Medium-risk security reports

Fondation Dora is a small non-profit organization based in Geneva, Switzerland, dedicated to aiding children with special needs. The foundation focuses on supporting research, prevention, training, and care initiatives. The website is professionally designed using the Wix platform, presenting clear and relevant content targeted at stakeholders interested in child welfare. The technical infrastructure leverages Wix's Thunderbolt framework and includes modern JavaScript polyfills, ensuring good mobile optimization and moderate performance. Security posture is moderate with HTTPS usage and some JavaScript security hardening, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data is available due to privacy protection or malformed queries, but the website content and structured data indicate legitimacy. Overall, the site is safe, trustworthy, and suitable for general audiences.

Fondation Minkoff is a Swiss philanthropic foundation established in 2009, focusing on supporting projects in social action, culture, education, and scientific research. The website presents a professional and consistent brand image, targeting non-profit organizations, students, researchers, and cultural actors. The business model is centered on philanthropy and financial support for general interest projects. Technically, the website is built on WordPress using Elementor and Yoast SEO, with performance optimization via WP Rocket. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and detailed security policies. Privacy compliance is partial, with privacy and cookie policies present but no consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

AGENCE PTL COMMUNICATION (PTL) is a small, professional communication and marketing agency based in Besançon, France. The company offers a comprehensive suite of services including digital marketing strategy, website creation, graphic design, and digital training, targeting businesses seeking to enhance their online visibility and marketing effectiveness. The website demonstrates strong client engagement with 20 verified 5-star reviews, indicating high customer satisfaction and trust. Technically, the site employs modern web technologies such as Google Tag Manager and a consent management platform (Didomi), ensuring compliance with privacy regulations and enabling effective marketing analytics. The site is well-optimized for mobile devices and provides a seamless user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not evident in the provided data. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains high based on website content and client feedback. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

Plus que pro is a French online platform specializing in providing verified customer reviews to help consumers identify and select trustworthy professional service providers. The website positions itself as a network for qualitative business recommendations, targeting French consumers seeking reliable companies. The platform offers services centered around controlled customer feedback and professional search capabilities, establishing a solid market presence in France. Technically, the website employs modern web technologies including Google Tag Manager and the Didomi Consent Management Platform, ensuring compliance with privacy regulations and enabling effective user tracking and analytics. The site is mobile-optimized with good SEO practices and a professional design, contributing to a positive user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy, although the website content and business model suggest a legitimate operation. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

Lions Air Group is a private aviation service provider specializing in aircraft management, private jet charter, and aircraft sales. The website presents a professional and clean design targeting affluent individuals and corporate clients seeking private air travel solutions. The company operates in the transportation sector with a niche focus on private aviation services. Technically, the website is built on WordPress using the Brizy page builder and integrates external resources such as Google Fonts and YouTube widgets. The site is accessible without any WAF or security challenges detected. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with no detected security headers or privacy policies, indicating room for improvement in compliance and security best practices. Overall, the website is functional and professional but lacks critical trust and compliance elements.

DA VINCI-AIR AG operates a professional helicopter flight school and offers helicopter trial flights, pilot training, and balloon rides primarily targeting customers in Switzerland. The company maintains a consistent brand presence with active social media channels and a well-structured website built on WordPress with Elementor and Smart Slider 3. The website is well-optimized for SEO and mobile devices, providing a good user experience. Technically, the site uses modern web technologies and performance optimization plugins like WP Rocket. Security posture is solid with HTTPS and some security best practices, though explicit security headers and incident response policies are absent. Privacy compliance is strong with GDPR-aligned privacy and cookie policies. Overall, the site reflects a trustworthy and professional business with a moderate to good security and compliance maturity.

Fresh Interactive AG is a Swiss-based digital marketing agency established since 1998, specializing in services such as online marketing, web design, branding, real estate marketing, and Shopware e-commerce solutions. The company targets small and medium enterprises, particularly in the real estate and retail sectors, positioning itself as a reliable and professional partner in the Zurich region. The website reflects a mature digital presence with comprehensive service offerings and a strong portfolio of references. Technically, the website employs a modern but slightly dated technology stack including jQuery 1.11.3, FlexSlider, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended such as enabling DNSSEC and updating libraries. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website demonstrates high professionalism and trustworthiness with minor technical and security enhancements suggested.

AXA Switzerland is a leading enterprise-level insurance and pension provision company serving private customers in Switzerland. The website offers a comprehensive range of insurance products including liability, car, household, legal protection, and pension services. The company is part of the global AXA Group and maintains a strong market position supported by extensive customer reviews and certifications. Technically, the website is built on Adobe Experience Manager with modern marketing and analytics tools such as Adobe Target and Google Tag Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The website mfgb.ch currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is restricted by a web application firewall or bot protection mechanism. Due to this, no business-related content, contact information, or policies are accessible for analysis. The site uses modern frontend technologies such as Bootstrap 5.3.3 and integrates invisible reCAPTCHA for security. However, the lack of visible security headers and absence of privacy or cookie policies limit the assessment of its security posture and compliance. The domain WHOIS data is privacy protected, which is common for small or security-conscious entities but reduces transparency. Overall, the site’s security posture shows basic bot protection but lacks visible advanced security measures or compliance documentation. The content quality and business credibility cannot be properly assessed due to the blocked content.

Skydive Luzern is a professional skydiving center based in Switzerland, offering tandem jumps, initial jumps, skydiving training, events, and equipment sales and maintenance. The website is built on the Wix platform and demonstrates a good level of digital maturity with modern tracking tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides clear contact information including phone and physical address. However, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security-wise, the site uses HTTPS and some security hardening scripts but could improve by adding explicit security headers and vulnerability disclosure mechanisms. Overall, the business appears legitimate and trustworthy with a solid online presence but should address privacy compliance gaps to enhance user trust and regulatory adherence.

Verein Gletscherpiloten is a small Swiss aviation club specializing in mountain and glacier flying training and experiences. The website provides detailed information about their unique flight services in the Alpine region, targeting pilots and aviation enthusiasts interested in specialized mountain flying. The business operates as a non-profit club with a niche market position focused on aviation education and recreational flights. Technically, the website uses basic HTML, CSS, and JavaScript with jQuery 1.7.1 and Nivo Slider for image slideshows. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS. Security posture is limited, with no visible security headers and use of outdated JavaScript libraries, posing potential vulnerabilities. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism despite tracking pixels. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but would benefit from technical and security improvements to enhance trust and compliance.

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation. The organization focuses on advocacy, education, and information dissemination related to digital sovereignty, data protection, and inclusion. Their website serves as a hub for news, events, and resources targeted primarily at Swiss policymakers and the interested public. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and social media integration widgets. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and standard secure libraries but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit cookie consent mechanism or detailed privacy policy page, which could be improved to meet GDPR standards. Overall, the domain registration and WHOIS data align well with the website's governmental and non-profit nature, indicating legitimacy and trustworthiness.

OSS Directory is a German-language platform serving as a comprehensive directory and informational resource for open source software providers, products, customers, and community-related content. The website is built using modern Angular framework and Material Design components, indicating a mature technical infrastructure. It employs privacy-conscious analytics via Plausible Analytics and demonstrates good mobile optimization and user experience. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS registration data present concerns regarding compliance and domain legitimacy. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy transparency.

AHB Waterjet is a specialized manufacturing company focused on waterjet cutting technology and related products, serving primarily the Chinese market. The company offers a range of waterjet machines, parts, and consumables, positioning itself as a one-stop technical service provider in this niche. The website reflects a small but professional business with consistent branding and clear contact information. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tracking tools such as Google Analytics and reCAPTCHA. Security posture is adequate with HTTPS and anti-bot measures, but lacks advanced security headers and formal security policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site is functional, professional, and trustworthy with room for improvement in security and compliance documentation.

AHB DE is a specialized supplier of waterjet replacement parts and consumables, targeting manufacturing companies and machine shops primarily in Germany and internationally. The company emphasizes cost savings compared to OEM parts and offers comprehensive technical expertise. Their website is built on WordPress with WooCommerce, integrating modern plugins and technologies such as Google Analytics and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and provides clear contact information and multilingual support. Security posture is adequate with HTTPS and reCAPTCHA, though lacks explicit security policies and incident response contacts. Privacy and cookie policies exist but could be enhanced with explicit consent mechanisms. Overall, the website presents a professional and trustworthy image suitable for B2B industrial customers.

AHB Tooling & Machinery operates the website ahbwaterjet.es, providing OEM replacement parts and consumables for waterjet propulsion systems primarily targeting manufacturers and workshops in Spain. The company positions itself as a specialized supplier with technical expertise and offers a distributor program. The website is built on WordPress with WooCommerce, featuring modern plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google reCAPTCHA for analytics and security purposes. The site is mobile-optimized and presents a professional design with clear navigation and consistent branding. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies exist but lack active consent mechanisms, indicating partial GDPR compliance. Overall, the website is trustworthy and functional with room for security and compliance improvements.

SwissAccounting is a prominent Swiss association specializing in accounting, controlling, and financial management education and professional networking. With approximately 10,000 members, it holds a leading market position in Switzerland's finance education sector. The website offers comprehensive information about membership benefits, educational programs, seminars, and events, targeting finance professionals and aspiring accountants. The organization emphasizes practical knowledge transfer and political advocacy for the profession. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing tools such as Google Analytics and Facebook Pixel. It is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with domain status locks but lacks DNSSEC and explicit security policies. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. Overall, the website is trustworthy, professional, and well-maintained, though it could improve security posture by enabling DNSSEC and publishing incident response information.

NinjaOne operates as a leading provider of Unified Endpoint Management (UEM) and IT management software, targeting Managed Service Providers (MSPs) and IT departments. The company offers an all-in-one platform that simplifies IT management with no contracts or platform fees, supported by free onboarding and local support. Their market position is strong, evidenced by high customer ratings and a professional digital presence. Technically, the website is built on WordPress with Elementor and WPML, leveraging a modern tech stack including advanced analytics and marketing tools such as Snowplow, Google Analytics, and multiple advertising pixels. The site is well-optimized for SEO, mobile, and accessibility, providing an excellent user experience. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall professionalism and trust signals mitigate this concern. Strategic recommendations include enhancing security transparency and publishing incident response details to further strengthen trust and compliance.

Sempachersee Tourismus operates a regional tourism website focused on promoting the Sempachersee area in Switzerland. The site provides comprehensive information on local events, leisure activities, accommodation options, and regional highlights, targeting tourists and visitors interested in the region. The business model centers on regional tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks such as Vue.js and React, integrating analytics tools like Google Analytics, Google Tag Manager, and Piwik PRO. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks security headers and explicit incident response policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. WHOIS data confirms the domain's legitimacy and consistency with the business focus. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

Segelfluggruppe Pilatus SGP is a well-established Swiss gliding club founded in 1967, operating from Flugplatz Luzern-Beromünster. The club offers gliding training, flying experiences, and community activities targeting aviation enthusiasts and prospective pilots. The website reflects a focused and consistent brand presence with clear information about the club's history and services. Technically, the site uses modern front-end libraries such as jQuery and AOS for animations, and is likely powered by Craft CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but there is a lack of visible security headers and no explicit cookie consent mechanism, which could be improved for better compliance and protection. No forms or direct contact emails are present on the homepage, but contact information is clearly provided in the footer. The domain registration data aligns well with the club's identity and history, supporting legitimacy and trustworthiness.

FLUBAG Flugbetriebs AG operates a flight training school and aviation services at the Luzern-Beromünster airport in Switzerland. The company offers pilot training for Private Pilot License (PPL) and Light Aircraft Pilot License (LAPL), scenic flights, and related aviation activities. The website targets aviation enthusiasts and prospective pilots primarily in the Swiss region. The business model focuses on training and flight experience services with a regional market position supported by partnerships with related aviation and local service providers. Technically, the website is built on Drupal 11 CMS with jQuery and custom styling. It is moderately performant, mobile-optimized, and accessible with good SEO practices. The site is fully accessible without WAF or blocking mechanisms, indicating a mature digital presence. However, some improvements in privacy compliance and security headers could enhance the technical posture. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. A security policy page exists, but incident response and vulnerability disclosure information are missing. Cookie policy is present but lacks a consent mechanism, indicating partial GDPR compliance. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include adding a privacy policy, implementing cookie consent, publishing incident response contacts, and enhancing security headers to improve compliance and security posture.

Skydive Luzern is a professional skydiving center based in Switzerland offering tandem jumps, initial jumps, skydiving training, events, and equipment sales and maintenance. The company targets sports enthusiasts and individuals interested in skydiving within Switzerland. The website is built on the Wix platform, leveraging Wix Thunderbolt framework, and integrates common analytics and tracking tools such as Google Analytics and Facebook Pixel. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is good with HTTPS enabled and some security hardening scripts, though explicit security headers and privacy policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and transparency.

Rotorplace operates as a specialized e-commerce platform dedicated to helicopter and aerospace parts, offering a comprehensive catalog of engines, transmissions, avionics, electrical systems, fuel and hydraulic components, airframe parts, and safety accessories. The platform targets aerospace professionals and MRO providers, positioning itself as a niche supplier within the transportation sector. The website demonstrates a professional design with clear navigation and multi-language and currency support, indicating a medium-sized business with a focus on the French market. Technically, Rotorplace leverages modern technologies including the Sylius e-commerce platform, Bootstrap framework, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience, although accessibility features are basic and SEO optimization is moderate. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, warranting further investigation. Overall, Rotorplace presents a functional and professional online presence with room for improvement in privacy compliance and security best practices.

Codia GmbH is a small Swiss digital and web agency based in Toggenburg, specializing in web design, software development, webshops, and multimedia production such as photography and video. The company targets businesses seeking customized digital solutions and positions itself as a creative, modern agency with a strong regional presence. The website is professionally designed, mobile-optimized, and rich in content, showcasing client testimonials and a portfolio of projects. Technically, the site leverages modern web technologies including Webflow CMS, Vimeo for video content, and tracking tools like Google Analytics and Facebook Pixel, hosted likely on Webflow's infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns are detected. Overall, the site demonstrates a mature digital presence with good compliance and trust indicators.

Garaventa, a brand under the Doppelmayr Group, is a well-established manufacturer of cable cars and international transport solutions with over 100 years of experience and approximately 380 employees. The website presents professional content focused on their transport solutions business, targeting organizations and businesses worldwide. The technical infrastructure leverages modern web technologies including Nuxt.js, Google Tag Manager, and various analytics and marketing tools, indicating a mature digital presence. Security posture is solid with HTTPS and Content-Security-Policy headers implemented, though additional security headers and incident response information are lacking. Privacy compliance is minimal with no explicit privacy or cookie policies detected in the provided content. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professional and functional but could improve in privacy compliance and security transparency.

Helicopters Italia srl unipersonale operates as an authorized service station for Airbus Helicopters and Safran Helicopter Engines in Italy, providing helicopter maintenance, spare parts, logistics, and training services. The company targets helicopter operators both within Italy and internationally, positioning itself as a specialized service provider in the aviation transportation sector. The website reflects a professional and consistent brand image with clear service offerings and business information. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and cookie compliance, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and headers. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

Camping Tamaro Resort is a well-established hospitality business located in Tenero, Switzerland, offering camping pitches, bungalows, and various services including a restaurant and wellness activities. The website is professionally designed using modern technologies such as Next.js and DatoCMS, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly configured, though privacy compliance could be improved by adding explicit privacy and terms of service pages. The business maintains an active social media presence and integrates booking services via a partner domain. Overall, the site is trustworthy and suitable for its target audience.

Bosco Gurin is a regional tourism and hospitality website focused on promoting outdoor activities, events, and accommodations in the Bosco Gurin area of Switzerland. The site targets tourists interested in winter and summer sports, nature, and local culture, providing live webcams, event news, and ticketing links. The business model centers on tourism promotion and facilitating visitor engagement through digital content and external ticket sales. Technically, the website uses a traditional tech stack including jQuery 1.11.1, Google Analytics, and Google Tag Manager. The site is well-structured with good mobile optimization and moderate performance. However, some technical debt is evident with the use of an outdated jQuery version and lack of modern security headers. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks security headers and a formal security or incident response policy. Privacy compliance is addressed through a comprehensive Iubenda privacy policy, but no cookie consent mechanism is implemented, which is a compliance gap. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and suitable for its purpose but would benefit from technical and security improvements to enhance compliance and resilience. The risk level is moderate with no critical vulnerabilities detected.

The website represents the Division privée of the Hôpitaux Universitaires Genève (HUG), a premier university hospital in Switzerland. It offers high-end private medical care combining university-level medical expertise with premium hospitality services. The site targets patients seeking personalized and comfortable healthcare services in Geneva. The business model focuses on delivering coordinated expert medical treatments with concierge and hotel-like services, positioning itself as a leader in private healthcare within the Swiss market. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as Font Awesome 6 and Google reCAPTCHA for security. Analytics are handled via Piwik PRO, indicating a privacy-conscious approach. The site is mobile-optimized and accessible, with good SEO basics, though some improvements in privacy and cookie policy disclosures are needed. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy consistent with the hospital's identity. Overall, the website is professional, trustworthy, and well-maintained, but could enhance compliance by adding privacy and cookie policies and improving security transparency.

Fondation privée des HUG is a well-established non-profit foundation linked to the Hôpitaux universitaires de Genève and the University of Geneva Faculty of Medicine. It focuses on funding essential medical research and healthcare quality projects through transparent and rigorous management of donations. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it uses Drupal 10 CMS and integrates Piwik PRO for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS and security headers, though DNSSEC is not enabled and cookie consent mechanisms are missing, representing areas for improvement. The domain registration is consistent and appropriate for the organization's history, enhancing trustworthiness. Overall, the site is professional, trustworthy, and serves its philanthropic mission effectively.

Fred Fischer is a freelance web designer and WordPress expert based in Lille, France, offering specialized services including responsive WordPress theme development, plugin creation, SEO optimization, and web accessibility. The website presents a professional portfolio and emphasizes a user-centric approach combining form and function. The business targets clients directly and agencies seeking expert WordPress development and web design services. Technically, the site is built on WordPress with modern frameworks such as Materialize CSS and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and minimal plugin use, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trust. Overall, the website is professional, secure, and well-positioned for its niche market.

Green Globe, operated by Green Certification Inc., is a globally recognized leader in sustainable tourism certification with over 30 years of experience and a presence in more than 80 countries. The organization offers certification services, training through its academy, and supports sustainable travel initiatives. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their industry and audience. The company maintains active social media profiles and provides transparent contact information including a physical address in Santa Monica, USA. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and LinkedIn Insight Tag. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate with HTTPS enforced but lacking advanced security headers and DNSSEC information. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms aligned with GDPR requirements. The WHOIS data for the domain www.greenglobe.com is missing or unavailable, which raises concerns about domain registration transparency. This inconsistency contrasts with the professional nature of the website and the business claims. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences with no adult or questionable material. Overall, Green Globe presents a credible and professional online presence with room for improvement in domain registration transparency and security header implementation to enhance trust and security posture.

The Adria is a boutique 5-star luxury hotel located in South Kensington, London, offering upscale rooms, suites, dining, wellbeing services, and event hosting. The website presents a professional and polished digital presence with comprehensive content tailored to affluent travelers seeking exclusive hospitality experiences. Technically, the site is built on WordPress with modern integrations including Google Analytics, Tag Manager, and third-party booking and dining platforms, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and cookie consent implemented, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, impacting overall trustworthiness. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and resolving domain registration inconsistencies to strengthen credibility and compliance.

TheFork is a prominent online restaurant reservation platform primarily serving the French market, offering users the ability to search, select, and book tables at top restaurants with added promotional offers. As a subsidiary of TripAdvisor, it holds a strong market position in hospitality services. The website demonstrates a mature technical infrastructure leveraging modern web technologies such as Next.js, Google Tag Manager, Stripe for payments, and DataDome for bot protection, ensuring a robust and scalable platform. Security posture is strong with HTTPS enforcement, security headers, and bot mitigation, although explicit privacy and security policies are not clearly presented in the accessible content. The absence of WHOIS data transparency slightly impacts trust but is mitigated by the brand's reputation and professional presentation. Overall, the platform is well-positioned with a high-quality user experience and solid technical foundation.

Hotel Schweizerhof Bern & Spa is a premium 5-star luxury hotel located centrally in Bern, Switzerland. The hotel offers upscale accommodation, gourmet dining options, a spa and wellness center, and facilities for meetings and events. It targets luxury travelers, business guests, and event organizers, positioning itself as a leading hospitality provider in the Swiss capital. The website reflects a high level of professionalism with rich content, clear navigation, and strong branding consistent with a luxury hospitality business. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with cookie consent implemented but no explicit privacy or terms of service pages detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Hosco operates as a leading global hospitality jobs platform, connecting candidates with hospitality companies and educational institutions worldwide. The website positions itself as the premier portal for hospitality job seekers and employers, offering a comprehensive talent recruitment service. The business model centers on providing a digital marketplace for hospitality employment opportunities, leveraging a modern web platform to facilitate connections and job placements. The company appears to have a medium-sized market presence with a focus on the hospitality sector, though specific corporate details such as founding year or parent company are not disclosed. Technically, the website employs a modern technology stack including Next.js (React framework), various analytics and marketing tools such as Google Analytics, Amplitude, Hotjar, and HubSpot, and integrates third-party services like Stripe for payments and Intercom for customer engagement. The site demonstrates good performance, mobile optimization, and SEO practices, supported by a strict Content-Security-Policy header and HTTPS encryption, indicating a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and a robust CSP header, reducing risks of common web attacks. However, the absence of additional security headers and lack of visible privacy and cookie policies suggest areas for improvement in compliance and user data protection. The WHOIS data is unavailable, which raises questions about domain registration transparency, though the website content and technical setup suggest a legitimate business operation. Overall, Hosco presents a professional and trustworthy platform for hospitality job recruitment, with strong technical foundations but some gaps in privacy compliance and domain registration transparency. Strategic enhancements in privacy disclosures and security headers would further strengthen its security posture and user trust.

Astria is a curated online marketplace dedicated to connecting luxury hotels, resorts, and corporate buyers with top-tier hospitality suppliers, many of whom are endorsed by Forbes Travel Guide. The platform simplifies procurement by offering a trusted vendor network specializing in bespoke amenities, furnishings, and services tailored for the luxury hospitality sector. Astria positions itself as a preferred vendor platform for over 2,000 star-rated properties, emphasizing quality and exclusivity. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins such as Smart Slider 3 and integrating analytics and marketing tools like Google Analytics, Google Tag Manager, and LinkedIn Insight. The site is mobile optimized, well-structured, and SEO-friendly, providing a professional user experience. Security is adequate with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policies are not clearly published. From a security perspective, the site shows good practices but lacks visible comprehensive privacy, cookie, and security policies, which are important for compliance and user trust. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the strong branding and Forbes Travel Guide partnership mitigate this somewhat. Overall, Astria presents a professional and trustworthy platform for luxury hospitality procurement but should improve transparency around privacy, security policies, and domain registration details to enhance trust and compliance.

ODEC is a Swiss non-profit umbrella association representing graduates of Higher Vocational Schools (HF) across all disciplines. With over 14,000 members, it provides networking, career services, and promotes recognition of HF diplomas to enhance professional opportunities. The website is well-structured, professionally designed, and targets HF graduates and students in Switzerland. Technically, the site is built on Drupal 10, uses modern analytics tools like Google Analytics and Microsoft Clarity, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

edu-suisse is a Swiss association dedicated to promoting educational diversity and strengthening the vocational education sector in Switzerland. It represents private educational institutions, associations, and professional organizations, facilitating dialogue with economic bodies and government. The website reflects a medium-sized organization with a clear focus on education advocacy and member support. Technically, the site is built on the Squarespace platform, leveraging standard web technologies and providing a moderate performance and good mobile experience. Security posture is solid with HTTPS and HSTS enabled, though some advanced security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

The Ombudsstelle Kanton Zug website serves as the official online presence for the canton Zug's ombudsman office, providing independent, neutral, confidential, and free services to citizens facing conflicts or difficulties with cantonal or municipal authorities. The site targets local residents seeking assistance with administrative disputes and offers key services including mediation, information, and a whistleblowing reporting channel. The website is professionally designed with clear navigation and consistent branding, reflecting its government affiliation and public service mission. Technically, the website employs a simple technology stack primarily based on jQuery and custom JavaScript, with responsive design elements for mobile optimization. While the site performs moderately well and includes essential meta tags, it lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the data. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy considerations. From a security perspective, the site appears to use HTTPS (implied by domain), but no explicit security headers or advanced security policies are detected. There are no visible vulnerabilities or exposed sensitive data, but the lack of privacy and cookie policies represents a compliance gap, especially under GDPR. Incident response and vulnerability disclosure mechanisms are not publicly documented, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional, serving an essential government function with clear contact information and a transparent mission. However, to strengthen compliance and security, the organization should implement and publish privacy and cookie policies, enforce security headers, and consider formalizing incident response and vulnerability disclosure processes.

CURAVIVA is a Swiss-based professional association serving institutions and service providers for elderly and people with support needs. It holds a strong market position with approximately 3,100 members and offers a broad range of services including specialized courses, legal and insurance consulting, data protection, and innovation initiatives. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to its target audience of healthcare and social service providers. Technically, the site uses a modern CMS (sitesystem), integrates multiple analytics platforms (Matomo, Google Analytics, Facebook Pixel), and embeds multimedia content securely via HTTPS. Security posture is good with encrypted connections and privacy-conscious analytics configurations, though it lacks some security headers and explicit cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and compliant with GDPR principles, though it could improve transparency around cookies and incident response. The WHOIS data confirms legitimacy and consistency with the organization's Swiss location and branding.

INSOS is a Swiss non-profit association serving as the industry federation for service providers supporting people with disabilities. It operates as a key player in the Swiss social sector, offering a broad range of services including legal advice, insurance services, inclusion measurement tools, and professional development courses. The organization is closely linked with the ARTISET federation and maintains a strong presence in the Swiss market with over 3,100 members. The website reflects a professional and consistent brand image, targeting service providers and professionals in the disability support sector. Technically, the website is built on the sitesystem CMS platform, utilizing modern JavaScript libraries such as jQuery and integrates analytics tools like Google Analytics and Matomo with privacy-conscious configurations. The site is mobile-optimized, accessible, and performs moderately well. However, it lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. From a security perspective, the site enforces HTTPS and employs error tracking via Sentry. Analytics are configured to anonymize IPs and disable cookies, indicating a baseline privacy awareness. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, confirming legitimacy and transparency. Overall, INSOS presents a trustworthy and professional online presence with room to enhance privacy compliance and security hardening to meet best practices fully.

sozjobs.ch is a specialized online job portal focused on social and healthcare professions in Switzerland, operated by webways AG. It holds a strong market position as the largest Swiss job portal in its niche, offering comprehensive job listings, employer profiles, and user-friendly search and application features. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed filtering options tailored to its target audience of job seekers and employers in the social and healthcare sectors. Privacy and cookie policies are well implemented, reflecting GDPR compliance.

GLARNAIR Flugdienstleistungen is a Swiss-based aviation company established in 2009, offering flight school services, charter and taxi flights, and customized sightseeing flights with airplanes and helicopters. The company targets individuals aspiring to become pilots as well as customers seeking private charter or scenic flights. The website is professionally designed using WordPress with the Avada theme and integrates SEO best practices via Yoast SEO. It includes structured data for enhanced search engine understanding and uses Google Analytics for visitor tracking. Contact information is clearly presented, enhancing business credibility. Technically, the website employs modern web technologies including HTTPS, jQuery, and SEO plugins, ensuring moderate performance and good mobile optimization. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. No forms collecting personal data are present on the homepage, reducing immediate privacy risks. From a security perspective, the site uses HTTPS and a honeypot anti-spam plugin, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data confirms the legitimacy of the domain and its alignment with the business claims, indicating a trustworthy entity. Overall, the website is safe, professional, and credible but could benefit from enhanced privacy and security features. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to improve transparency and trust.

Careerplus is a leading Swiss personnel consultancy specializing in the recruitment of qualified professionals for permanent and temporary positions across various sectors including finance, healthcare, energy, and manufacturing. The company targets job seekers and employers within Switzerland, offering services such as recruitment, salary consulting, assessments, and interim management. The website is professionally designed, multilingual, and provides a comprehensive job search experience with detailed filtering options. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS and secure forms, though explicit security and privacy policies are not prominently published. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

The website reflio.com is currently inaccessible due to a paused deployment, as indicated by the minimal placeholder HTML content stating 'This deployment is temporarily paused' and a Vercel deployment ID. No business-related content, metadata, or contact information is available, preventing a full assessment of the company's services, market position, or technical maturity. The domain is registered with NameCheap since 2021 and uses Cloudflare DNS, which is consistent with a small or startup business setup. However, the lack of an active website significantly limits the ability to evaluate the company's digital presence or security posture. From a technical perspective, the site appears to be hosted on Vercel, but no scripts, analytics, or security headers are present in the provided content. The absence of privacy, cookie, or terms of service policies indicates non-compliance with common privacy regulations such as GDPR. No contact or incident response information is available, which is a concern for trust and security readiness. Security-wise, the lack of accessible content and security headers, combined with no visible SSL configuration details, suggests a minimal security posture at this time. The domain registration is legitimate and consistent, but the paused deployment status means the website is not currently operational, which is a critical issue for business credibility and user trust. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the paused deployment and lack of accessible information. Strategic recommendations include reactivating the website with full content, implementing security best practices, publishing privacy and cookie policies, and providing clear contact and incident response details to improve trust and compliance.

Achermann Sport is a well-established Swiss retail company specializing in ski, langlauf, running, and outdoor adventure equipment. With physical stores in Stans and Engelberg and a robust online shop, the company offers a wide range of products and services including equipment rental, ski service, and running shoe consultation. The website reflects a professional and trustworthy brand with clear business information and strong regional presence. Technically, the site is built on WordPress with WooCommerce and uses modern optimization and marketing tools, ensuring good performance and SEO. Security posture is solid with HTTPS and secure payment integration, though minor improvements in CSP and cookie consent are recommended. Overall, the site is safe, user-friendly, and compliant with GDPR requirements.

The website hellyhansen.com is currently inaccessible due to a CAPTCHA security challenge, preventing extraction of meaningful content or metadata. The domain is well-established, created in 1997, and registered through a reputable registrar, indicating a legitimate business presence. However, the lack of accessible content limits the ability to assess business descriptions, policies, or contact information. The technical infrastructure includes bot protection mechanisms, but no further technology stack details are available. Security posture cannot be fully evaluated due to content blocking, though domain registration status suggests standard protections are in place. Overall, the site appears to be a legitimate retail brand but requires removal or adjustment of WAF restrictions to enable comprehensive analysis.

Hamilton Watch Company is a well-established luxury watch brand offering a wide range of men's and women's watches that combine American heritage with Swiss precision. The website serves as the official e-commerce platform, showcasing collections such as Khaki, Ventura, and Jazzmaster. The brand is positioned strongly in the luxury retail market and is owned by the Swatch Group, a major player in the watchmaking industry. The site targets watch enthusiasts and general consumers seeking quality timepieces. Technically, the website is built on Magento, leveraging modern web technologies and performance monitoring tools, hosted likely via Akamai CDN, ensuring fast and reliable user experience. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response information are not published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and secure, though it could improve transparency on security and incident handling. The WHOIS data is missing or protected, which slightly reduces trust but is mitigated by the brand's reputation and website quality.