Security Directory

A

admin

hljyjmlt.com

50

The website 'Cara Menang Main Judi Online' is a small-scale Indonesian language blog focused on online gambling, particularly togel and slot games. It provides content related to gambling tips and strategies, targeting Indonesian online gamblers. The business model appears to be content-driven, likely monetized through affiliate links or advertising, although no explicit monetization is visible. Technically, the site is built on WordPress with common plugins and libraries such as Yoast SEO, jQuery, and Bootstrap, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but no security headers or DNSSEC, and no visible privacy or cookie policies, which is a compliance concern. No contact or business verification information is provided, reducing trustworthiness. The domain is aged since 2010, registered via GoDaddy, which supports legitimacy, but lack of registrant transparency and suspicious external links reduce confidence. Overall, the site is functional but lacks professionalism, security best practices, and compliance measures.

A

admin

ajkerbarta.com

51

Ajkerbarta.com is a small Indonesian media website focused on delivering news and tips related to online gambling, specifically togel and slot games. The site uses WordPress CMS with common plugins such as Yoast SEO and jQuery libraries, hosted behind Cloudflare DNS and registered via GoDaddy. The content is primarily in Indonesian and targets the local gambling community. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which impacts its trustworthiness and compliance posture. Technically, the site is moderately optimized with basic mobile responsiveness and SEO but lacks advanced security headers and DNSSEC, which are recommended for improved security. The site links to multiple external domains, some of which appear suspicious or unrelated, raising concerns about advertising and affiliate practices. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards.

A

admin

gerlweyh.com

51

The website gerlweyh.com operates as a small-scale WordPress blog focused on Indonesian online lottery (togel) and slot gambling content. It provides informational articles, tips, and affiliate-style links targeting Indonesian online gambling enthusiasts. The site is built on WordPress 6.8.1 with Yoast SEO plugin and uses Cloudflare DNS but lacks advanced security features like DNSSEC and security headers. No privacy, cookie, or terms of service policies are published, and no direct contact information is provided, which limits trust and compliance. The domain is registered with NameCheap since 2021, consistent with the site's content age but lacks registrant transparency. Overall, the site has basic content and technical implementation with moderate SEO but poor privacy and security posture.

L

LINANTO LLC

control-webpanel.com

63

Control Web Panel (CWP) is a technology company specializing in providing a free and professional Linux web hosting control panel targeted at system administrators and web hosting providers. Founded in 2016 and operated by LINANTO LLC based in Georgia, the company offers both a free version and a paid PRO version with premium support options. The website serves as a comprehensive platform for product information, support, and community engagement, positioning CWP as a competitive alternative to paid control panels with a strong emphasis on security and usability. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced functionality. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Analytics tools such as Google Analytics and Google Tag Manager are employed for user tracking, with basic privacy and cookie policies in place. From a security perspective, the site uses HTTPS and some security best practices but lacks comprehensive security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting the legitimacy of the website. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance trust and compliance.

S

SecurityNet.cz s.r.o.

securitynet.cz

65

SecurityNet.cz s.r.o. is a Czech Republic-based small IT service company specializing in comprehensive internet services including custom website and e-shop development, SEO optimization, custom software development, and hosting solutions. The company targets businesses and individuals requiring tailored IT and hosting services, positioning itself as a reliable provider with a portfolio of reputable clients such as KIKA, Gorenje, and T-Mobile. Their business model focuses on service delivery with an emphasis on quality and client satisfaction. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. The site is mobile optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Hosting details are not explicitly disclosed, but the presence of a partner hosting domain (hukot.net) suggests collaboration with a specialized hosting provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a visible privacy policy, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in their security posture. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced privacy compliance, security header implementation, and improved transparency regarding domain registration and security policies.

W

WebActive s.r.o.

webactive.cz

70

WebActive s.r.o. is a Czech Republic based technology company specializing in web development, CMS solutions (notably WebJET CMS), and custom online applications including enterprise intranets and web portals. The company targets businesses and organizations seeking professional web presence and digital solutions. Their market position is that of an established regional service provider with a focus on CMS and tailored web applications. The website demonstrates a professional design with clear navigation and updated content, reflecting a mature digital presence. Technically, the website uses modern web technologies including jQuery, Bootstrap 5, and Font Awesome, running on their proprietary WebJET CMS platform. The site is mobile optimized and includes interactive elements such as a news rotator and live chat integration (Smartsupp). Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, no explicit privacy policy or terms of service pages were found, and security headers are not detected, which are areas for improvement. No vulnerabilities or exposed sensitive data were identified in the HTML content. The lack of WHOIS data reduces domain trustworthiness but the website content and business information appear consistent and professional. Overall, the website presents a low to moderate risk profile with good business credibility and technical implementation. Strategic recommendations include adding explicit privacy and security policies, implementing security headers, and improving WHOIS transparency to enhance trust and compliance.

AIMS (Association of International Marathons and Distance Races) operates a comprehensive website dedicated to global running events, including marathons and ultradistance races. The organization provides race calendars, results, news, and publishes the Distance Running magazine, positioning itself as a key resource for the international running community. The website targets runners, race organizers, and athletics enthusiasts worldwide, offering a membership model and partnerships with sports, photo, registration, and medals partners. Technically, the site uses a mix of JavaScript libraries such as jQuery, Cycle2, Leaflet.js for maps, and Google Analytics for tracking, with a custom or unknown CMS. The site is mobile optimized and has a moderate performance profile.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

The website wickedthemusicaltickets.top is a newly registered domain with minimal content, primarily a default WordPress blog post. There is no clear business description, contact information, or trust indicators present. The site uses a standard WordPress CMS with Bootstrap and jQuery libraries, indicating a basic technical infrastructure. Security posture is weak due to lack of security headers, no DNSSEC, and absence of privacy or cookie policies. The domain registration is privacy protected, which combined with the minimal content, reduces trustworthiness. Overall, the site appears to be in an early stage or possibly a placeholder without a clear business purpose or compliance measures.

F

fsk industries GmbH & Co. KG

fsk-industries.de

51

fsk industries GmbH & Co. KG is a German-based company specializing in innovative automation solutions, including Cobot Welding, SmartArc technology, mechanical engineering, and fixture construction. The company targets industrial clients seeking advanced automation and welding solutions, positioning itself as a niche provider in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and user experience, primarily in the German language. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as Bootstrap and jQuery, hosted by Alfahosting. Performance and mobile optimization are adequate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented via Cookiebot, though additional security headers and a vulnerability disclosure mechanism are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, scoring 78 out of 100 in the AI assessment.

J

JMP s.r.o.

rozkladacipostele.cz

53

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

J

JMP s.r.o.

loznice.cz

50

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

A

Abakus

abakus.cz

55

Abakus is a Czech non-profit foundation established by the founders of Avast, dedicated to fostering positive social change in Czech society. The foundation focuses on supporting palliative care, family support, modern education initiatives, and storytelling projects to raise awareness on important social issues. The website is professionally designed using WordPress and Elementor, providing clear navigation and content relevant to its mission. The technical infrastructure is modern and hosted with Google Domains, ensuring reliable performance and security with HTTPS enabled. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is generally good with no visible vulnerabilities, but could be improved by adding security headers and a published security policy. Overall, the website presents a trustworthy and professional image aligned with its non-profit mission.

F

FlexiSystems s.r.o.

edituj.cz

33

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web solutions including complex web projects, e-commerce platforms, and visual editing content management systems. The company targets businesses requiring tailored web development services primarily within the Czech Republic. The website demonstrates a professional design with clear navigation and relevant content, supporting its position as a specialized technology provider. Technically, the site employs common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and uses a custom CMS with visual editing capabilities. Mobile optimization and SEO practices are adequately addressed, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented policies. The absence of WHOIS data limits domain trust verification, but the presence of clear company contact details and client logos supports business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

Č

Česká asociace rozvojových agentur

cara.cz

53

Česká asociace rozvojových agentur (ČARA) is a well-established non-profit association in the Czech Republic that unites regional development agencies to support regional competitiveness and policy implementation. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a mature approach to compliance. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and various UI libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The lack of WHOIS data is a notable gap, reducing domain trustworthiness and warranting further verification. Overall, the site is functional, compliant, and serves its target audience effectively.

T

Telema AS

telema.lt

43

Telema AS is a well-established technology company specializing in Electronic Data Interchange (EDI) services, facilitating automated and accurate electronic document exchange between businesses. With over 25 years in the market and a strong presence in Lithuania and the Baltic region, Telema serves thousands of stores and suppliers, positioning itself as a trusted partner in business process automation and ERP integration. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a network of certified software partners. Technically, the site is built on WordPress with modern libraries and tools, including robust analytics and marketing integrations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Privacy compliance is well addressed with Cookiebot consent management and clear privacy policies. Overall, the site projects professionalism, trustworthiness, and technical competence.

T

Telema AS

telema.ee

42

Telema AS is a well-established Estonian technology company specializing in Electronic Data Interchange (EDI) and e-invoicing services, primarily serving the Baltic region. The company positions itself as a market leader and standard developer with a strong focus on seamless and automated business document exchange. Their services cater to businesses seeking efficient and reliable data exchange solutions, supported by a network of certified software partners and global roaming capabilities. The website reflects a mature digital presence with multi-language support and regional domains. Technically, the site is built on WordPress with modern front-end libraries and integrates advanced marketing and analytics tools, including consent management for GDPR compliance. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

C

Creative Wings

creative-wings.ro

43

Creative Wings is a Romanian digital agency specializing in building websites, web and mobile applications, ecommerce solutions, and online marketing services. With over 12 years of experience, the company positions itself as a creative and functional partner for businesses seeking to establish or enhance their online presence. Their website reflects a professional design with clear navigation and good content relevance, targeting businesses looking for tailored digital solutions. Technically, the site uses modern front-end libraries such as GSAP and Swiper.js, hosted by CYBER_FOLKS S.R.L., but lacks some advanced security configurations such as DNSSEC and security headers. The absence of privacy and cookie policies indicates gaps in compliance with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility.

A

addCar

addcar.com

55

addCar Rental operates an international online car rental service offering vehicle bookings across Europe, the USA, the Middle East, and other countries. The company targets travelers seeking affordable and reliable car rentals with services including airport pickup, insurance protection, flexible cancellations, and 24/7 support. The website reflects a medium-sized business with a consistent brand presence and recognition such as the 2024 booking.com Traveller Review Award. Technically, the site uses modern frameworks like Angular and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and provides a responsive, well-structured user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website and business presence. Overall, the site scores well on content quality and business credibility but should address WHOIS transparency and security header implementation to improve trust and compliance.

L

Lappset Group

lappset.com

65

Lappset Group is a global manufacturer and supplier specializing in playground equipment, outdoor exercise equipment, park furniture, and interactive sports equipment. The company targets diverse markets including schools, public spaces, private yards, sports facilities, healthcare, and leisure sectors. Their business model includes manufacturing, custom solutions, and lifecycle services such as installation, maintenance, and recycling. The website reflects a well-established brand with comprehensive product and service offerings, supported by certifications like Environmental Product Declarations (EPDs). Technically, the website is built on modern frameworks such as Vue.js and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance.

B

Baltic Legal

baltic-legal.com

44

Baltic Legal is a specialized corporate law office providing company formation, legal, accounting, and immigration services focused on the Baltic states of Latvia, Estonia, and Lithuania. The company targets entrepreneurs and businesses seeking to establish operations in these countries, offering a one-stop solution for business registration, tax management, and residence permits through investment. The website content is professionally structured and provides detailed service descriptions, although it lacks explicit contact information and privacy policies. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, Font Awesome icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, but lacks advanced accessibility features and security headers. The absence of HTTPS status information and security headers suggests room for improvement in security posture. From a security perspective, the site does not expose sensitive data and uses no known vulnerable libraries. However, the lack of privacy and cookie policies, absence of contact details for incident response, and missing WHOIS registration data reduce trustworthiness and compliance with data protection regulations. The WHOIS query returned no registration data, which is inconsistent with the active website presence and raises concerns about domain legitimacy. Overall, Baltic Legal presents a credible business offering with good content quality and technical implementation but requires significant improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

KV.EE is a leading Estonian real estate portal offering a wide range of property listings including apartments, houses, land, and commercial spaces for sale and rent. The website targets Estonian property buyers, sellers, and renters, positioning itself as the first and foremost real estate portal in Estonia. The business model revolves around providing an online marketplace and listing service for real estate, supported by RSS feeds and categorized property types. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, and uses popular fonts and icon libraries. The design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible advanced frameworks or CMS identification and shows moderate performance.

D

Decacorn Capital

decacorncapital.com

66

Decacorn Capital is a Singapore-based venture capital firm specializing in funding innovative technology startups and disruptive companies. The firm positions itself as a backer of 'rebel minds' aiming to create new opportunities and unlock possibilities in various sectors including AI, cybersecurity, fintech, and more. Their portfolio includes a mix of unicorns, decacorns, and acquired companies, demonstrating a strong market presence and investment acumen. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and comprehensive security headers, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site reflects a professional and credible investment firm with a solid digital infrastructure.

E

ESL Shipping

eslshipping.com

51

ESL Shipping is a leading shipping company specializing in dry bulk cargo transportation in the Baltic region, with a strong emphasis on sustainable and year-round operations even under challenging weather conditions. The company operates a fleet of ice-class vessels and is a subsidiary of Aspo Plc, indicating a solid corporate backing. Their services include geared fleet shipping, transshipments at sea, Arctic shipments, and innovative solutions like Virtual Arrival to reduce emissions. The website reflects a mature digital presence built on the HubSpot CMS platform, incorporating modern web technologies and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and the jQuery version updated. The absence of WHOIS registrant data slightly reduces trust but is mitigated by the professional content and clear business affiliations. Overall, ESL Shipping presents a credible, professional, and trustworthy online presence aligned with its business objectives.

I

Islamic Azad University | Dubai Branch

iau.ae

49

Islamic Azad University Dubai Branch is an educational institution offering fourteen quality and cost-effective degree programs with English as the medium of instruction. The university aligns its curricula with nationally approved standards, targeting students in Dubai and the UAE region. The website is built on a WordPress platform using Elementor, indicating a modern and maintainable technical infrastructure. SEO practices are implemented, and the site is mobile optimized with good user experience. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and incident response information. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional and credible but would benefit from enhanced privacy and security disclosures.

The American Chamber of Commerce in Estonia (AmCham Estonia) is a well-established non-profit organization founded in 2010 that serves as a key platform for business professionals and investors from 25 countries to foster a competitive business climate in Estonia. The organization offers membership-based services including advocacy, networking, events, and business visibility. The website reflects a professional and consistent brand image with comprehensive content about membership, events, and partners. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

Stimscape OÜ is a small specialized service provider operating primarily in Estonia and Finland, offering digital imaging technician (DIT) services and technical solutions for film and TV production sets and studios. Their key offerings include on-set data management, LTO archiving, and IT solutions tailored to the media production industry. The website presents a professional image with clear navigation, client logos, and references to notable film and TV projects, positioning the company as a niche technical partner in the media sector. Technically, the website uses a basic but functional technology stack including jQuery, Google Fonts, Font Awesome, and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. No CMS or hosting provider details are evident. SEO is basic with meta keywords and description present but no advanced structured data or Open Graph tags. From a security perspective, the site lacks critical security headers and does not provide privacy or cookie policies, which impacts GDPR compliance. No forms or user input fields reduce attack surface, but the absence of incident response contacts and security policies indicates a low maturity in security governance. The WHOIS data aligns well with the business claims, showing a consistent registrant in Estonia, supporting domain legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security posture, and more comprehensive contact and policy disclosures to increase trust and reduce risk.

H

Hedgehog OÜ

hedgehog.ee

47

Hedgehog OÜ is a specialized Estonian electronics engineering bureau established in 2011, focusing on economical and reliable system design, prototyping, and manufacturing. Their expertise spans analog and digital circuit design, PCB layout, and embedded software development, serving startups, IT, and electronics companies as well as academic institutions. The website reflects a professional and consistent brand image with detailed team contacts and service descriptions. Technically, the site uses a CMS (Voog), jQuery, Google reCAPTCHA for form security, and Facebook SDK for social integration. While HTTPS is enabled and forms are protected with reCAPTCHA, the site lacks explicit privacy and cookie policies and security headers, which are areas for improvement. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the site is functional, trustworthy, and professionally presented but could enhance compliance and security posture.

L

Leden Group

ojalagroup.com

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and production of cold roll formed steel profiles. The company is positioned as a leading partner in the Baltic region, offering comprehensive OEM services from design to logistics. It is part of the HANZA Group, which enhances its market presence and operational capabilities. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and Elementor for content management and user experience. Technical infrastructure includes modern JavaScript libraries and consent management tools, indicating a mature digital strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance resilience. Privacy compliance is supported by Usercentrics consent mechanisms, though explicit privacy and security policies could be more comprehensive. Overall, the website and business demonstrate high trustworthiness and professionalism, suitable for industrial clients seeking reliable manufacturing partnerships.

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

C

Colombo Stock Exchange

cse.lk

72

The Colombo Stock Exchange (CSE) is the primary stock exchange in Sri Lanka, serving as a critical financial market infrastructure provider. The website offers comprehensive information on equity and debt trading, market disclosures, financial reports, and investor education. It targets investors, listed companies, and financial professionals within Sri Lanka and the broader financial community interested in Sri Lankan markets. The CSE holds a significant market position as the national stock exchange, facilitating capital market activities and supporting economic growth.

A

Apifonica

apifonica.com

80

Apifonica is a medium-sized telecommunications technology company specializing in AI-powered customer communication solutions including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving over 200 clients with thousands of integrations. Their technical infrastructure leverages modern web technologies such as Vue.js and integrates with major analytics and marketing tools like Google Analytics and HubSpot. Security posture is strong, evidenced by ISO 27001 certification, regular penetration testing, and GDPR compliance. The website is professionally designed, mobile-optimized, and provides comprehensive legal and security documentation. However, the absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, though the overall business credibility remains high based on content and certifications. Strategic recommendations include improving transparency on domain registration and publishing additional security headers and a security.txt file.

T

Technics in Management Transfer (TMT)

tmt-aba.com

52

Technics in Management Transfer (TMT) is a specialized consulting firm established in 1978 in Tokyo, Japan, focusing on labor and human resource consulting for multinational firms. The company offers services including personnel policy, rules of employment, staff reduction, compensation design, union relations, and training seminars. The website presents a professional image with clear service descriptions, founder information, and client testimonials, targeting businesses operating in Japan seeking HR and labor consulting expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content appears credible. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

L

Location Unit

locationunit.ee

42

Location Unit is a specialized service provider offering location rental and management services primarily for TV commercials, films, and photo shoots. Established in 2014 and based in Estonia, the company targets media production professionals in the Baltic region. Their website reflects a focused business model with clear service categories including green products, facilities, vehicles, and equipment rentals. The company maintains a consistent brand presence and leverages modern web technologies such as Next.js and React for their digital platform. The site is mobile-optimized and performs well, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies or consent mechanisms. The WHOIS data confirms domain legitimacy with a consistent registration history and alignment with the business location. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to strengthen trust and compliance.

D

Digimatch OÜ

digimatch.eu

46

Digimatch OÜ is a specialized international business consultancy founded in 2020, focused on facilitating Estonian digital companies' growth in the German market. Leveraging a vetted network of partners and a mission to accelerate growth through partnerships, Digimatch offers matchmaking, warm lead connections, market research, entry strategy, and funding assistance. The company operates primarily in the technology sector with a small-sized business profile based in Estonia. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers, though explicit security policies and cookie consent mechanisms are absent. Privacy policies are comprehensive and GDPR compliant. Contact information is clearly provided, including email, phone, and physical address, alongside social media presence on LinkedIn and Facebook.

S

SPARK Social

sparksocial.ee

43

SPARK Social operates an Estonian-based online social media training platform branded as SPARK PRO koolitus. The website offers a comprehensive social media course targeting individuals ranging from beginners to professionals, including social media specialists, marketers, and small business owners. The business model is centered on paid online education with scheduled live sessions via Google Meet, supplemented by Q&A with industry experts and access to recorded materials. The company leverages known social media strategists and creative professionals as instructors, enhancing credibility and market positioning within the education sector in Estonia. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, WPBakery Page Builder for layout, and Slider Revolution for visual content. It uses modern web technologies including jQuery, Google Fonts, and Font Awesome icons. Hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO optimizations are basic. From a security perspective, the site enforces HTTPS and uses secure forms via Contact Form 7. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended best practices. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of a privacy policy and cookie consent mechanism, which poses a compliance risk under GDPR. Analytics usage includes Google Analytics, indicating moderate user tracking. Overall, the website is professionally designed and credible, with a clear business focus and consistent branding. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance trust and regulatory adherence.

C

Modebranschens Nyheter: E-handel, Varumärken och Interaktiv Kundupplevelse

consortiofashiongroup.com

60

ConsortioFashionGroup.com is a small-scale WordPress-based blog focused on delivering news and insights related to the fashion industry, specifically targeting e-commerce, brand strategies, and interactive customer experiences. The website content is primarily in Swedish and features articles authored by a consistent author, indicating a focused editorial approach. The business model centers on content publishing to attract fashion professionals and enthusiasts interested in digital marketing and investment trends within the fashion sector. Technically, the website leverages WordPress CMS with common web technologies such as jQuery and Bootstrap Grid for responsive design. Hosting and DNS services are provided via Cloudflare, ensuring reliable DNS resolution and HTTPS encryption. The site uses Matomo analytics for visitor tracking but lacks visible cookie consent mechanisms, which may impact privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available, indicating gaps in compliance and transparency. No vulnerabilities or suspicious activities were detected. Overall, the website presents a professional and consistent brand image with good content quality and user experience but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and regulatory adherence.

Ritsu is an established Estonian manufacturer specializing in log houses, including glued laminated timber and round log houses, with nearly 30 years of experience and over 4000 buildings produced. The company targets customers valuing natural materials, good indoor climate, and quality craftsmanship. Their market position is strengthened by ISO 9001:2015 certification and exports to over 40 countries. The website is built on WordPress with modern UI libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, including email, phone, physical addresses, and a detailed contact form.

G

Geo S.T.

geo.ee

48

Geo S.T. is an established Estonian company specializing in geodetic measurements, 3D laser scanning, construction geodesy, and cadastral services. Founded in 2010, it serves clients in energy, transportation, and real estate sectors, offering precise surveying and modeling solutions. The company maintains a professional web presence with clear service descriptions and partner affiliations, targeting construction and industrial clients. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, integrating Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized and moderately performant, though accessibility and SEO could be improved. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy but no consent mechanism or detailed privacy policy. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.

Z

Zone Media OÜ

rahinge.ee

47

Rahinge.ee is a small Estonian website focused on promoting and providing information about Rahinge Wakepark, a water sports and relaxation destination near Tartu, Estonia. The site offers content about wakeboarding, SUP boards, canoe and kayak rentals, and leisure facilities such as beaches and ball courts. The business model centers on regional water sports enthusiasts and visitors seeking recreational activities. The website is built on WordPress with popular plugins and themes, showing moderate performance and good mobile optimization. SEO practices are adequately implemented with proper meta tags and structured data. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and no cookie consent mechanism is present. Contact information is limited to a contact form without explicit emails or phone numbers. The domain is newly registered in 2025 by Zone Media OÜ, a known Estonian registrar and hosting provider, consistent with the website's launch timeframe. Overall, the site is functional and professionally designed but could improve in privacy compliance and security best practices.

T

The Catholic University of Eastern Africa

cuea.edu

57

The Catholic University of Eastern Africa (CUEA) is a well-established private international university based in Kenya, offering a wide range of academic programs including certificates, diplomas, undergraduate, postgraduate, and professional certifications. The institution positions itself as a premier university focused on producing morally upright and transformative leaders for the Church and society. The website reflects a mature digital presence with comprehensive academic and administrative content targeting prospective and current students, alumni, and researchers. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as LearnPress for LMS functionality, Elementor for page building, and LayerSlider for rich content presentation. The site uses HTTPS with good SSL configuration and integrates Google Analytics for visitor tracking. The design is responsive and user-friendly, with clear navigation and structured data enhancing SEO. From a security perspective, the site employs HTTPS and some security best practices but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's claims. Overall, the website is professional and credible but should enhance privacy compliance and security headers to improve trust and regulatory adherence.

C

Certex Eesti

certex.ee

54

Certex Eesti is a medium-sized Estonian company specializing in the sale of steel wire ropes, lifting slings, load securing equipment, and related accessories. It operates an e-commerce platform integrated with a comprehensive product catalog targeting industrial and construction sectors. The company is part of the Lifting Solutions Group, indicating a solid market position within the lifting equipment industry in the Baltic region. The website demonstrates good digital maturity with modern CMS usage (Pimcore), responsive design, and integration of consent management and analytics tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it suitable for B2B and B2C customers seeking lifting and securing solutions.

Tehnolabor OÜ is a specialized technology development laboratory based in Estonia, focusing on electronics, automation, telecommunication, and industrial solutions. With over 20 years of experience, the company offers comprehensive services from prototype creation to product development and production management. Their portfolio includes projects in healthcare, transportation, and industrial sectors, with notable collaborations such as Airbus and EU-funded research initiatives. The company targets businesses and individuals seeking reliable technology development and automation solutions. Technically, the website is built on WordPress with common plugins and modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is adequate with enforced HTTPS, though improvements are needed in security headers and server-side HTTPS enforcement. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for compliance and security enhancements.

S

SandFox OÜ

sandfox.ee

42

SandFox OÜ is a small Estonian company founded in 2016 specializing in integrated energy storage solutions, smart battery management, solar panel integration, and Linux-based IT infrastructure services. The company targets industrial clients and businesses in the energy sector, offering critical IT and industrial automation solutions. Their market position is supported by partnerships with major technology vendors such as RedHat, IBM, Huawei, and SUSE, and they emphasize business-critical IT solutions and energy management. Technically, the website uses a basic but functional stack including jQuery, Google Analytics, and Google Translate, hosted likely by Zone Media OÜ. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and visible privacy compliance mechanisms. Overall, the company presents a credible and trustworthy business presence with room for improvement in privacy compliance and technical modernization.

P

PRxDigital

prxdigital.com

52

PRxDigital is a well-established digital marketing and communications agency specializing in PR, branding, social media, crisis management, public affairs, advertising, and targeted networking. With a history dating back to 1975 and a domain registered since 2010, the company serves a diverse clientele primarily in the San Francisco Bay Area and Silicon Valley, focusing on technology and other sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and some security best practices, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and credible but would benefit from improved privacy and security disclosures.

P

Printlanti Oy

printlanti.fi

49

Printlanti Oy is a Finnish print management company specializing in print brokerage and production management services. With over 10 years of experience and a strong network across Finland and the Baltic region, they provide cost-effective print solutions to small and medium-sized enterprises. Their website reflects a professional and consistent brand image, targeting businesses seeking expert print management to optimize resources and reduce costs. Technically, the site is built on WordPress using the Enfold theme, incorporating modern web technologies and marketing tools such as Google Analytics and Survicate. Security posture is solid with HTTPS enabled and standard domain protections, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are present. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

R

Reiven Solutions

reiven.eu

47

Reiven Solutions is a small Estonian technology service provider specializing in web-based software, custom IT solutions, hosting, and marketing services. The company targets businesses and organizations seeking tailored web development and IT support. Their website presents a professional and consistent brand image with a focus on quality solutions and client engagement through portfolio showcases and service descriptions. Technically, the site is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern web technologies and responsive design. The use of Matomo analytics and Cookiebot indicates a moderate level of digital maturity with attention to user privacy preferences. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

C

Communications Test Design, Inc.

ctdi.com

55

Communications Test Design, Inc. (CTDI) is a well-established company founded in 1975, specializing in global engineering, repair, and logistics services primarily for the telecommunications sector. The company offers a broad range of services including STB/CPE, mobile and consumer electronics, mobility product solutions, network services, product supply, and hyperscale AI data center and cloud services. CTDI targets telecom carriers, cable companies, and OEMs worldwide, operating over 100 global locations with a strong emphasis on innovation and service excellence. Technically, the website is built on a modern WordPress CMS platform using Elementor for design and layout, supported by SEO and performance optimization plugins such as Yoast SEO and WP Rocket. The site demonstrates good mobile optimization and moderate performance, with standard analytics and marketing tools including Google Tag Manager and Facebook Pixel. However, some accessibility features are basic, and security headers are not visibly implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. Nonetheless, the absence of security headers and lack of visible privacy and cookie policies indicate areas for improvement. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not contradict the legitimacy suggested by the website content and branding. Overall, CTDI presents a professional and credible online presence with a solid business model and global footprint. Strategic recommendations include enhancing privacy compliance by publishing clear policies and cookie consent mechanisms, implementing security headers, and providing incident response and vulnerability disclosure information to strengthen trust and security posture.

B

Büroomaailm

byroomaailm.ee

67

Büroomaailm is an established Estonian e-commerce retailer specializing in office supplies, office technology, furniture, and school and art supplies. The website targets both retail and wholesale customers within Estonia, offering a broad product range and a professional online shopping experience. The platform is built on Magento 2 with various extensions enhancing functionality, including wishlist management and advanced search features. The site employs modern JavaScript libraries and tracking tools such as Hotjar, Microsoft Clarity, and Google Tag Manager to monitor user behavior and optimize marketing efforts. Security-wise, the site enforces HTTPS with a good SSL configuration but lacks visible security headers and published security policies. Privacy compliance is weak, with no explicit privacy or cookie policies detected, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

R

Roksnet Solutions OÜ

roksnet.com

53

Roksnet Solutions OÜ is a technology company specializing in secure data exchange platforms based on the X-Road protocol, which is widely used in Estonia, Finland, and other countries. The company offers platform-as-a-service solutions and consultancy to governments and organizations aiming to build interoperable digital societies. Their market position is strengthened by their extensive experience and EU Horizon 2020 funding, positioning them as a credible player in the digital interoperability space. Technically, the website is built on a modern stack including Laravel, Bootstrap, and jQuery, hosted on DigitalOcean, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though lacking explicit security policies and security headers. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-aligned with the business claims.