Security Directory

C

ConvexityShares

convexityshares.com

44

ConvexityShares is a small ETF issuer based in the USA, founded in 2020, currently without active products in the market. The company operates under the parent company Teucrium and targets investors interested in exchange-traded funds. The website provides basic business information, tax package support resources, and contact options primarily through a contact form and physical address. The digital infrastructure employs modern web technologies including Google Tag Manager and Twitter tracking pixels, indicating moderate digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts privacy compliance ratings. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection, enhancing trustworthiness. Nonetheless, it lacks advanced security headers and explicit incident response contacts, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected during analysis. The website is accessible without any WAF or blocking mechanisms, allowing full content inspection. Overall, ConvexityShares presents a basic but functional online presence consistent with a small financial services business. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory alignment. The company’s partnership with tax package support services adds value to its investor audience.

A

ACE Logistics Group AS

acegroup.ee

49

ACE Logistics Group AS is a well-established logistics company operating primarily in the Baltic states and neighboring countries. Founded in 1992, the group comprises multiple subsidiaries specializing in logistics, freight forwarding, cargo handling, sales agency, and real estate services. The company positions itself as a regional leader in logistics services, targeting businesses requiring comprehensive logistics solutions in Estonia, Latvia, Lithuania, and Ukraine. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on WordPress using Visual Composer, leveraging common libraries such as jQuery and Bootstrap. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. HTTPS is enforced, ensuring secure communications, though the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site demonstrates a solid baseline with HTTPS but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy policies exist but lack explicit GDPR consent mechanisms. The absence of terms of service and incident response contacts suggests gaps in compliance and security readiness. Overall, the website is credible and trustworthy, with a strong business presence and good technical implementation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and regulatory adherence.

A

ACE Logistics Ukraine LLC

acelogistics.ua

47

ACE Logistics Ukraine LLC is a small transportation and logistics company based in Ukraine, specializing in international freight forwarding services including road, air, and sea transport, customs brokerage, cargo insurance, and warehousing. The company targets businesses requiring efficient and professional logistics solutions with a focus on individual customer needs. Their website is built on WordPress using common plugins and libraries, providing a good user experience with clear navigation and relevant content. However, the site lacks critical compliance documentation such as privacy and cookie policies, and does not disclose security or incident response policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website uses Google Analytics and Google Tag Manager for tracking, indicating moderate user tracking without clear privacy compliance disclosures.

T

Tervise Arengu Instituut

toitumine.ee

40

The website toitumine.ee is an official Estonian government health information portal managed by the Tervise Arengu Instituut under the Haridus- ja Teadusministeerium (EENet). It provides comprehensive nutrition guidelines, health advice, and tools such as a BMI calculator targeted at Estonian residents across various life stages and health conditions. The site is well-structured with rich content and expert contributions, positioning it as a trusted national resource for healthy eating information. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security practices.

Techindustry.lv is the official website for the largest and most significant industry exhibition in the Baltic region, focusing on machine building, metal processing, automation, electronics, and related technologies. The event is organized by BT 1, a leading Baltic exhibition organizer, and targets industry professionals and companies seeking to showcase and discover innovations. The website provides comprehensive information about exhibitors, news, and event details, supported by partner organizations and ticketing platforms. Technically, the site uses modern tracking and analytics tools, including Google Analytics and Facebook Pixel, and implements cookie consent mechanisms. However, it lacks explicit privacy and terms of service pages, and security headers are not detected, which are areas for improvement. The site is accessible without WAF or blocking mechanisms, and contact information is clearly provided with named personnel.

P

Petri Kajander

petrikajander.com

60

Petri Kajander's website serves as a personal and professional platform showcasing his work as a purpose-driven founder, content creator, and mentor. The site features a variety of content including blogs, podcasts, and curated social media feeds, targeting entrepreneurs, business leaders, and individuals interested in personal development and startups. The business model revolves around thought leadership and content dissemination rather than direct product sales. Technically, the website is built on WordPress, leveraging common plugins and modern web technologies such as jQuery and YouTube Embed Plus. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, hosting provider details are not explicitly identified. From a security perspective, the site uses HTTPS and implements some best practices like setting rel="noopener noreferrer" on external links. However, it lacks visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and branding appear consistent and professional. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy, security policies, and domain registration details to improve trust and compliance.

T

Tervise Arengu Instituut

tai.ee

48

Tervise Arengu Instituut (TAI) is a leading Estonian national research and development institution focused on public health, disease prevention, and health promotion. The website reflects a well-established government-affiliated organization with a strong market position in healthcare research and public health services. It offers extensive resources including research publications, statistics, training events, and health registries, targeting health professionals, policymakers, and the general public. The site is professionally designed, content-rich, and well-structured, supporting multiple languages with a focus on Estonian.

MIQ Logistics is a multinational freight forwarding and logistics company recently acquired by Noatum Logistics. The website content is minimal and primarily serves as a redirect and informational portal linking to official documents and the parent company's website. The business operates in the transportation sector with a large enterprise profile and a history dating back to 1999. Technically, the website uses basic web technologies such as jQuery and Bootstrap but lacks modern CMS or advanced SEO and accessibility features. Security posture is weak with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy compliance is poor with no privacy or cookie policies found. Contact information is limited to a single email and a whistleblowing portal link, with no phone numbers or physical addresses provided. Overall, the website appears functional but minimal, reflecting a transitional state post-acquisition.

E

Estonian Plywood AS

estply.com

50

Estonian Plywood AS (ESTPLY) is a medium-sized manufacturing company specializing in the production of Nordic birch plywood in large sizes. Founded in 2018 and part of the Lemeks Group, ESTPLY operates one of the most modern plywood factories in the Baltics and Scandinavia, located in Estonia. The company targets European industrial clients and resellers, supplying plywood for trailers, furniture, packaging, and construction. ESTPLY emphasizes sustainability by utilizing local wood resources and environmentally friendly production processes. The website is built on WordPress with common plugins and uses Google Analytics for visitor tracking. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts privacy compliance scoring. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility.

E

e-Governance Academy

egovconference.ee

47

The e-Governance Conference 2025 website represents a well-established global event organized by the e-Governance Academy and supported by Estonian government entities. It targets digital governance leaders and practitioners worldwide, showcasing Estonia's leadership in digital transformation. The site is content-rich, professionally designed, and features high-profile speakers and partners, reinforcing its market position as a leading digital governance conference. Technically, the site uses WordPress with Elementor, integrates Vimeo for video content, and employs modern web technologies, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and secure content embedding, though it lacks some security headers and formal policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is trustworthy and credible, but improvements in privacy and security transparency are recommended.

A

admin

monetti.ee

55

Monetti.ee operates as a leading personal loan consultancy and comparison platform in Estonia, providing users with access to a wide range of loan products including mortgage loans, refinancing loans, credit cards, and quick loans. The website positions itself as the number one loan consultant in Estonia since 2008, offering services that help consumers make informed financial decisions by comparing various financial products. The platform targets Estonian consumers seeking personal loans and related financial services, leveraging partnerships with multiple loan providers to offer comprehensive options. Technically, the website is built on WordPress CMS, utilizing popular libraries and plugins such as jQuery, Bootstrap, and WPBakery Page Builder, hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of analytics and trust signals like Trustpilot reviews. Security posture is solid with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although it lacks explicit security policies and advanced security headers. Overall, Monetti.ee presents a professional and trustworthy online presence with room for improvement in formal security disclosures and terms of service.

I

Integration Foundation

integrationconference.ee

41

The Integration Foundation operates an informational website promoting an international conference on integration scheduled for November 2025 in Tallinn, Estonia. The conference targets academics, policy-makers, and practitioners focused on integration challenges in Europe. The website serves as a platform to share event details, workshops, and research collaborations. Technically, the site is built on WordPress with a modern but basic tech stack including Bootstrap and jQuery, hosted likely by Zone Media OÜ in Estonia. The site is mobile optimized and presents content in multiple languages. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to an email address and social media links. Overall, the site is professional but could improve in privacy and security transparency.

R

Rara Themes

rarathemes.com

76

Rara Themes is a WordPress theme provider established in 2015, offering both free and premium mobile-friendly WordPress themes. The company targets WordPress users seeking easy-to-use, professional themes and operates a theme club membership model. The website demonstrates a good level of professionalism with clear navigation, consistent branding, and a significant user base indicated by the happy customers count. Technically, the site is built on WordPress with popular plugins such as Easy Digital Downloads and AffiliateWP, and uses modern tracking and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. Hosting and DNS are managed via NameCheap and Cloudflare respectively, with HTTPS enabled ensuring secure communication. However, DNSSEC is not enabled, representing a minor security gap. The website lacks explicit privacy policy, terms of service, and security policy pages, which impacts privacy compliance and security posture scores. No direct contact emails or phone numbers were found, which may affect user trust and support accessibility. Overall, the site is well-structured and functional but could improve in privacy and security transparency.

C

ChatGPT-RW

chatgpt-rw.com

55

ChatGPT-RW is a small technology-focused website launched in late 2024, offering a suite of URL query and SEO tools targeted at digital marketers and SEO professionals primarily in Indonesia. The platform provides utilities such as domain registrar information, SEO tools, word count, content spinning, and WhatsApp checking services. The website demonstrates a moderate level of technical maturity, utilizing common web technologies like Bootstrap, jQuery, and Font Awesome, and is hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site is mobile-optimized with a clear navigation structure but lacks advanced SEO and accessibility features. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which exposes it to potential risks. No privacy, cookie, or terms of service policies are published, indicating compliance gaps with GDPR and other privacy regulations. The presence of hidden links to unrelated gambling domains in the footer suggests possible SEO manipulation tactics that could harm the site's reputation and trustworthiness. Overall, the website is functional and professionally designed but requires significant improvements in privacy compliance, security hardening, and removal of suspicious SEO practices to enhance trust and credibility. Strategic recommendations include implementing DNSSEC, publishing comprehensive privacy and cookie policies, adding security headers, and removing hidden spam links to improve the security posture and business reputation.

H

Harju Maakonnaraamatukogu

keilaraamatukogu.ee

40

Harju Maakonnaraamatukogu is a regional public library serving Harju County in Estonia, providing a range of library services including book lending, children's services, local history resources, and event hosting. The website targets local residents and library users, offering information and access to library resources and services. The business operates as a public institution with a focus on education and cultural enrichment. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted under a reputable Estonian registrar. The site is mobile-optimized, accessible, and uses HTTPS for secure communication. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Keila Muusikakool

keilamuusikakool.ee

39

Keila Muusikakool is a small local music school based in Keila, Estonia, providing music education services primarily to students and parents in the local community. The website offers detailed information about competitions, study programs, schedules, events, and pricing. The business operates with a clear focus on education and community engagement. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

L

Liikuma Kutsuv Kool, TÜ liikumislabor

liikumakutsuvkool.ee

52

Liikuma Kutsuv Kool is an educational innovation program based in Estonia, affiliated with the University of Tartu's Movement Laboratory. The program aims to promote a more active school culture across Estonian schools by providing training, research, and networking opportunities. It is supported by government ministries and recognized as an evidence-based intervention by the Health Development Institute. The website is well-structured, professionally designed, and uses modern WordPress technologies with good SEO and mobile optimization. Contact information and social media presence are clearly provided, enhancing trust and accessibility. However, the site lacks explicit privacy and cookie policies, which impacts GDPR compliance and privacy posture. Security practices are generally good with HTTPS and standard security headers, but no dedicated security or incident response policies are published.

P

Playversity

playversity.co

46

Playversity is an educational platform focused on transforming teaching through game-based learning. The website offers games, resources, learning opportunities, and programs for trainers, targeting educators and learners interested in innovative educational methods. The business is relatively new, founded in 2021, and operates primarily online with a small organizational size. The platform maintains a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and several addons, hosted on HostGator. The infrastructure is modern and supports mobile responsiveness and SEO best practices. Performance is moderate, with room for improvement in accessibility and security headers. The site uses HTTPS and domain registration includes protective EPP locks, but DNSSEC is not enabled. From a security perspective, the site has a good baseline with HTTPS and domain protections but lacks critical security headers and privacy compliance documents such as privacy and cookie policies. No forms or data collection mechanisms were detected on the homepage, reducing immediate data protection concerns. The WHOIS data shows privacy protection for the registrant, which is reasonable for this business type. Overall, the website is functional and professional but should improve privacy compliance and security posture to enhance trust and regulatory adherence.

R

RE/MAX Gold Coast

williamreed.com

62

RE/MAX Gold Coast operates as a real estate brokerage focused on the Ventura, California market, offering property listings, home valuation, and mortgage services. The website is professionally designed with clear navigation and integrates modern technologies such as Vue.js, Bootstrap, and various analytics and advertising tools. Despite the lack of WHOIS data, the site presents a consistent brand image aligned with the RE/MAX network. Security posture is solid with HTTPS and monitoring tools, but lacks explicit security headers and privacy compliance disclosures. Overall, the site is functional and credible but would benefit from enhanced privacy and security transparency.

W

Webmarked

webmarked.net

52

Webmarked is a small e-commerce application development company specializing in Shopify apps such as Smart Wishlist and Smart RSS Feed. Their offerings target Shopify store owners aiming to increase sales and improve customer engagement. The website is built on WordPress using the OnePress theme and integrates common plugins like Contact Form 7 and Google reCAPTCHA for form security. The technical infrastructure is standard and moderately optimized for performance and mobile use. Security posture is good with HTTPS enforced and spam protection mechanisms in place, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness. Overall, the site presents a professional business presence with moderate risk due to incomplete transparency in domain registration and privacy compliance.

E

EUDIS Business Accelerator

eudis-business-accelerator.eu

54

EUDIS Business Accelerator is a specialized EU-wide programme designed to empower start-ups and scale-ups in the defence innovation sector. Backed by the European Commission, it offers tailored coaching, seed funding, networking, and access to testing facilities over an 8-month period. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Drupal 11 and Bootstrap, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism and trustworthiness, with strong compliance to privacy regulations and clear business focus on the European defence ecosystem.

H

Health Founders

healthfounders.ee

38

Health Founders is a specialized health technology accelerator based in Estonia, focused on supporting and accelerating healthtech startups through a dedicated program, expert mentoring, and access to a global investor network. The organization positions itself as the first vertical healthtech accelerator in the Baltics, leveraging Estonia's advanced digital health ecosystem. The website reflects a professional and consistent brand image with clear information about its services, partners, and mentors. Technically, the site is built on WordPress with modern plugins and integrates analytics tools such as Google Analytics and Plausible. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is credible and well-positioned but should improve compliance and security transparency.

A

Actual Reports OÜ

printoutdesigner.com

54

Printout Designer, operated by Actual Reports OÜ, is a specialized SaaS provider offering automated invoice, packing slip, and label generation services tailored for ecommerce platforms. The company targets online retailers seeking to streamline order processing and improve operational efficiency. Their solution integrates with major ecommerce platforms such as Shopify, BigCommerce, WooCommerce, Ecwid, and Shift4Shop, positioning them as a niche productivity tool within the ecommerce sector. The website content is professionally presented, with clear descriptions, pricing tiers, and customer testimonials that reinforce trust and credibility. Technically, the website employs modern web technologies including jQuery and Font Awesome, and is hosted on Amazon AWS infrastructure as inferred from DNS records. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Google Analytics and Google Tag Manager are used for user tracking and analytics. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. No CMS is explicitly detected, suggesting a custom or lightweight framework. From a security perspective, the domain registration is consistent and transparent, with no privacy protection masking registrant details. The domain is aged appropriately for the business maturity. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, which are areas for improvement. No explicit security policies or incident response contacts are published, and no cookie consent mechanism is present, which may impact GDPR compliance. Overall, the security posture is adequate but could be enhanced with additional best practices. The overall risk assessment indicates a trustworthy and professional ecommerce SaaS provider with minor gaps in security and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding cookie consent mechanisms to improve compliance and user trust.

S

Sinulaen

sinulaen.ee

47

Sinulaen.ee is an Estonian loan comparison portal providing consumers with independent and up-to-date information on various loan products including quick loans, small loans, auto loans, and refinancing options. The website serves as a platform to compare loan offers from multiple providers, facilitating informed financial decisions for its users. The business operates primarily in the Estonian market and targets individuals seeking consumer loans with a user-friendly online experience. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and loan comparison functionalities. It integrates multiple third-party analytics and advertising services, including Google Analytics, Yandex Metrika, and Google Adsense, and uses affiliate links to monetize loan referrals. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security best practices and privacy policy comprehensiveness.

The Martha Farrell Foundation is a small non-profit organization based in India, dedicated to promoting gender justice and creating safe, equitable learning and working environments. Founded in 2016, it carries forward the legacy of Dr. Martha Farrell, focusing on empowering women, adolescents, and formal and informal workers through various programs, scholarships, and awards. The foundation maintains a professional online presence with clear contact information and active social media engagement. Technically, the website employs a moderate technology stack including jQuery, Owl Carousel, and Google Analytics, with good mobile optimization and a valid SSL certificate ensuring secure communications. However, there is room for improvement in accessibility and SEO optimization. The site lacks advanced security headers and a cookie consent mechanism, which are important for compliance and security hardening. From a security perspective, the site benefits from HTTPS and secure form handling but does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration insights, but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and professional image with moderate technical maturity. Strategically, the foundation should enhance privacy compliance by implementing cookie consent and publishing security policies. Strengthening security headers and regularly auditing third-party scripts will improve security posture. These steps will bolster trust and compliance, supporting the foundation's mission and stakeholder confidence.

W

WebLock

weblockonline.com

51

WebLock is a technology company specializing in cloud-based access control solutions that enable remote management and contactless entry for doors and facilities. Their product suite includes wireless electronic locks, mobile app access, RFID keypads, and integration capabilities with business software, targeting sectors such as rental buildings, hotels, sport facilities, and offices across 11 countries. The company positions itself as a modern, automated access control provider with a strong emphasis on user convenience and business automation. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery, and various JavaScript libraries, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and transfer protection on the domain, though improvements are recommended in DNSSEC and advanced security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a medium-sized, professional business with good market presence and trust indicators.

S

Superhands OÜ

superhands.ee

41

Superhands OÜ is a small Estonian technology company specializing in smart industrial and city solutions using Internet of Things (IoT) technology. Their offerings include IoT devices, product and software development, system integration, analytics, and consulting services. The company has a niche market position supported by partnerships and client testimonials, including a notable collaboration with Elisa. The website is built on WordPress with a modern tech stack and includes multilingual support and SEO optimization. Security posture is adequate with HTTPS and secure form handling, but lacks explicit security headers and privacy compliance documentation. Overall, the website is professional and trustworthy, though improvements in privacy and security transparency are recommended.

Grupa ZPR Media is a prominent multimedia group in Poland, delivering a wide range of entertainment, information, and advisory content across multiple media channels including press, radio, internet, and television. The company operates numerous well-known brands and offers comprehensive advertising and business services, positioning itself as a leader in the Polish media market. Their digital infrastructure incorporates modern web technologies and analytics tools, supporting a responsive and content-rich website experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though some improvements in security headers and library updates are recommended. Overall, the website reflects a mature digital presence with strong business credibility and compliance with privacy regulations.

S

Sunset di Kebun

sunsetdikebun.id

42

Sunset di Kebun is a newly established Indonesian event organizer specializing in music festivals that integrate natural settings, primarily hosted in various cities across Indonesia. The website presents a professional and visually appealing platform showcasing event details, artist lineups, galleries, news, and sponsorship information. The business model revolves around event ticket sales, sponsorship partnerships, and merchandise offerings, targeting music and nature enthusiasts. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Tag Manager, hosted behind Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections in place; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the domain registration aligns well with the business timeline and geographic focus, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

Tribun Network is a large Indonesian media group operating multiple regional newspapers and digital platforms, targeting a broad audience interested in news, lifestyle, and events. The business model includes media publishing, digital news dissemination, loyalty card services, and event organization. The website infrastructure is basic, using older technologies such as jQuery 1.3.2 and Bootstrap, hosted on AWS DNS infrastructure. The site lacks modern security practices, including HTTPS enforcement, security headers, and updated libraries, exposing it to potential vulnerabilities. No privacy or cookie policies are present, and contact information is not provided, which impacts trust and compliance. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards.

S

Sadamaregister

sadamaregister.ee

60

Sadamaregister.ee is an Estonian website dedicated to providing a comprehensive register of ports and harbors within Estonia. The platform offers a searchable database of port names and locations, targeting maritime professionals, boat owners, and the general public interested in port information. The website integrates with the Estonian state authentication service for user login, indicating an official or government-related service. The site uses modern web technologies including Vue.js and Font Awesome, and employs Google Tag Manager for analytics. While the site is mobile optimized and offers a good user experience, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, the site uses HTTPS and integrates secure login mechanisms but lacks security headers and DNSSEC, which are recommended for enhanced security. Overall, the domain registration is consistent and legitimate, supporting the website's credibility as an official maritime information resource.

O

Osaühing SEERSANT M & A

maservice.ee

40

Seersant M&A Service is a small Estonian company specializing in automotive repair, maintenance, and rental services, including trailers and passenger vehicles. Established in 2013, it holds a reputable market position in Rapla, evidenced by its recognition as a fast-growing 'gasell' company and positive customer reviews. The website reflects a professional digital presence built on WordPress with Elementor, offering clear navigation and responsive design. Security measures include HTTPS and Google reCAPTCHA integration, although formal privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the company demonstrates a solid business foundation with trustworthy service offerings and a good technical infrastructure.

P

PoolQ OÜ

poolq.ee

38

PoolQ OÜ is a small Estonian company specializing in the sale, maintenance, repair, and rental of Tiki and Respo trailers, as well as automotive locksmith and repair services for cars and small vans. The company operates primarily in Pärnu and is an official Autoasi representative, positioning itself as a local trusted service provider in the transportation sector. The website reflects a focused business model targeting vehicle owners and businesses requiring trailer and vehicle services. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Bootstrap, offering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Elkdata OÜ

boatworld.ee

40

BoatWorld, operated by Elkdata OÜ, is an established Estonian business specializing in the sale of boats, motors, and related marine equipment, complemented by workshop services and financing options. The website is built on a modern WordPress WooCommerce platform, leveraging performance optimizations and structured data to enhance user experience and SEO. The business targets consumers and businesses interested in marine and motorized recreational vehicles within Estonia and the Baltic region. The domain age and WHOIS data confirm a legitimate and consistent business presence since 2010. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, functional, and trustworthy but would benefit from enhanced privacy and security transparency.

U

University of Alabama System

uasystem.edu

65

The University of Alabama System website represents Alabama’s largest higher education enterprise, encompassing three institutions that provide teaching, research, and service programs, along with a world-class medical center. The site targets students, faculty, researchers, and the public interested in higher education and medical services in Alabama. The business model is that of a public university system focused on education and research, holding a strong market position within the state. Technically, the website is built on Joomla! CMS with modern front-end frameworks such as UIkit and uses Google Analytics and Tag Manager for tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data is consistent with the institution’s identity, indicating legitimacy and active maintenance.

V

Vgorode.ua

vgorode.ua

56

Vgorode.ua is a prominent Ukrainian local news and city information portal established in 2009, serving multiple major cities with news, event listings, and city directories. The website targets residents and visitors seeking up-to-date local information and operates on an advertising-supported business model. It maintains a consistent brand presence and leverages social media channels to engage its audience. Technically, the site uses a custom CMS with a modern tech stack including jQuery, Google Analytics, and header bidding for advertising. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers could be enhanced. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in privacy and security practices.

T

TribunNews.com - 403

tribunnews.com

51

TribunNews.com is a major Indonesian online news media platform established in 2010, serving Indonesian news readers with a broad range of news content. The website is hosted on infrastructure likely provided by Amazon Registrar, Inc., and uses common web technologies such as Google Fonts and Font Awesome. However, the current accessible page returns a 403 Forbidden error, indicating restricted access or blocking of content. This limits the ability to fully assess the website's content quality, privacy, and security posture. The domain registration is consistent with a legitimate, long-standing media business, but the lack of visible privacy policies, security headers, and contact information on the accessible page reduces trust and compliance indicators. Overall, the site demonstrates basic technical implementation but suffers from critical accessibility and transparency issues.

P

PT.CIPTA MEGASWARA TELEVISI

kompas.tv

61

Kompas.tv is a prominent Indonesian media portal operated by PT.CIPTA MEGASWARA TELEVISI, offering comprehensive news coverage and video content across national, regional, international, sports, entertainment, and lifestyle categories. The website serves a broad Indonesian audience seeking timely and reliable news, supported by a strong brand presence and multiple related media properties. Technically, the site employs modern advertising technologies, Google Tag Manager, and analytics tools, ensuring a robust digital infrastructure with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS with appropriate security headers and script nonce usage, though it lacks explicit privacy and cookie policies, which impacts compliance. Overall, the site is trustworthy and professional but would benefit from enhanced privacy transparency and contact information to improve user trust and regulatory compliance.

C

Certia Oy

nefk2025.fi

43

The website nefk2025.fi represents the 36th Nordic Ethnology and Folklore Conference scheduled for June 2025 in Turku, Finland. The event is organized by Certia Oy in partnership with Åbo Akademi University and Turku University, targeting Nordic scholars and researchers interested in ethnology, folklore, and cultural studies. The site provides comprehensive information about the conference theme, programme, important dates, and practical details, supporting a niche academic audience. Technically, the site is built on WordPress using WPBakery Page Builder and integrates standard SEO and analytics tools. It is hosted by Louhi Net Oy with a valid SSL certificate ensuring secure HTTPS access. Security posture is good with cookie consent mechanisms and no visible vulnerabilities, though security headers could be improved. The WHOIS data is transparent and consistent with the business purpose, enhancing trust. Overall, the site is professional, well-structured, and compliant with privacy regulations.

H

HARJU ELEKTER UAB

harjuelekter.lt

46

HARJU ELEKTER UAB is a Lithuanian contract manufacturing company specializing in engineering and production of multi-drive systems, power distribution, and prototyping services primarily for industrial and marine sectors. The company operates under the Harju Elekter Group and offers Engineer-To-Order, Make-To-Order, and Assemble-To-Order business models. Their market position is that of a specialized manufacturer with capabilities for fast marine class certification and full load testing. The website is professionally designed using WordPress with Cherry Framework and Bootstrap, featuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and established business with room for improvement in security and privacy transparency.

A

Aspo Plc

aspo.com

62

Aspo Plc is a Finnish conglomerate specializing in demanding B2B customers, operating primarily in Northern Europe and selected growing markets. The company owns and develops businesses in sectors including shipping (ESL Shipping), food industry solutions (Leipurin), and industrial supplies and logistics (Telko). Aspo positions its subsidiaries as market leaders, focusing on sustainable and long-term value creation. The website reflects a professional corporate presence with comprehensive investor relations, governance, and sustainability information. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as jQuery, Highcharts, and Slick Carousel. It integrates Google Analytics and Google Analytics 4 for visitor tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional and consistent website content. Overall, Aspo Plc's website presents a credible and professional business front with room for improvement in security best practices and transparency regarding domain registration and incident response.

A

A Million Ads

amillionads.com

56

A Million Ads (AMA) is a technology-driven company specializing in dynamic creative advertising for audio platforms. They position themselves as a leader in delivering customized, data-driven audio ads across major platforms, serving notable clients such as Target, Starbucks, and American Express. The website reflects a mature digital presence with professional design, strong branding, and extensive client showcases. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected and no dedicated security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the professional image and client portfolio, raising legitimacy concerns. Overall, the site is functional, professional, and compliant but would benefit from improved transparency on domain registration and security policies.

I

iPromote

ipromote.com

65

iPromote is a mature and established company specializing in programmatic digital advertising solutions. Their platform offers automated, scalable, and white-labeled advertising services across multiple channels including display, paid search, CTV/OTT, social media, native, video, and Yelp ads. The company positions itself as an industry leader with award-winning technology and a strong partner ecosystem. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site is built on WordPress with advanced SEO and performance optimizations, integrating tools like Google Tag Manager, HubSpot, and Jetpack for analytics and marketing. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent branding and social media presence.

E

Eesti Õpilasesinduste Liit

escu.ee

37

Eesti Õpilasesinduste Liit is the largest youth organization in Estonia representing approximately 90,000 students through its member schools. The organization focuses on advocating for student interests, organizing events, and providing resources to member schools. The website is built on WordPress using the Avada theme and integrates Gravity Forms for contact and application forms. It demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and spam prevention in forms, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy, serving an essential role in the Estonian education sector.

P

Propine

propine.com

72

Propine is a Singapore-based enterprise-grade digital asset custodian specializing in custody, tokenization, trading, and DeFi solutions for institutional clients. The company holds a Capital Markets Services (CMS) license from the Monetary Authority of Singapore (MAS), positioning it as a trusted and regulated player in the digital asset custody market in Asia. Their platform targets banks, family offices, asset managers, corporates, exchanges, and protocol foundations, offering services such as Digital Custody ProTect™, Tokenization DASH™, and white label custody solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on institutional clientele. Technically, the website is built on WordPress using Elementor and several modern plugins like Yoast SEO and WP Rocket, hosted on AWS infrastructure. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, there is room for improvement in accessibility and security headers. The domain is mature, registered since 2001, and shows consistency with the business claims, enhancing trustworthiness. Security posture is solid with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security policies or incident response information. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is primarily via forms, with no direct emails or phone numbers publicly listed. Overall, Propine presents as a credible and professional digital asset custody provider with a strong market position in Asia. Enhancing privacy compliance, security transparency, and adding direct contact channels would further strengthen trust and regulatory adherence.

P

Private by Design, LLC

texel.ai

57

Texel.ai is a US-based technology startup founded in 2022, operating as a SaaS platform that enables users to create and edit images, videos, and audio using AI-powered tools and APIs. The platform targets developers and businesses seeking fast, cost-effective AI media generation and editing solutions. The website presents a professional and modern design with clear navigation, showcasing key services and partner logos to build trust. Technical infrastructure leverages Django, Tailwind CSS, and Cloudflare DNS, with Google Analytics for user tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and domain protections but lacks explicit security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is consistent and supports legitimacy. Overall, the site scores well on content and technical implementation but needs improvements in privacy and security transparency.

V

Váš Hosting s.r.o.

hlidam.to

66

Hlídám.to is a Czech-based professional server monitoring service operated by Váš Hosting s.r.o. The company offers uptime and performance monitoring, outage alerts, email server monitoring, and API access, targeting website owners and IT administrators in the Czech market. The website is well-structured, with clear navigation and legal compliance including privacy and cookie policies. Technically, the site uses a custom CMS with common JavaScript libraries and frameworks such as jQuery and Bootstrap, and integrates third-party analytics and advertising tools with user consent. Security posture is solid with HTTPS enforced and secure login forms, though explicit security headers are not detected. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a web form. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and privacy compliance.

M

Město Krásná Lípa

krasnalipa.cz

57

Město Krásná Lípa operates an official municipal website serving residents, tourists, and local stakeholders by providing comprehensive information about the town, its administration, cultural events, and public services. The website reflects a well-established local government entity with a domain registered since 1999, consistent with its long-standing municipal role. The content is rich, relevant, and professionally presented, targeting local citizens and visitors interested in the region. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and integrates an AI chatbot for enhanced user interaction. The site is mobile-optimized with good navigation and content structure, though it lacks some advanced accessibility features and cookie consent mechanisms. Hosting appears to be managed by a Czech registrar and hosting provider, ensuring regional consistency. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies. No vulnerability disclosure or security.txt files are present. Privacy compliance is partially addressed with a GDPR page but no cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and security best practices. The domain WHOIS data aligns well with the website content, indicating high legitimacy and trust. Strategic recommendations include implementing cookie consent, security headers, and publishing security policies to enhance compliance and user trust.

A

admin

dtp-avariya.net

51

The website www.dtp-avariya.net is a WordPress-based blog primarily focused on Indonesian online gambling content, specifically togel and slot games. It provides articles, tips, and affiliate links targeting Indonesian players interested in online gambling. The site uses common web technologies including WordPress 6.8.1, jQuery, Bootstrap, and Yoast SEO for content optimization. The technical infrastructure is moderate with basic mobile optimization and SEO practices in place. Security posture is weak due to lack of security headers and absence of privacy or cookie policies, although HTTPS is enabled. The WHOIS data is missing, which raises concerns about domain legitimacy and transparency. Overall, the site appears functional but lacks critical compliance and security features, posing risks to user trust and regulatory adherence.

A

admin

fiorellayabar.com

51

Fiorellayabar.com is a small Indonesian online gambling information blog primarily focused on togel and slot games. It provides articles, tips, and guides for players interested in online gambling. The website is built on WordPress with Yoast SEO plugin, uses Cloudflare DNS, and is registered via NameCheap since 2021. The technical infrastructure is modern and mobile-optimized, but performance is moderate. Security posture is basic with HTTPS enabled but lacks security headers and DNSSEC. No privacy, cookie, or terms policies are published, and no contact or incident response information is provided, which reduces trustworthiness. The site links to many external gambling-related domains, some of which appear suspicious due to IP-based URLs. Overall, the site is accessible and functional but lacks critical compliance and security features.