Other security reports

A

Advokaadibüroo GLIMSTEDT

glimstedt.ee

41

Advokaadibüroo GLIMSTEDT is a well-established full-service law firm with a strong focus on business law, serving clients primarily in the Baltics and Scandinavia. Founded in 1935, the firm offers a broad range of legal services including data protection, M&A, energy, real estate, tax, banking, and dispute resolution. The website reflects a professional and consistent brand image with clear navigation and regularly updated content, supporting its market position as a reputable legal services provider. Technically, the site is built on WordPress with modern libraries and integrates key analytics and marketing tools, ensuring a good digital maturity level. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy policy transparency and incident response readiness.

R

Ragn-Sells AS

ragnsells.no

68

Ragn-Sells AS operates as a waste management and container rental service provider primarily serving private individuals, housing cooperatives, and businesses in Norway. The company positions itself as a reliable partner offering predictable pricing and professional waste handling solutions. The website is built on a modern technical stack including Episerver CMS and hosted on Microsoft Azure, leveraging advanced analytics tools such as Matomo, Piwik Pro, Microsoft Application Insights, and New Relic for performance and user behavior monitoring. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism in place, although some security best practices like security headers and incident response policies are not explicitly published. The absence of WHOIS data due to privacy protection limits full domain trust verification but does not contradict the legitimacy of the business presence. Overall, the website demonstrates a mature digital infrastructure with room for improvement in transparency and security policy disclosures.

The website at https://forpeeps.eu/lander is a minimal placeholder or parking page with no substantive business content, contact information, or policies. It appears to be hosted via GoDaddy.com, LLC and uses a proprietary landing system labeled 'PW' with JavaScript and Google Adsense for advertising. The lack of privacy, cookie, or terms of service policies and absence of contact details indicate a very low level of digital maturity and business presence. Security posture is weak due to missing HTTPS confirmation and absence of security headers. Overall, the site does not provide sufficient information to assess business legitimacy or compliance, resulting in a low trust and security score.

F

Feks

feks.me

49

Feks is a small design portfolio website focused on providing branding and web design solutions. The site showcases various projects and serves as a digital portfolio for the business. The business model is centered around design services with a target audience of clients seeking creative design solutions. The website is built on WordPress using common plugins and libraries, indicating a moderate level of technical maturity. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies. No explicit contact emails or phone numbers are provided, relying on contact forms and social media links. Overall, the site is functional and professional but could improve in compliance and security aspects.

C

CyberSift | Cybersecurity Solutions for Your Business

cybersift.io

66

The website www.cybersift.com appears to be a Wix-hosted site with minimal accessible content and no visible WHOIS registration data, indicating the domain may not be registered or WHOIS data is privacy protected. The site includes tracking scripts such as Hotjar and Apollo.io, suggesting user behavior analytics are in place. However, there is a lack of essential business information, contact details, and compliance policies such as privacy or cookie policies. Technically, the site uses Wix's standard platform and scripts, with basic mobile optimization and moderate performance. Security posture is weak due to missing security headers and lack of HTTPS enforcement details. Overall, the site presents a low trust profile with significant gaps in transparency and compliance.

C

Convertal OÜ

convertal.ee

46

Convertal OÜ is a well-established Estonian digital marketing agency specializing in a broad spectrum of services including SEO, social media marketing, digital advertising, analytics, and marketing training. The company positions itself as a strategic partner for businesses aiming to enhance their online visibility and achieve measurable business outcomes. Their market position is strong within Estonia and the Baltic region, supported by client testimonials and Google Partner certification. Technically, the website is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and formal security policies are recommended. Overall, the website demonstrates professionalism, good user experience, and trustworthy business credibility.

M

Motieka & Audzevičius

tark.legal

50

Advokaadibüroo TARK OÜ is a well-established full-service law firm based in Estonia, operating since 1991. The firm offers a broad range of legal services including corporate law, mergers and acquisitions, banking and finance, competition regulation, dispute resolution, energy, real estate, IT, labor, and tax law. Positioned as a leader in the Baltic legal market, TARK has received multiple industry recognitions and maintains a strong client testimonial presence. Their target audience primarily consists of businesses and professionals requiring comprehensive legal support in Estonia and the Baltic region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and WPBakery Page Builder. It integrates multiple tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO practices, though performance is moderate. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack advanced security headers and explicit security policies. The security posture is solid but could be improved by implementing additional HTTP security headers and publishing incident response and security policies. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though terms of service and vulnerability disclosure information are absent. WHOIS data confirms domain legitimacy and consistency with the business location and history. Overall, the website reflects a professional and credible legal services provider with a mature digital presence. Strategic improvements in security policies and technical hardening would enhance trust and compliance further.

E

eHost OÜ

royal.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages, including startups, operating companies, and those expanding internationally. The site offers practical guidance, resources, and educational content related to business planning, management, marketing, accounting, legal frameworks, and international trade. The portal positions itself as a comprehensive guide for business success in Estonia and beyond. Technically, the website is built on WordPress, leveraging common plugins such as Google Analytics and Google reCAPTCHA for security and tracking. Hosting and DNS services are provided by eHost OÜ and Cloudflare respectively, ensuring reliable infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit HTTP security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is a well-structured, content-rich portal with moderate technical maturity and security posture. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear contact and incident response information.

H

Hookah

hekkpipe.com

56

Hekkpipe.com appears to be a WordPress-based website branded as 'Hookah' with minimal content and limited business information. The domain is well-established since 2013 and uses Cloudflare DNS services, indicating a moderate level of technical infrastructure. The website employs standard web technologies including Bootstrap and jQuery, but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain-level protections, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site shows basic digital maturity but requires enhancements in privacy compliance, security best practices, and business transparency to improve trustworthiness and professional standing.

G

Error

gaiaschool.in

49

The website gaiaschool.in currently serves an error page hosted by Wix indicating that the domain is not connected to any active website. There is no business content, contact information, or policies available, which severely limits the ability to assess the business or its market position. The site uses AngularJS and jQuery libraries and is hosted on the Wix platform. The technical infrastructure is basic and typical of a placeholder or error page. Security posture is minimal with no visible security headers or SSL information, and no privacy or cookie policies are present. Overall, the site is inaccessible for normal users and does not provide any meaningful content or business credibility. The risk level is high due to lack of content and security measures.

The website rescue.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks access to the actual content. The domain is registered to Elkdata OÜ, an Estonian company, with a domain age dating back to 2010, indicating a mature and legitimate registration. However, the lack of accessible content prevents detailed analysis of the business operations, services, or compliance posture. The technical infrastructure relies on Cloudflare's security and performance services, including Turnstile captcha and Cloudflare Insights for analytics. Security posture appears to be enforced by Cloudflare, but no direct security headers or policies are visible due to the blocked content. Privacy and cookie policies, terms of service, and contact information are not found on the accessible page, limiting compliance and trust assessments.

T

TM Development

tmd.ee

45

TM Development is a specialized exhibition design and development studio based in Estonia, operating since 2010. The company offers a comprehensive range of services including interactive design, technical planning, production, audiovisual solutions, installation, and maintenance primarily targeting museums, science centers, and production companies. Their portfolio includes over 50 exhibitions and hundreds of interactive exhibits, positioning them as an experienced niche player in the exhibition development market. The website is professionally designed using WordPress with modern plugins and technologies, providing good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and error monitoring via Bugsnag, but lacks explicit security headers and privacy compliance documentation. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website reflects a credible and professional business with room for improvement in privacy and security policy transparency.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as an offline or error placeholder within the Chrome browser. No actual website content, business information, or external links are present. The page includes embedded scripts related to the Chrome Dino game, which is a built-in offline game in Chrome. Due to the nature of this page, no business or security policies, contact information, or marketing data are available. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture cannot be meaningfully assessed as this is not a public-facing website. Overall, this content is not a website but a browser error page, and thus no risk or compliance assessment applies.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as an offline error page with embedded JavaScript for the Chrome dinosaur game. There is no actual website content, business information, or commercial presence. The page is not accessible as a public website and does not provide any privacy, cookie, or terms of service policies. No contact or security policies are present, and no external links or analytics are detected. The technical infrastructure is limited to embedded JavaScript game code and basic HTML/CSS styling typical of an internal browser page. Security posture is minimal due to the nature of the page, with no security headers or SSL configuration applicable. Overall, this is not a functional website but a browser error page, resulting in a very low trust and credibility score.

P

PoliLingua

neontranslations.com

70

PoliLingua is a professional translation agency established in 2002, offering a wide range of language services including translation, localization, voice-over, subtitling, and interpreting. The company serves corporate, government, and private sector clients globally, with specialization in over 100 languages and multiple industry sectors. The website demonstrates a mature digital presence with comprehensive service descriptions, certifications, and client testimonials, positioning PoliLingua as a reputable player in the language services market. Technically, the website employs modern JavaScript frameworks such as Alpine.js and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices, although some HTTP security headers are not explicitly detected. Cookie consent and privacy policies are implemented with GDPR compliance. From a security perspective, PoliLingua shows a solid posture with ISO 17100 certification indicating quality management. However, the absence of WHOIS registration data and lack of visible contact emails or incident response information slightly reduce trust. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, PoliLingua presents a professional and trustworthy online presence with minor areas for improvement in transparency and security disclosures. The domain WHOIS inconsistency warrants further verification to ensure full legitimacy.

The website merxu.com is currently inaccessible, displaying a technical break page with minimal content and no functional business or security information. The domain is registered since 2019 with a reputable registrar and uses Google Cloud DNS servers, indicating a legitimate domain setup. However, the lack of accessible content prevents a full assessment of the business, technical infrastructure, or security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available. The site uses Google Fonts but no other detectable technologies or analytics services. Security headers and HTTPS status could not be confirmed from the provided data. Overall, the site appears to be temporarily down or under maintenance, limiting any meaningful analysis.

The website sosar.eu is a parked domain primarily serving as a placeholder indicating the domain is for sale. It does not provide any active business services or content beyond advertising and domain sale promotion. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising scripts from Google Adsense and related networks. There is no evidence of a content management system or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie consent mechanisms are implemented. The WHOIS data shows the domain is registered by Tool Domains EOOD, a domain registrar company, consistent with the domain parking status. Overall, the site lacks business credibility and trust indicators, making it unsuitable for professional or commercial use in its current state.

P

PricewaterhouseCoopers Eesti

pwc.ee

73

PricewaterhouseCoopers Eesti (PwC Estonia) is a professional services firm operating as part of the global PwC network. The company provides consulting, auditing, tax, and business advisory services primarily targeting businesses and professionals in Estonia. The website reflects a mature digital presence with a professional design, consistent branding, and use of advanced technologies such as Adobe Experience Manager and Adobe Analytics. Cookie consent is managed via OneTrust, indicating attention to privacy compliance. However, explicit privacy policy and terms of service documents were not found in the provided content, which is a potential compliance gap. The security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the domain WHOIS data is unavailable publicly, which is typical for large corporate domains using privacy protection. The website is trustworthy and professionally maintained, suitable for an enterprise-level business.

The website kredex.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of any meaningful business, contact, or policy information from the site. The domain is registered since 2010 with a reputable registrar, Zone Media OÜ, indicating a mature and legitimate domain registration. However, the lack of accessible content limits the ability to assess the company's business model, services, or security posture. The site uses Cloudflare's security and performance services, including Cloudflare Insights for analytics. Due to the content block, the website scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. For a comprehensive analysis, direct access to the website content is necessary.

A

Arengupartner

arengupartner.ee

40

Arengupartner is a small Estonian coaching service provider established in 2010, offering life coaching, work-related coaching, team coaching, and training services. The website is built on Joomla! CMS using UIkit and Yootheme frameworks, hosted by Radicenter OÜ. The site is professionally designed with good navigation and mobile optimization, targeting individuals and teams seeking coaching services. Social media presence on Facebook and LinkedIn and partner logos enhance trustworthiness. Security posture is basic with HTTPS enabled but lacking security headers and formal policies. No privacy or cookie policies were found, indicating compliance gaps. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.

The website praamid.ee is currently inaccessible beyond a Cloudflare Turnstile security challenge page, preventing access to any substantive content. The domain is registered since 2015 under Zone Media OÜ, an Estonian registrar, indicating a legitimate and stable registration. However, no business, contact, or policy information is available on the accessible page. The technical infrastructure relies heavily on Cloudflare services for security and performance, but the lack of accessible content limits the ability to assess the website's digital maturity or business model. Security posture is partially observable through the use of Cloudflare's WAF and challenge mechanisms, but no further security headers or policies are visible. Overall, the site presents a low trust profile due to lack of accessible information and transparency.

B

成人色站,在线视频,看片-DANDANAV

bindcreative.com

52

The website bindcreative.com is an adult video streaming platform primarily targeting Chinese-speaking audiences with a variety of adult content including Asian, Japanese, and Western adult videos. The business model appears to be advertising-driven with extensive use of third-party ad and tracking domains. The site is newly registered in March 2024 and lacks detailed business or contact information, which limits trust and credibility. Technically, the site uses modern JavaScript frameworks such as Vue.js and is hosted with Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. Privacy and compliance policies are absent, and no GDPR or data protection measures are evident. The site also lacks verified contact information and does not provide terms of service or cookie consent mechanisms, which raises compliance concerns.

Q

Qualyteam

qualidadesimples.com.br

49

Qualyteam is a Brazilian company specializing in innovative quality management solutions aimed at improving organizational processes and compliance. The website is built on a modern WordPress platform, utilizing popular plugins such as Elementor for design and WP Rocket for performance optimization. The technical infrastructure includes Cloudflare for DNS and CDN services, enhancing site availability and security. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare protection, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the website is professional and functional, serving a niche B2B market in Brazil.

The website edilcom.ee currently serves as a placeholder with minimal content, consisting solely of a frameset directing users to a 'page-is-under-construction' page. There is no visible metadata, business information, contact details, or privacy and cookie policies. The domain is registered with Zone Media OÜ, an Estonian registrar, since 2010, indicating a legitimate and longstanding domain ownership. However, the lack of substantive website content and absence of security and privacy features suggest the site is not yet operational or publicly ready. The technical infrastructure appears basic with no detected modern technologies or CMS platforms. Security posture is weak due to missing HTTPS confirmation and absence of security headers or policies. Overall, the site presents a low trust profile and minimal business credibility at this time.

O

ORGO OÜ

orgo.ee

37

ORGO OÜ is a small Estonian company with a minimal web presence focused primarily on providing contact information. The website lacks detailed business descriptions, service offerings, or marketing content, indicating a basic digital footprint. The domain is registered with Elkdata OÜ since 2017, consistent with the company's Estonian origin and contact details. Technically, the website uses standard HTML5 and CSS3 with Google Fonts integration but lacks advanced frameworks or CMS platforms. Performance and mobile optimization are basic but functional. Security posture is weak due to absence of security headers, privacy policies, and visible HTTPS enforcement, although no critical vulnerabilities were detected. Overall, the site is legitimate but underdeveloped in terms of content, security, and compliance.

The website www.ts.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual content. As a result, no meaningful business, security, or compliance information can be extracted or analyzed. The site appears to be protected by Cloudflare's WAF and bot mitigation services, indicating a focus on security but preventing external analysis. Without access to the real content, it is impossible to assess the company's market position, services, or compliance posture. The technical infrastructure relies on Cloudflare services, but no further details are available. The security posture cannot be evaluated beyond the presence of Cloudflare protection. Overall, the site is currently not analyzable, and any risk or trust assessment is severely limited.

The website prepayway.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain is registered since 2017 with OVH sas and uses Cloudflare DNS and WAF services. Due to the blocking mechanism, no business information, contact details, or policies are available for review. The technical infrastructure shows use of Cloudflare security services but lacks visible security headers or privacy compliance indicators. Overall, the security posture cannot be fully assessed, and the lack of accessible content severely limits trust and credibility evaluation.

The website fraktal.ee currently serves only a 404 Page Not Found error page with no substantive content or business information. The domain is registered since 2010 under Edicy OÜ, which is consistent with the hosting provider and CMS platform (Voog) used. However, the lack of accessible content, contact details, and policies significantly limits the website's utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with minimal optimization and no advanced frameworks or analytics. Security posture is weak, with only a basic Content-Security-Policy header present and no evidence of HTTPS enforcement. Privacy compliance is absent, with no privacy or cookie policies detected. Overall, the site appears inactive or misconfigured, presenting a high risk for users seeking information or services.

The website www.cendyn.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification before access. This prevents retrieval of any meaningful business, technical, or security content. The WHOIS lookup failed to return any registration data, indicating the domain may not be registered or WHOIS data is withheld, which raises concerns about domain legitimacy. The site relies on Cloudflare's security and performance services but does not expose any public privacy, cookie, or terms of service policies. Due to these access restrictions, a comprehensive security posture assessment and business analysis cannot be performed. The overall risk is elevated due to lack of transparency and blocked content.

The website www.rara.ee is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page requiring human verification via Turnstile captcha. This security mechanism blocks access to the actual website content, preventing extraction of business, contact, or policy information. The visible page only indicates that the site is protected by Cloudflare's security services. Due to this, no meaningful business or security posture assessment can be performed. The technical infrastructure relies on Cloudflare's challenge platform and insights beacon, indicating a focus on security and performance, but no further details are available. The lack of accessible content and metadata results in a low trust and quality assessment. It is recommended to gain direct access to the unblocked website for a comprehensive evaluation.

R

Reimann Retked OÜ

retked.ee

40

Reimann Retked OÜ is a small Estonian company specializing in organizing active and educational nature trips throughout the year. Their offerings include rafting, sea kayaking, snowshoeing, and adventure park activities, targeting nature enthusiasts of all ages. The company holds an eco-label certification (EHE), enhancing its credibility in eco-tourism. The website is built on WordPress using the Enfold theme and integrates popular plugins such as The Events Calendar and Yoast SEO, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

The domain eas.ee is currently protected by Cloudflare's security mechanisms, specifically a Turnstile human verification challenge, which blocks access to the actual website content. Due to this, no business-related content, policies, or contact information is accessible for analysis. The domain is registered since 2010 with an Estonian registrar, indicating a legitimate and established registration. The website relies heavily on Cloudflare for security and performance, but no further technical or business details are available from the accessible content.

E

Eesti Geoloogia Selts

egeos.ee

45

Eesti Geoloogia Selts is an established Estonian geological society with a domain registered since 2010. The website serves as an informational portal for society members and the geology community in Estonia, providing details about the society, its members, activities, projects, and events. The site is built on the Voog CMS platform and uses standard web technologies including HTML5, CSS3, and JavaScript libraries such as jQuery. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies. Social media presence on Facebook and LinkedIn supports community engagement. Overall, the website is professional and consistent with its non-profit educational mission but would benefit from enhanced privacy compliance and security best practices.

The website at fits.me currently serves only a 404 Page Not Found error page with no substantive business content, policies, or contact information. The domain is registered to OU Massi Miliano in Japan since 2008, indicating a long-term registration, but the website itself lacks active content or branding. The technical infrastructure uses Amazon AWS DNS services but lacks DNSSEC and advanced security headers. No HTTPS or SSL configuration details were provided, limiting security posture assessment. No privacy, cookie, or terms of service policies are present, indicating poor compliance with privacy regulations. Overall, the site appears inactive or improperly configured, resulting in low trust and business credibility scores.

L

LVL UP OÜ

levelup.ee

45

LVL UP OÜ operates the website levelup.ee as a digital recruitment agency specializing in fast and efficient talent acquisition for Estonian businesses. The company leverages digital marketing, social media, and recruitment software to identify and attract candidates aligned with client needs. The website presents a professional and modern digital presence with clear branding and multimedia content to engage visitors. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare DNS and CDN services, ensuring good performance and SEO readiness. Security posture is solid with HTTPS and bot protection scripts, though explicit security headers are not fully evident. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information is available primarily via email and contact forms, with social media integration enhancing trust. Overall, the site is credible and well-positioned in its niche but would benefit from enhanced privacy and security disclosures.

The website at vicecitymotors.com/lander is currently a minimal placeholder or parking page with no substantive business content or contact information. The domain is registered since 2017 with GoDaddy and is active, but the site itself does not provide any clear business description, services, or branding. The technical infrastructure relies on a parking lander platform with JavaScript and Google AdSense scripts, indicating monetization attempts through ads rather than active business operations. Security posture is basic with no advanced headers or policies implemented, and no privacy or cookie policies are present, which limits compliance with GDPR or other regulations. Overall, the site lacks professionalism and trust indicators, resulting in a low risk but also low credibility profile.

L

Loovuskohvik OÜ

loovuskohvik.ee

40

Loovuskohvik OÜ operates a creative wellbeing studio website focused on personal development, creativity, and empowerment. The company offers workshops, trainings, and creative therapy services targeting individuals and teams interested in holistic growth. The website is professionally designed using WordPress with Elementor and Astra theme, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS enabled and nonce tokens in forms, but lacks some security headers and explicit privacy and cookie policies. The domain is well-established since 2010, registered with a reputable Estonian registrar, consistent with the business profile. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and security hardening.

L

AS Levira | Väljastus,võrguteenused, IT-teenused,striiming ja TV-tootmine, satelliit

levira.ee

52

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual website. This page is a standard offline or error page embedded within the Chrome browser, featuring the well-known Chrome dinosaur game. No real business or website content is accessible, and therefore no metadata, contact information, or policies are present. The technical infrastructure is limited to embedded JavaScript and CSS for the offline game, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers applicable to this internal page. Overall, the site is inaccessible for meaningful analysis, and no business or compliance information can be derived.

A

Error

acornblu.ee

43

The domain acornblu.ee currently hosts only a Wix error placeholder page indicating that the domain is not connected to an active website. There is no business-related content, contact information, or policies present. The site is built on the Wix platform using AngularJS and jQuery libraries, but lacks any custom content or branding beyond the default Wix error page. The technical infrastructure is basic and standard for Wix-hosted sites, with no advanced security headers or analytics detected. Security posture is minimal, with no HTTPS or security headers verifiable from the data provided. Overall, the site is non-operational and does not provide any business or compliance information, resulting in a low trust and credibility score.

Levercode.com is a domain registered since 2018 and currently displays a permanent closure notice with no active business content or services. The website provides only a single contact email address that does not match the domain, indicating minimal operational presence. The technical infrastructure is minimal, with Cloudflare DNS used for hosting, but no CMS, analytics, or advertising technologies detected. The site lacks privacy, cookie, or terms of service policies, and no security headers or HTTPS status information is available from the provided data. Overall, the website is inactive and does not present a professional or trustworthy online presence.

The website frens.ee currently serves only a 404 Page Not Found error page with no active business content or user engagement features. The domain is registered with Zone Media OÜ, an Estonian registrar, since 2010, indicating a legitimate and aged domain. However, the lack of content and absence of privacy, cookie, or terms of service policies suggest the site is inactive or a placeholder. Technically, the site uses basic HTML, CSS, and JavaScript with minimal security headers, notably a weak Content-Security-Policy allowing 'unsafe-inline' scripts, which reduces security effectiveness. No HTTPS status was explicitly provided, but the domain status is 'ok' and presumably supports HTTPS given the registrar and hosting provider. No analytics, tracking, or social media integrations are present, indicating minimal digital maturity. Security posture is weak due to missing standard headers and lack of secure forms or incident response information. Overall, the site scores low on content quality, privacy compliance, and business credibility, reflecting its inactive state.

The website astangu.ee is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents access to any substantive content. The domain is registered since 2010 with an Estonian registrar, indicating a legitimate and established domain. However, no business information, contact details, or policies are available on the accessible page. The technical infrastructure relies on Cloudflare for security and performance, but no CMS or additional technologies are detected. The security posture is limited to Cloudflare's WAF and captcha challenge, with no further visible security headers or configurations. Due to the content being blocked, a full analysis of business, compliance, and security posture is not possible, resulting in a low overall AI score.

C

Coolbet

coolpickz.com

63

Coolbet is an online gambling platform offering sports betting, casino games, and poker primarily targeting the Finnish and Nordic markets. The website presents a professional and consistent brand image with a focus on providing competitive odds and engaging gaming experiences. The platform integrates modern technologies such as React, Google Tag Manager, and Geocomply for geolocation enforcement, indicating a mature digital infrastructure. Security practices include HTTPS and error monitoring via Sentry, though explicit security headers and policies are not evident in the provided content. The absence of WHOIS data raises some concerns about domain registration transparency, but the website's content and licensing claims suggest legitimacy. Overall, Coolbet demonstrates a solid market presence with room for improvement in privacy compliance and security transparency.

The website mkm.ee is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, policies, or contact information is available for analysis. The domain is registered since 2010 with Zone Media OÜ, an Estonian registrar, indicating a legitimate and stable domain ownership. The technical infrastructure relies on Cloudflare services for security and performance. However, the lack of accessible content and policies limits the ability to assess the business model, security posture, and compliance status. The site appears to be protected by a robust WAF, but this also restricts external analysis.

T

Tripod

tripod.ee

55

Tripod is an Estonian service provider specializing in recruitment, testing, research, and coaching services. Established in 2010, the company targets businesses and professionals within Estonia, offering niche HR and development solutions. The website reflects a professional presence with clear branding and a focus on service offerings relevant to its market segment. The company maintains active social media profiles on Facebook and LinkedIn, enhancing its market visibility. Technically, the website is built on WordPress CMS, leveraging Yoast SEO for search optimization and Cookiebot for GDPR-compliant cookie consent management. The site uses modern web technologies including jQuery and integrates Google Tag Manager and Meta Pixel for marketing and analytics purposes. Hosting appears to be managed by Zone Media OÜ, consistent with the domain registration data. The website demonstrates good mobile optimization and moderate performance. From a security perspective, the site employs HTTPS with good SSL configuration and uses cookie consent mechanisms to comply with privacy regulations. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and providing clearer contact information to improve business credibility and user trust.

The website www.esplan.ee is currently non-functional due to a fatal PHP error caused by an outdated WordPress plugin (wpml-string-translation). This prevents any content from being displayed, including business information, policies, or contact details. The domain is registered in Estonia with consistent WHOIS data, suggesting legitimacy, but the website itself lacks operational status and visible content. The technical infrastructure relies on WordPress CMS but suffers from plugin compatibility issues that must be addressed to restore functionality. Security posture is weak due to lack of visible security headers, unknown SSL status, and absence of privacy or cookie policies. Overall, the website presents a high risk due to inaccessibility and lack of compliance indicators.

Sportlyzer LLC. operates a SaaS platform focused on player development and team management software tailored for youth and amateur sports clubs. The platform facilitates membership management, invoicing, attendance tracking, communication, and athlete homework assignments, serving coaches, managers, players, and parents globally. The company maintains a professional web presence with mobile apps on iOS and Android, and a consistent brand image emphasizing ease of use and comprehensive sports club management. The website content is well-structured, informative, and targets sports organizations seeking digital management solutions. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized and uses HTTPS exclusively, ensuring secure data transmission. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The lack of WHOIS data transparency is a moderate concern but does not outweigh the professional presentation and trust signals on the site. Privacy and terms of service pages are present and comprehensive, indicating attention to compliance, though explicit cookie consent is absent. Overall, the security posture is good but could benefit from additional transparency and policy disclosures. Strategically, Sportlyzer is positioned as a specialized SaaS provider in the sports management niche with a solid user base and positive testimonials. The company should focus on improving security headers, cookie consent, and publishing incident response policies to strengthen trust and compliance. Enhancing WHOIS transparency or providing verified domain registration details would also improve legitimacy perception.

E

East West Connection – Official Website

ewcmeetings.com

48

East West Connection's website is a WordPress-based site using the Astra theme and Divi builder compatibility, hosted via GoDaddy.com, LLC. The domain is mature, registered since 1998, indicating a long-standing presence. However, the website content is minimal, lacking critical business descriptions, contact information, and privacy or cookie policies. Technically, the site uses modern CMS technologies but lacks advanced security headers and comprehensive privacy compliance mechanisms. The security posture is basic with HTTPS enabled but missing other best practices. Overall, the site presents a low level of trustworthiness and professionalism due to missing policies and contact details, which could impact user confidence and regulatory compliance.

T

Tammiste Personalibüroo OÜ

tammistepersonal.ee

47

Tammiste Personalibüroo OÜ is an established Estonian recruitment and training company with over 25 years of experience. The company specializes in recruitment services, training programs, emotional intelligence assessments, coaching, and outplacement services. Their website reflects a professional and consistent brand image, targeting Estonian businesses and job seekers. The technical infrastructure is based on WordPress with Elementor, leveraging modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though some security headers are missing. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is trustworthy and well-positioned in its market segment, though improvements in privacy and security documentation are recommended.

F

Fontes PMP OÜ

fontes.ee

47

Fontes PMP OÜ is a well-established Estonian company specializing in talent management, recruitment, mentoring, and consulting services. With 35 years of experience, it holds a strong market position as a trusted partner for organizations seeking to develop and retain talent. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS and modern web technologies to deliver a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. Overall, the site demonstrates high business credibility and privacy compliance, supporting Fontes' reputation as a leading talent management consultancy in Estonia.