Skip to main content

Is airportheli.ch a Scam? Security Check Results - Airport Helicopter AHB AG Reviews

airportheli.ch favicon

Is airportheli.ch Safe? Security Analysis for Airport Helicopter AHB AG

https://airportheli.ch

Check if airportheli.ch is a scam or legitimate. Free security scan and reviews.

TransportationSwitzerlandmedium
Joomla CMSBootstrapjQueryOwl CarouselFont Awesome+2 more
Analyzed 10/4/2025Completed 4:35:21 AM
56
Security Score
MEDIUM RISK

AI Summary

Airport Helicopter AHB AG is a well-established Swiss company specializing in helicopter flights and pilot training since 1993. The company operates multiple locations across Switzerland including Luzern-Beromünster, Basel, Grenchen, and Zürich, offering a wide range of services such as sightseeing flights, VIP and taxi flights, glacier flights, romantic and wedding flights, events, heli-skiing, and comprehensive pilot training programs. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting aviation enthusiasts and potential pilot trainees. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Owl Carousel. It is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking. The site uses HTTPS with a good SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and publishing explicit security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and cookie consent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration since 1993. Overall, the site presents a low risk profile with a solid security posture and compliance with privacy regulations. Strategically, the company should consider enhancing its security posture by adding security headers, publishing a security policy, and possibly a vulnerability disclosure policy. Improving accessibility features and expanding transparency around data retention would further strengthen trust and compliance.

Detected Technologies

Joomla CMSBootstrapjQueryOwl CarouselFont AwesomeGoogle FontsGoogle Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Airport Helicopter AHB AG holds a strong market position in the Swiss helicopter service and pilot training sector. Their diversified service offerings cater to both leisure customers and professional pilot trainees, providing multiple revenue streams. The company leverages partnerships with local tourism and aviation-related organizations, enhancing its ecosystem and market reach. The business model focuses on high-quality personalized services, including VIP flights and specialized training courses, which differentiate it from competitors. The presence of multiple physical locations and a dedicated online voucher shop indicates a mature operational structure. Growth indicators include active social media engagement and regular blog updates showcasing company events and training successes.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (4)

b*****@airportheli.ch
b*****@airportheli.ch
g*****@airportheli.ch
z*****@airportheli.ch

Phone Numbers (4)

+4104193*****
+4106132*****
+4103265*****
+4104488*****

Security Posture Analysis

Comprehensive Security Assessment

The website exhibits a mature security posture with HTTPS enforced and GDPR-compliant cookie consent mechanisms. The presence of CSRF tokens in forms indicates attention to input security. However, the absence of key security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options represents an area for improvement. No incident response or security policy pages were found, which could enhance transparency and preparedness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security maturity is good but could be elevated by adopting additional best practices and publishing formal security documentation.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and configure security headers including Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options to mitigate common web attacks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Airport Helicopter AHB AG

Description:

Erleben Sie einen eindrucksvollen Rundflug durch die Schweiz mit Airport Helicopter. Unsere Helikopter-Flugschule bildet Sie auch gern zum Piloten aus.

Key Services:
Rundflüge (Sightseeing flights)Schnupperflüge (Introductory flights)VIP- und Taxi-FlügeGletscherflüge (Glacier flights)Romantik- und Hochzeitsflüge (Romantic and wedding flights)Restaurant-FlügeEventsHeli-SkiingPilotenausbildung (Pilot training)
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Joomla CMSBootstrapjQueryOwl CarouselFont AwesomeGoogle FontsGoogle Analytics
Frameworks:
Bootstrap
Platforms:
Web
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • Cookie consent with opt-in mechanism
  • CSRF token present in forms

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is professionally designed and well-structured.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

60/100
Score

Weak Strict-Transport-Security configuration

LOW

Current value: "max-age=15768000; includeSubDomains"

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

95/100
Score

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, health, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx a ip4:91.199.66.36 ip4:81.173.83.144 ip4:213.221.222.14 ip4:212.60.62.14 -all
DNS Lookups:2/10
Policy:-all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

62/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 78 days

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:81.173.83.144
Name Servers:
ch.ch-inter.netDNS only
de.ch-inter.netDNS only
nl.ch-inter.netDNS only
MX Records:
10: email.arya.ch

DNSSEC Status

DNSSEC Not Enabled

SPF Analysis

SPF Record:
v=spf1 mx a ip4:91.199.66.36 ip4:81.173.83.144 ip4:213.221.222.14 ip4:212.60.62.14 -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on Joomla CMS, utilizing Bootstrap for responsive design and jQuery for interactivity. Owl Carousel is used for dynamic content sliders. Google Fonts and Font Awesome provide visual enhancements. The site loads external scripts asynchronously, including YouTube API and Google Analytics, optimizing performance. The site is mobile-optimized with viewport meta tags and responsive CSS. However, no advanced hosting or CDN information was detected. Performance is moderate with room for optimization. The technical stack is modern but could benefit from enhanced security configurations and accessibility improvements.
⭐ Verified Community Reviews

What others say about airportheli.ch

Share your experience to help others make informed decisions. We verify every review by email and publish it once our moderation team approves it.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

out of 5

0 reviews published

Loading reviews…

How did we do?

Your feedback directly shapes our roadmap. Rate the quality of this report, leave an optional comment, and let us know if you want our security specialists to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.

Analyze Another Website