 1777. It operates as a key social, cultural, and educational institution supporting numerous organizations and projects in the region. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies and a focus on accessibility and user experience. While the site is professionally designed and content-rich, it lacks some privacy compliance features such as a cookie consent mechanism and explicit GDPR compliance statements. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but missing security headers and incident response policies suggest room for improvement. Overall, the domain registration and website content align well, indicating a trustworthy and credible organization.

Ricola is a well-established global brand specializing in natural herbal drops made from a unique blend of 13 Swiss Alpine herbs. The website presents a professional and comprehensive digital presence, showcasing their product range including herbal drops, drink cubes, and instant teas. The brand targets a general audience interested in natural wellness products and maintains a consistent and trusted market position in the retail sector. Technically, the website leverages modern frameworks such as Astro, integrates Google Tag Manager and Usercentrics for consent management, and employs HTTPS for secure communications. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is unavailable or protected, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional website and brand recognition. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

A

Austrian Exhibition Experts GmbH

immobilien-messe.at

52

The website 'immobilien-messe.at' represents the Wiener Immobilien Messe (WIM), Austria's largest real estate exhibition focused on residential properties. Organized by Austrian Exhibition Experts GmbH, the site offers detailed information about the event scheduled for March 14-15, 2026, including exhibitor details, visitor guidance, and related services such as financing and legal advice. The platform targets prospective property buyers, investors, and industry professionals, positioning itself as a key marketplace in the Austrian real estate sector. Technically, the website is built on WordPress using modern plugins like Yoast SEO, Complianz GDPR Cookie Consent, and Google Tag Manager for analytics and compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security measures include HTTPS enforcement, email obfuscation, and use of security-related plugins, although some security headers could be improved. From a security and compliance perspective, the site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Contact information is transparent and professionally presented. No critical vulnerabilities or suspicious indicators were found. However, the absence of a security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

Austrian Exhibition Experts GmbH

expo-experts.at

53

Austrian Exhibition Experts GmbH is a specialized event management company focusing on organizing and managing exhibitions and trade shows primarily in Austria and Germany. With over 80 years of combined expertise, the company offers comprehensive services from concept development to full execution of B2B and B2C events. Their market position is solid within the regional exhibition sector, targeting businesses seeking to increase customer engagement and brand visibility through live events. The website reflects a professional and well-structured digital presence, leveraging WordPress and modern plugins to deliver a user-friendly experience with strong SEO and mobile optimization. Security-wise, the site employs HTTPS, cookie consent management, and email obfuscation, though it lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels and social media integration, supporting its business credibility.

W

WOMAN.AT

womanbalance.at

65

The website www.woman.at/balance is a professional online magazine focused on mindful lifestyle topics including health, spirituality, and personal development, targeting a primarily female German-speaking audience in Austria. It offers content such as columns, podcasts, guides, and events curated by Kristin Pelzl-Scheruga and others. The site is part of a larger media group, likely VGN Medien Holding GmbH, indicating a strong market position in Austrian women's media. Technically, the site uses modern web technologies including Next.js, React, and integrates advertising and analytics services such as Adition and Fathom Analytics. The site is well-optimized for mobile and SEO, with good design and navigation clarity. Security posture is solid with HTTPS and some security best practices, though explicit security policies and headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks visible privacy and terms of service pages. No direct contact information or incident response contacts are found, which could be improved for trust and compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

F

Feel Good Festival

feelgood-festival.at

49

Feel Good Festival is a well-established wellness and fitness event based in Vienna, Austria, focusing on yoga, fitness, workshops, and community engagement. Since its inception in 2017, it has attracted over 10,000 participants, positioning itself as a notable regional event in the wellness sector. The website reflects a professional and consistent brand image, targeting fitness and wellness enthusiasts with a clear business model centered on event organization and ticket sales. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The presence of a cookie consent mechanism demonstrates attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the main content. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could be improved by adding standard security headers. WHOIS data is unavailable, likely due to privacy protection, which is common for event businesses but reduces transparency. Overall, the site is trustworthy and professionally maintained with moderate technical sophistication.

C

Cosmo Kitchen | fine dining wien | Bauernmarkt 1, Vienna, Austria

cosmokitchen.at

61

Cosmo Kitchen is a small business website hosted on the Wix platform, targeting a German-speaking Austrian audience. The site appears professionally designed with consistent branding and a focus on presenting their business online. The technical infrastructure leverages Wix's hosting and content management system, integrating Google Analytics and Google Tag Manager for visitor tracking and marketing purposes. The website is mobile-optimized and uses HTTPS to secure communications. However, the absence of explicit privacy policies, terms of service, and contact information limits transparency and user trust. Security measures include standard HTTPS and cookie consent mechanisms, but lack advanced security headers and vulnerability disclosure information. Overall, the site is functional and moderately secure but would benefit from enhanced privacy and security disclosures to improve compliance and trustworthiness.

O

OLEA

oleaitaly.com

60

OLEA is a small hospitality business operating a yoga and fitness retreat venue in the Sabina countryside near Rome, Italy. The website presents a professional and visually appealing platform to attract yoga teachers and retreat participants. The business model focuses on venue rental for wellness retreats, leveraging a unique 150-square-meter yoga platform and restored farmhouses for accommodation. The target audience is wellness travelers and yoga professionals seeking a serene retreat location. Technically, the website is built on Squarespace CMS, utilizing modern web technologies including Google Analytics and reCAPTCHA for security and tracking. The site is mobile optimized with good SEO practices and uses HTTPS with HSTS for secure communications. However, some security headers are missing, and privacy compliance could be improved by adding explicit privacy and terms of service pages. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. The use of Google reCAPTCHA and HTTPS enhances security. The absence of WHOIS data for the domain is a concern, as it raises questions about domain registration legitimacy. This should be investigated further to ensure trustworthiness. Overall, the website is functional, professional, and secure for its business purpose but would benefit from enhanced privacy compliance and clearer domain registration information to improve trust and credibility.

F

Falkensteiner Group

falkensteiner.com

69

Falkensteiner Group operates a well-established hospitality business with a portfolio of hotels, residences, and premium camping sites across several European countries, primarily Austria and Italy. Their website is professionally designed, multilingual, and integrates a sophisticated booking engine powered by TravelClick, indicating a mature digital infrastructure. The company targets a broad audience including families, wellness seekers, and adults-only travelers, offering diverse accommodation and leisure services. Despite the professional front-end and marketing sophistication, the absence of WHOIS registration data raises concerns about domain legitimacy or data availability issues. The website employs multiple analytics and marketing tools, reflecting a strong digital marketing strategy. However, the lack of visible privacy policy and security incident response information suggests areas for compliance and security improvement.

I

Institut der deutschen Wirtschaft (IW)

iwkoeln.de

49

Institut der deutschen Wirtschaft (IW) is a private economic research institute based in Germany, focusing on economic and social policy, education systems, and labor markets. The website is professionally designed using TYPO3 CMS and provides comprehensive research articles, press releases, and studies targeting economic stakeholders, policymakers, and researchers. The technical infrastructure includes modern analytics tools such as Matomo and eTracker, and push notification services via CleverPush, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and public security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, serving as a credible source of economic research in Germany.

The Hochschulbildungsreport website is a professionally maintained platform dedicated to providing comprehensive reports and data analysis on higher education in Germany. Operated by the Stifterverband für die Deutsche Wissenschaft e.V., it serves academics, policymakers, and educational institutions with research-driven content. The site leverages modern technologies including Drupal 10, lazy loading for images, and a self-hosted Matomo analytics solution, reflecting a mature digital infrastructure. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent managed via Usercentrics. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical competence, making it a reliable resource in the education sector.

D

Deutsche Bildung

deutsche-bildung.de

48

Deutsche Bildung AG operates a specialized education financing platform focused on providing study and living cost financing for students in Germany. The company offers flexible payout options, an integrated academy for educational success, income-dependent repayment models, and support for financing foreign studies. Positioned as a reputable and established player since 2020, Deutsche Bildung targets students seeking alternative financing solutions beyond traditional loans or scholarships. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on Cloudpit infrastructure, and incorporates advanced SEO and consent management tools. Security posture is strong with HTTPS, security headers, and secure login portals, though explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

The website pixelyoursite.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual content. As a result, no direct business information, policies, or contact details are available for analysis. The domain is registered since 2015 with a stable registration status and uses Cloudflare for DNS and security, indicating a legitimate and professionally managed domain. However, the inability to access the site content limits the ability to assess the business model, services, or compliance posture. The security posture cannot be fully evaluated beyond the presence of Cloudflare's WAF protection. Overall, the site appears legitimate but requires bypassing the security challenge to perform a comprehensive analysis.

M

Mobilitätshaus GmbH

mobilitaetshaus.eu

42

Mobilitätshaus GmbH is a German company specializing in sustainable mobility solutions, offering a range of electric vehicles including E-Roller, E-Bikes, E-Autos, and Lastenfahrräder, alongside consulting and repair services. The company operates primarily in Berlin and partners with established automotive and mobility service providers, positioning itself as a niche player in the sustainable transportation sector. The website is professionally designed, optimized for SEO, and provides clear information targeting both private and business customers interested in eco-friendly mobility options. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and performance. Security posture is adequate with HTTPS enforced, but lacks some security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and safe for general audiences, with room for improvement in security and privacy practices.

Osiander operates a professional e-commerce platform specializing in books, eBooks, audiobooks, and related retail products targeting general consumers in Germany. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, consent management via Usercentrics, and integration of Google Analytics and Tag Manager for marketing and analytics. Security posture is strong with HTTPS enforcement, Cloudflare DNS and security services, and secure login forms featuring CSRF tokens and CAPTCHA. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, limits full compliance and user trust. The domain WHOIS data is minimal and uses Cloudflare name servers, which is common but reduces transparency. Overall, the site is well-designed, accessible, and safe for general audiences.

L

Lüthy Balmer Stocker

buchhaus.ch

60

Lüthy Balmer Stocker operates buchhaus.ch, a Swiss-based online bookstore offering over 15 million books, e-books, games, and media products. The business combines e-commerce with physical retail presence, allowing customers to pick up orders at 23 store locations across Switzerland. The website is professionally designed with good navigation and mobile optimization, targeting general book readers and media consumers in the Swiss market. Technically, the site uses modern JavaScript libraries including jQuery, Google Maps API, and barcode scanning tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure login forms, though some security headers are missing and privacy compliance could be improved by adding visible privacy and cookie policies. No blocking or WAF interference was detected, and WHOIS data confirms the domain's legitimacy and consistency with the business. Overall, the site is trustworthy and functional but would benefit from enhanced privacy disclosures and contact information visibility.

L

Literaturhaus Zürich

literaturhaus.ch

54

Literaturhaus Zürich is a well-established non-profit cultural institution based in Zürich, Switzerland, founded in 1834. It offers a variety of literary and cultural services including readings, book premieres, panel discussions, and library services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to a general audience interested in literature and culture. The organization maintains active social media channels and provides clear contact information, enhancing its accessibility and community engagement. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, ensuring a robust and flexible platform. Performance is moderate with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced, security headers present, and cookie consent mechanisms implemented, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, compliant with GDPR, and professionally managed, supporting the organization's cultural mission effectively.

The Literarischer Club Zürich is a cultural non-profit organization focused on literary events, readings, and membership benefits primarily serving literature enthusiasts in the Zurich area. The website presents a clear event schedule, membership information, and historical context dating back to 1906, positioning the club as a traditional and established cultural entity. Technically, the website is built on the Jimdo Creator platform, leveraging Jimdo's hosting and content management tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the website content and business information appear legitimate and consistent with the club's mission. Overall, the site is functional and informative but could benefit from enhanced security practices and clearer compliance documentation.

S

Sofalesungen

sofalesungen.ch

46

Sofalesungen.ch is a small Swiss website focused on cultural readings and events, targeting German-speaking audiences. The site provides event information and media content, embedding third-party services such as YouTube, Vimeo, and Google Maps. The business model appears service-oriented with a niche local market position. Technically, the site uses standard web technologies and Google Analytics with IP anonymization, reflecting moderate digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Privacy compliance is good, with a comprehensive privacy policy and cookie consent banner in place. Overall, the website is professional and trustworthy but could improve in contact transparency and technical optimizations.

(

(HI)STORY FESTIVAL

hi-story.ch

50

The (HI)STORY FESTIVAL website represents a small-scale cultural event based in Bern, Switzerland, focusing on European memory and artistic/scientific collaboration. The site is built on WordPress with modern technologies such as jQuery and Swiper.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy compliance mechanisms. Contact is primarily via a web form, with no direct email or phone contacts published. Overall, the site is trustworthy and professionally presented but could improve in privacy and security transparency.

C

Codegestalt GmbH

codegestalt.com

52

Codegestalt GmbH is a small Swiss technology company specializing in research, design, and development of digital products. The company presents a professional portfolio of projects targeting individuals and organizations interested in innovative digital solutions. The website is well-structured, mobile-optimized, and uses modern frontend technologies such as Stimulus and Tailwind CSS, indicating a moderate level of digital maturity. The domain is well-established since 2009, supporting the company's credibility. From a security perspective, the website uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and important security headers, which could be improved. There are no visible privacy or cookie policies, which is a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy with moderate security posture. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance the security and trustworthiness further. The absence of WAF or blocking mechanisms allows full content access and analysis.

Imagofilm is an independent film production company based in Lugano, Switzerland, with a history dating back to the 1980s. The company focuses on producing cinematic works including documentaries and cultural exhibitions, targeting a general audience interested in regional and artistic film content. Their market position is niche, serving the Swiss and Italian-speaking cultural sectors with a small-sized operation. The website reflects this with professional design, clear navigation, and relevant content highlighting recent films, news, and exhibitions. Technically, the website employs a custom PHP-based platform with common front-end libraries such as jQuery, Bootstrap, and Swiper.js. While the site is mobile-optimized and performs moderately well, it uses outdated JavaScript libraries that pose security risks. SEO and accessibility are basic but functional. No major CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which impacts GDPR compliance and overall security posture. The absence of incident response contacts and security policies further limits its security maturity. No critical vulnerabilities or exposed sensitive data were detected, but updating libraries and implementing security best practices is recommended. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and privacy compliance improvements to reduce risk and increase user trust.

Z

Zürcher Rotpunktverlag

wanderweb.ch

54

Wanderweb is a German-language community forum and publishing platform focused on hiking books by the Zürcher Rotpunktverlag. The website serves hiking enthusiasts by providing updated hiking book information and a forum for feedback and discussion. The platform is built on the Discourse forum software, leveraging modern web technologies such as Ember.js and JavaScript, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and security headers properly implemented, although privacy and cookie policies are absent, which is a compliance gap. No contact information or incident response channels are explicitly provided, limiting direct communication avenues. Overall, the website is professional, trustworthy, and focused on a niche market segment in Switzerland.

P

Produktgenuss GmbH

letscast.fm

69

LetsCast.fm is a German-based podcast hosting service operated by Produktgenuss GmbH, founded in 2020. The company provides a comprehensive platform for podcasters of all levels to host, publish, and monetize their podcasts across major platforms such as Spotify, Apple Podcasts, and YouTube. The service emphasizes ease of use, unlimited podcast and episode uploads, and extensive analytics. The website is professionally designed, mobile-optimized, and offers clear pricing tiers with transparent features. Social media and community engagement are active, enhancing brand trust and user support. Technically, LetsCast.fm employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Podlove Web Player integration. Hosting appears to be on AWS infrastructure, with DNS managed via AWS nameservers. Analytics are implemented using Google Tag Manager and Plausible Analytics, balancing tracking needs with privacy considerations. The site enforces HTTPS and includes CSRF protection tokens, indicating good security hygiene. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly documented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR adherence is evident. Overall, LetsCast.fm presents a trustworthy, professional, and user-friendly podcast hosting platform with a strong market position in the German-speaking podcast ecosystem. Strategic improvements in DNS security and published security policies could further enhance trust and compliance.