Transportation security reports

A

ACE Logistics Group AS

acegroup.ee

49

ACE Logistics Group AS is a well-established logistics company operating primarily in the Baltic states and neighboring countries. Founded in 1992, the group comprises multiple subsidiaries specializing in logistics, freight forwarding, cargo handling, sales agency, and real estate services. The company positions itself as a regional leader in logistics services, targeting businesses requiring comprehensive logistics solutions in Estonia, Latvia, Lithuania, and Ukraine. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on WordPress using Visual Composer, leveraging common libraries such as jQuery and Bootstrap. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. HTTPS is enforced, ensuring secure communications, though the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site demonstrates a solid baseline with HTTPS but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy policies exist but lack explicit GDPR consent mechanisms. The absence of terms of service and incident response contacts suggests gaps in compliance and security readiness. Overall, the website is credible and trustworthy, with a strong business presence and good technical implementation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and regulatory adherence.

A

ACE Logistics Ukraine LLC

acelogistics.ua

47

ACE Logistics Ukraine LLC is a small transportation and logistics company based in Ukraine, specializing in international freight forwarding services including road, air, and sea transport, customs brokerage, cargo insurance, and warehousing. The company targets businesses requiring efficient and professional logistics solutions with a focus on individual customer needs. Their website is built on WordPress using common plugins and libraries, providing a good user experience with clear navigation and relevant content. However, the site lacks critical compliance documentation such as privacy and cookie policies, and does not disclose security or incident response policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website uses Google Analytics and Google Tag Manager for tracking, indicating moderate user tracking without clear privacy compliance disclosures.

A

ACE Logistics Latvia SIA

ace.lv

44

ACE Logistics Latvia SIA is a medium-sized logistics and freight transportation company based in Latvia, operating as part of the ACE Logistics Group with subsidiaries in Estonia, Lithuania, and Ukraine. The company offers a broad range of transportation services including road, air, sea, and rail freight, complemented by customs documentation, warehousing, and cargo insurance. Their market position is that of an established regional player with international reach, supported by ISO 9001 and ISO 14001 certifications that demonstrate commitment to quality and environmental standards. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site performs moderately well with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers could be enhanced and legacy jQuery usage updated to reduce risk. No explicit incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance security transparency. Contact information is clearly provided, including phone numbers, email, and physical address, supporting business credibility. Overall, the site reflects a trustworthy and professional logistics provider with room for security and compliance enhancements. Strategic recommendations include implementing stronger security headers, updating legacy scripts, publishing incident response contacts and vulnerability disclosure policies, and continuing to enhance privacy compliance and user trust through transparent communication.

N

Noatum Logistics

noatumlogistics.com

63

Noatum Logistics operates as a global transport and logistics solutions provider, positioned among the top 50 freight forwarders worldwide. Their services encompass air, ocean, road, and rail freight, along with customs brokerage, warehousing, and value supply chain services. The website reflects a professional and consistent brand presence targeting businesses requiring comprehensive logistics solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and infrastructure appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security best practices.

V

VIPCars.com

vipcars.com

66

VIPCars.com operates as a global online car rental aggregator offering customers the ability to search, compare, and book car rentals from over 800 trusted suppliers worldwide. The platform targets travelers seeking affordable and convenient car rental options with benefits such as all-inclusive pricing, free cancellation, and 24/7 customer support. The company is positioned as a medium-sized transportation service provider based in the United Kingdom, with a professional and consistent brand presence supported by strong customer trust signals including high Google and Trustpilot ratings. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Microsoft Clarity for analytics and user behavior tracking. The site is mobile-optimized with lazy loading for images and uses HTTPS to secure communications. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced trust and compliance. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy perception, though the website content and business information appear professional and credible. Overall, VIPCars.com presents a well-structured, user-friendly platform with good privacy compliance and business credibility. Strategic improvements in domain registration transparency and security policy publication would further strengthen its security posture and trustworthiness.

M

Milrem Robotics

milremrobotics.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles, specializing in combat-ready robotic solutions that enhance military operational effectiveness and troop safety. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA. Their product portfolio includes multi-mission UGVs like THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy integration kits. The company actively participates in European defense projects, reinforcing its market leadership and innovation capabilities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Fluent Forms, ensuring good SEO, accessibility, and user experience. The site is mobile-optimized and uses Google reCAPTCHA to secure forms. Cookie consent mechanisms and comprehensive privacy policies demonstrate strong privacy compliance. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and use of reCAPTCHA. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting areas for improvement. No incident response or security policy information is publicly available, which could be enhanced to build trust. Overall, Milrem Robotics presents a professional, trustworthy, and technically sound online presence aligned with its business stature. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen their security and compliance posture.

A

Ahola Group

aholagroup.com

60

Ahola Group is a well-established Finnish logistics and transport company with over 70 years of experience, operating primarily in the Nordic and Central/Eastern European markets. The company offers a broad range of services including road transport, special heavy logistics, and digital logistics solutions through its subsidiaries Ahola Transport, Ahola Special, and Ahola Digital. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and a focus on sustainability and innovation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It uses Google Tag Manager for analytics and tracking, and Swiper.js for interactive UI elements. The site is mobile optimized and demonstrates good SEO practices, although accessibility features could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No security vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS registration data is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a secure and trustworthy front for a large logistics business. Strategically, Ahola Group should enhance its security posture by publishing formal security policies and incident response contacts, implementing additional security headers, and considering a vulnerability disclosure program. Improving accessibility and continuing to monitor third-party scripts for vulnerabilities will further strengthen their digital maturity and trustworthiness.

A

AS Tallink Grupp

tallink.com

65

AS Tallink Grupp operates the Tallink Silja Line ferry and cruise services across the Baltic Sea, connecting major cities such as Helsinki, Stockholm, Tallinn, Turku, and the Åland Islands. The company offers passenger transportation, cargo services, onboard entertainment, tax-free shopping, and hotel accommodations, positioning itself as a leading maritime transport provider in the Baltic region. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall trustworthiness given the professional branding and extensive external references. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

MIQ Logistics is a multinational freight forwarding and logistics company recently acquired by Noatum Logistics. The website content is minimal and primarily serves as a redirect and informational portal linking to official documents and the parent company's website. The business operates in the transportation sector with a large enterprise profile and a history dating back to 1999. Technically, the website uses basic web technologies such as jQuery and Bootstrap but lacks modern CMS or advanced SEO and accessibility features. Security posture is weak with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy compliance is poor with no privacy or cookie policies found. Contact information is limited to a single email and a whistleblowing portal link, with no phone numbers or physical addresses provided. Overall, the website appears functional but minimal, reflecting a transitional state post-acquisition.

A

ACE Logistics Estonia AS

ace.ee

48

ACE Logistics Estonia AS is a medium-sized logistics company based in Estonia, specializing in multimodal transportation services including road, air, sea, and rail transport, as well as warehousing and customs clearance. The company operates primarily in the Baltic region and Europe, with subsidiaries in Latvia, Lithuania, and Ukraine, and is part of the ACE Logistics Group. The website reflects a professional and consistent brand image, supported by ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental management. The target audience includes businesses requiring comprehensive logistics solutions across multiple transport modes. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Slider Revolution, and it employs SEO best practices and cookie consent mechanisms to comply with GDPR. Security posture is generally good with HTTPS enforced and no visible critical vulnerabilities, though some plugins may require updates to mitigate known risks. Privacy compliance is strong, with clear privacy and cookie policies and consent management. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business operations and market positioning.

T

Tallink Grupp

tallink.ee

67

Tallink Grupp operates a comprehensive ferry and cruise service primarily in the Baltic Sea region, connecting Estonia with Finland, Sweden, and other destinations. The website offers ticket booking, hotel accommodations, cargo services, and a loyalty program, targeting leisure and business travelers. The digital platform is built on modern web technologies including Next.js and React, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms implemented, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain introduces some uncertainty, but the professional presentation and consistent branding support the legitimacy of the business. Overall, the website demonstrates a mature digital presence with room for improvement in transparency around security and incident handling.

A

Ahola Digital

attracs.com

67

Ahola Digital is a specialized digital solutions provider focused on the transportation and logistics industry, operating as part of the larger Ahola Group. The company offers software and digital services aimed at modernizing and optimizing transportation operations. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B customers in the transportation sector primarily in Finland. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks some advanced security headers and explicit security policy disclosures. The absence of WHOIS data raises concerns about domain registration transparency, which should be investigated further. Overall, the site is trustworthy and professional but could enhance transparency and security documentation to improve credibility and compliance.

N

Navirec Australia Pty Ltd

navirec.com.au

60

Navirec Australia Pty Ltd operates a professional website offering advanced GPS tracking and fleet management solutions tailored for diverse industries including construction, mining, emergency services, and military sectors. The company provides hardware and software services including real-time vehicle monitoring, eco-driving analysis, and mobile applications, positioning itself as a trusted provider in the transportation technology market. The website demonstrates a mature digital presence with good SEO, structured data, and performance optimizations leveraging WordPress and Cloudflare technologies. Security posture is strong with HTTPS and no visible vulnerabilities, though the absence of security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, the site reflects a credible medium-sized business with consistent branding and trust signals such as testimonials and case studies.

S

SmartPosti

smartpost.ee

64

SmartPosti is a leading parcel delivery service in Estonia, operating under the parent company Posti Group Oyj. The company offers a comprehensive range of parcel logistics services including parcel sending, receiving, self-service management, courier home delivery, and international shipments. Their extensive network and digital platform provide customers with flexible and convenient parcel handling options. The website demonstrates a mature digital infrastructure built on modern technologies such as Next.js and Contentful CMS, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a professional and trustworthy business with strong compliance to privacy regulations and a clear market position in the transportation sector.

H

Hubert Inglin Transporte AG

inglintransporte.ch

44

Hubert Inglin Transporte AG is a Swiss transportation company specializing in transport, crane, and grapple services, serving trades such as carpenters, gardeners, metal and steel builders, and roofers. The company has over 30 years of experience, positioning itself as a reliable partner in the transportation sector. Their website provides detailed descriptions of their services and equipment, targeting businesses and professionals needing specialized transport and crane operations. Technically, the website is built using Incomedia WebSite X5 Evo CMS and employs common JavaScript libraries like jQuery and Anime.js. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the website lacks visible security headers and does not enforce cookie consent mechanisms, which are important for GDPR compliance. No incident response or security contact information is provided, indicating room for improvement in security posture. Overall, the website is professional and credible but could enhance its security and privacy compliance to better protect users and build trust.

O

OÜ Pakipoint

parcelfellows.com

56

Parcel Fellows, operated by OÜ Pakipoint, is an Estonian-based logistics platform specializing in parcel shipment services from Estonia to Europe and beyond. The company offers competitive pricing by aggregating courier services such as Omniva, Smartpost, and DPD, targeting both private individuals and business clients. Their business model leverages existing courier networks to provide a cost-effective and user-friendly parcel shipment experience, including parcel tracking and order management. The website content and branding are consistent and professional, supporting a small-sized enterprise with ambitions for international growth.

GDF is a newly established company (2024) operating in the transportation and technology sectors, specializing in GPS tracking devices and solutions for vehicles and machinery in Africa. The website presents a professional and consistent brand image with clear contact information, targeting businesses and individuals requiring GPS tracking services. The technical infrastructure is based on WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and credible but requires improvements in privacy and security disclosures to enhance trust and compliance.

G

GSMtasks

gsmtasks.com

63

GSMtasks is a mature SaaS company founded in 2015, specializing in delivery and field service management solutions. Their platform offers comprehensive task and route management, real-time tracking, and mobile applications for drivers, targeting businesses involved in logistics, transportation, and e-commerce. The website is professionally designed with good content quality and clear navigation, supporting mobile responsiveness and SEO best practices. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and integrations such as Google Analytics, Hotjar, and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site demonstrates moderate to good business credibility and technical maturity.

N

Navirec

navirec.com

57

Navirec is a Finnish-based company specializing in vehicle fleet management solutions, offering services such as GPS tracking, fuel consumption monitoring, driver behavior analysis, and digital tachograph data management. The company targets businesses with vehicle fleets, providing both hardware and software solutions accessible via web and mobile applications. The website is professionally designed, multilingual, and demonstrates a solid market presence with a domain registered since 2007. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and DNSSEC. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

N

Nordic Aviation Group

xfly.ee

44

Nordic Aviation Group is a medium-sized airline organization based in Estonia, operating multiple airline brands including Nordica and Xfly. The company provides aviation services primarily in the transportation sector, targeting airline passengers and industry stakeholders. The website content focuses on a recent bankruptcy filing, indicating significant financial distress. The company maintains a professional online presence with consistent branding and structured data, but lacks some privacy and security policy disclosures. Technically, the website is built on WordPress with modern technologies such as Bootstrap and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but could be improved with additional security headers and incident response information. Overall, the website is trustworthy and professionally maintained, but the lack of cookie consent and explicit privacy compliance mechanisms represents a compliance gap. The absence of contact emails and phone numbers on the analyzed page limits direct communication channels. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

N

Nordic Aviation Group

nagroup.ee

44

Nordic Aviation Group is a regional airline group based in Estonia, operating under brands such as Nordica and Xfly. The company provides passenger air transport services primarily in the Nordic and Baltic regions. The website presents official press releases and corporate information targeting passengers, industry stakeholders, and potential employees. The business is positioned as an important regional player with a medium-sized operational scale. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Rank Math and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and follows some best practices but lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

G

G.E.O Grupp OÜ

geogrupp.ee

39

G.E.O Grupp OÜ is an Estonian company specializing in geodesy and infrastructure design services, including construction marking, street design, and 3D modeling. Established in 2010, it serves primarily the Pärnu region and other Estonian cities such as Tartu, Narva, and Tallinn. The company positions itself as a local expert in geodetic and infrastructure project services, targeting construction firms and municipal clients. The website reflects a professional small business with clear service offerings and business registration transparency. Technically, the website is built on WordPress using the Enfold theme and several plugins including Yoast SEO and W3 Total Cache, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is adequate with HTTPS enforced and Wordfence plugin presence, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

R

Realprojektas UAB

realprojektas.lt

44

Realprojektas UAB is a well-established engineering and infrastructure design company operating primarily in Lithuania with regional presence in Estonia, Latvia, and Sweden. The company offers a broad range of services including engineering design, geodetic surveys, and project management, serving over 1000 clients with more than 20 years of experience. Their business model focuses on delivering sustainable infrastructure solutions, supported by ISO certification and memberships in relevant industry organizations. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website runs on WordPress 6.4.5 with common plugins such as WPML for multilingual support and Cookie Notice for GDPR compliance. Google Tag Manager is used for analytics and tracking. The site is served over HTTPS with good SSL configuration, though it lacks some recommended security headers. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, the absence of a published security policy, incident response contacts, and security.txt file indicates room for improvement in security transparency and readiness. The lack of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional website content. Overall, Realprojektas presents a credible and professional business front with solid technical implementation and privacy compliance. The main risk lies in the missing WHOIS data which should be investigated further. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.

S

SIA ReālProjekts

realprojekts.lv

38

SIA ReālProjekts is a Latvian project design organization specializing in transport infrastructure, geodesy, and water supply and sewage systems. With over 20 years of experience and a team comprising experts from Latvia and neighboring countries, the company has successfully completed over 1100 projects serving more than 1000 satisfied clients. The website reflects a professional and consistent brand presence targeting organizations requiring engineering design services in the Baltic region. Technically, the site is built on WordPress with standard plugins and Google Analytics integration, offering good mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the company's market position as a reliable engineering partner.

A

AS TREV-2 Grupp

trev2.ee

52

AS TREV-2 Grupp is a well-established Estonian company specializing in infrastructure construction and maintenance, including road building, traffic management, and natural resource mining. The company positions itself as a market leader in Estonia with a focus on sustainable and smart solutions to improve quality of life and safety. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and cookie compliance plugins, and integrates Google Analytics for performance tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature business with good technical infrastructure and compliance awareness.

Z

Zone Media OÜ

tarktee.ee

51

Tark Tee is an Estonian traffic and road condition information platform operated by Zone Media OÜ, providing real-time updates on traffic restrictions, roadworks, detours, and operational traffic information. The website leverages modern web technologies including Angular and Esri ArcGIS API to deliver interactive maps and data to Estonian road users. The platform targets both private drivers and commercial transport operators, serving as a key public service in Estonia's transportation sector. Technically, the site is well-structured with good mobile optimization and integration of analytics tools such as Google Analytics and Tag Manager. However, it lacks visible security headers and explicit privacy or security policies, which are areas for improvement. Overall, the site is accessible without WAF or blocking mechanisms, indicating stable hosting and domain legitimacy.

S

Sadamaregister

sadamaregister.ee

60

Sadamaregister.ee is an Estonian website dedicated to providing a comprehensive register of ports and harbors within Estonia. The platform offers a searchable database of port names and locations, targeting maritime professionals, boat owners, and the general public interested in port information. The website integrates with the Estonian state authentication service for user login, indicating an official or government-related service. The site uses modern web technologies including Vue.js and Font Awesome, and employs Google Tag Manager for analytics. While the site is mobile optimized and offers a good user experience, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, the site uses HTTPS and integrates secure login mechanisms but lacks security headers and DNSSEC, which are recommended for enhanced security. Overall, the domain registration is consistent and legitimate, supporting the website's credibility as an official maritime information resource.

E

Eesti Maanteemuuseum

maanteemuuseum.ee

53

Eesti Maanteemuuseum is a specialized museum dedicated to the history and culture of roads and transportation in Estonia. It operates as a cultural and educational institution affiliated with the Estonian Transport Administration, offering exhibitions, educational programs, and events targeted at the general public, families, and students. The website is built on Drupal 9 and incorporates modern web technologies, providing a good user experience with accessibility features and multilingual support. Social media integration and active content updates enhance engagement. Security posture is solid with HTTPS and privacy-conscious analytics, though the site lacks explicit privacy and security policies. Overall, the site is professional and trustworthy, reflecting the museum's established presence and public service role.

The website transpordiamet.ee appears to represent an Estonian transportation authority or related entity, as indicated by the domain and WHOIS data. However, the actual website content is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to any substantive content. This limits the ability to analyze the business description, services, or user-facing information. The technical infrastructure includes Cloudflare security and analytics services, indicating a modern approach to web security and performance. The WHOIS data is transparent and consistent with an Estonian registrar, supporting legitimacy. Security posture is partially observable with HTTPS and Cloudflare protection, but no detailed security policies or headers are visible. Overall, the site is currently in a blocked state, preventing a full assessment of content quality, privacy compliance, and business credibility.

V

Via 3L

via3l.eu

44

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. The company positions itself as a leading logistics service provider in the Baltic region, targeting businesses requiring efficient supply chain and transport solutions. The website reflects a medium-sized enterprise with a professional digital presence and a clear focus on logistics services. Technically, the website is built on WordPress using modern frameworks like Bootstrap and includes SEO and analytics tools such as Rank Math and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and incident response contacts. No privacy policy or terms of service were found, indicating room for compliance improvement. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness.

D

DFDS A/S

dfds.com

77

DFDS A/S operates a comprehensive European ferry travel service, offering passenger and freight ferry crossings, mini cruises, and package holidays. The company holds a strong market position as the World’s Leading Ferry Operator with multiple routes across Europe, the UK, Scandinavia, and the Baltics. Their website provides rich content, clear navigation, and a professional user experience targeting travelers and logistics customers. Technically, the site is built on modern frameworks such as React and Gatsby, with optimized performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data reduces domain registration trustworthiness, though the website content and branding strongly support legitimacy.

A

Auto & Service OÜ

auto-service.ee

42

Auto & Service OÜ is a small automotive service company based in Haapsalu, Estonia, operating since 2003. The company offers a range of automotive services including car repair, tire services, used car sales, and hand car wash. Since 2023, it has been the official Toyota service center in the region, providing factory-trained technicians and original Toyota parts, enhancing its market position and trustworthiness. The website is built on WordPress and uses common plugins and Google Analytics for tracking. It is mobile optimized and provides a basic GDPR-compliant cookie consent mechanism and privacy policy. However, no explicit contact emails or phone numbers are found on the main page, which could be improved for better customer engagement.

V

Viljandi Motokeskus

motokeskus.eu

40

Viljandi Motokeskus is a small Estonian retailer specializing in the sale and maintenance of motor vehicles including ATVs, motorcycles, scooters, and electric vehicles. The company targets local consumers and enthusiasts seeking motorized transport and related accessories. Their business model combines e-commerce with physical retail and service offerings. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO practices and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but could improve in security and privacy transparency to enhance trust and compliance.

T

TAUNEX AUTO

taunexauto.ee

41

TAUNEX AUTO is a small Estonian company operating primarily in the transportation and retail sectors, specializing in used vehicle sales, trailer rental and sales, automotive accessories, and related services. The company is based in Pärnu and operates under the parent company Lille Rent OÜ, founded in 2013. Their website reflects a local market focus with clear service offerings and contact channels. The business maintains a consistent brand presence and provides essential information such as company registration and contact details, supporting trustworthiness. Technically, the website is built on WordPress with modern plugins and libraries including jQuery, Swiper.js, and Contact Form 7, enhanced with Google reCAPTCHA for spam protection. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. Cookie consent mechanisms are implemented in compliance with GDPR, providing users with detailed control over cookie categories. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website presents a professional and trustworthy digital presence suitable for its business scale and market. Strategic improvements in security headers and transparency policies could further enhance its security posture and compliance.

K

KALASTUSPOOD OÜ

boat-service.ee

40

Boat Service Estonia, operated by KALASTUSPOOD OÜ, is a specialized e-commerce and service provider focused on marine equipment including boats, boat motors, marine electronics, and accessories. Established in 2018, the company targets boat owners and marine enthusiasts primarily in Estonia, offering sales, maintenance, rental, and winter storage services. The website demonstrates a solid market position as one of the leading marine equipment sellers in the region, supported by a professional online presence and active social media engagement. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and professionally managed, but could improve privacy and security transparency.

E

Elkdata OÜ

carsland.ee

39

Carsland is a small Estonian vehicle rental company specializing in motorhomes, caravans, vans, cars, and roof tents for travel and camping enthusiasts. The website is professionally designed using WordPress and WooCommerce, providing an online booking platform with clear navigation and good mobile optimization. The technical infrastructure leverages modern plugins and frameworks, hosted by Elkdata OÜ, an Estonian hosting provider. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to the absence of cookie consent and limited GDPR indicators. Overall, the business presents a credible and functional online presence with room for improvement in privacy and security transparency.

C

Carstop

carstop.ee

45

Carstop is an established Estonian car service network operating since 2003, providing a wide range of automotive repair and maintenance services through multiple physical workshops across Estonia. The website targets local car owners seeking professional and reliable auto repair solutions. The business model is based on a regional chain of service centers, emphasizing accessibility and professional expertise. The website content is well-structured, informative, and consistent with the brand identity, supporting a positive market position in the transportation sector.

O

Osaühing SEERSANT M & A

maservice.ee

40

Seersant M&A Service is a small Estonian company specializing in automotive repair, maintenance, and rental services, including trailers and passenger vehicles. Established in 2013, it holds a reputable market position in Rapla, evidenced by its recognition as a fast-growing 'gasell' company and positive customer reviews. The website reflects a professional digital presence built on WordPress with Elementor, offering clear navigation and responsive design. Security measures include HTTPS and Google reCAPTCHA integration, although formal privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the company demonstrates a solid business foundation with trustworthy service offerings and a good technical infrastructure.

Semako Romulad OÜ is a small Estonian company specializing in vehicle dismantling, auto repair, 24-hour roadside assistance, towing services, spare parts sales, and equipment rental. The company targets vehicle owners and businesses in Estonia requiring these transportation-related services. Their market position is local/regional with partnerships with recognized organizations such as Autolammutuste Liit and the Estonian Police and Border Guard Board. The website content is relevant and well-structured, providing clear information about services and contact details. Technically, the website uses a modern but basic tech stack including Bootstrap, jQuery, Flexslider, and Google Analytics. The site is mobile-optimized and performs moderately well. Hosting and domain registration are consistent with the business location, registered through Zone Media OÜ in Estonia. However, no CMS is explicitly detected, and accessibility features are basic. From a security perspective, the website uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure policies are found. The site uses Google Analytics for tracking, with moderate user tracking levels but limited privacy compliance. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and formalized policies to increase trust and regulatory adherence.

STIK AS is an Estonian automotive service company specializing in vehicle dismantling, repair, maintenance, and parts sales. Operating multiple locations across Estonia including Rakvere, Paide, Tallinn, and Roosna-Alliku, the company serves a regional market with a focus on passenger cars, vans, SUVs, and commercial vehicles. Their services include accident repairs, painting, glass sales and replacement, tire services, and official dealership representation for Ford and Mazda in Lääne-Virumaa. The website reflects a medium-sized business with a service-oriented business model targeting vehicle owners and operators in Estonia. Technically, the website uses older JavaScript libraries such as jQuery 1.8.2 and integrates Google Analytics and Google Tag Manager for tracking. The site appears to be custom-built or uses a non-mainstream CMS, with basic mobile optimization and accessibility features. SEO is basic with minimal meta descriptions and no structured data markup. The site is accessible without WAF or blocking mechanisms. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which may expose it to vulnerabilities. There are no visible privacy or cookie policies, nor incident response contacts, indicating gaps in compliance and security posture. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website scores moderately on content quality, technical implementation, and business credibility but scores low on privacy compliance and security posture. Strategic improvements in updating technology, implementing security best practices, and adding privacy policies would enhance trust and compliance.

Mameta OÜ is a small Estonian automotive service provider specializing in vehicle repair, trailer services, and roadside assistance. Established in 2010, the company serves local customers with a focus on passenger cars, SUVs, and vans. Their website provides clear descriptions of services and contact information but lacks formal privacy, cookie, or security policies. Technically, the site uses older web technologies such as jQuery 1.11.1 and Bootstrap 3.3.6, with some resources loaded insecurely over HTTP, indicating a need for modernization and improved security practices. The absence of HTTPS and security headers reduces the site's security posture. Overall, the business appears legitimate and stable, but the website requires significant improvements in security and privacy compliance to meet modern standards.

K

Kasse Paadid OÜ

kasse.ee

40

Kasse Paadid OÜ is a small Estonian boat manufacturer specializing in rowboats, motorboats, and fishing boats, with a history dating back to 1994. The company operates primarily in the transportation sector, targeting boating enthusiasts and customers in Estonia and nearby regions. Their website presents a professional and consistent brand image, offering product information, contact details, and social media links. Technically, the site is built on WordPress 4.7.29 with several plugins and uses jQuery 1.12.4, indicating some technical debt and potential security risks due to outdated software. The website is accessible, mobile responsive at a basic level, and has clear navigation, but lacks modern SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and outdated components. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is functional and credible but requires updates and enhancements to improve security and compliance.

M

ML Autoservice OÜ

mlauto.ee

39

ML Autoservice OÜ is a small Estonian automotive service provider based in Kuressaare, Saaremaa. The company offers a broad range of vehicle repair and maintenance services including passenger cars, vans, trucks, body and paint works, tire services, parts sales, and official servicing for Honda and Volkswagen brands. Their market position is that of a local trusted service provider with a clear focus on automotive maintenance and related services. The website is built on WordPress with common plugins and uses Google Analytics for visitor tracking. The technical infrastructure is standard for small business websites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

V

Vana-Võidu Autokeskus OÜ

vvautokeskus.ee

40

Vana-Võidu Autokeskus OÜ is a small Estonian automotive service company established in 1996, specializing in car repair, maintenance, tire services, and trailer repair and sales. The company operates locally near Viljandi and targets vehicle owners requiring these services. The website is built on the Voog CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized with good design and navigation, providing clear business and contact information. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in privacy and security transparency.

P

PoolQ OÜ

poolq.ee

38

PoolQ OÜ is a small Estonian company specializing in the sale, maintenance, repair, and rental of Tiki and Respo trailers, as well as automotive locksmith and repair services for cars and small vans. The company operates primarily in Pärnu and is an official Autoasi representative, positioning itself as a local trusted service provider in the transportation sector. The website reflects a focused business model targeting vehicle owners and businesses requiring trailer and vehicle services. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Bootstrap, offering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Elkdata OÜ

boatworld.ee

40

BoatWorld, operated by Elkdata OÜ, is an established Estonian business specializing in the sale of boats, motors, and related marine equipment, complemented by workshop services and financing options. The website is built on a modern WordPress WooCommerce platform, leveraging performance optimizations and structured data to enhance user experience and SEO. The business targets consumers and businesses interested in marine and motorized recreational vehicles within Estonia and the Baltic region. The domain age and WHOIS data confirm a legitimate and consistent business presence since 2010. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, functional, and trustworthy but would benefit from enhanced privacy and security transparency.

M

Motohoov

motohoov.ee

41

Motohoov is a small Estonian business specializing in motorcycle gear, stylish riding apparel, and maintenance services. Established in 2010, it operates a WordPress-based website that serves as a digital storefront and information portal for motorcycle enthusiasts in Estonia. The website is well-structured with good SEO practices and provides a cookie consent mechanism compliant with GDPR regulations. The business targets local motorcycle riders and offers key services including retail sales, spare parts ordering, and servicing. The site integrates Google Analytics for visitor tracking and uses modern web technologies such as Elementor and Yoast SEO plugins.

P

Paadilaenutus OÜ

paadirent.ee

41

Paadilaenutus OÜ is a small Estonian company specializing in boat rentals, sales, and maintenance, with additional offerings in waste container sales and guided nature excursions. The company has a solid local market position with partnerships with Latvian boat manufacturers and a focus on nature tourism along the Emajõgi river. The website content is informative but presented with outdated design and technical infrastructure, lacking modern web standards and mobile optimization. Security posture is weak, with no HTTPS enforcement, missing security headers, and absence of privacy or cookie policies, exposing the site to compliance and security risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

A

Atlante OÜ

atlante.ee

43

Atlante OÜ operates the Atlante Autokeskus website, providing a comprehensive range of vehicle-related services in Tartu, Estonia, including vehicle sales, rentals, maintenance, and repair. The company has a well-established presence since 2003 and offers additional services such as office space rental and cooperation with insurance companies. The website is built on WordPress with WooCommerce, employing modern plugins and technologies to deliver a functional and visually appealing user experience. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS and reCAPTCHA integration, but could be improved by adding security headers and formal security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

Aspo Plc

aspo.com

62

Aspo Plc is a Finnish conglomerate specializing in demanding B2B customers, operating primarily in Northern Europe and selected growing markets. The company owns and develops businesses in sectors including shipping (ESL Shipping), food industry solutions (Leipurin), and industrial supplies and logistics (Telko). Aspo positions its subsidiaries as market leaders, focusing on sustainable and long-term value creation. The website reflects a professional corporate presence with comprehensive investor relations, governance, and sustainability information. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as jQuery, Highcharts, and Slick Carousel. It integrates Google Analytics and Google Analytics 4 for visitor tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional and consistent website content. Overall, Aspo Plc's website presents a credible and professional business front with room for improvement in security best practices and transparency regarding domain registration and incident response.