Security Directory

V

VSIA Traumatoloģijas un ortopēdijas slimnīca

tos.lv

43

VSIA Traumatoloģijas un ortopēdijas slimnīca is a specialized Latvian hospital providing comprehensive traumatology and orthopedic medical services including emergency care, diagnostics, surgery, rehabilitation, and telemedicine. The hospital holds an ISO 9001 quality certification, indicating a commitment to quality management and continuous improvement. The website targets patients in Latvia and offers detailed information about services, news, and job vacancies, reflecting an active and professional healthcare institution. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with responsive design and multimedia content to enhance user experience. However, some areas such as privacy and cookie policies are lacking, and security headers are not evident, which could be improved to strengthen compliance and security posture. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security practices.

M

MikroTik

mikrotik.com

69

MikroTik is a well-established technology company specializing in networking hardware and software solutions, serving a global market including ISPs, enterprises, and network professionals. Their product portfolio includes routers, switches, wireless devices, and RouterOS software, complemented by official training and certification programs. The company has a strong market presence and a consistent brand identity, supported by a long domain history dating back to 1999. Technically, the website employs a modern responsive design using Foundation 5 framework and jQuery, with good mobile optimization and SEO practices. The site is accessible without any WAF or blocking mechanisms, indicating stable hosting and infrastructure. However, some technical improvements could be made, such as enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks advanced security headers and explicit GDPR compliance in its privacy policy. No cookie consent mechanism or vulnerability disclosure policy is present, which are areas for improvement. Contact information is limited to an email address and social media links, with no phone or physical address provided. Overall, the website is professional, trustworthy, and functional with a good balance of content and technical implementation. Strategic enhancements in privacy compliance and security best practices would further strengthen its security posture and user trust.

B

B Communications

bcommunications.com

55

B Communications is a small, family-owned telecommunications service provider specializing in low voltage cabling based in California, established since 1982. The website presents a professional and consistent brand image with good content quality focused on their core service offering. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Gravity Forms, hosted by GoDaddy, and uses HTTPS with a moderate performance profile. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is adequate with HTTPS and domain registration protections but could be improved by enabling DNSSEC and adding security headers. No contact emails, phone numbers, or social media links were found in the provided content, limiting direct communication channels. Overall, the domain registration is consistent with the business history, indicating legitimacy.

Z

Zeew delivery scripts

zeew.eu

66

Zeew.eu is a European-based technology company specializing in white-label delivery system software for food, grocery, pharmacy, and home services businesses. The company offers SaaS and source code licensing models targeting startups, chains, and marketplaces, enabling rapid deployment of AI-powered delivery platforms. Their market position is strong with presence in over 100 countries and notable clients such as OLM Foods. Technically, the website is built on WordPress with modern plugins and tracking tools, demonstrating good digital maturity. Security posture is solid with HTTPS and some security best practices, though explicit security policies and headers could be improved. Privacy compliance is basic with cookie policies present but lacking full consent mechanisms. Overall, the website is professional and trustworthy but could enhance transparency and compliance documentation.

F

Fontes

fontes.lv

57

Fontes.lv is a Latvian-based company specializing in leadership and competence assessment, personnel selection, organizational development, and coaching services. The website presents a professional and well-structured digital presence, offering a wide range of HR-related consulting services targeted at businesses and organizations seeking to improve leadership and workforce quality. The site is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and maintainable technical infrastructure. The presence of multilingual support (Latvian and English) enhances accessibility for a broader audience. Security-wise, the website uses HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. WHOIS data could not be retrieved due to query limits, limiting domain registration transparency. Overall, the site is functional, professional, and moderately secure, with room for improvement in privacy compliance and security best practices.

M

MeaWallet

meawallet.com

54

MeaWallet is a Norway-based digital payment solutions provider specializing in secure tokenization, mobile wallets, push provisioning, and digital cards. The company targets card issuers and merchants, offering a modular platform certified by major card schemes such as Mastercard, Visa, American Express, and eftpos. Their website reflects a mature business with over 10 years of industry experience, showcasing partnerships and client logos that reinforce their market position. Technically, the site is built on HubSpot CMS with modern analytics and marketing tools integrated, providing a good user experience and mobile optimization. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, which should be verified for full trust. Overall, MeaWallet presents as a credible and professional business in the fintech space with room for minor security and transparency enhancements.

O

OMD

omd.lv

75

OMD is a global media agency specializing in creative, cultural, and commercial media solutions aimed at transforming businesses. The company positions itself as a leader in media strategy and planning, targeting businesses seeking innovative media approaches. The website reflects a mature digital presence built on WordPress with modern tools and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional website and corporate email domain affiliation support legitimacy. Overall, the site is well-designed, accessible, and compliant with privacy regulations, making it a credible digital asset for the business.

U

Unimar, Inc.

unimar.com

68

Unimar, Inc. is a well-established company specializing in FAA obstruction lighting and tower lighting solutions, serving industries such as energy and transportation. The company offers a range of products and services including custom FAA obstruction lighting design, certified lighting system installation, hazardous location controls, and IoT-based obstruction light monitoring. Their market position is strong, supported by certifications such as UL, ATEX, GOST, and FAA, and a long domain history dating back to 1997. The website is professionally designed on the Shopify platform, providing a good user experience with clear navigation and mobile optimization. Technically, the site uses modern e-commerce technologies and integrates analytics and marketing tools effectively. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance mechanisms like cookie consent are lacking. Contact information is available primarily via phone and contact forms, with active social media presence on Twitter and LinkedIn. Overall, the site reflects a credible and trustworthy business with room for improvement in privacy compliance and security transparency.

P

Public ID - Agence de Communication Créative

public-id.fr

44

Public ID is a creative communication agency based in Lille, France, specializing in graphic identity, logo design, website development, print and web graphic creations, emailing campaigns, SEO audits, and event management. The agency targets businesses and organizations seeking tailored communication solutions and has established a portfolio with notable clients, indicating a solid regional market presence. The website is built on WordPress using modern plugins and frameworks, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though security headers and formal policies are lacking. The absence of WHOIS data reduces transparency but the website content and client testimonials support legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding a vulnerability disclosure mechanism to enhance trust and compliance.

F

Firnas Shuman

ercc-carbon.com

51

Firnas Shuman is a consulting and technical services company specializing in power generation and transmission infrastructure across Africa, the Middle East, and Central Asia. The company has a significant footprint, having contributed to over 10,000 MW of power generation capacity in more than twenty-five countries. The website reflects a professional corporate presence with clear business focus and geographic reach. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Mailchimp integration, indicating a moderate level of digital maturity. However, the site lacks advanced security configurations such as DNSSEC and security headers, and does not disclose privacy or cookie policies, which are critical for compliance and user trust. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The domain registration is consistent with the business history, showing legitimacy and stability. Strategic recommendations include enhancing security practices, publishing comprehensive privacy and cookie policies, and improving incident response transparency.

Ideaport Riga presents itself as a specialized provider of AI-driven CRM solutions focusing on Salesforce and Siebel platforms. The website content is professionally crafted, targeting businesses seeking to enhance their CRM capabilities with AI technologies. The technical infrastructure leverages HubSpot CMS and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital marketing approach. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. Overall, while the business proposition is clear and the website is functional and well-designed, the lack of registration and compliance information introduces risk factors that should be addressed.

T

The Institute of Internal Auditors

theiia.org

68

The Institute of Internal Auditors (The IIA) is a globally recognized professional association dedicated to supporting and advancing the internal audit profession. Headquartered in Lake Mary, Florida, The IIA offers a comprehensive suite of services including membership, professional certifications such as the Certified Internal Auditor (CIA), educational resources, standards, and quality assurance services. The organization positions itself as the authoritative voice and principal educator for internal auditors worldwide, serving a large and diverse audience of audit, risk, and compliance professionals. Technically, the website demonstrates a mature digital infrastructure leveraging modern web technologies and analytics tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Azure Application Insights. The site is built on the Episerver CMS platform, optimized for mobile devices, and incorporates accessibility and SEO best practices. The presence of multiple tracking and advertising scripts indicates a sophisticated approach to user engagement and marketing. From a security perspective, the site enforces HTTPS, employs reputable analytics and advertising services, and shows no signs of exposed sensitive data or vulnerabilities in the visible content. While explicit security headers are not fully visible in the HTML, the overall posture is strong. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms and GDPR adherence. Overall, The IIA website reflects a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data limits domain registration insights, but the website's content, branding, and external linkages strongly support its legitimacy. Strategic recommendations include enhancing visible security headers, continuous monitoring of third-party scripts, and maintaining transparency in advertising practices to further strengthen trust and compliance.

F

Finance Strategists

blueorangebank.com

72

Finance Strategists is a specialized financial content publisher focusing on providing detailed reviews and insights into financial products and services, including banking and financial advisory. The website reviewed here focuses on BluOr Bank, an online bank based in Latvia, highlighting its innovative offerings and security features. The company targets consumers and professionals interested in financial services, primarily in the US but with international relevance. The business model appears to be content publishing with affiliate marketing components, supported by advertising networks and analytics tools. Technically, the website employs modern front-end technologies such as Tailwind CSS, Font Awesome, and integrates multiple advertising and tracking services including Google Analytics and AdThrive. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and consent management platforms to comply with GDPR, but lacks explicit security policy or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the professional presentation and content quality suggest legitimate operations. Overall, the website scores well in content quality, technical implementation, and security posture, but business credibility is slightly impacted by missing domain registration details.

B

Biedrība “Sabiedrība par atklātību – Delna”

delna.lv

59

Biedrība “Sabiedrība par atklātību – Delna” is a Latvian non-profit organization dedicated to promoting transparency and combating corruption. Established in 1998 as the Latvian chapter of Transparency International, Delna operates primarily in Latvia with a focus on public sector and civil society engagement. The organization offers services including advocacy, public awareness campaigns, whistleblowing support, and educational initiatives. Their market position is that of a recognized NGO with international ties, targeting government, NGOs, and the general public. Technically, the website is built on WordPress with modern web technologies such as Google Tag Manager, reCAPTCHA v3, and Mailchimp integration for newsletters. The site is mobile-optimized and provides multilingual support. Performance is moderate with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms. However, explicit security headers like CSP and X-Frame-Options are not clearly present, and no dedicated security or incident response policies are published. The site includes a cookie consent banner and privacy policy indicating GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, though WHOIS data is unavailable due to query limits, slightly reducing trust score. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date CMS and plugins to mitigate vulnerabilities.

P

Prizma Mediation

prizma.nl

36

Prizma Mediation is a small Dutch company specializing in mediation, coaching, and conflict resolution services primarily focused on workplace and team environments. The company presents itself as a certified mediator with MfN accreditation, targeting individuals and organizations seeking sustainable conflict solutions. The website is built on WordPress using a premium theme and common plugins, providing a moderate level of technical maturity with good mobile optimization but basic content quality and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and security hardening.

J

Jānis Roze

jr.lv

66

Jānis Roze is a well-established Latvian retail company specializing in books, stationery, and office supplies, operating a professional e-commerce platform targeting local consumers and businesses. The website demonstrates a solid technical infrastructure built on Magento with modern web technologies and performance optimizations. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is generally good with HTTPS enforcement, security headers, and monitoring tools like New Relic, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. The absence of WHOIS data limits full domain trust assessment but the website content and technical indicators suggest a legitimate and professional business. Overall, the site is functional, secure, and compliant with relevant regulations, serving its target market effectively.

E

Eurelectric

eurelectric.org

51

Eurelectric is a prominent sector association representing the European electricity industry, advocating for a carbon-neutral and energy-independent future. The organization serves over 3500 utilities across Europe, providing policy advocacy, publications, events, and data services to accelerate the energy transition. The website reflects a mature digital presence with comprehensive content tailored to industry stakeholders and policymakers. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Algolia Search. The site is well-optimized for SEO, mobile responsiveness, and accessibility, ensuring a positive user experience. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, employs security headers, and includes a cookie consent mechanism compliant with GDPR. No exposed sensitive data or vulnerabilities were found. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, Eurelectric's website demonstrates a strong business and technical foundation with good security and privacy practices. Strategic enhancements in security transparency and direct contact information could further strengthen its posture and stakeholder confidence.

S

senserobotchess

senserobotchess.com

67

SenseRobot is an e-commerce business specializing in AI-powered robotic board games including Chess, Go, Gomoku, and Xiangqi. The company positions itself as the official AI provider of the European Chess Union, targeting enthusiasts, learners, and educational institutions. Their products feature advanced robotics and AI capabilities to enhance learning and play experiences. Technically, the website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools such as Klaviyo and Facebook Pixel. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable concern, potentially indicating a very new domain or privacy protection, which slightly impacts trust. Overall, the website is professional and functional, but improvements in transparency and security policies are recommended.

P

ParaVolley EUROPE - Sitting & Standing Volleyball in Europe

paravolley.eu

51

ParaVolley Europe is a regional sports organization dedicated to promoting and organizing sitting and standing volleyball competitions across Europe. The website serves as a hub for news, competitions, and member federations, targeting athletes, sports enthusiasts, and stakeholders in the ParaVolley community. The organization positions itself as a key promoter of inclusive sports within the European region. Technically, the website is built on a modern stack using Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and incorporates popular libraries such as Swiper.js and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

W

Webbpartner AB

mediapaper.se

44

MediaPaper is a Swedish company specializing in converting traditional print materials such as PDFs into interactive digital publications. Their platform offers an easy-to-use SaaS solution that enables users to quickly digitize and distribute content optimized for multiple devices. The company targets businesses and individuals seeking to enhance their print materials with interactive features like clickable links and embedded videos. The website is professionally designed, mobile-optimized, and provides clear contact information, reflecting a credible and customer-focused business. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and integrates third-party marketing and analytics tools such as Google Analytics and Leadfeeder. Security posture is good with HTTPS enabled and secure form handling, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism and a cookie policy page, but no explicit privacy or security policies are found. WHOIS data for the exact domain is unavailable, suggesting the domain may be a subdomain or registered differently, which slightly impacts trust but does not detract from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and improving accessibility features.

W

Women Sports – Femmes et Sports – Sport au féminin

womensports.fr

44

Women Sports is a French media platform dedicated to women's sports, offering news, results, interviews, and a magazine subscription service. The website targets French-speaking sports enthusiasts, particularly women interested in female athletes and sports culture. It operates under the Sport & Sponsoring Media Group and maintains a subsidiary focused on African content. Technically, the site is built on WordPress with modern plugins and uses Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and Google reCAPTCHA is implemented, but the absence of security headers and missing WHOIS data slightly reduce trust. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is professional and trustworthy but could improve security posture and transparency.

The website kaitsealad.ee serves as the official online presence for Matsalu National Park, managed by the Estonian Environmental Board (Keskkonnaamet). It provides comprehensive information about the park's natural features, cultural heritage, and international recognitions, positioning itself as a key governmental resource for environmental conservation and sustainable tourism in Estonia. The site targets nature enthusiasts, researchers, tourists, and local communities, offering detailed visitor information and educational resources. Technically, the site is built on Drupal 10 with modern web technologies, ensuring good mobile optimization, accessibility, and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and well-aligned with its governmental mission.

A

AERMEC

aermec.fr

50

AERMEC is a well-established French company specializing in HVAC solutions, particularly terminal units and chillers. With over 55 years of experience and a strong market position, it serves diverse sectors including residential, commercial, industrial, and data centers. The website reflects a mature digital presence with detailed regional contacts and product information. Technically, the site uses Joomla CMS with modern front-end frameworks and includes standard security measures such as HTTPS and CAPTCHA-protected forms. However, there is room for improvement in security headers and explicit security policies. Privacy compliance is addressed with cookie consent and a privacy policy accessible via legal mentions. Overall, the site demonstrates good business credibility and technical implementation, suitable for its industry and audience.

K

Kambja Valla Sõnumid

kambja.info

46

Kambja Valla Sõnumid is a local news portal serving the Kambja municipality in Estonia, providing news, events, cultural, and educational content targeted at local residents and stakeholders. The website is built on WordPress CMS with a variety of plugins to manage events and content, indicating a moderate level of digital maturity. The site is well-branded with consistent use of municipality logos and maintains a presence on major social media platforms, enhancing community engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and privacy compliance documentation. The absence of WHOIS registrant data reduces domain trustworthiness, although the website content aligns with a legitimate local government news source. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a security.txt file to improve transparency and compliance.

V

Visit Elva

visitelva.com

48

Visit Elva operates as a regional tourism information portal focused on promoting the Elva area in Estonia. The website provides visitors with information on local attractions, events, accommodation, dining, and active leisure opportunities. It targets tourists and visitors seeking authentic experiences in the Elva region, positioning itself as a key resource for regional tourism promotion. The business model centers on providing curated content and event promotion to enhance visitor engagement and regional visibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the business location and purpose. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks DNSSEC and advanced security headers, which could enhance its security posture. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and readiness. Overall, Visit Elva presents a professional and trustworthy online presence with solid content and technical foundations. Strategic enhancements in security policies, DNS security, and incident response disclosures would further strengthen its risk management and compliance posture.

A

Aermec S.p.A.

aermec.com

60

Aermec S.p.A. is a well-established international company specializing in air conditioning solutions and green technologies. The company positions itself as a leading global brand with a broad international presence, supported by multiple subsidiaries across Europe, North America, and Latin America. The website reflects a professional corporate identity with multilingual support and clear business information, targeting international customers and partners in the energy and HVAC sectors. Technically, the website is built on WordPress with common plugins and libraries, offering a moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers implementation. Security posture is adequate with HTTPS implied, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and functional but would benefit from enhanced security and privacy transparency.

W

Discover the beauty of vineyards and indulge in exquisite wine experiences with WineTourism.com. Plan your perfect winery adventure today! | Winetourism.com

winetourism.com

71

WineTourism.com is an online platform dedicated to providing information and planning tools for wine tourism enthusiasts. The website offers resources to discover local wineries, learn about wine regions, and plan winery adventures. It targets wine lovers and travelers interested in wine experiences, positioning itself as a niche hospitality service provider. The platform uses modern web technologies including Google Tag Manager, Google Analytics, and Font Awesome, ensuring a visually appealing and moderately optimized user experience. Mobile responsiveness and SEO practices are adequately implemented, contributing to good content accessibility and navigation. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy and business credibility, which impacts overall trust. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact and incident response information to improve compliance and user trust.

E

Eurochild AISBL

eurochild.org

55

Eurochild AISBL operates as the largest network of organizations and individuals dedicated to child rights advocacy across Europe. Founded in 2003 and headquartered in Belgium, Eurochild focuses on influencing policies, building civil society capacity, and facilitating knowledge exchange underpinned by the UN Convention on the Rights of the Child. The website reflects a mature digital presence with a WordPress CMS, modern front-end libraries, and a moderate performance profile. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and GDPR-compliant cookie consent, though improvements are recommended in DNSSEC and security headers. Overall, the organization demonstrates high legitimacy and trustworthiness with consistent WHOIS data and active social media engagement.

C

CoreIT

coreit.se

65

CoreIT is a Swedish IT company providing a comprehensive range of IT services targeting businesses and organizations. The website is built on a modern WordPress platform using Elementor, indicating a moderate level of digital maturity. The site features good design quality, mobile responsiveness, and SEO optimization, supporting a positive user experience. However, the absence of WHOIS data for the exact domain queried limits the ability to fully verify domain legitimacy and business registration details. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Tracking technologies such as Facebook Pixel and LinkedIn Insight are used, indicating moderate user tracking. Overall, the website presents a professional front but would benefit from enhanced transparency and security practices.

K

Keep.eu

keep.eu

48

Keep.eu is a specialized platform providing aggregated information on Interreg and IPA-IPA cross-border projects, partners, and programmes. It serves governmental and non-profit organizations involved in cross-border cooperation by consolidating operational and financial data in one accessible location. The website leverages a WordPress CMS with modern JavaScript libraries and integrates Google services such as Maps and Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks comprehensive privacy and security policies, which are critical for compliance and trust. Overall, the platform is functional and professionally presented but would benefit from enhanced transparency and security documentation.

P

PHORIA

phoria.com.au

60

PHORIA is a specialized XR studio based in Australia, focusing on emerging immersive technologies such as Augmented Reality, Virtual Reality, and Mixed Reality. The company positions itself as an award-winning provider crafting impactful stories and experiences using cutting-edge XR technologies. Their target audience includes businesses and organizations seeking innovative immersive solutions. The website reflects a professional and modern digital presence with good design quality and mobile optimization. Technically, the site employs a variety of modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Segment Analytics, indicating a mature digital marketing strategy. Security-wise, the site benefits from HTTPS and uses secure third-party scripts but lacks explicit security headers and formal security policies, which are recommended for improvement. The WHOIS data is incomplete and malformed, which raises some concerns about domain registration transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy, security disclosures, and clearer contact information to improve trust and compliance.

E

ENGSO Youth

engsoyouth.eu

70

ENGSO Youth is a European non-profit organization dedicated to empowering youth in grassroots sports. Founded in 2002, it serves as the independent youth body of the European Sports NGOs, advocating for youth rights and inclusion in sports. The organization operates through multiple working groups and projects focusing on education, employability, sport diplomacy, health, social inclusion, and sustainable development. It maintains partnerships with prominent European and international institutions, enhancing its credibility and influence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a cookie consent mechanism, which are important for compliance and protection. No critical vulnerabilities or suspicious activities were detected. Overall, ENGSO Youth presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security hardening would further enhance its posture.

U

Uma Mekk

umamekk.ee

44

Uma Mekk is a regional food brand based in Estonia, specifically targeting the Vana-Võromaa area. The website serves as a platform for local food and beverage producers to obtain branding and certification under the Uma Mekk trademark. The business model focuses on promoting local food products and supporting regional producers. The website is built on WordPress using the Divi Builder and Bootstrap framework, indicating a modern and maintainable technical infrastructure. SEO is enhanced with Yoast SEO and structured data, improving search visibility. The site is mobile optimized and includes cookie consent mechanisms, reflecting awareness of privacy regulations. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are absent. Tracking via Google Analytics and Facebook Pixel is present, indicating moderate user data collection. Overall, Uma Mekk presents a credible and professional online presence for a small regional food brand.

The website kose.ee serves as a simple informational portal for Kose vald, a local government municipality in Estonia. It primarily functions as a redirect and contact hub linking users to the official Kose vald website (kosevald.ee) and its Facebook page. The site provides basic contact information including official email addresses and phone numbers but lacks comprehensive privacy, cookie, or terms of service policies. The content is minimal and targeted at residents or stakeholders seeking municipal information. Technically, the site is built on WordPress using common libraries such as jQuery, Bootstrap, and Font Awesome. Hosting appears to be managed by Zone Media OÜ, an Estonian registrar and hosting provider. The site uses HTTPS with good SSL configuration but lacks advanced security headers and modern privacy compliance features. Mobile optimization and accessibility are basic but functional. From a security perspective, the site shows moderate maturity with HTTPS enabled but no visible security policies or incident response contacts. No forms or user data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices, which is a risk for a government entity. Overall, the website is legitimate and consistent with its stated purpose but would benefit from enhanced security practices, privacy compliance, and improved user experience to better serve its audience and meet regulatory requirements.

A

Adrenaator Grupp

adrenaator.ee

40

Adrenaator Grupp operates the website adrenaator.ee, providing adventure and outdoor experiences such as canoe trips, hiking, and team events primarily in the Aidu quarry area in Estonia. The company targets families, friends, and corporate groups seeking unique adventure activities. The business is positioned as a niche local provider with a focus on experiential tourism and event hosting. The website is built on WordPress with modern SEO and GDPR compliance plugins, indicating a moderate level of digital maturity. Technical infrastructure includes Google Analytics and Tag Manager for tracking, and the site is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional and trustworthy with room for improvement in security and contact transparency.

H

Haridus- ja Teadusministeerium (EENet)

elurikkus.ee

44

eElurikkus is a government-backed public portal aggregating biodiversity data for Estonia, integrating scientific, monitoring, and citizen science datasets. It serves researchers, environmental agencies, and the public by providing access to species taxonomy, occurrence records, and monitoring projects. The platform is built on the PlutoF biodiversity data infrastructure and collaborates with global partners like GBIF. Technically, the website uses modern JavaScript libraries such as Leaflet for mapping and Google Analytics for user tracking. The site is mobile-optimized with a clear navigation structure and good content relevance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy links. Overall, the site is trustworthy and professionally maintained, reflecting its governmental and research affiliations.

K

Keskkonnaagentuur

keskkonnaportaal.ee

53

Keskkonnaportaal.ee is an Estonian government environmental data portal managed by Keskkonnaagentuur. It consolidates key environmental datasets and information to provide quality and up-to-date data for environmental stakeholders and the public. The portal uses Drupal 10 CMS and integrates modern frontend libraries and Google Tag Manager for analytics. The website is well-structured, mobile-optimized, and provides clear navigation through extensive environmental themes and data sources. Security posture is solid with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the site is credible, professional, and trustworthy, serving as a key government resource for environmental information in Estonia.

K

Keskkonnaagentuur

loodusveeb.ee

55

Loodusveeb is an official Estonian governmental environmental information portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides comprehensive information on Estonia's nature, biodiversity, ecological themes, citizen science projects, and environmental education. The website targets Estonian residents, environmental enthusiasts, researchers, and volunteers, serving as a trusted source for nature-related data and public engagement. Technically, the site is built on Drupal 10 with modern libraries and includes a cookie consent mechanism compliant with EU regulations. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the governmental nature of the site. Overall, the website is professional, trustworthy, and well-positioned as a governmental environmental resource.

M

Metana Digiagentuur

metana.eu

47

Metana Digiagentuur is a small digital agency based in Tallinn, Estonia, specializing in website design, email marketing, and digital advertising services such as Meta Ads and Google Ads. The company targets businesses seeking comprehensive digital marketing and web development solutions. Their website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures.

Ida-Virumaa Omavalitsuste Liit is a regional government association serving the municipalities of Ida-Virumaa, Estonia. The website provides comprehensive information on governance, development strategies, programs, projects, education, public health, safety, culture, and visa-related matters. It targets local residents, government officials, and stakeholders interested in regional development. The organization operates as a small-sized government entity founded in 2010, with a clear focus on regional coordination and public service. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Font Awesome. The site is hosted by Elkdata OÜ, consistent with the WHOIS data. The website is mobile-optimized and provides a good user experience, although some technical aspects like the use of an outdated jQuery version and lack of security headers indicate areas for improvement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate automated abuse. However, the absence of security headers and outdated JavaScript libraries present potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and improved privacy compliance to align with modern standards and regulations.

P

Peetri Kool

peetrikool.ee

38

Peetri Kool is a small educational institution located in Estonia, providing primary and kindergarten education services to the local community. The website serves as an informational portal offering details about school schedules, staff, admission, and extracurricular activities. The site is built on WordPress using the Education Hub theme and integrates basic modern web technologies such as jQuery and Font Awesome. Hosting appears to be managed by Elkdata OÜ, a local Estonian provider. The website is accessible, mobile-optimized, and includes clear navigation but lacks comprehensive content on the homepage. Security posture is moderate with HTTPS enabled but missing important security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Analytics are handled via plausible.io, indicating a privacy-conscious approach but without explicit consent mechanisms.

P

PÕLTSAMAA KODANIK MTÜ

poltsamaaraadio.ee

41

Põltsamaa Raadio is a small, community-driven seasonal radio station operated by local youth in the Põltsamaa region of Estonia. It broadcasts both online and on FM frequency 95.0 MHz, supported by project funding from the LEADER program to enhance broadcast reach. The website serves as a portal for live streaming, program schedules, and community engagement, targeting local listeners and supporters. The business model relies on volunteer efforts, donations, and local sponsorships. Technically, the site is built on WordPress with Elementor and several plugins for podcasting and streaming, hosted by Zone Media OÜ. The site is mobile responsive and uses modern web technologies, though performance is moderate. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy for its community media purpose but would benefit from improved privacy and security practices.

K

Kihnu Muuseum

kihnumuuseum.ee

43

Kihnu Muuseum is a small cultural heritage museum located in Estonia, dedicated to preserving and presenting the unique Kihnu heritage culture. The museum operates both physical exhibitions and virtual tours, offering educational workshops, group visits, event organization, and guided services. The website is built on WordPress using the OceanWP theme and Elementor page builder, hosted by Elkdata OÜ. It employs modern web technologies including jQuery and Font Awesome, and uses plausible.io for privacy-conscious analytics. The site is accessible, mobile-optimized, and professionally designed with clear navigation and relevant content for its target audience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is trustworthy and credible for its business purpose, though improvements in security headers and privacy compliance are recommended.

G

Green Motion

greenmotion.com

70

Green Motion is a UK-based car and van rental company established in 2007, specializing in low CO2 emission vehicles and sustainable travel solutions. The company operates a global franchise model offering eco-friendly vehicle rental services, including electric vehicles. Their website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the site employs modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a data-driven approach to customer engagement. Security-wise, the website enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though it lacks DNSSEC and a public security policy or incident response contacts. Overall, the site demonstrates good security hygiene and privacy compliance, with room for improvement in transparency and DNS security. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Väike-Maarja vald operates as a local government entity in Estonia, providing a broad range of municipal services including administration, social welfare, education, culture, and community engagement. The website serves as an official portal for residents and stakeholders, offering news, event information, contact details, and access to various public services. The site is well-structured and content-rich, targeting local residents, businesses, and visitors. Technically, the website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, Google Analytics, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by Telia Eesti AS and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though accessibility features could be improved. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several important security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the municipality but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and regulatory adherence.

Novian Eesti OÜ operates the KOVTP service portal, providing IT infrastructure and software development services primarily targeted at local governments in Estonia. The company has a long-standing history dating back to 1970 and is part of the Novian group, positioning itself as a key player in e-government solutions. The website is professionally designed, mobile-optimized, and provides clear contact information and user support resources. Technically, the site uses Liferay CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and jQuery version is outdated. Privacy compliance is adequate with a cookie policy and GDPR considerations, but no explicit privacy or security policies are prominently available. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

K

Kohtla-Järve Linnavalitsus

kohtla-jarve.ee

48

Kohtla-Järve Linnavalitsus is the official municipal government of Kohtla-Järve city in Estonia, providing a comprehensive digital portal for residents, businesses, and visitors. The website offers extensive information on local governance, social and health services, urban planning, cultural activities, and e-services, positioning itself as a central hub for community engagement and public administration. The target audience primarily includes local citizens and stakeholders seeking municipal information and services. Technically, the website is built on the Liferay CMS platform, utilizing established web technologies such as jQuery, Bootstrap, and Font Awesome. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible advanced security headers and explicit security or incident response policies. The use of an outdated jQuery version may pose minor risks. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and well-aligned with its governmental function. Strategic enhancements in security headers, incident response documentation, and modernization of libraries would strengthen its security posture and compliance standing.

Jõhvi vallavalitsus operates as the official municipal government for the Jõhvi region in Estonia, providing a wide range of public services including governance, social welfare, education, cultural events, urban planning, and community engagement. The website serves as a comprehensive portal for residents and stakeholders to access information, participate in local initiatives, and stay informed about municipal activities. The target audience primarily consists of local residents, businesses, and visitors seeking official information and services. Technically, the website is built on the Liferay CMS platform, utilizing JavaScript, jQuery, Bootstrap, and Font Awesome for UI components and styling. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site demonstrates good mobile responsiveness and clear navigation, although some technical debt is evident with the use of an outdated jQuery version, which could pose security risks. From a security perspective, the site benefits from HTTPS encryption and a cookie consent mechanism indicating GDPR awareness. However, it lacks visible security headers and explicit security or incident response policies. The absence of a vulnerability disclosure policy and the use of outdated libraries suggest areas for improvement. No critical vulnerabilities or blocking mechanisms were detected, and contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and functional, serving its governmental role effectively. Strategic improvements in updating libraries, implementing security headers, and publishing comprehensive security policies would enhance its security posture and compliance standing.

Raasiku Vallavalitsus operates as the local government authority for Raasiku vald in Estonia, providing a broad range of public services including social welfare, education, environmental management, and urban planning. The website serves as an information hub for residents and stakeholders, offering news, contact details, e-services, and detailed sectoral information. The organization holds a stable market position as a small-sized governmental entity with a domain age consistent with its operational history since 2010. Technically, the website is built on the Liferay CMS platform, utilizing standard web technologies such as JavaScript, jQuery, Bootstrap, and Google Fonts. It is hosted under a reputable registrar, Telia Eesti AS, and employs HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The use of Google Analytics introduces moderate user tracking, balanced by privacy compliance measures including a privacy policy and cookie policy. Overall, the website presents a trustworthy and professional digital presence for a local government entity. Strategic recommendations include enhancing security headers, publishing incident response information, updating libraries regularly, and improving accessibility compliance to further strengthen the security posture and user trust.

D

Drouot Estimations

drouot-estimations.com

57

Drouot Estimations is a French auction house operating under the Drouot group, specializing in art, antiques, jewelry, and collectibles. The website serves as a platform for auction calendars, results, object estimations, and online bidding services, targeting both French and international clients interested in auctions. The site is well-branded and professionally designed, reflecting a medium-sized business with a strong market position in the auction industry. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for sliders and carousels, ensuring a responsive and interactive user experience. Google Tag Manager and Google Analytics are integrated with a cookie consent mechanism, indicating some level of privacy awareness. However, explicit privacy and terms of service pages are not found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a concern, potentially indicating privacy protection or domain registration issues, which slightly lowers trust. Overall, the website is functional, professional, and trustworthy from a user perspective but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve compliance and trustworthiness.