Real Estate security reports

S

SIA Latvijasmernieks.lv

latvijasmernieks.lv

58

SIA Latvijasmernieks.lv is a well-established Latvian surveying and geodesy company with nearly 20 years of experience. They provide a comprehensive range of services including cadastral surveying, land management, topography, 3D laser scanning, aerophotogrammetry, road design, and geological work. The company positions itself as a leading service provider in Latvia with a medium-sized team of certified specialists and multiple client service centers across the country. Their website reflects a professional and consistent brand image targeting clients in the real estate and construction sectors within Latvia. Technically, the website uses modern web technologies including service workers for offline support and is built on the MultiScreenSite CMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

S

Scandium Kinnisvara AS

scandium.ee

43

Scandium Kinnisvara AS is a medium-sized Estonian real estate developer specializing in residential, rental, and commercial property development with a focus on quality and sustainability. The company operates notable projects such as the Marienholm peninsula development in Haapsalu and also engages in energy projects under Scandium Energia. The website is professionally designed, multilingual, and provides clear contact information and active content updates, positioning the company as a credible player in the Estonian real estate market. Technically, the site is built on WordPress with WooCommerce and uses modern libraries and analytics tools, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with cookie consent implemented but no visible privacy or security policies. Overall, the site reflects a trustworthy and professional business with room for enhanced security and compliance documentation.

P

Panoee - The Best Free 360 Virtual Tour Software

panoee.com

44

Panoee.com is a website offering free virtual tour software focused on creating immersive 3D and 360-degree tours for industries such as real estate, hospitality, tourism, education, museums, and art galleries. The platform positions itself as a versatile and user-friendly solution with a strong market presence indicated by positive user ratings and social media engagement. Technically, the site is built on WordPress and leverages modern analytics and tracking tools including Google Analytics, Microsoft Clarity, and Facebook Pixel. Hosting and DNS services are provided by reputable providers, with domain registration dating back to 2019, consistent with the business's founding year. Security posture is adequate with HTTPS enabled and bot protection via reCAPTCHA; however, the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website demonstrates a good balance of content quality and technical implementation but lacks in privacy compliance and explicit contact information, which impacts trust and regulatory adherence.

V

Vanalinna Ehitus

vlrestaurering.se

40

Vanalinna Ehitus is a specialized restoration company focusing on the renovation of plastered facades and restoration of wooden windows and doors, particularly for culturally protected and historically valuable buildings. The company operates primarily in Sweden and emphasizes quality craftsmanship, flexibility, and preservation of architectural heritage. Their market position is that of a niche specialist serving clients who require expert restoration services for heritage properties. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, optimized for performance and mobile responsiveness. SEO practices are well implemented, and the site uses structured data to enhance search engine understanding. Hosting details are not explicit, but the domain is registered with Ascio and uses European name servers. From a security perspective, the site uses HTTPS with good SSL configuration but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present, but no terms of service or explicit security policies. Contact information is clear and professional, enhancing business credibility. Overall, the website presents a professional and trustworthy image with a solid technical foundation and good content quality. The main areas for improvement include enhancing security headers, publishing a security policy, and improving privacy compliance details to align better with GDPR requirements.

W

WebActive s.r.o.

vivus.cz

64

The website www.vivus.cz represents a real estate business focused on selling new apartments in Prague, Czech Republic. The company behind the site is WebActive s.r.o., which appears as the developer and author of the website. The site showcases multiple ongoing and sold residential projects across various Prague districts, targeting individuals seeking affordable new housing. The business model centers on real estate development and sales, with a medium-sized market presence in the Prague region. Technically, the website is built on WebJET CMS and uses common web technologies such as jQuery and Bootstrap for responsive design. The site is well-structured with good SEO practices and mobile optimization. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers and advanced security policies. No WHOIS data was retrievable for the domain, which raises concerns about domain registration legitimacy and trustworthiness. No incident response or security contact information is provided. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk assessment suggests the website is functional and professional but has gaps in domain legitimacy verification and privacy compliance. Strategic recommendations include publishing privacy and terms policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.

Baltic Legal operates a specialized immigration and legal consultancy website focused on residence permits and immigration services in Latvia and the broader European Union. The company offers services including residence permits via real estate investment, business investment, and bank deposits, alongside legal assistance in corporate and immigration law. The website is well-structured, multilingual, and provides detailed information about immigration policies, visa requirements, and investment options. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data is fully redacted as per EURid policy, which is typical for .eu domains and does not raise immediate concerns. Overall, the site presents a professional image with moderate technical maturity and some room for security and privacy improvements.

A

ADOL Monitor s.r.o.

strategickymentoring.cz

18

Strategickymentoring.cz is a Czech Republic based small business operated by ADOL Monitor s.r.o., specializing in strategic mentoring and education for real estate investors. The website offers a comprehensive 3-day mentoring program combined with 20 hours of individual consultations over two years, targeting beginners to intermediate investors and those diversifying from other investment types. The business leverages practical experience and proprietary tools (ADOL Monitor) to provide value. Technically, the website uses modern JavaScript libraries, Google Analytics, and Bootstrap for responsive design, delivering a good user experience with moderate performance. Security posture is solid with HTTPS and cookie consent implemented, though lacks advanced security headers and formal security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-branded, with transparent WHOIS data consistent with the business launch timeline.

A

ADOL Monitor s.r.o.

adol.cz

53

ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

D

DARAMIS Management, s.r.o.

daramis.com

55

Daramis Management, s.r.o. is a well-established real estate developer focused on residential projects primarily in Prague, Czech Republic. With over 25 years of experience, the company specializes in transforming urban areas into vibrant residential communities, offering services including residential development, project management, and property sales. Their market position is strong within the local real estate sector, supported by a portfolio of completed projects and a significant number of satisfied residents. The website reflects a professional and modern digital presence, leveraging WordPress with advanced front-end technologies to deliver an excellent user experience across devices. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. The domain WHOIS data is missing or privacy protected, which slightly reduces transparency and business credibility but is not uncommon in this sector. Overall, the site demonstrates a mature digital infrastructure and trustworthy business representation with room for improvement in transparency and security disclosures.

L

Landia Management s.r.o.

landia.cz

52

Landia Management s.r.o. is a Czech engineering and investment company specializing in residential, development, and leisure real estate projects primarily in Prague. The company targets investors and residents interested in quality living spaces and community-oriented developments. Their portfolio includes cooperative housing, senior care homes, and sports and leisure facilities. The website is professionally designed with clear navigation and good content quality, supporting their market position as a reputable local developer. Technically, the website uses a traditional tech stack including jQuery 1.11.0, Fancybox, and Slick Carousel. While functional and moderately optimized for mobile, the use of an outdated jQuery version and lack of visible security headers indicate areas for improvement. The site includes a cookie consent mechanism and uses Google Analytics for tracking, reflecting moderate digital maturity. From a security perspective, the site lacks explicit privacy policies and terms of service, and no WHOIS data is available for the domain, which reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but security headers and modern best practices should be implemented to enhance protection. The cookie consent banner and contact transparency are positive indicators. Overall, the website presents a credible business with good professionalism and user experience but requires improvements in security posture, privacy compliance, and domain registration transparency to strengthen trust and compliance.

K

Klépierre Management Česká Republika s.r.o.

klepierre.cz

54

Klépierre Management Česká Republika s.r.o. operates prominent shopping centers in the Czech Republic, including Nový Smíchov in Prague and Plzen Plaza in Plzeň. The company is part of the larger Klépierre group based in France, specializing in retail real estate management. Their website provides information about their centers, compliance mechanisms including a whistleblowing system, and cookie consent management, reflecting a commitment to regulatory compliance and user privacy. Technically, the website is built using modern web technologies such as Next.js and React, hosted via Gandi registrar's infrastructure. The site includes a comprehensive cookie consent mechanism using tarteaucitron.js and integrates Google Tag Manager for analytics. The website is mobile-optimized and provides a good user experience with clear navigation and branding consistency. From a security perspective, the site enforces HTTPS and uses a high privacy cookie consent mode. It features a whistleblowing system for incident reporting, demonstrating a mature compliance posture. However, explicit security headers and a dedicated security policy page are absent, and no vulnerability disclosure or security.txt file was found. These gaps suggest room for improvement in formalizing security communication and transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The domain age and WHOIS data align with the business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to strengthen security posture and trust.

F

Futurn nv

futurn.com

54

Futurn nv is a Belgian real estate company specializing in the sustainable redevelopment and transformation of commercial properties in Flanders. The company focuses on converting outdated or underutilized sites into modern, versatile, and environmentally responsible workplaces. Their market position is that of a specialist in sustainable business property development, offering tailored solutions such as KMO units, office buildings, and reconversion projects. The website reflects a professional and consistent brand image targeting business owners and property stakeholders in the region. Technically, the website is built on the Concrete5 CMS platform, utilizing modern frontend technologies including Bootstrap, jQuery, and FontAwesome. It features responsive design, SEO-friendly metadata, and integrates marketing and analytics tools such as Google Tag Manager and social media pixels. The site includes a cookie consent mechanism aligned with GDPR requirements and provides multiple contact channels including phone, email, and a chat widget. From a security perspective, the site enforces HTTPS with a valid SSL certificate and employs secure form practices. However, it lacks explicit security headers and does not provide a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate business. Overall, the website demonstrates a good level of digital maturity and security hygiene, with room for improvement in security policy transparency and domain registration verification. The risk profile is moderate, with recommendations to enhance security headers, publish incident response contacts, and verify domain registration details to strengthen trust and compliance.

B

Barefoot Luxury

barefootluxury.be

52

Barefoot Luxury is a niche real estate and hospitality company specializing in luxury villas for sale on São Vicente island, Cabo Verde. The company offers 36 private villas blending natural beauty with modern comfort, targeting affluent investors and lifestyle buyers. The website reflects a strong market position within the luxury real estate sector, emphasizing exclusivity, privacy, and a unique lifestyle experience. Technically, the site is built on WordPress with Elementor and Gravity Forms, hosted by Combell nv, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the business goals.

F

Fosbury & Sons

fosburyandsons.com

50

Fosbury & Sons operates as a premium coworking and office space provider primarily serving the Brussels and Groot-Bijgaarden regions, with additional presence in Amsterdam. The company targets a broad audience including startups, entrepreneurs, and established companies seeking flexible workspaces, meeting rooms, and event spaces. Their market position is that of a high-quality, human-centric workspace provider emphasizing community and collaboration. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, hosted with Cloudflare DNS services, and is optimized for mobile and SEO. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and additional security headers could be implemented. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and terms policies. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and well maintained, with room for improvement in security transparency and DNS security.

L

LIFE

life.be

71

LIFE is a Belgian real estate developer focused on creating sustainable, community-oriented living spaces that prioritize quality of life and architectural detail. Their projects emphasize energy efficiency and social inclusiveness, targeting residents and investors interested in innovative urban development. The website reflects a professional digital presence with multimedia content, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies and WordPress CMS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks security headers and published security policies, which are recommended for improvement. WHOIS data is restricted by the registry, limiting transparency but not necessarily indicating risk. Overall, the site is trustworthy and professionally maintained, with room for enhanced security and transparency.

P

P&P Legal

pplegal.sk

46

P&P Legal is a Slovak law firm established in 2018, providing comprehensive legal services across various domains including commercial law, litigation, family law, and constitutional law. The firm targets both individual and corporate clients within Slovakia and offers multilingual services including Slovak, Czech, and English. Their market position is that of a trusted local legal partner with a strong emphasis on professionalism, confidentiality, and security, supported by a substantial liability insurance coverage of 1.5 million euros. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Select2, Google reCAPTCHA, and FontAwesome. The site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks advanced security headers and does not publicly disclose a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy front for the law firm, with good privacy compliance and a solid security baseline. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their posture and client trust.

L

Lumi Capital OÜ

luminamai.lt

43

Lumi Namai is a Lithuanian real estate rental business specializing in modern apartments located in the 'Naujasis Skanseno' quarter of Vilnius. The company offers a range of 1 to 4-room apartments fully furnished with kitchen appliances and storage solutions. The website is professionally designed using Joomla CMS and integrates modern technologies such as Google Maps for location visualization, Google reCAPTCHA for form security, and GDPR-compliant cookie consent mechanisms. Social media presence is established on Facebook and Instagram, enhancing customer engagement. The domain is newly registered in 2024, consistent with the business launch timeline, and the WHOIS data aligns with the company identity.

L

Lumi Capital OÜ

lumimajas.lv

50

Lumi Majas, operated by Lumi Capital OÜ, is a regional real estate rental service specializing in long-term apartment and commercial space leasing primarily in Latvia, with partner sites in Estonia and Lithuania. The website provides detailed rental options, terms, and contact mechanisms targeting individuals seeking flexible and long-term housing solutions. The business model focuses on providing accessible rental properties with additional services to enhance tenant experience. Technically, the website is built on Joomla CMS with modern front-end frameworks and integrates Google reCAPTCHA and cookie consent mechanisms to ensure user privacy and security. The site demonstrates good digital maturity with multi-language support and social media integration. Security posture is solid with HTTPS enforcement and spam protection on forms, though it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security headers and transparency could enhance its posture further.

L

Lumi Capital OÜ

lumikodud.ee

45

Lumi Kodud is a small Estonian real estate company specializing in rental apartments in Tallinn, offering 1-, 2-, and 3-room modern apartments managed reliably. The website is professionally designed using Joomla CMS with modern frameworks like Bootstrap and includes multi-language support. It integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, and employs Google reCAPTCHA for form security. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the site is trustworthy and well-positioned for its local rental market niche.

D

DIRECT INVEST

directinvest.ee

43

Direct Invest Group is a well-established commercial real estate investment company operating primarily in Estonia and Latvia since 2009. The company focuses on investing in shopping centers, office buildings, and development projects, with a portfolio nearing 100 million euros and serving approximately 100 tenants. Their Navigator building holds a prestigious LEED Gold certification, highlighting their commitment to sustainable development. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile devices. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though security headers and incident response information are lacking. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

B

Baltic Legal

baltic-legal.com

44

Baltic Legal is a specialized corporate law office providing company formation, legal, accounting, and immigration services focused on the Baltic states of Latvia, Estonia, and Lithuania. The company targets entrepreneurs and businesses seeking to establish operations in these countries, offering a one-stop solution for business registration, tax management, and residence permits through investment. The website content is professionally structured and provides detailed service descriptions, although it lacks explicit contact information and privacy policies. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, Font Awesome icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, but lacks advanced accessibility features and security headers. The absence of HTTPS status information and security headers suggests room for improvement in security posture. From a security perspective, the site does not expose sensitive data and uses no known vulnerable libraries. However, the lack of privacy and cookie policies, absence of contact details for incident response, and missing WHOIS registration data reduce trustworthiness and compliance with data protection regulations. The WHOIS query returned no registration data, which is inconsistent with the active website presence and raises concerns about domain legitimacy. Overall, Baltic Legal presents a credible business offering with good content quality and technical implementation but requires significant improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

KV.EE is a leading Estonian real estate portal offering a wide range of property listings including apartments, houses, land, and commercial spaces for sale and rent. The website targets Estonian property buyers, sellers, and renters, positioning itself as the first and foremost real estate portal in Estonia. The business model revolves around providing an online marketplace and listing service for real estate, supported by RSS feeds and categorized property types. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, and uses popular fonts and icon libraries. The design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible advanced frameworks or CMS identification and shows moderate performance.

Y

YIT Eesti

yit.ee

73

YIT Eesti is a prominent real estate and infrastructure development company operating in Estonia, specializing in residential apartments, commercial properties, and complex infrastructure projects. The website reflects a mature digital presence with a professional design, clear business focus, and comprehensive cookie consent management aligned with GDPR requirements. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and Azure Application Insights for monitoring, indicating a well-maintained and performance-conscious platform. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a high level of professionalism and compliance, with room for improvement in transparency around terms of service and direct contact information.

J

John Robertson Architects

jra.co.uk

61

John Robertson Architects is a reputable architectural practice operating primarily in the UK with offices in London, Edinburgh, and Lodz. They specialize in commercial, residential, and mixed-use architectural projects, offering design, planning, and project delivery services. The firm positions itself as a leading player in the architectural sector with a strong portfolio and industry recognition. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, delivering a fast, mobile-optimized, and accessible user experience. The site employs HTTPS and a cookie consent mechanism, indicating good privacy compliance. However, the absence of WHOIS data for the domain www.jra.co.uk due to a naming rules violation introduces some uncertainty about domain registration legitimacy. Security posture is generally strong with no visible vulnerabilities, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, though the domain registration anomaly should be clarified to enhance credibility.

V

Vanalinna Ehitus

vanalinnaehitus.ee

44

Vanalinna Ehitus is an established Estonian construction company specializing in building construction under main contracting agreements. Founded in 2010, the company emphasizes flexibility, client-centric approaches, and quality workmanship. Their website reflects a professional and modern digital presence with multilingual support for Estonian, Finnish, and Swedish audiences. The company showcases a portfolio of projects and maintains active social media channels, reinforcing their market position. Technically, the site is built on WordPress with modern libraries and optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the website supports the company's credibility and business goals effectively.

C

Constructive

constructive.net.au

67

Constructive is a specialist recruitment consultancy operating in Australia since 2003, focusing on the Built Environment and Infrastructure sectors. The company offers permanent and contract recruitment solutions, franchise opportunities, and tailored hiring services to employers and jobseekers. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses modern web technologies including service workers, Google Analytics, and Elfsight widgets, hosted likely by Identity Digital Australia. Security posture is good with HTTPS and captcha-protected forms, but lacks explicit security headers and published privacy or cookie policies. WHOIS data is incomplete but registrar information aligns with Australian domain administration, supporting legitimacy. Overall, the site is functional and trustworthy but could improve compliance and security transparency.

C

COMBICON OÜ

combicon.ee

50

COMBICON OÜ is a small Estonian company specializing in the design, construction, and development of production, warehouse, and commercial buildings, including additions and real estate acquisition assistance. The company targets local businesses and individuals seeking construction and real estate services, positioning itself as a professional local player with a clear focus on project-based services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Voog CMS, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy but could improve transparency and compliance.

N

Nord Property Ltd

nordproperty.com

43

Nord Property Ltd is a medium-sized real estate company based in Estonia, specializing in international real estate services including brokering, property management, consulting, appraisal, investment counseling, and development sales. The company targets property buyers, sellers, and investors primarily in Estonia and Spain, offering multilingual support and a professional service portfolio. The website is well-structured with clear navigation and relevant content, supporting a good user experience and moderate mobile optimization. Technically, the site uses common analytics and tracking tools such as Google Analytics and Google Tag Manager, along with Google Maps API for location services. However, no CMS or hosting provider details were identified, and performance is moderate.

O

OÜ KINO MAASTIKUARHITEKTID

kinoline.ee

53

OÜ KINO MAASTIKUARHITEKTID is a small Estonian landscape architecture firm specializing in the design of public spaces, parks, and urban landscapes that blend modern design with sustainable thinking. The company presents a professional online portfolio showcasing recent projects and maintains active social media channels to engage with clients and the public. The website is built on a modern WordPress platform using Elementor and Jet plugins, optimized for mobile devices and SEO. Security posture is solid with HTTPS enabled and a comprehensive cookie consent mechanism in place, though additional security headers could enhance protection. The domain registration is transparent and consistent with the business's Estonian location and timeline. Overall, the website reflects a credible, professional business with good digital maturity and compliance with privacy regulations.

T

TESRON EHITUS OÜ

tesron.ee

43

Tesron Ehitus OÜ is an Estonian construction company specializing in general contracting, project management, and design services. Founded in 2018, the company employs experienced construction professionals and emphasizes systematic, innovative, and thoughtful work. The website reflects a focused business model targeting local Estonian clients in the construction and real estate sectors, showcasing ongoing projects and company credentials. The digital presence is built on WordPress with common plugins, providing a functional and moderately optimized user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and incident response transparency are recommended. Privacy compliance is partially met with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and trustworthy, supporting the company's market position as a reliable construction service provider in Estonia.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

N

Nordecon AS

nordecon.com

52

Nordecon AS is a leading construction and real estate development company based in Estonia, with a strong market presence since 1989. The company operates in Estonia and neighboring countries including Finland, Sweden, and Ukraine. It offers comprehensive services including building and facility construction, project management, and real estate development. The company is publicly listed on the Nasdaq Tallinn stock exchange since 2006, reinforcing its market credibility. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and detailed project showcases. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, optimized for mobile and accessibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements like DNSSEC and security headers could enhance protection. Overall, the website and domain registration data align well with the company's business claims, indicating high legitimacy and trustworthiness.

M

Meriton

meriton.com.au

54

Meriton is Australia's largest apartment developer with over 60 years of experience in residential and commercial property development, sales, leasing, and management. The company has built and sold more than 79,000 apartments and hotel suites across major Australian cities. Their market position is strong, supported by a 4.5 GOLD STAR iCIRT rating and a 100% construction completion record. The website reflects a mature digital presence with comprehensive service offerings and a professional brand image. Technically, the site uses modern frameworks such as Next.js and integrates multiple third-party analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website and business demonstrate high credibility and trustworthiness.

Ritsu is an established Estonian manufacturer specializing in log houses, including glued laminated timber and round log houses, with nearly 30 years of experience and over 4000 buildings produced. The company targets customers valuing natural materials, good indoor climate, and quality craftsmanship. Their market position is strengthened by ISO 9001:2015 certification and exports to over 40 countries. The website is built on WordPress with modern UI libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, including email, phone, physical addresses, and a detailed contact form.

R

R Haldus OÜ

rhaldus.ee

45

R Haldus OÜ is a small Estonian company specializing in property management services for commercial and residential real estate. Their website presents a focused business model offering competent and quality property maintenance and management services. The site is primarily in Estonian with options for English and Russian, targeting property owners seeking professional management solutions. Technically, the website is built on the Voog CMS platform and uses common JavaScript libraries such as jQuery and Modernizr, along with Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security-wise, the website uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. There is no visible incident response or vulnerability disclosure information, which limits transparency in security matters. Overall, the website is functional but basic, with room for improvement in privacy, security, and content depth.

N

Nord Projekt

nordprojekt.ee

42

Nord Projekt is a leading Estonian architecture and engineering bureau offering comprehensive design and project management services. The company emphasizes creativity, precision, and quality across all project phases, serving clients seeking professional architectural and engineering solutions. Their market position is strong within Estonia, supported by a portfolio of notable projects and ISO 9001 certification. The website is built on WordPress with modern plugins and demonstrates good digital maturity, including multilingual support and SEO optimization. Security posture is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a professional and trustworthy business presence.

R

Rebank

rebank.lt

53

Rebank is a Lithuanian real estate and investment management company established in 2022. The website presents a basic but clean and responsive design built on the Framer platform, targeting local investors and clients interested in property and investment management. The business appears to be a small local player with a focus on real estate services. Technically, the website uses modern web fonts and is mobile optimized, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. No privacy, cookie, or terms of service policies were found, indicating compliance gaps. Contact information and incident response details are absent, limiting user trust and support options. Overall, the site is functional but requires improvements in privacy, security, and business transparency to enhance credibility and compliance.

S

Spring

springadvertising.com

62

Spring is an independent creative advertising agency based in Vancouver, Canada, established in 2005. The company offers a broad range of services including strategy, design, advertising, branding, digital, and on-demand creative services. They have a strong market presence with a focus on real estate marketing and have worked with over 100 brands across more than 70 industries. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted by Automattic Inc., ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with privacy and cookie policies including consent mechanisms. Contact information is complete and easily accessible, enhancing business credibility. Overall, the website is trustworthy and well-maintained, suitable for its target audience.

SRV Yhtiöt Oyj operates in the Finnish real estate sector, focusing on sustainable and energy-efficient construction of new residential and commercial properties. The website targets potential home buyers and commercial tenants, presenting a professional and modern digital presence built with React and Gatsby technologies. The content is relevant and well-structured, although explicit privacy and cookie policies are not found in the provided content. Security posture is limited due to lack of visible security headers and policies, and no contact information or incident response details are provided. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity in Finland. Overall, the website demonstrates a good business credibility and technical foundation but requires improvements in privacy compliance and security best practices.

L

LVM Kinnisvara

lvm.ee

46

LVM Kinnisvara is a well-established Estonian real estate company providing comprehensive property services including sales, valuation, development, and brokerage. The company operates across major Estonian cities with multiple office locations and a professional online presence. Their website is built on WordPress with modern plugins and integrates marketing and analytics tools to engage and track users effectively. Security measures such as HTTPS, CAPTCHA on forms, and cookie consent mechanisms are implemented, though some security headers could be improved. The domain registration data aligns well with the business profile, indicating legitimacy and a mature online presence.

M

MyHome OÜ

myhome.ee

42

MyHome OÜ operates a professional real estate brokerage and property management business primarily serving the Estonian market with additional offerings in Spain. The company provides services including property sales, rentals, management, and interior design. The website reflects a well-established small business with a consistent brand and a focus on quality customer service, as evidenced by testimonials and detailed property listings. The technical infrastructure is based on WordPress with common plugins and integrations such as Google Analytics, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS and some security best practices, but lacks advanced headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

S

Standard

standard.ee

46

Standard is a well-established Estonian company specializing in office and hospitality interior solutions, offering high-quality furniture and comprehensive services including design, manufacturing, and installation. The company targets B2B clients such as businesses, architects, and hotels, with a strong market presence supported by decades of experience and international exports. The website reflects a mature digital infrastructure built on WordPress, leveraging modern technologies and SEO best practices to deliver a professional user experience. Security posture is solid with HTTPS enforcement, cookie consent compliance, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a trustworthy and credible business presence with room for enhanced privacy and security disclosures.

A

Amstelhoorn Notariaat

amstelhoorn.nl

38

Amstelhoorn Notariaat is a specialized notarial service provider focusing on leasehold (erfpacht) matters in Amsterdam. The company positions itself as an expert with comprehensive process control, efficient service, and client communication. The website reflects a small-sized, niche business with a clear market focus on Amsterdam residents and entities requiring leasehold notarial services. Technically, the website is built on WordPress with standard SEO and analytics tools, including Google Analytics, Facebook Pixel, and Bing UET, indicating a moderate level of digital maturity. The site is mobile optimized and professionally designed, providing a good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

W

White Mammoth

whitemammoth.com

48

White Mammoth is a specialized visualization company focusing on architectural 3D images, animations, drone photography, and virtual reality content. Their website showcases a portfolio of exterior and interior projects, targeting architects, real estate developers, and design professionals. The company positions itself as a niche service provider in the real estate visualization market, leveraging modern web technologies such as Bootstrap and jQuery to deliver a responsive and visually appealing user experience. Technically, the website employs standard frontend libraries and Google Analytics for tracking. While the site is mobile-optimized and well-structured, it lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, although the active social media presence partially offsets this risk. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but improvements are needed in implementing security headers and formalizing privacy compliance. The overall risk is moderate, with recommendations focusing on enhancing security posture, adding privacy documentation, and clarifying domain registration details to improve trustworthiness. Strategically, White Mammoth should prioritize compliance and transparency to strengthen its market position and reassure clients about data protection and business legitimacy.

1

1Home

1home.eu

41

1Home is a regional student housing provider focusing on accommodation for international students and interns in Baltic states and Poland. The company offers freshly renovated shared apartments with services such as weekly housekeeping, fixed utilities, and high-speed Wi-Fi. The website is built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. It integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, but lacks comprehensive security headers and explicit GDPR cookie consent mechanisms. Overall, the website presents a professional and trustworthy image but could improve privacy compliance and security best practices.

V

Vecta Design

vectadesign.com

56

Vecta Design is a specialized interior solutions company focusing on stretch ceilings, lighting, acoustic, and smart air systems. Established in 2009, it positions itself as a market leader offering high-quality products and installation services to residential and commercial clients. The website reflects a professional and modern digital presence built on WordPress with WooCommerce, showcasing products and projects effectively. Technically, the site uses modern plugins and frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security practices.

S

SSH - Master Planning, Infrastructure, Building Design and Construction Supervision.

sshic.com

43

SSH is a well-established international architecture and engineering consultancy firm with a strong presence across the GCC and Middle East & Africa regions. Founded in 1961, the company offers a comprehensive range of services including building design, construction supervision, infrastructure design, and master planning. The firm is recognized as a top player in its industry, ranked 95 globally by ENR in 2024 and among the top 10 fee-earning architects in the Middle East. Their target audience includes clients seeking high-quality architectural and engineering consultancy services in the MEA region. The website reflects a professional and consistent brand image with good content quality and clear navigation.

M

Merko

merko.ee

48

Merko is a well-established Estonian construction and real estate development company with a strong regional presence in the Baltics and Norway. The company offers comprehensive construction services including building, infrastructure, and material production, serving clients seeking residential and commercial properties. Their website reflects a mature digital presence with multi-language support, detailed project portfolios, and integration of modern analytics and marketing tools. The technical infrastructure is based on WordPress CMS with common industry-standard technologies and good mobile optimization. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance. Overall, Merko demonstrates a professional and credible online presence aligned with their business operations.

P

Pro Kapital Eesti AS

prokapital.com

48

Pro Kapital Eesti AS operates as a leading real estate development company in the Baltic States, with a history dating back to 1994. The company focuses on developing residential and business quarters, emphasizing timeless design and quality. It is publicly listed on the Tallinn Stock Exchange, indicating a medium-sized enterprise with a solid market position. The website reflects a professional digital presence built on WordPress, incorporating modern tracking and consent management tools. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the company demonstrates a credible business model with clear contact information and a well-structured website.

U

United Partners Group OÜ

unitedpartners.ee

40

United Partners Group OÜ is an Estonian investment company specializing in providing growth capital to small and medium-sized enterprises in the Baltic region, with a focus on private equity and real estate sectors including commercial and residential properties. The company positions itself as a regional growth capital fund with a clear business model centered on investment and asset management. The website reflects a professional and consistent brand image, targeting investors and Baltic SMEs seeking capital for growth. Technically, the website is built on WordPress and employs modern web technologies such as lazy loading scripts and Google Fonts. The site is mobile optimized and performs moderately well, though accessibility features are basic. Hosting and domain registration are consistent with the company's Estonian location, and the domain age supports the legitimacy of the business. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. There is no incident response or vulnerability disclosure information available, which could be improved to enhance trust and security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to reduce risk and improve user confidence.