Security Directory

K

Kellerhals Carrard

kellerhals-carrard.ch

58

Kellerhals Carrard is a prominent Swiss law firm offering high-quality legal and industry-specific services across multiple Swiss cities and international desks. The firm emphasizes a unique business culture founded on collaboration, passion, and client-focused legal support. Their website reflects a strong market position with comprehensive content, multiple office locations, and active social media engagement on professional platforms such as LinkedIn and Twitter. Technically, the website is built using modern JavaScript frameworks (Vue.js) and employs Typekit fonts, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with the firm's business identity.

The website e-raumwerk.email presents a minimal login interface with no visible branding, business description, or contact information. It appears to be a portal for user authentication, possibly related to email or service access. The lack of content and metadata limits the ability to assess the business model or market position. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS. Security posture is weak due to absence of security headers and no visible advanced protections. The WHOIS data is unavailable due to unsupported TLD WHOIS queries, which reduces trust and transparency. Overall, the site is functional but lacks professionalism and compliance indicators.

U

Universität Bern

unibe.ch

68

Universität Bern is a well-established public university in Switzerland, founded in 1834, offering a broad range of academic programs and research opportunities. The website serves as a comprehensive portal for students, researchers, and staff, providing detailed information on studies, research, innovation, and lifelong learning. The institution holds a strong market position as a leading Swiss university with extensive academic and organizational resources. Technically, the website is built on the ZMS CMS platform, employs modern web standards, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, includes essential security headers, and uses etracker for analytics with cookie consent, though explicit security policies and incident response information are not prominently published. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting the university's credibility and commitment to privacy.

A

Air Travel Assist GmbH

airtravel.ch

37

Air Travel Assist GmbH operates a specialized travel service website focused on aviation-related travel experiences such as flight shows worldwide and tailored travel packages. The company targets aviation enthusiasts and travelers interested in niche aviation events, offering services including flight show trips, hotel bookings, and airport services at Zurich Airport. The website is built on TYPO3 CMS and uses Google Tag Manager for analytics, indicating a moderate level of technical maturity. The site is mobile optimized with a clear navigation structure and professional design, though accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website presents a professional image but would benefit from enhanced compliance and security measures.

INTERPRET is a Swiss non-profit organization specializing in intercultural interpreting and mediation services. It provides certification, training, and organizes annual conferences to support communication in multilingual and intercultural contexts. The website is professionally designed, multilingual, and targets professionals and institutions requiring interpreting services and qualifications. Technically, the site uses a proprietary CMS (fuman), modern JavaScript, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, though improvements in privacy compliance and security policies are recommended.

C

CO-OPERAID

co-operaid.ch

55

CO-OPERAID is a Swiss non-profit humanitarian organization dedicated since 1981 to providing educational opportunities for children and youth in underprivileged regions of Africa and Asia. The organization focuses on primary and vocational education projects in countries including Uganda, Kenya, Bangladesh, Cambodia, and Laos. Their business model relies on donations, sponsorships, and partnerships, supported by a strong reputation evidenced by ZEWO certification and transparent communication. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for donors and supporters. Technically, the website is built on Drupal 10 with modern web technologies and demonstrates good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy compliance is good with a comprehensive privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Contact information is clearly provided, though no direct contact email was found in the HTML content. Overall, the website and organization present a trustworthy and credible profile with a high level of professionalism and transparency. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and publishing explicit security and incident response policies to further strengthen trust and compliance.

O

OWNBIT GmbH

ownbit.agency

55

OWNBIT GmbH is a Swiss web agency specializing in creating custom websites and web applications primarily for Swiss small and medium-sized enterprises (KMU). The company emphasizes user-centered digital solutions and has a strong market presence with over 12 years of experience and more than 200 clients. Their key services include bespoke website development, WordPress solutions, and client-specific web portals. The website is professionally designed using modern technologies such as Vue.js and Gridsome, ensuring excellent performance, mobile optimization, and user experience. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. WHOIS data is privacy-protected, which is typical for small agencies, and no suspicious patterns were detected. Overall, OWNBIT demonstrates a mature digital presence with strong business credibility and trust indicators.

I

Infomaniak Network SA

infomaniak.com

78

Infomaniak Network SA is a well-established Swiss cloud service provider specializing in sovereign cloud hosting, domain registration, and collaborative tools. Founded in 1994, the company positions itself as a leader in European independent cloud services, emphasizing data sovereignty and confidentiality. Their target audience primarily includes businesses and professionals seeking secure and compliant cloud solutions. The website reflects a mature business model with a strong market presence in the technology sector, particularly within Switzerland and Europe. Technically, the website is built using modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good accessibility. Security is robust, with HTTPS enforced, comprehensive security headers, and ISO 27001 certification, indicating a strong commitment to information security and privacy. Privacy policies and GDPR compliance are clearly articulated, with mechanisms for cookie consent and data protection officer contact information readily available. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable platform for its users.

M

MD Systems GmbH

digital-storytelling.ch

62

MD Systems GmbH operates the website digital-storytelling.ch, promoting Primer, a Drupal 10-based content management system tailored for organizations, products, and campaigns. The company positions itself as a provider of cost-effective, easy-to-use CMS solutions with a focus on online marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form, email, phone, and physical address in Switzerland. The presence of partner logos and client references such as Paul Scherrer Institut and UNICEF enhances credibility. Technically, the site is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS. It employs cookie compliance mechanisms with opt-in consent and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business goals. The domain registration data aligns well with the business identity, supporting legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of terms of service and incident response information suggests areas for improvement. The risk profile is low with no critical security issues found. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

H

Hinto

hinto.ch

61

Hinto is a Swiss-based event listing platform providing multilingual information about local events and activities, primarily focused on Switzerland. The website uses a custom CMS called fuman and integrates Google Maps API for enhanced location-based services. The platform targets general users interested in discovering events in various Swiss cities and towns. Technically, the site is moderately performant, mobile-optimized, and implements essential security headers with HTTPS enforced. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and transparency.

TV5MONDE is a prominent international francophone television network offering a wide range of programming including news, cultural content, sports, and educational resources. The website serves a global French-speaking audience with regional subdomains catering to different geographic areas. The digital platform is built on Drupal 10 and integrates modern video streaming and advertising technologies, ensuring a rich user experience. Privacy and cookie consent are managed effectively through Didomi, reflecting compliance with GDPR standards. However, the absence of publicly available WHOIS data raises questions about domain registration transparency, though the website's content and branding strongly support its legitimacy. Security posture is solid with HTTPS and consent management, but could be enhanced by adding advanced security headers and publishing a security policy. Overall, the site demonstrates a mature digital presence with good technical and privacy practices, suitable for a large media organization.

A

Aimigo

gymglish.com

66

Gymglish, part of Aimigo, is an established online language learning platform founded in 2004, offering AI-powered adaptive courses in multiple languages. The company targets a broad audience from beginners to proficient learners, including private individuals, educational institutions, and businesses. Their market position is strong, supported by over 8 million users worldwide and recognition by Time magazine as a top EdTech leader in 2024. The platform emphasizes short, engaging daily lessons infused with humor and cultural insights, accessible via web and mobile apps. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies like Google Tag Manager and Plausible Analytics, with a CDN provider Fastly ensuring performance. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS domain registration data is a concern but does not outweigh the strong business and technical indicators of legitimacy. Overall, Gymglish presents a professional, trustworthy, and user-friendly online education service.

I

In the pocket

cookiethough.dev

61

Cookie Though is an open source technology project developed by 'In the pocket' that provides an easy-to-use, minimal footprint cookie consent management application designed to help website owners comply with GDPR regulations. The website positions itself as a niche provider focusing on usability and accessibility, targeting developers and site owners who need a compliant cookie banner solution. The business model is based on open source distribution with community engagement via GitHub. Technically, the site uses modern web standards including JavaScript and Google Fonts, with good SEO and accessibility practices. The site is fast and mobile optimized, with no detected CMS or complex frameworks. Security posture is moderate; while HTTPS is implied, no explicit security headers or policies are published, and no incident response or vulnerability disclosure information is available. Overall, the site is trustworthy and professional with a clear focus on privacy compliance but could improve by publishing more explicit security and incident response information.

E

Euresearch

euresearch.ch

59

Euresearch is a Swiss government/non-profit entity providing comprehensive guidance and advisory services on European research and innovation funding, primarily focusing on the EU Framework Programme Horizon Europe. The organization targets Swiss universities, companies, SMEs, and non-profit organizations seeking cooperation and funding opportunities in European research. Their key services include information dissemination, advisory support, and networking facilitation. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the fuman CMS platform with modern web technologies including JavaScript and CSS. It employs Google Analytics for user tracking with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain. Overall, Euresearch presents a secure, professional, and user-friendly online presence suitable for its mission. Strategic improvements in security policy transparency and technical security headers would further enhance its posture and trustworthiness.

S

Snowflake Productions GmbH

snowflake-group.ch

60

Snowflake Productions GmbH is a Swiss digital agency founded in 1999, specializing in digital solutions with business value. The company offers a broad range of services including WordPress and TYPO3 CMS web development, e-commerce, online marketing, and accessibility checks. It maintains strategic partnerships and memberships with reputable organizations, enhancing its market position and service capabilities. The website reflects a professional and consistent brand image targeting businesses seeking comprehensive digital solutions. Technically, the site is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

L

Lernloft GmbH

lernloft.ch

50

Lernloft GmbH operates the LernloftTreff website, providing free or low-cost adult education, coaching, and learning support services primarily in Switzerland. The company targets adult learners seeking professional development and personal coaching, positioning itself as a regional educational resource with partnerships in Swiss cantons such as Thurgau and Graubünden. The website content is well-structured, professionally designed, and consistent with the company's educational mission. Technically, the site uses modern Blazor Server technology, indicating a contemporary web framework choice. The site is mobile-optimized and performs moderately well, though some accessibility and SEO optimizations could be improved. The absence of a CMS suggests a custom or lightweight solution. No major performance bottlenecks or errors were detected. From a security perspective, the website enforces HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and more transparent contact details to improve user trust and regulatory adherence.

I

Interkantonale Hochschule für Heilpädagogik

zusammenarbeitanschulen.ch

60

Zusammenarbeit an Schulen is an educational initiative hosted by the Interkantonale Hochschule für Heilpädagogik, focusing on providing tools and resources to support multiprofessional collaboration and inclusion in schools. The website offers free downloadable materials, introductory videos, research information, and training opportunities targeted at educators and school teams. The platform positions itself as a niche educational resource within the Swiss education sector, collaborating with reputable institutions such as the Pädagogische Hochschule Zürich and the Volksschulamt Zürich. Technically, the website is built on WordPress with a modern theme, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks some advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

B

BURRI public elements AG

burri.world

72

BURRI public elements AG is a well-established Swiss company specializing in products and projects for public spaces, including outdoor furniture, lighting, and mobility infrastructure. The website reflects a mature digital presence with multilingual support and a focus on inclusion and sustainability. Technically, the site uses modern web technologies and integrates popular analytics and marketing tools, though it lacks explicit privacy and cookie policies. Security posture is strong with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and clearer privacy compliance. Overall, the site is professional and trustworthy, supporting the company's market position as a leader in public space elements.

S

SAMedia AG

cockpit.aero

51

SAMedia AG operates the website cockpit.aero, which hosts 'Cockpit,' the leading aviation magazine in Switzerland. The magazine offers comprehensive coverage of national and international aviation and aerospace topics, targeting professionals and enthusiasts in the aviation sector. The business model centers on media publishing, including subscriptions, advertising, and event promotion. The website demonstrates a professional and consistent brand presence with high-quality content and clear navigation. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and lack of published security policies or incident response contacts suggest room for improvement. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but does not detract from the professional appearance and legitimacy of the site. Overall, the website is a credible and authoritative source in its niche, with strong business credibility and good technical implementation. Strategic enhancements in security headers and transparency around security policies would further strengthen its posture.

P

Postimages.org

postimg.cc

60

Postimages.org is a well-established free image hosting service founded in 2010, offering users the ability to upload and share images with permanent links suitable for forums, blogs, and social media. The platform supports multiple upload methods including direct upload, URL upload, and plugins for websites, complemented by a Windows application. The service targets a broad general audience including forum users and bloggers, positioning itself as a reliable and accessible image hosting provider in the technology sector. Technically, the website employs modern web technologies including HTML5, CSS, and JavaScript, with integrations of advertising and bidding libraries such as Prebid.js, Google IMA SDK, and Amazon AAX. Hosting and DNS services are managed via Cloudflare and NameCheap, ensuring good performance and uptime. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status protections like clientTransferProhibited. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance domain and web application security. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic; while privacy and terms of service pages exist, no cookie consent mechanism was found despite the presence of advertising scripts. Overall, Postimages.org presents a moderate risk profile with a solid business credibility and technical foundation but could improve security and privacy compliance to better protect users and enhance trust. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding a cookie consent mechanism to align with GDPR and privacy best practices.

SuperChange is an established online cryptocurrency exchange service founded in 2015, offering instant automatic exchanges across a broad range of cryptocurrencies and e-currencies including Bitcoin, Ethereum, USDT, Monero, and others. The platform targets cryptocurrency users seeking fast and convenient exchange services, enhanced by discount and affiliate programs to incentivize customer loyalty and partner engagement. The website content is well-structured and provides clear navigation and relevant business information, including customer testimonials that support its credibility. Technically, the site uses standard web technologies such as HTML, CSS, JavaScript, and jQuery, with Google Analytics integrated for user tracking. Hosting appears to be managed via Icelandic DNS providers, consistent with the domain registration data.

B

Официальное зеркало – если не работает BestChange.ru

bestchange.net

54

BestChange.net serves as an official mirror site for BestChange.ru, a well-known Russian-language cryptocurrency exchanger monitoring platform. The service provides users with real-time exchange rates, reviews, and tools to facilitate safe and cost-effective cryptocurrency and fiat currency exchanges. The platform targets cryptocurrency users seeking reliable and transparent exchange services. Technically, the site employs standard web technologies including JavaScript, CSS, and HTML, with integration of hCaptcha for bot mitigation and Google Tag Manager for analytics. The site is accessible via HTTPS, ensuring encrypted communications. However, the absence of explicit privacy and cookie policies, as well as missing contact information, represents gaps in privacy compliance and user trust. The WHOIS data for the domain is unavailable or protected, which limits the ability to fully verify domain legitimacy. Overall, the site appears professional and functional but would benefit from enhanced transparency and compliance documentation.

T

Threeway AG

3way.ch

62

Threeway AG is a Swiss-based technology company specializing in the technical implementation of webshops, TYPO3 websites, email marketing, and custom configurators primarily for communication agencies and ERP integrators. Established in 1996, the company emphasizes accessibility and high-quality technical solutions, positioning itself as a trusted partner in the digital services market. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and JavaScript. The site is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent for privacy compliance. However, there is no explicit security policy or incident response information published, which could be improved. No vulnerabilities or exposed sensitive data were detected, and the use of trusted third-party analytics is transparent. Overall, the website and business demonstrate a high level of professionalism and trustworthiness with minor areas for improvement in security transparency and formal policies. The risk profile is low, and the company appears legitimate and well-established in its niche.

M

MD Systems GmbH

md-systems.ch

65

MD Systems GmbH is a well-established Swiss technology company specializing in Drupal-based open source web development solutions. With 25 years of experience, they offer a range of products and services including custom Drupal distributions, SaaS integrations, and campaign websites. Their market position is strong within the Drupal ecosystem, supported by a consistent brand and professional online presence. Technically, the website is built on Drupal 10 with modern web standards, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the company demonstrates high business credibility and compliance with privacy regulations.

W

ВебПроверка — отзывы о сайтах, сообщество интернет пользователей

webproverka.com

47

WebProverka.com is a Russian-language social network and website review platform operating since 2009. It provides a large catalog of websites with user-generated reviews, ratings, and a community focused on combating online fraud. The platform incentivizes user engagement through monetary bonuses for site visits and offers paid services for website owners to increase visibility. Technically, the site uses legacy technologies such as jQuery 1.5.1 and integrates Yandex analytics and advertising services. While the domain registration is stable and consistent with the business claims, the site lacks modern security headers and privacy compliance mechanisms, which are areas for improvement. Overall, the platform serves a niche audience in the Russian internet space with moderate technical maturity and a solid business presence.

The website organise.earth serves as a private and secure communication platform for Extinction Rebellion teams, leveraging the Mattermost technology stack. It is designed to facilitate team collaboration with a focus on privacy and renewable energy hosting. The site has minimal public-facing content, primarily acting as a web application interface rather than a traditional informational website. Technically, it uses modern JavaScript and CSS technologies with a content security policy restricting scripts to trusted sources. Security posture is moderate with HTTPS enabled and some security headers present, but lacks DNSSEC and comprehensive security policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no contact information is publicly available. Overall, the site appears legitimate and consistent with a non-profit activist communication tool but would benefit from enhanced transparency and security documentation.

American Fire Cache operates as a specialized retailer and training provider focused on wildland firefighting gear and equipment. The company targets firefighting professionals and departments, offering both ecommerce sales and NWCG training services. The website presents a professional and consistent brand image with clear contact information and business hours, supporting its niche market position. Technically, the site uses modern JavaScript modules, a Vue.js framework, and Craft CMS with CSRF protections, indicating a moderate level of digital maturity and security awareness. However, the absence of explicit privacy, cookie, and terms of service policies, combined with missing WHOIS registration data, introduces concerns regarding compliance and domain legitimacy. Overall, the site is functional, secure in transport, and well-structured but would benefit from enhanced transparency and policy disclosures.

Evalanche.services operates as a status monitoring website primarily focused on providing real-time system status updates and announcements related to its email and web services. The site lists multiple instances and mail servers with performance indicators, targeting existing customers and users of Evalanche's platform. The content is technical and operational, with no commercial or marketing content visible. The website is in German and serves as a communication channel for maintenance and outage notifications. From a technical perspective, the website is simple, built with basic HTML and CSS, and lacks advanced frameworks or CMS. It shows moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No external scripts, analytics, or tracking technologies were detected, indicating minimal data collection and user tracking. Security posture is limited based on the available data. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are published, which impacts compliance and trust. The WHOIS data is minimal and privacy-protected, which is common but reduces transparency. No contact or incident response information is provided, limiting user support options. Overall, the website serves its purpose as a status page but lacks comprehensive security, privacy, and business credibility features. Strategic improvements in security headers, HTTPS enforcement, privacy policies, and contact information would enhance trust and compliance.

B

Bestemoneys.com

bestemoneys.com

44

Bestemoneys.com is a niche web portal established in 2009 that provides a comprehensive database and information about e-currencies, crypto coins, trading platforms, and related investment programs. The site targets users interested in e-currency services and crypto trading, offering affiliate programs and advertising opportunities as primary revenue streams. The website's market position is that of a specialized directory and informational resource within the finance and crypto sectors. Technically, the site uses legacy technologies such as jQuery 1.6.1 and lacks modern security features like HTTPS enforcement and DNSSEC. The design is basic with limited mobile optimization and accessibility features. Security posture is weak due to missing security headers, outdated libraries, and no visible SSL usage. Privacy compliance is poor with no privacy or cookie policies present. Overall, the site demonstrates moderate trustworthiness based on domain age and business focus but requires significant improvements in security and compliance to enhance credibility and user safety.

I

International Association of Accessibility Professionals

accessibilityassociation.org

70

The International Association of Accessibility Professionals (IAAP) operates a professional membership and certification platform focused on accessibility education and resources. The website is built on Salesforce Experience Cloud, leveraging modern web technologies such as Lightning Web Components and Salesforce CMS. The platform offers a comprehensive range of services including certification programs, educational content, events, and community engagement for accessibility professionals globally. Technically, the site demonstrates good performance, mobile optimization, and excellent accessibility features, aligning well with its mission. Security posture is strong with HTTPS and strict Content-Security-Policy headers, though improvements can be made in cookie consent and incident response transparency. Overall, the domain appears legitimate despite lack of public WHOIS data, likely due to privacy protection. The site integrates trusted payment processors and analytics tools, supporting a professional and trustworthy user experience.

S

Swico

swico.ch

68

Swico is a prominent Swiss business association representing the ICT and online industry, providing services such as membership representation, recycling of electronic devices, and occupational safety solutions. The organization serves a broad audience ranging from startups to international corporations, positioning itself as a key player in Switzerland's digital economy. The website reflects a professional and well-maintained digital presence, with comprehensive content, clear navigation, and active engagement through news, events, and social media channels. Technically, the site employs modern web technologies, including JavaScript frameworks, Google Analytics, and tracking tools, while maintaining good performance and accessibility standards. Security posture is solid with HTTPS enforcement and monitoring tools like Sentry, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a high level of trustworthiness and compliance with privacy regulations, including GDPR, supported by a clear cookie consent mechanism and a detailed privacy policy.

G

Grasshopper

grasshopper.com

71

Grasshopper is a well-established virtual phone system provider targeting entrepreneurs and small businesses, offering services such as toll-free, vanity, and local business numbers with features like call forwarding, mobile and desktop apps, and 24/7 support. The company is positioned as a trusted solution with over 150,000 small business customers and operates under the parent company GoTo. Technically, the website is built on modern frameworks including Next.js and React, hosted on AWS infrastructure, and managed via Sitecore CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and domain registration locks, though DNSSEC is not enabled and no explicit security policy or incident response page is found. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

D

Diwa Mediamatik

diwa.ch

66

Diwa Mediamatik is a small Swiss technology company specializing in web design, hosting, and media services with over 30 years of experience. Their business model focuses on providing end-to-end internet presence solutions including CMS, SEO consulting, and media production primarily targeting clients in the Aargau region. The website demonstrates a solid technical foundation using modern web technologies and a proprietary CMS named Jasmin. While the site is well-structured, mobile-optimized, and includes a cookie consent mechanism, it lacks explicit security policies and terms of service. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

D

Decathlon

decathlon.ch

55

Decathlon is a large international retailer specializing in sports equipment and apparel, with a strong presence in Switzerland as evidenced by this localized splash page. The website serves as a language selection gateway, offering German and French options, and is designed with a professional and consistent brand identity. The technical infrastructure includes modern web technologies such as JavaScript, CSS, JSON-LD structured data, and integration with third-party marketing and tracking services like Ysance DMP and TagCommander. Performance optimizations such as font preloading and responsive design are present, contributing to a good user experience. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency and security controls.

N

N/A

tournamentsoftware.com

72

Tournamentsoftware.com provides a specialized software platform designed to manage tournaments, leagues, and ladders for racket sports such as tennis, badminton, padel, and squash. The website targets sports organizations and tournament organizers, offering tools to facilitate event management and analytics. The business operates in the technology sector with a medium-sized footprint, focusing on niche sports software solutions. The website is professionally designed with consistent branding and clear content relevant to its audience.

G

Golem.de

golem.de

58

Golem.de is a well-established German IT news website targeting IT professionals and technology enthusiasts. It offers news, analysis, and a subscription service called Golem pur that allows users to access content without advertising and tracking cookies. The website demonstrates a professional design and consistent branding, with clear privacy and cookie policies that comply with GDPR requirements. The technical infrastructure includes custom consent management scripts and is hosted on syseleven.de, a reputable hosting provider. The site is mobile optimized and provides a moderate performance experience. Security posture is adequate with consent mechanisms in place, but lacks explicit security headers and published security policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

L

LogMeIn

logmein.com

63

LogMeIn is a well-established enterprise technology company specializing in remote access, remote support, and unified endpoint management software. Their product suite targets IT professionals and managed service providers, offering AI-driven solutions to enhance productivity and security. The website reflects a mature digital presence with modern technologies, strong branding, and comprehensive content. Security posture is robust with HTTPS, security headers, and consent management in place, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, but the overall legitimacy and professionalism of the site are high. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance trust and compliance.

Z

Zoho Corporation Pvt. Ltd.

zillum.com

65

Zillum is a family-focused cloud productivity and communication suite offered by Zoho Corporation Pvt. Ltd. It provides a secure digital space for families to communicate, share files, manage calendars, and collaborate on documents. The service includes email, file storage, chat, office suite applications, password management, calendar, and task management, all tailored for family use. The website is professionally designed, mobile-optimized, and integrates Zoho's own cloud infrastructure and technologies, reflecting a mature digital presence. Technically, the website leverages Zoho's proprietary platforms and scripts such as Zoho SalesIQ, PageSense, and Tag Manager, ensuring seamless integration and performance. The site is hosted on Zoho's infrastructure with fast loading times and good SEO and accessibility features. Security is robust with HTTPS enforced and privacy-first cookie management, although explicit security headers could be improved. Privacy policies and compliance with GDPR are clearly stated, enhancing user trust. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Incident response and abuse policies are in place, though a dedicated security.txt file and explicit DPO contact are absent. The WHOIS data for the domain is missing or unavailable, which slightly reduces transparency but is likely due to privacy protection or registry issues. Overall, the domain legitimacy is supported by the strong Zoho brand presence and professional website content. Strategically, Zillum positions itself as a niche SaaS product for families, leveraging Zoho's extensive ecosystem. The website and service demonstrate a high level of professionalism, security awareness, and privacy compliance, making it a trustworthy offering in the family productivity market.

L

LogMeIn

gotoresolve.com

69

LogMeIn Resolve is a comprehensive unified endpoint management software solution designed for modern IT operations, targeting IT professionals and MSPs. The platform integrates remote monitoring, management, support, automation, and AI-powered insights to streamline IT workflows and enhance endpoint security. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, hosted on Sitecore Cloud, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and consent management, although direct incident response contacts are not prominently displayed. The absence of WHOIS data in the raw output is a limitation but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing incident response visibility and continuous security audits.

Logos.it is a well-established educational website providing free multilingual and bilingual dictionaries, verb conjugators, and language learning resources. The site targets language learners, translators, educators, and volunteers, offering a niche service in the language education sector. The business model appears to be non-profit or community-driven, supported by volunteers and free access to resources. The website has a consistent brand presence and a long domain history dating back to 1996, indicating stability and trustworthiness. Technically, the website uses basic but functional technologies including HTML, CSS, and jQuery 3.1.1. It supports HTTPS and DNSSEC, enhancing security at the transport and DNS levels. However, it lacks modern security headers and advanced technical frameworks. The site’s performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and DNSSEC but does not implement additional security headers or provide privacy and cookie policies, which are important for GDPR compliance and user trust. No contact information or incident response channels are provided, limiting transparency. There are no signs of tracking or advertising, which reduces privacy risks but also limits business monetization. Overall, the website is safe, professional, and trustworthy for general audiences seeking language resources. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site’s security posture and user trust.

I

IT-Jobuniverse

it-jobuniverse.de

60

IT-Jobuniverse is a German-based online job board specializing in IT job listings, targeting IT professionals and employers. It offers a comprehensive platform with over 71,000 IT job openings, job alerts, and employer branding services. The website is part of the Golem media ecosystem, indicating a strong market position in the German IT recruitment sector. The platform is designed with modern web technologies, ensuring a fast, mobile-optimized, and user-friendly experience. Security is well-implemented with HTTPS and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, the site presents a professional and trustworthy platform for IT job seekers and employers.

The website geoip-js.com serves as a technical domain providing JavaScript and web service endpoints for MaxMind, Inc.'s GeoIP2 JavaScript Client API. MaxMind is a recognized provider of IP geolocation services, and this domain supports their API offerings. The site content is minimal but focused, linking to MaxMind's comprehensive privacy policy and describing the service purpose clearly. The target audience primarily includes developers and businesses seeking IP geolocation capabilities. Technically, the site uses standard web technologies including JavaScript and CSS, hosted via Cloudflare DNS services, but lacks advanced security headers and cookie consent mechanisms. The domain is registered with Cloudflare, Inc. as registrar with appropriate domain status protections but lacks DNSSEC.

X

X-Tra Production AG

x-tra.ch

44

X-Tra Production AG operates the X-TRA event location and hotel in Zurich, Switzerland, established since 1997. The company provides a multifunctional music and event ecosystem including concerts, parties, event planning, music professional services, and co-living accommodations. The website reflects a mature business with a clear market position in hospitality and entertainment sectors, targeting event organizers, music professionals, and the general public. Technically, the site uses modern web technologies including MoveCMS, Google Tag Manager, and reCAPTCHA, hosted by cloudWEB Digitale Medien. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are missing. No critical vulnerabilities or adult content were detected. WHOIS data confirms domain legitimacy and consistency with business claims.

Z

Zoho Corporation

ulaa.com

69

Ulaa Browser is a privacy-first, secure, and productivity-enhancing web browser developed by Zoho Corporation, a well-established technology company founded in 2003. Positioned as an indigenous Indian browser and winner of the Indian Web Browser Development Challenge, Ulaa targets general users seeking enhanced privacy and productivity features. The browser supports multiple platforms including Windows, macOS, Linux, Android, and iOS, and integrates seamlessly with Zoho's SSO and AI-powered search systems. The website reflects a professional and consistent brand image with comprehensive legal documentation and privacy policies linked to Zoho's main site. Technically, the website employs modern web technologies such as HTML5, CSS, JavaScript, jQuery, and Lottie animations, ensuring a fast and responsive user experience across devices. Structured data and Open Graph metadata are properly implemented to enhance SEO and social sharing. Although no explicit CMS or hosting provider is detected, the site demonstrates good performance and mobile optimization. From a security perspective, the site enforces HTTPS, employs domain status protections, and promotes strong privacy features within the browser product itself, such as blocking trackers and resetting browser IDs. However, DNSSEC is not enabled, and no explicit security headers or incident response contacts are published on the site. The privacy policy is comprehensive and GDPR compliant, but no cookie consent mechanism is present despite some data collection disclosures. Overall, the website and product present a high level of trustworthiness and professionalism with minimal security or privacy concerns. Strategic improvements could include enabling DNSSEC, publishing a security.txt file, adding incident response contact details, and implementing cookie consent mechanisms to further enhance compliance and user trust.

Z

Zoho Corporation Pvt. Ltd.

zohocorp.com

64

Zoho Corporation Pvt. Ltd. is a global technology company specializing in business software solutions. Their website showcases a broad portfolio of SaaS products including CRM, IT management, workflow orchestration, online training, retail POS, and collaboration tools. The company targets businesses of all sizes, emphasizing enterprise-grade solutions trusted by major Fortune 500 companies. The website content is professionally presented with consistent branding and clear product segmentation, reflecting a mature digital presence. Technically, the website employs modern web technologies such as JavaScript, CSS, and custom Zoho libraries, with good mobile optimization and SEO practices. However, some technical aspects like security headers and accessibility features could be improved. The site is fully accessible without WAF or blocking mechanisms, indicating stable hosting and infrastructure. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies such as privacy, cookie, or incident response disclosures. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content strongly supports legitimacy. Overall, the website scores well on content quality and business credibility but has room for improvement in privacy compliance and security posture. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, providing clear contact and incident response information, and resolving WHOIS data inconsistencies to strengthen trust.

V

VGD Accountants en Belastingconsulenten

vgd.eu

65

VGD Accountants en Belastingconsulenten is a professional financial and business consultancy firm based in Belgium, offering a broad range of services including accountancy, audit, tax, legal, HR advisory, CFO services, corporate finance, estate planning, and sustainability consulting. The company positions itself as a trusted partner for entrepreneurs and business owners, emphasizing expert support across all facets of entrepreneurship. Their market presence is solidified by membership in recognized professional bodies such as IBR and ITAA and affiliation with the Nexia network. Technically, the website is built on Craft CMS and employs modern web technologies including JavaScript, CSS, and HTML5, with performance optimizations such as CDN usage (Cloudfront) and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and integrates Google reCAPTCHA v3 to protect form submissions. Cookie consent mechanisms and comprehensive privacy policies demonstrate good privacy compliance. However, explicit security headers like X-Content-Type-Options and X-Frame-Options are not clearly present, and no public security or incident response policies were found. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in explicit security policy publication and header implementation. The risk profile is low, with no suspicious or malicious content detected, making it a reliable digital presence for the company.

K

KPMG International

kpmg.com

71

KPMG International is a globally recognized professional services firm offering a broad range of services including audit, tax, advisory, AI, ESG, legal, and technology consulting. The website reflects a mature, enterprise-level organization with a strong market position among the Big Four accounting firms. The site targets business professionals, enterprises, and government entities worldwide. Technically, the website is built on Adobe Experience Manager, hosted via Akamai, and uses modern web technologies including Adobe Helix RUM for performance monitoring and OneTrust for cookie consent management. The site is well-structured, mobile-optimized, and SEO-friendly with comprehensive navigation and rich structured data. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data confirms a long-established and legitimate registration consistent with the business history of KPMG. Overall, the website demonstrates high professionalism, trustworthiness, and compliance readiness.

A

AO Kaspersky Lab

kaspersky.com.tw

77

AO Kaspersky Lab operates as a global leader in cybersecurity solutions, providing advanced protection for both home users and enterprises. The Taiwan localized website offers a comprehensive portfolio of products including antivirus software, VPN services, password management, and enterprise security solutions. The company is well-positioned in the market with a strong brand presence, multiple industry awards, and a focus on next-generation security technologies. The website is professionally designed, mobile-optimized, and offers clear navigation tailored to its target audience in Taiwan.

K

Kaspersky

kaspersky.com.au

79

Kaspersky is a globally recognized cybersecurity company specializing in next-generation protection solutions for both home users and businesses. The company offers a wide range of products including antivirus software, internet security, VPN services, password management, and parental controls. With a strong market position and a history dating back to 1997, Kaspersky maintains a large presence in the technology sector, particularly in Australia as evidenced by this localized website. The website demonstrates a high level of professionalism, comprehensive content, and consistent branding, targeting both individual consumers and business clients. Technically, the site leverages modern frameworks such as React and Next.js, integrates multiple analytics and marketing tools, and maintains good performance and accessibility standards. Security-wise, the site enforces HTTPS, employs robust security headers, and follows best practices, reflecting the company's cybersecurity expertise. Although WHOIS data is unavailable due to privacy protections, the domain aligns well with the brand's global footprint and reputation. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable source for cybersecurity products and information.

A

AO Kaspersky Lab

kaspersky.rs

74

Kaspersky is a globally recognized cybersecurity company offering advanced IT security solutions for both home users and businesses. The Serbian localized website presents a comprehensive portfolio of products including antivirus, VPN, password management, and parental controls, targeting a broad audience from individual consumers to enterprises. The company holds a strong market position supported by numerous industry awards and a long-established presence since 1997. Technically, the website is built on modern frameworks such as React and Next.js, with good mobile optimization and accessibility features. The infrastructure includes advanced tracking and marketing tools like Google Tag Manager and Kameleoon, indicating a mature digital marketing strategy. Security best practices are well implemented with HTTPS, security headers, and no detected vulnerabilities. The security posture is strong, though minor improvements could be made in DNSSEC adoption and explicit incident response contact publication. Privacy compliance is good with clear privacy and cookie policies, though a visible cookie consent mechanism could enhance GDPR adherence. Business credibility is high, supported by clear company information, trust signals, and professional content. Overall, the website is trustworthy, professional, and secure, with no signs of blocking or malicious activity. Strategic recommendations include enhancing transparency on incident response, improving cookie consent mechanisms, and publishing vulnerability disclosure policies.