Security Directory

H

HELP UKRAINE ROMANIA

helpukraineromania.org

46

HELP UKRAINE ROMANIA is a small non-profit humanitarian aid organization focused on providing medical and humanitarian assistance to Ukraine, primarily through a logistics hub in Chernivtsi. The organization collaborates with Ukrainian government bodies, local authorities, and volunteer business initiatives to coordinate aid transport and delivery. Their services include receiving aid requests, organizing logistics from Europe and worldwide, and partnering with major Ukrainian logistics companies for targeted aid distribution. The website is multilingual and targets donors, volunteers, and aid recipients. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for tracking. Hosting is provided by Mirohost, and the site is mobile-optimized with good SEO practices. However, there is no detected CMS or advanced frameworks. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present. The WHOIS data is consistent with the organization's founding date and shows no suspicious patterns, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security practices to better protect users and build trust.

The website novaukraine.org is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. As a result, no business information, contact details, or policy documents are available for analysis. The domain is registered with Cloudflare, Inc. since 2014, indicating a stable and legitimate registration history. However, the lack of DNSSEC and absence of visible security headers or policies on the accessible page limits the ability to assess the site's security posture fully. The technical infrastructure relies on Cloudflare services, but the blocking page suggests active security measures are in place to protect the site from potential attacks. Overall, the site cannot be fully evaluated due to the WAF block, resulting in a low AI score and limited insights.

Save the Children Federation, Inc. operates a comprehensive and professionally designed website focused on child welfare, humanitarian aid, and education. The organization is positioned as a leading non-profit with a century-long history, serving children in the U.S. and globally. The website effectively targets donors, volunteers, and partners with clear messaging and secure donation mechanisms. Technically, the site uses a modern Drupal CMS infrastructure with integrations for analytics and marketing, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not published. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, including GDPR. The lack of WHOIS data is mitigated by strong on-site trust signals and recognized charity certifications.

B

Blue / Yellow

blue-yellow.lt

59

Blue / Yellow is a Lithuanian non-governmental organization established in 2014 that provides critical supplies and support to Ukrainian soldiers and volunteers in their fight against Russian aggression. The organization operates multiple fundraising campaigns focused on drones, medical aid, vehicles, and training, positioning itself as a key humanitarian aid facilitator with a strong presence in Lithuania and active media coverage. The website is built on WordPress with modern web technologies and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and well-branded, serving a general audience interested in supporting Ukraine.

Б

Благодійний фонд «Схід SOS»

east-sos.org

60

Благодійний фонд «Схід SOS» є українською неприбутковою організацією, що надає всебічну допомогу постраждалим від збройного конфлікту, внутрішньо переміщеним особам, а також підтримує громади через гуманітарні, правові, психологічні та освітні проєкти. Організація має стабільну позицію на ринку благодійних фондів в Україні, активно співпрацює з міжнародними донорами та партнерами. Технічна інфраструктура сайту базується на WordPress з використанням сучасних плагінів для SEO, доступності та інтерактивності, що забезпечує добру продуктивність та мобільну оптимізацію. З точки зору безпеки, сайт використовує HTTPS, має налаштований статус домену clientTransferProhibited, але не використовує DNSSEC, а також не має видимих політик безпеки чи контактів для інцидентів. Загалом, сайт є професійним, надійним і орієнтованим на користувача, але може покращити відповідність GDPR шляхом впровадження механізму згоди на куки та публікації політики безпеки.

R

Revived Soldiers Ukraine

rsukraine.org

57

Revived Soldiers Ukraine is a small non-profit organization dedicated to providing aid to wounded Ukrainian soldiers. The organization operates primarily through donations and awareness campaigns, positioning itself as a trusted charity with a clear mission. The website reflects a professional and consistent brand image, with clear calls to action for donations and informative content about their work. The target audience is the general public interested in supporting humanitarian efforts related to the Ukraine crisis. Technically, the website is built using modern web technologies including Vue.js and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and HubSpot. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in accessibility and privacy compliance, particularly regarding cookie consent mechanisms. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. While no explicit security policies or incident response contacts are provided, the overall security posture is solid with no visible vulnerabilities. The lack of WHOIS data limits domain registration trust verification, but the presence of trust indicators such as Guidestar certification and IRS 501(c)(3) status supports legitimacy. Overall, the website presents a low-risk profile with strong business credibility and a good technical foundation. Strategic recommendations include implementing a cookie consent banner, adding terms of service and security policy pages, and enhancing accessibility features to improve compliance and user trust.

U

United Help Ukraine

unitedhelpukraine.org

50

United Help Ukraine is a registered 501(c)(3) non-profit organization founded in 2014, dedicated to supporting the Ukrainian people through humanitarian aid, tactical medicine, and medical assistance. The organization has a strong market position as a trusted charity with multiple programs targeting defenders, medical aid, and humanitarian welfare. Their website is professionally designed, content-rich, and optimized for user engagement and donations. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting, and employs HTTPS with good security practices, although some security headers and DNSSEC are missing. Privacy compliance is well addressed with a cookie consent mechanism, but explicit privacy and security policies are not clearly found. The domain registration data aligns well with the organization's history, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for its non-profit mission.

P

People’s Project.com

peoplesproject.com

57

People’s Project.com is a Ukrainian volunteer center focused on supporting the Ukrainian Army and providing treatment for severely wounded soldiers using unique technologies. The website positions itself as a national non-profit organization with a medium-sized presence in Ukraine. Technically, the site is built on WordPress with common plugins such as Elementor and photo gallery tools, and it integrates analytics and tracking services like Google Analytics, Facebook Pixel, and Hotjar. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site appears legitimate in content and purpose but requires improvements in transparency and security practices.

R

Razom

razomforukraine.org

69

Razom is a well-established non-profit organization dedicated to supporting Ukraine through humanitarian aid, advocacy, cultural promotion, and community engagement. The website reflects a mature digital presence with comprehensive program descriptions and active social media integration, positioning Razom as a credible and impactful entity in its sector. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data limits domain trust analysis but is likely justified given the organization's geopolitical context. Overall, Razom's website is professional, trustworthy, and effective in communicating its mission and services.

Т

Таблеточки

tabletochki.org

66

Tabletochki is a well-established Ukrainian non-profit charitable foundation dedicated to supporting children with cancer and their families. Founded in 2012, it operates as a leading pediatric oncology charity in Ukraine, providing direct aid, hospital support, medical education, and advocacy. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement channels including social media and donation platforms. Technically, the site is built on WordPress, uses modern web technologies, and is hosted behind Cloudflare for performance and security. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional HTTP security headers could be implemented. Overall, the site is professional, trustworthy, and well-positioned to serve its mission and audience.

B

Агенти крові — все про донорство крові в Україні

bloodagents.com

58

Bloodagents.com is an informational website dedicated to blood donation in Ukraine, providing details about projects and initiatives related to blood donors. The site targets Ukrainian donors and organizations involved in blood donation, positioning itself as a niche platform in the non-profit sector. The website was established in 2020 and maintains a consistent branding and good content quality focused on its mission. Technically, the site is built using the Weblium website builder, employs modern web standards, and integrates Google Tag Manager for analytics. Hosting and DNS services are managed through reputable providers including NS1 and Squarespace DNS. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, professional, and serves its informational purpose well but would benefit from enhanced security and privacy practices.

K

Kyiv Independent

kyivindependent.com

71

The Kyiv Independent is an English-language independent news media outlet focused on providing comprehensive news coverage about Ukraine. Founded in 2021, it targets English-speaking audiences interested in Ukrainian political, social, and economic affairs. The website offers news articles, analysis, and subscription/donation options, positioning itself as a trusted source of independent journalism in the region. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, employs standard security headers, and has a clientTransferProhibited domain status, though DNSSEC is not enabled. No explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in security transparency and DNS security. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure channel.

H

hromadske

hromadske.ua

64

Hromadske is a well-established Ukrainian independent news media organization founded in 2013. It provides comprehensive news coverage including political, economic, social, and cultural topics, along with video content, podcasts, and special projects. The website targets a general audience interested in current events in Ukraine and worldwide. Technically, the site uses modern web technologies such as React and integrates analytics and advertising scripts from Google and Membrana Media. The site is mobile optimized and well-structured for user experience. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. No contact information or incident response details are publicly available, which could be improved for transparency and compliance. Overall, the site is professional, trustworthy, and content-rich, serving as a key media outlet in Ukraine.

U

UkraineNow

ukrainenow.org

64

UkraineNow is a non-profit initiative focused on providing humanitarian aid and tech support to Ukrainians affected by the war. It operates as a decentralized platform connecting volunteers, tech talents, private companies, and non-profits to deliver immediate assistance and sustainable impact through technology and resources. The organization is backed by Radical Philanthropies, a 501c3 IRS-approved non-profit, and has established partnerships with leading tech companies and media outlets, enhancing its credibility and reach. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Analytics for tracking, Google reCAPTCHA for form security, and Weglot for multilingual support. The site is well-optimized for mobile devices, fast loading, and accessible, with a professional design and clear navigation. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is typical for non-profits but slightly reduces transparency. Privacy compliance is basic with a privacy policy present, but cookie policy and terms of service are missing. Overall, UkraineNow presents a trustworthy and professional online presence with a strong humanitarian mission. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding security headers to improve security posture and user trust.

L

LifeLine Ukraine

lifelineukraine.com

63

LifeLine Ukraine is a non-profit organization providing critical mental health support and suicide prevention services across Ukraine. Established in 2019, it operates a 24/7 hotline (short number 7333) and offers crisis intervention, educational courses, and resources. The organization targets individuals experiencing emotional crises, including veterans and the general population. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern frameworks such as Nuxt.js and Prismic CMS, integrating analytics and live chat tools to enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. Overall, the domain registration aligns well with the organization's history, supporting its legitimacy.

У

Українська Жіноча Варта

uavarta.org

61

Українська Жіноча Варта is a Ukrainian non-profit organization dedicated to women's resistance movement, providing training in self-defense, medical skills, and survival during combat situations, alongside daily news updates about the war in Ukraine. The organization targets civilians and the general public interested in these services. The website is built on WordPress with a modern plugin ecosystem including WooCommerce, Elementor, and event calendar tools, hosted by Hosting Ukraine LLC and utilizing Cloudflare DNS and CDN services. The site is multilingual and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and use of Cloudflare, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is limited as no explicit privacy or cookie policies were found. Contact information includes a verified phone number and multiple social media profiles. Overall, the website is professional, trustworthy, and safe for general audiences.

П

Проект МОЛЬФАР ГО "МОЛЬФАР"

molfar.org

59

Проект МОЛЬФАР ГО "МОЛЬФАР" є неприбутковою волонтерською організацією, що підтримує Збройні Сили України та їх сім'ї через збір коштів, надання матеріальної та моральної допомоги, а також розвиток освітніх і культурних ініціатив. Організація має стабільну позицію на ринку волонтерської підтримки, з довірою серед військових та меценатів, що підтверджується 11-річним досвідом та активною діяльністю. Технічно сайт побудований на WordPress з використанням сучасних технологій, таких як jQuery та Google Fonts, а також інтеграцією платіжної системи LiqPay для збору пожертв. Сайт має добру мобільну оптимізацію та SEO, хоча є можливості для покращення доступності та впровадження додаткових безпекових заходів. З точки зору безпеки, сайт використовує HTTPS, має домен з захистом від трансферу, але не використовує DNSSEC і не має публічних політик безпеки чи контактів для інцидентів. Відсутність cookie consent та політики конфіденційності з GDPR-комплаєнсом є недоліками. Загальний ризик сайту є помірним, з високою довірою до бізнесу, але з потенціалом для покращення у сфері безпеки та приватності. Рекомендується впровадити додаткові заходи безпеки, публікувати політики безпеки та інцидентів, а також забезпечити відповідність GDPR.

M

Medical battalion "Hospitallers"

hospitallers.life

51

The Medical Battalion "Hospitallers" is a Ukrainian volunteer paramedic organization founded in 2014 by Yana Zinkevich. It operates on the front lines providing first aid, evacuation, and rehabilitation support to wounded individuals during the ongoing conflict in Ukraine. The organization relies heavily on charitable donations and volunteer efforts, with a strong presence across multiple donation platforms including bank transfers, PayPal, and cryptocurrencies. Their mission is encapsulated in the slogan "For the sake of every life." The website serves as a hub for information, fundraising, and volunteer recruitment, targeting donors and supporters globally. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features are basic, and SEO is adequately implemented. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several important security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is malformed and unavailable, which slightly reduces trust in domain legitimacy. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and professional platform for a small non-profit healthcare organization, with room for improvement in privacy compliance and security best practices. The lack of WHOIS transparency is a concern but is mitigated by the organization's visible operational history and social media presence.

Б

БО “БФ “КОЛО УКРАЇНА”

koloua.com

65

KOLO is a Ukrainian non-profit charitable foundation founded in 2022 by members of the tech community to provide technological support to the Ukrainian armed forces. The foundation focuses on delivering critical devices such as communication equipment, drones, electronic warfare systems, and optics to frontline defenders. It operates a donation-based business model including one-time donations and subscription-based funding, supported by a broad community and reputable partners. The website is professionally designed, mobile-optimized, and provides transparent reporting and multiple donation channels. Technically, KOLO uses modern web technologies including Django backend, Amazon S3 hosting for assets, and integrates analytics tools like Google Analytics and Hotjar for user insights. Security posture is good with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is adequate with privacy and cookie policies present, but lacks a cookie consent mechanism. Overall, KOLO presents a trustworthy and professional online presence aligned with its mission to support Ukraine's defense through technology.

The website prytulafoundation.org is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. As a result, no business information, contact details, or policies are available for analysis. The domain is registered with NameCheap since March 2022 with a long expiry date, indicating a stable registration. The site uses Cloudflare for DNS and security services. Due to the access restriction, the technical infrastructure cannot be fully assessed beyond the presence of Cloudflare security mechanisms. Security posture evaluation is limited, but the use of Cloudflare indicates some baseline protection. Overall risk assessment is constrained by lack of content access, and strategic recommendations focus on enabling access for proper evaluation and ensuring transparency of policies and contact information.

D

DeConf.com

deconf.com

58

DeConf.com is a niche technology website specializing in WordPress plugins and Joomla extensions, with a strong focus on analytics insights and SEO tutorials. The site targets website owners, developers, and digital marketers seeking tools and knowledge to improve website performance and analytics. The business operates on a content and software distribution model, supported by advertising and subscription updates. Technically, the site is built on WordPress using the Genesis Framework, integrates Google Analytics and Jetpack, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain registration consistent with the business age, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and provides valuable content to its audience.

The website www.mf.cz functions primarily as a content aggregator portal recommending a variety of Czech internet websites focused on technology, finance, health, software, and media. It does not provide direct business services but serves as a gateway to partner sites. The site is modest in size and scope, targeting Czech internet users interested in these topics. Technically, the site uses modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile responsive and has a basic but functional design. Security posture is moderate with HTTPS likely enabled (not explicitly confirmed) but lacks visible security headers and privacy policies, which reduces compliance and trust. The absence of WHOIS data is a significant limitation in assessing domain legitimacy and ownership transparency. Overall, the site is safe for general audiences and does not contain adult or explicit content.

D

Deník.cz

denik.cz

61

Deník.cz is a prominent Czech news portal providing comprehensive regional, national, and international news coverage. It serves a broad audience in the Czech Republic with content spanning politics, culture, sports, and everyday life. The website is part of the Vltava Labe Media group, a significant player in the Czech media landscape. The site demonstrates a mature digital presence with structured data, social media integration, and a professional design tailored for desktop and mobile users. Technically, Deník.cz employs modern web technologies including Google Tag Manager, Gemius analytics, and content delivery via Cloudfront, ensuring moderate performance and good SEO practices. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly visible security policy or vulnerability disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Deník.cz presents a trustworthy and professional media outlet with a strong market position in Czech regional news.

Č

Česká unie cestovního ruchu, z.s

ceskauniecr.cz

55

Česká unie cestovního ruchu, z.s is the largest independent professional association in the Czech Republic dedicated to coordinating and representing the interests of tourism entrepreneurs. The organization plays a key role in supporting and developing the tourism sector to enhance competitiveness and sustainable growth. Their website reflects a professional and modern digital presence built on the SvelteKit framework with Firebase backend services, indicating a good level of technical maturity. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, supporting effective stakeholder engagement. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security best practices are recommended.

Cyklisté vítáni is a Czech certification brand focused on promoting cycling-friendly accommodations and services such as hotels, guesthouses, cafes, campsites, museums, and wineries. The website serves as an informational portal providing an interactive map of certified facilities, certification application forms, and contact details for coordinators. The business targets cyclists and service providers aiming to enhance cycling tourism experiences in the Czech Republic. The domain has been registered since 2005, supporting the legitimacy and longevity of the brand. Technically, the website is a simple, well-structured HTML page with CSS styling and embedded Google Maps content. It is mobile-optimized and provides clear navigation and relevant content. However, it lacks advanced technical frameworks, CMS, or analytics tools. The site does not implement privacy or cookie policies, nor does it display security headers, which limits its compliance and security posture. From a security perspective, the site uses HTTPS (assumed from the URL provided), but no additional security headers or incident response information are present. There are no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security best practices reduces the overall security and privacy compliance score. Overall, the website is functional and trustworthy for its informational purpose but would benefit from enhanced privacy compliance, security headers, and transparency policies to improve user trust and regulatory adherence.

S

Digital audio guide for your visitors | SmartGuide

smart-guide.org

67

The website www.smartguide.app is a small business site built on the Wix platform, utilizing Wix Thunderbolt framework and integrating marketing and analytics tools such as HubSpot and Facebook Ads Pixel. The site content is minimal with no visible privacy, cookie, or terms of service policies, and lacks explicit contact information. Technically, the site uses HTTPS and standard Wix hosting but does not implement advanced security headers or visible compliance mechanisms. The security posture is moderate with some best practices in cookie handling and script hardening but lacks comprehensive policies or incident response information. Overall, the site presents a basic digital presence with room for improvement in privacy compliance, security transparency, and business credibility.

A

Asociace turistických informačních center České republiky

aticcr.cz

44

Asociace turistických informačních center České republiky is a well-established non-profit association founded in 2006, dedicated to supporting and certifying tourist information centers across the Czech Republic. The website serves as a comprehensive resource for certification, education, and promotional activities targeting tourist centers and regional tourism stakeholders. The association holds recognized ISO certifications and maintains a strong presence in the Czech tourism sector. Technically, the website uses a legacy CMS (Vismo) with standard web technologies including jQuery and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is moderate with room for improvement in security headers and updating legacy libraries. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

D

Destinační společnost Hradecko

hradecko.cz

46

Destinační společnost Hradecko operates as a regional destination management organization promoting tourism, cultural heritage, and events in the Hradec Králové region of the Czech Republic. The website serves as an information hub for tourists, local businesses, and families, providing event calendars, attraction details, and regional products. The organization is supported by local government entities, enhancing its credibility and market position within the hospitality and non-profit sectors. Technically, the website employs modern web technologies including Bootstrap 5, FontAwesome, Google Fonts, and Google Translate integration, ensuring a responsive and multilingual user experience. The site features a cookie consent mechanism and basic GDPR compliance, though lacks advanced security headers and detailed security policies. Performance and accessibility are moderate to good, with room for improvement in security hardening. From a security perspective, the site uses HTTPS and includes cookie consent but does not expose sensitive data or show signs of vulnerabilities in the visible content. However, the absence of WHOIS registration data reduces domain trustworthiness and suggests either privacy protection or registration issues. No incident response or vulnerability disclosure information is provided, indicating potential gaps in security transparency. Overall, the website is professionally designed and content-rich, targeting a general audience interested in regional tourism. The main risks relate to incomplete domain registration transparency and limited security policy disclosures. Strategic improvements in security headers, incident response readiness, and WHOIS data transparency would enhance trust and compliance.

The website tempus-termine.com represents a small telecommunications service provider named Berner Telecom-Dienste based in Wuppertal, Germany. The domain has been registered since 2013, indicating a stable presence, but the website content is extremely minimal, consisting only of a heading and a single word paragraph. There is no metadata, no contact information, no privacy or cookie policies, and no visible security or compliance features. The technical infrastructure is basic, with no detected CMS, frameworks, or modern technologies. Hosting is provided by Vautron Rechenzentrum AG, a reputable data center and registrar. From a security perspective, the site lacks essential security headers, HTTPS status is unknown, and DNSSEC is not enabled, which could expose the domain to certain risks. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating a lack of user engagement features. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations. The domain registration data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website's risk profile is moderate due to minimal content and lack of security best practices. The business credibility is low due to the absence of contact details and trust indicators. Strategic improvements should focus on enhancing website content, implementing security best practices including HTTPS and security headers, and publishing privacy and cookie policies to improve compliance and user trust.

B

BippesBrandão GmbH

bippesbrandao.de

65

BippesBrandão GmbH is a small, professional digital agency based in Offenbach, Germany, specializing in tailored digital solutions including strategy, user experience, visual design, and development. The company targets national and international clients seeking high-quality digital agency services. Their market position is supported by a portfolio of notable clients and a consistent, professional web presence. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates multimedia content via Vimeo. The use of a headless CMS (Directus) for media management indicates a modern content infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent for analytics, and anonymizes IPs in Google Analytics (though GA is currently commented out). However, security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. Overall, the site is well-designed, user-friendly, and trustworthy, with minor improvements recommended in security headers and explicit security policies.

T

Toplage Immobilien GmbH

toplage-immobilien.de

45

Toplage Immobilien GmbH is a regional real estate brokerage firm based in Kiel, Germany, specializing in property sales, rentals, and related consulting services. The company is part of the larger wankendorfer Unternehmensgruppe, which enhances its market position and resource access. The website is professionally designed using TYPO3 CMS and targets property buyers, sellers, and renters in Schleswig-Holstein with clear service offerings and contact options. Technical infrastructure includes modern JavaScript libraries and privacy-conscious analytics via Matomo with cookies disabled. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a trustworthy and professional real estate business with strong compliance to GDPR and user privacy.

A

Adlershorst Immobilien GmbH

adlershorst-immobilien.de

41

Adlershorst Immobilien GmbH is a medium-sized German real estate company specializing in property sales, condominium and rental building management, and in-house skilled trades such as painting, plumbing, and electrical services. The company targets property owners, tenants, and investors primarily in Hamburg and surrounding regions. Their website is built on TYPO3 CMS and employs modern JavaScript libraries, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides detailed contact information for multiple team members, enhancing user trust and engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information are absent. Overall, the website presents a professional and trustworthy image with no detected vulnerabilities or suspicious content.

C

CREATIVE sites

creativeshop.sk

57

CREATIVE sites is a Slovak-based company specializing in providing a professional e-commerce platform named CREATIVE shop. The platform offers a comprehensive suite of services including an intuitive CMS, custom UX and graphic design, continuous feature development, bespoke programming, e-commerce and SEO consulting, and dedicated customer support. Positioned as one of the top e-commerce solutions in Slovakia, CREATIVE sites targets ambitious entrepreneurs and businesses seeking tailored online shop solutions with integrated marketing and automation capabilities. Technically, the website employs modern JavaScript libraries, integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel, and uses Amazon Cloudfront CDN for content delivery. Security measures include HTTPS enforcement, Google reCAPTCHA v3, CSRF tokens in forms, and Sentry for error monitoring, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data aligns with the website's business claims, supporting legitimacy and trustworthiness. Overall, the website demonstrates strong professionalism, technical maturity, and business credibility.

DER MEDIENVERTRIEB operates a dedicated extranet portal named DMV-Extranet, providing its clients with 24/7 access to sales reporting, special evaluations, billing documents, and market observation data. The portal targets business clients and account managers, facilitating efficient distribution and management of media-related data. The website content is primarily in German, consistent with the company's German market focus. Technically, the website is built using JavaServer Faces with the PrimeFaces 6.2 framework, supplemented by jQuery and Font Awesome for UI components. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. The login form is standard, using POST with masked password input, but no advanced security headers or CSRF protections are evident. Security posture is moderate; while HTTPS is assumed (not explicitly confirmed in HTML), the absence of security headers and privacy compliance mechanisms such as cookie consent or GDPR policies indicates room for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows consistent domain registration with professional name servers, supporting legitimacy. Overall, the site is functional and serves its business purpose but requires enhancements in privacy compliance, security headers, and user experience to improve trust and security posture.

S

SEIGI

seigi.eu

44

SEIGI is a specialized technology company focused on developing and selling modules and integrations for PrestaShop and thirty bees e-commerce platforms. Their website offers a variety of extensions aimed at enhancing online store functionality and marketing capabilities. The company targets e-commerce store owners seeking to improve their platform capabilities through specialized software modules. Technically, the website employs a mature but somewhat dated technology stack including Bootstrap 3 and jQuery 1.7, supplemented by modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Matomo. While the site is well-structured and mobile-optimized, it lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and use of outdated libraries present potential risks. Overall, SEIGI appears to be a legitimate small technology business with a focused market niche, but should improve privacy compliance and update technical components to enhance security and trust.

D

Díky, že můžem, z. s.

cenyjanaopletala.cz

34

The website cenyjanaopletala.cz represents a non-profit initiative named 'Ceny Jana Opletala' focused on awarding young students and recent graduates in the Czech Republic for their academic and civic engagement. The organization behind the site is Díky, že můžem, z. s., a recognized non-profit entity. The site is well-positioned in the educational sector with strong partnerships including universities and media outlets, enhancing its credibility and outreach. The content is professionally presented, targeting students and educational stakeholders, with clear navigation and relevant information about awards, nominees, and partners. Technically, the website is built on WordPress using the Salient theme and several plugins including Yoast SEO, Google Analytics, and Complianz GDPR for privacy compliance. The infrastructure is hosted likely by Wedos, a known Czech provider, and employs HTTPS with good SSL configuration. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security measures include Google reCAPTCHA on forms and cookie consent management, but additional HTTP security headers are recommended. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. GDPR compliance is evident through comprehensive privacy and cookie policies linked to a trusted domain. However, the absence of a dedicated security policy or incident response contact is noted. Overall, the risk profile is low, with recommendations to enhance security headers and incident response readiness. In summary, cenyjanaopletala.cz is a trustworthy, well-maintained educational award platform with solid privacy compliance and a good security baseline. Strategic improvements in security policies and technical hardening would further strengthen its posture and trustworthiness.

D

Dům zahraniční spolupráce

dzs.cz

53

Dům zahraniční spolupráce (DZS) is a Czech government-affiliated organization under the Ministry of Education, Youth and Sports, serving as the national agency for international education. The website provides comprehensive information on international education programs, grants, projects, statistics, and events, targeting students, educational institutions, and project applicants. It holds a strong market position as an authoritative source for international education in the Czech Republic. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager, Cookiebot for consent management, and various tracking tools for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected and could be improved. The absence of WHOIS data is notable but likely due to CZ NIC policies rather than malicious intent. Overall, the site demonstrates a mature security posture with room for minor enhancements. The overall risk is low given the official nature of the organization, the quality of content, and the security measures observed. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining up-to-date CMS components to mitigate vulnerabilities.

E

European Students' Union

esu-online.org

50

The European Students' Union (ESU) is a well-established non-profit umbrella organization representing 43 National Unions of Students across 40 European countries. Founded in 1982 and headquartered in Brussels, ESU advocates for the educational, social, economic, and cultural interests of nearly 20 million students at the European level. The organization maintains a strong presence with comprehensive content, active social media channels, and partnerships with major European institutions such as the European Commission, Council of Europe, and UNESCO. Technically, the website is built on WordPress with modern plugins including Yoast SEO and GDPR compliance tools, ensuring good SEO, accessibility, and privacy adherence. The site is mobile-optimized and features a professional design with clear navigation and user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and some advanced security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism aligned with GDPR. Overall, the ESU website demonstrates a mature digital presence with solid business credibility and privacy compliance. Security posture is good but could be improved by enabling DNSSEC, adding security headers, and publishing security policies. The site is safe for general audiences and free from adult or questionable content.

K

karlsruhe.digital

karlsruhe.digital

54

karlsruhe.digital is a well-established digital initiative promoting Karlsruhe as a leading digital location and smart city. The website serves as a hub for information on digital innovation, events, expert groups, and community engagement, targeting a broad audience including students, researchers, startups, and residents. The technical infrastructure is modern, leveraging WordPress with advanced SEO, multilingual support, and cookie consent management, ensuring a high-quality user experience with excellent performance and accessibility. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers could be improved. The WHOIS data is limited due to TLD restrictions and privacy protection, but the website's professionalism and trust indicators support its legitimacy. Overall, karlsruhe.digital demonstrates a mature digital presence with a focus on transparency, user privacy, and community engagement.

Č

Česká centra – Kancelář generálního komisaře EXPO

expo2025czechia.com

58

The website expo2025czechia.com serves as the official digital presence for the Czech Republic's participation in the World Expo 2025 in Osaka, Japan. It showcases the Czech National Pavilion, highlighting Czech culture, design, technology, and business. The site targets visitors, partners, and stakeholders interested in the Expo and Czech innovation. The business model is government-affiliated, focusing on cultural diplomacy and international promotion. The website is professionally designed, mobile-optimized, and provides comprehensive information and partner engagement opportunities. Technically, the site is built using modern web technologies including React and the Remix framework, hosted with Cloudflare DNS and CDN services. It employs advanced image formats (AVIF, WebP) and SVG graphics for performance and visual quality. Cookie consent is managed via an external service, ensuring compliance with privacy regulations. The site demonstrates good SEO and accessibility practices. From a security perspective, the website uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like X-Frame-Options and Content-Security-Policy are not clearly visible and could be improved. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business purpose and timeline, registered in 2022 with a reputable registrar. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Recommendations include enabling DNSSEC, publishing a security policy or incident response contact, and enhancing security headers to further strengthen the security posture.

S

Studentská komora Rady vysokých škol

skrvs.cz

46

Studentská komora Rady vysokých škol (SK RVŠ) is a Czech national student representative organization focused on higher education advocacy, student support, and organizing educational events and awards. The website serves as an information hub for students, academic senates, and stakeholders in the Czech higher education sector. It maintains partnerships with official government and educational bodies, enhancing its credibility and influence. Technically, the site is built on WordPress using common plugins and libraries, with good SEO and mobile optimization but moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. No WHOIS data is available, likely due to privacy protection, but the site appears legitimate and professionally maintained. Overall, the site is trustworthy and well-positioned within its niche but would benefit from improved privacy and security disclosures.

R

Rada pro výzkum, vývoj a inovace (RVVI)

vyzkum.cz

72

The website vyzkum.gov.cz serves as the official portal for the Czech government's research and development council (Rada pro výzkum, vývoj a inovace). It provides comprehensive and up-to-date information about research policies, news, council members, and strategic documents relevant to science and innovation in the Czech Republic. The site targets researchers, policymakers, and the general public interested in the national research landscape. Technically, the site is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery, Owl Carousel, and FancyBox, and integrates Cookiebot for GDPR-compliant cookie management. Google Analytics is used for traffic analysis. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are not clearly present. The absence of WHOIS data limits domain legitimacy verification, but the official branding and content strongly support authenticity. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security headers and contact transparency.

Č

ČMKOS

cmkos.cz

44

Českomoravská konfederace odborových svazů (ČMKOS) is the largest trade union confederation in the Czech Republic, dedicated to defending the labor, economic, and social rights of employees nationwide. The organization actively advocates for its members in relation to the state, regional authorities, and employers, while also cooperating with international trade union bodies. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, indicating a well-established organization with a broad target audience of workers and union members. Technically, the site leverages Drupal 8 and Elementor, integrating modern web technologies and ensuring mobile responsiveness and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a professional and trustworthy online presence aligned with its non-profit labor union mission.

I

Initiative Markt- und Sozialforschung e.V.

deutschlands-marktforscher.de

54

Initiative Markt- und Sozialforschung e.V. operates a professional and informative website focused on educating the German public about market and social research. The organization promotes participation in surveys to support evidence-based decision-making in politics, business, and society. The website is well-positioned nationally with clear communication, trust signals, and a strong emphasis on privacy and data protection. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO and Matomo analytics configured for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, accessible, and professionally maintained.

R

Rat der Deutschen Markt- und Sozialforschung

rat-marktforschung.de

57

The Rat der Deutschen Markt- und Sozialforschung e.V. is an independent self-regulatory institution in Germany focused on ensuring adherence to professional principles and codes of conduct in market and social research. It serves as a complaint body for various stakeholders including respondents, clients, and competitors, promoting integrity and quality in the industry. The organization has a clear market position as a trusted regulator within the German research community. Technically, the website is built on WordPress with the Avada theme and uses caching plugins to optimize performance. It is hosted likely by Deutsche Telekom-related infrastructure, ensuring reliable service. The site is mobile-optimized and includes modern SEO practices such as Open Graph and JSON-LD structured data, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not provide explicit incident response or security policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. Contact information is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Strategic improvements in security headers, privacy consent, and contact transparency would enhance its security posture and compliance standing.

D

Deutscher Verband für Wohnungswesen, Städtebau und Raumordnung e.V.

netzwerk-quartier.de

57

The website 'Gemeinsam für das Quartier' is a German government-funded initiative focused on fostering partnerships and cooperative urban development in neighborhoods, city centers, rural areas, and small towns. It is managed by the Deutscher Verband für Wohnungswesen, Städtebau und Raumordnung e.V. and STADT ALS CAMPUS e.V., with funding from the Federal Ministry for Housing, Urban Development and Building. The site serves as a platform for networking, knowledge exchange, and organizing workshops to promote community-oriented city development. Technically, the site is built on the Webflow CMS platform, uses modern web technologies like Google Fonts and jQuery, and is hosted on a performant CDN. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with no signs of malicious activity or suspicious content.

The website ebz-ak.de currently serves only a 404 error page indicating that the requested content is not found. The visible branding indicates the entity 'EBZ Akademie', but no further business description or services are presented on this page. The site is hosted on HubSpot CMS and uses HubSpot's analytics and marketing tools. The technical infrastructure is modern but minimal in content and SEO optimization. Security posture is weak due to lack of visible security headers and absence of privacy or cookie policies. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is accessible but lacks substantive content, which severely limits its business credibility and user experience.

D

DPV Deutscher Pressevertrieb GmbH

dpv-hamburg.de

39

DPV Deutscher Pressevertrieb GmbH operates as a full-service subscription service provider specializing in the distribution and management of magazines, newspapers, and digital media products. The company targets publishers seeking reliable subscription fulfillment, customer service, technology solutions, logistics, and direct marketing support. Their market position is that of an established and professional service provider within the German media distribution sector, offering modular CRM solutions such as KIMBA for both print and digital offerings. The website reflects a medium-sized enterprise with consistent branding and a clear focus on their core services.

D

DMV DER MEDIENVERTRIEB

dermedienvertrieb.de

61

DMV DER MEDIENVERTRIEB is a German-based full-service media distribution company specializing in consulting, press distribution, POS marketing, digital sales, logistics, field service, and market observation. The company positions itself as a market leader with a broad portfolio serving publishers and media companies. Their website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern frameworks and plugins such as Yoast SEO and WP Rocket. Security posture is strong with HTTPS and security headers implemented, though some improvements are recommended in privacy compliance and incident response transparency. Overall, the site reflects a credible and established business with a moderate to high level of digital maturity.

Ł

Łódzka Organizacja Turystyczna

ilovelodz.pl

41

The website ilovelodz.pl is an official e-commerce platform operated by the Łódzka Organizacja Turystyczna, offering a variety of souvenirs, gifts, and merchandise themed around the city of Łódź, Poland. It targets tourists and local residents interested in regional products. The site is built on the Prestashop CMS platform and incorporates modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security measures include HTTPS encryption, cookie consent mechanisms compliant with GDPR, and secure session management. However, some security headers could be improved, and DNSSEC is not enabled. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site demonstrates a solid digital presence with good privacy and security practices, suitable for its business model and audience.