Skip to main content

Is ucht.ch a Scam? Security Check Results - NTN Innovation Booster - User-Centred HealthTech Reviews

ucht.ch favicon

Is ucht.ch Safe? Security Analysis for NTN Innovation Booster - User-Centred HealthTech

https://ucht.ch

Check if ucht.ch is a scam or legitimate. Free security scan and reviews.

HealthcareSwitzerlandsmall
WordPressjQueryModern Events Calendar Lite pluginSassy Social Share pluginTranslatePress multilingual plugin+2 more
Analyzed 10/4/2025Completed 3:28:03 AM
46
Security Score
HIGH RISK

AI Summary

The NTN Innovation Booster - User-Centred HealthTech is a Swiss-based innovation support program focused on the healthcare technology sector. It aims to assist partners by connecting them with experts to address business challenges in health technology. The website indicates that the program has concluded its activities, providing informational content and contact details primarily for legacy or reference purposes. The business model centers on innovation facilitation within a niche market, targeting healthcare and technology partners. The organization maintains a modest online presence with social media links and affiliation to the Innosuisse innovation booster programs. Technically, the website is built on WordPress using common plugins such as Modern Events Calendar Lite and Sassy Social Share. The site is moderately optimized for mobile devices and SEO, with a basic but consistent design. HTTPS is enforced, ensuring secure communications. However, the site lacks advanced security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure mechanisms. No forms are present on the homepage, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. The domain registration is privacy protected but consistent with the business age and type, indicating legitimacy. Overall, the website is safe and professional but minimalistic, reflecting a concluded program rather than an active service. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing incident response contacts to enhance compliance and security posture.

Detected Technologies

WordPressjQueryModern Events Calendar Lite pluginSassy Social Share pluginTranslatePress multilingual pluginBootstrapFont Awesome

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The NTN Innovation Booster - User-Centred HealthTech operates as a specialized innovation support program within the Swiss healthcare technology sector. Its competitive advantage lies in its affiliation with Innosuisse and its focus on connecting partners with domain experts to solve business challenges. The business model is service-oriented, facilitating innovation rather than direct product sales. Revenue streams likely derive from government or institutional funding rather than commercial transactions. The target customers are healthcare technology companies and research institutions seeking innovation support. Growth indicators are limited due to the program's conclusion. The partnership ecosystem includes Innosuisse and academic institutions such as OST. The website's minimal content and concluded status suggest a winding down phase or transition to other programs.

Extracted Contact Information

Marketing Intelligence Data

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a basic security maturity level with HTTPS enabled, ensuring encrypted data transmission. However, the absence of security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options reduces protection against common web attacks like clickjacking and MIME sniffing. No vulnerability disclosure or incident response information is provided, limiting transparency and preparedness. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations. No exposed sensitive data or vulnerable libraries were detected in the provided content. Overall, the security posture is adequate for an informational site but requires improvements to meet best practices and regulatory requirements.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive privacy and cookie policies with clear GDPR compliance statements.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

NTN Innovation Booster - User-Centred HealthTech

Description:

The NTN Innovation Booster "User-Centred HealthTech" supports its partners in finding the right experts to adress their business pains.

Key Services:
Innovation supportExpert matchingHealthTech business pain addressing
Content Quality:

basic

Branding:

consistent

Technical Stack

Technologies:
WordPressjQueryModern Events Calendar Lite pluginSassy Social Share pluginTranslatePress multilingual pluginBootstrapFont Awesome
Frameworks:
Bootstrap
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
70/100
Best Practices:
  • HTTPS enforced

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Marketing Tools:
Sassy Social Share
Transparency Level:basic

Website Quality Assessment

Design Quality:basic
User Experience:basic
Content Relevance:basic
Navigation Clarity:basic
Professionalism:basic
Trustworthiness:moderate

Key Observations

1

Website is a concluded innovation booster program for User-Centred HealthTech

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

35/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Twitter, LinkedIn, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, health, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 redirect=spf-permissive.mail.hostpoint.ch
DNS Lookups:0/10

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

85/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 61 days

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:ucht.ch
Issuer:R12
Valid Until:12/4/2025 (61 days)
SANs:ucht.ch

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:217.26.54.130
AAAA Records:2a00:d70:0:b:2002:0:d91a:3682
Name Servers:
ns.hostpoint.chDNS only
ns2.hostpoint.chDNS only
ns3.hostpoint.chDNS only
MX Records:
10: mx1.mail.hostpoint.ch
10: mx2.mail.hostpoint.ch
SOA:Serial: 1759363200, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:71ms

SPF Analysis

SPF Record:
v=spf1 redirect=spf-permissive.mail.hostpoint.ch

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on WordPress 5.7.14 with a combination of plugins including Modern Events Calendar Lite, Sassy Social Share, and TranslatePress for multilingual support. The front-end uses Bootstrap and Font Awesome for styling and icons. JavaScript libraries include jQuery and jQuery UI. The site loads multiple CSS and JS assets from its own domain and trusted CDNs such as Google Fonts. Performance is moderate with no explicit optimization indicators. Mobile responsiveness is good, supported by responsive CSS and mobile menu plugins. SEO is enhanced by Yoast SEO plugin with proper meta tags and structured data in JSON-LD format. Accessibility is basic with no advanced ARIA roles or landmarks detected. Hosting provider details are not explicitly available. Overall, the technical infrastructure is standard for a small WordPress-based informational site.
⭐ Verified Community Reviews

What others say about ucht.ch

Share your experience to help others make informed decisions. We verify every review by email and publish it once our moderation team approves it.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

out of 5

0 reviews published

Loading reviews…

How did we do?

Your feedback directly shapes our roadmap. Rate the quality of this report, leave an optional comment, and let us know if you want our security specialists to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.

Analyze Another Website