Medium-risk security reports

The website www.budgetlac.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to any substantive content. The WHOIS lookup for the domain returned no registration data, indicating the domain may not be registered or the data is unavailable, which raises concerns about the legitimacy and transparency of the site. No business information, contact details, or privacy-related policies are present or accessible. The technical infrastructure relies on Cloudflare services for security and performance, but the lack of accessible content and metadata prevents a full assessment of the site's business or security posture. Overall, the site presents a high risk due to lack of transparency and accessibility.

Budget Truck Rental Canada operates a professional and well-structured website offering moving truck rentals and related services primarily targeting Canadian customers. The site is built on a modern technology stack including AngularJS and Adobe Experience Manager, integrating multiple analytics and marketing tools to optimize user engagement and business insights. The business is positioned as a large transportation service provider with a strong brand presence in Canada. Security posture is moderate with HTTPS usage and secure analytics scripts, but lacks visible security headers and explicit privacy or incident response policies. WHOIS data is unavailable, likely due to privacy protection, which limits domain trust verification but is common for commercial entities. Overall, the website is functional, professional, and trustworthy with room for improvement in privacy compliance and security transparency.

Lost Returns, Inc. operates a specialized lost property management platform that leverages AI for inventory matching and integrates with major shipping carriers to facilitate efficient return of lost items. The company targets businesses across various industries, particularly transportation and rental sectors, providing a SaaS-based solution to streamline lost and found operations and improve customer satisfaction. The website demonstrates a professional and modern digital presence built on Next.js and React, with good mobile optimization and performance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response information are lacking. Privacy compliance is supported by a comprehensive privacy policy but lacks a cookie consent mechanism. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business credibility is supported by client testimonials and recognized brand partnerships.

Dollar Car Rental UK, operated under The Hertz Corporation, provides car hire and rental services across Europe with over 400 locations. The website offers a user-friendly booking platform, special offers, and comprehensive customer support. The brand is well-established since 1965 and targets travelers seeking budget-friendly and flexible car rental options. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF tokens, and cookie consent mechanisms, though some security headers could be improved. The WHOIS data for the domain 'www.dollar.co.uk' is unavailable or invalid, but the website content and branding strongly indicate legitimacy as part of the Hertz group. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Thrifty.nl is the Dutch localized website of Thrifty Car Rental, a well-established car rental brand operating under The Hertz Corporation. The company offers affordable and flexible car rental services across the Netherlands and Europe, targeting cost-conscious travelers and business clients. The website provides a comprehensive booking platform, detailed fleet information, and localized content in Dutch, supported by a strong brand presence and social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent mechanisms, and CSRF protections, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies, and incident response information is publicly available. Overall, the site reflects a mature digital presence aligned with a large transportation company.

Thrifty, operated by The Hertz Corporation, is a well-established car rental service provider founded in 1958, targeting cost-conscious travelers primarily in Italy and Europe. The website offers a comprehensive range of rental vehicles including electric and hybrid options, supported by a network of over 1000 locations. The digital platform is modern, mobile-optimized, and integrates advanced tracking and consent management tools, reflecting a mature technical infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protections, though some security headers could be enhanced. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site projects a professional and trustworthy image aligned with its parent company's reputation.

Thrifty.de is the German localized website of Thrifty Car Rental, a well-established car rental brand founded in 1958 and a subsidiary of The Hertz Corporation. The website offers comprehensive car rental services across Germany and Europe, targeting price-conscious business and leisure travelers. It provides a user-friendly booking interface, detailed fleet information, and multiple language and country options, reflecting a mature digital presence. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and slick-carousel, combined with a robust cookie consent mechanism powered by securiti.ai and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and CSRF protections, though explicit security headers and a dedicated security policy page are absent. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The domain registration aligns with the brand's legitimacy and history, reinforcing trust. Overall, the website demonstrates a professional, secure, and user-centric platform suitable for an enterprise-level transportation service provider.

Thrifty Car Rental operates a professional and user-friendly website focused on providing car rental services primarily in Ireland with global reach. The company offers a broad range of vehicles and emphasizes competitive pricing and convenience. The website integrates modern technologies such as jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and accessible user experience. Privacy and cookie policies are clearly presented with a consent mechanism, reflecting compliance with GDPR standards. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security practices are generally sound with HTTPS and CSRF protections, though additional security headers could enhance the posture. Overall, the site represents a credible and established business in the transportation sector with room for technical and security improvements.

Budget Car Rental Canada operates a comprehensive online platform for car rental services targeting Canadian consumers and businesses. The website offers reservation capabilities, promotional deals, loyalty programs, and additional services such as moving truck rentals. The company positions itself as a major player in the Canadian transportation rental market with strong branding and partner integrations. Technically, the site leverages modern web technologies including AngularJS, Adobe Experience Manager CMS, and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS enforcement and bot protection via reCAPTCHA Enterprise, though some security headers are not explicitly detected. Privacy compliance is moderate due to lack of visible privacy and cookie policies in the provided content. WHOIS data is unavailable, likely due to privacy protection, but the site content and branding indicate legitimacy. Overall, the site is professional, user-friendly, and well-optimized for mobile users.

AS Kihnu Veeteed operates as a regional ferry transportation service provider in Estonia, specializing in ferry routes connecting several islands including Kihnu, Vormsi, Hiiumaa, Saaremaa, and others. The company offers online ticket sales through a modern React-based single-page application, targeting residents and visitors requiring reliable ferry transport. The website is professionally designed with consistent branding and provides essential information such as schedules, routes, and news updates. Technical infrastructure leverages modern web technologies including React, Material-UI, service workers for offline capabilities, and Google Analytics for user behavior tracking. Hosting and DNS services are managed via Google Cloud infrastructure, ensuring reliable uptime and performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility, with recommendations to enhance security headers, DNSSEC, and incident response disclosures to strengthen trust and compliance.

Visit Pärnu operates a well-established regional tourism portal focused on the Pärnu area in Estonia, providing comprehensive information on accommodation, dining, events, transport, and general tourism guidance. The website targets tourists and visitors seeking detailed and localized travel information. The business is positioned as a key regional tourism information provider with a clear focus on hospitality and visitor services. Technically, the site is built on WordPress with Elementor and integrates modern plugins for search, analytics, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and no critical vulnerabilities detected, though improvements in DNSSEC and security headers are recommended. Privacy compliance is robust with accessible privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates a professional and trustworthy online presence with good user experience and content relevance.

Eestitoit.ee is a government-affiliated website focused on promoting Estonian food culture, local food products, and sustainable food practices. It serves as an informational and educational platform targeting Estonian residents, food enthusiasts, and culinary tourists. The site is well-branded and consistent with official government initiatives, featuring rich content about food events, traditions, and sustainability projects. Technically, the website is built on Drupal CMS and uses modern analytics tools such as Google Analytics and Matomo. It is mobile-optimized and accessible, with good SEO practices. Security-wise, the site implements cookie consent with an opt-in mechanism but lacks visible advanced security headers and a published privacy policy or terms of service. WHOIS data confirms the domain's legitimacy and long-standing registration since 2010. Overall, the website is professional, trustworthy, and serves its informational purpose effectively.

PRIA (Põllumajanduse Registrite ja Informatsiooni Amet) is the official Estonian government agency responsible for managing agricultural subsidies, registers, and providing information services to farmers and rural entrepreneurs. The website serves as a comprehensive portal offering subsidy information, registers, news, and e-services such as the e-PRIA login portal. The site targets Estonian agricultural stakeholders and the general public interested in rural development. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics and business intelligence tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and shows no signs of exposed sensitive data or vulnerabilities. Overall, the website demonstrates a strong security posture and good privacy compliance, supporting its role as a trusted government resource.

SYNLAB Eesti is the largest medical laboratory in Estonia, operating since 1995 and part of the global SYNLAB Group. The company provides a wide range of medical laboratory testing services targeting medical professionals, private clients, and employers. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. It offers multilingual support and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Contact is primarily via a contact form, with no exposed direct emails or phone numbers. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

Perearst24.ee is a healthcare-focused digital platform serving family doctor centers in Estonia by providing a secure environment for patients to submit electronic health inquiries. The platform enhances health data security and facilitates better patient-doctor communication by allowing 24/7 submission of health concerns, which are processed during the centers' operational hours. The website is professionally designed with a clear focus on its target audience, patients of Estonian family doctor centers. Technically, the site employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and user-friendly experience. Security is well-handled with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are absent. Overall, the site demonstrates a good security posture and compliance with privacy regulations, including GDPR, supported by clear privacy and cookie policies. However, contact information and incident response details are not directly available, which could be improved to enhance trust and transparency.

Lääne-Virumaa Spordiliit is a regional sports organization based in Rakvere, Estonia, focused on leading and developing sports activities in the Lääne-Virumaa region. The website serves as an informational portal primarily targeting local residents and sports enthusiasts. The business model is non-profit and community-oriented, with a clear regional focus. The website is built on the Wix platform, leveraging Wix Thunderbolt and standard web technologies, providing a moderate level of performance and mobile optimization. However, the site lacks comprehensive privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS and some JavaScript hardening but could be improved with additional security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

Sport.ee is a government-affiliated Estonian sports information portal managed by Spordikoolituse ja -Teabe SA. It serves as a comprehensive platform providing data on sports training, coaching qualifications, sports organizations, events, and statistics. The site targets sports organizations, coaches, athletes, and enthusiasts within Estonia, positioning itself as a key national resource for sports-related information and management. The business model revolves around offering informational services and integration with official sports registers and government bodies. Technically, the website employs a modern tech stack including Bootstrap, jQuery, AngularJS, and various libraries for UI and data visualization, ensuring a responsive and user-friendly experience. Performance is moderate with good mobile optimization and basic accessibility features.

Spordikoolituse ja -Teabe Sihtasutus is an Estonian government-affiliated foundation specializing in sports education, information management, and support services. It operates key national sports registers, administers coach certification and labor cost subsidies, and coordinates EU-funded sports projects. The website is well-structured, content-rich, and primarily targeted at sports organizations, coaches, and sports employees within Estonia. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes multilingual support and cookie consent mechanisms. Security posture is solid with HTTPS and nonce usage, but lacks advanced security headers and published security policies. The domain is well-established since 2010, registered by a credible Estonian registrar consistent with the organization's profile. Overall, the site demonstrates good professionalism and trustworthiness but could improve privacy compliance and security transparency.

Lõuna-Eesti is a regional tourism promotion website dedicated to showcasing the cultural, natural, and hospitality offerings of South Estonia. The site targets tourists, families, pet owners, and tourism professionals, providing rich content about local attractions, events, and accommodations. The business operates as a regional destination marketing organization with a focus on enhancing visitor experience and promoting local culture and nature. Technically, the website is built on WordPress, leveraging modern tools such as Gravity Forms, Rank Math SEO, Hotjar, and Google Analytics. The site is hosted on a provider associated with the domain's nameservers and employs HTTPS with a good SSL configuration. Security posture is solid with cookie consent mechanisms and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a detailed cookie consent banner but no explicit privacy policy or terms of service found. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in privacy and security documentation.

Visit Jõgeva is a regional tourism website dedicated to promoting the Jõgevamaa region in Estonia. It provides comprehensive information on local events, attractions, accommodation, food, active holidays, and local products, targeting tourists and visitors interested in exploring this area. The website is multilingual, supporting Estonian, English, German, Finnish, and Latvian languages, enhancing accessibility for international visitors. The business model focuses on informational and promotional services to boost regional tourism.

ProgeTiigri.ee is an official educational platform managed by the Estonian Ministry of Education and Research, providing a curated collection of over 100 educational tools and materials focused on programming, robotics, 3D design, and multimedia for teachers and educators. The website serves as a resource hub to support teaching activities with filtering capabilities to find suitable materials. The platform targets primarily educators in Estonia and operates as a government-backed educational resource. Technically, the website employs modern web technologies including Vue.js, jQuery, and the Foundation CSS framework, with integration of Google Analytics and Google Tag Manager for user tracking and analytics. The site is mobile optimized and accessible, with a moderate performance profile. Hosting appears to be managed by a government or educational network provider, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, alongside a cookie consent mechanism compliant with GDPR principles. However, it lacks several security headers that could enhance protection against common web threats. No privacy policy or terms of service pages were found, which represents a compliance gap. No explicit contact information or incident response channels are provided, limiting user support and security communication. Overall, the website is trustworthy and professionally maintained, with strong legitimacy due to government ownership and consistent domain registration. The main risks relate to missing formal privacy and security documentation and absence of security headers. Strategic improvements in these areas would enhance compliance and security posture.

Visit Tallinn is the official tourism portal managed by the Tallinn City Tourist Office & Convention Bureau, providing comprehensive information about the city's attractions, events, public transport, and dining options. The website targets tourists and visitors seeking practical and up-to-date travel information about Tallinn, Estonia. It holds a strong market position as the official city guide and tourism authority, supported by consistent branding and good content quality. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with integrations for analytics and tracking such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site demonstrates good mobile optimization and moderate performance, reflecting a mature digital infrastructure. Hosting and domain registration are consistent and stable, managed by Spin TEK AS since 2014. From a security perspective, the website uses HTTPS with good SSL configuration and includes several security-related HTTP headers. However, it lacks visible privacy and cookie policies, consent mechanisms, and incident response contact information, which are critical for GDPR compliance and user trust. No significant vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and transparency measures to improve user trust and regulatory adherence.

Bureau Veritas Eesti is a well-established branch of the global Bureau Veritas Group, specializing in certification, inspection, and sustainability services. The company offers a broad portfolio of services including ISO management system certifications, food safety, information security, and sustainability consulting, targeting businesses in Estonia. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site is built on Drupal 10, uses modern consent management tools (Didomi), and integrates Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not found. Privacy compliance is partially addressed via cookie consent but lacks a clearly accessible privacy policy page. Overall, the website demonstrates a mature digital presence with room for improvement in privacy transparency and incident response communication.

NOVOT Agentuur is a well-established full-service marketing agency based in Estonia, founded in 2006. The company offers a broad range of marketing services including branding, website development, campaign management, social media, and media planning. Their website reflects a professional and consistent brand image, targeting businesses seeking comprehensive marketing solutions. The digital infrastructure is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and CookieYes for privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a trustworthy and professional digital presence.

Luuletus.ee is a well-established Estonian online platform dedicated to poetry, offering a large collection of poems with daily updates. It targets Estonian poetry enthusiasts and writers, providing services such as poem publishing, sharing, user accounts, and curated collections. The platform is owned by Zone Media OÜ and has been operational since 2011, positioning itself as the largest Estonian poetry repository online. Technically, the website employs modern web technologies including HTTPS, Cloudflare CDN, Google Analytics, and lazy loading for images, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and uses service workers but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is addressed with a visible cookie consent mechanism and a basic privacy policy aligned with GDPR requirements. Overall, the website demonstrates a solid business credibility and technical maturity with room for security enhancements.

MTÜ Eesti Raamatukoguvõrgu Konsortsium operates as a non-profit consortium dedicated to serving the public interests of Estonian libraries. The organization provides key shared services such as the E-kataloog ESTER, Eesti artiklite andmebaas, Eesti märksõnastik, and the E-varamu portaal, targeting libraries, researchers, and the general public interested in library resources. The website reflects a medium-sized, well-established entity with a consistent brand and a clear focus on education and information services within Estonia. Technically, the website is built on a modern WordPress platform using the Enfold theme and several plugins including Yoast SEO and Ajax Search Pro. It employs HTTPS with good SSL configuration and integrates Google Analytics with user consent mechanisms. The site demonstrates good mobile optimization and accessibility features, including options for visually impaired users. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response information, and vulnerability disclosure channels. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, reinforcing the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the consortium, with room for improvement in security transparency and incident response readiness.

The website represents the Erasmus+ and European Solidarity Corps national agency in Estonia, providing comprehensive information, resources, and support for youth, youth workers, and organizations involved in European youth programs. It serves as a government-funded platform facilitating access to program opportunities, project guidance, and community engagement. The site is well-positioned as the authoritative national agency for these programs, targeting youth and professionals in the youth sector. Technically, the website is built on WordPress with modern performance and SEO optimizations, including WP Rocket and The SEO Framework. It employs Google Site Kit for analytics and consent management, ensuring GDPR compliance with a robust cookie consent mechanism. The site is mobile-optimized, accessible, and fast-loading, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs consent mode to restrict tracking and personalization. While explicit security headers and incident response policies are not evident, no vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the agency's Estonian identity, registered through a reputable local registrar without privacy protection, appropriate for a government entity. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy and professional platform for its audience.

Teeviit is an Estonian youth information portal affiliated with the Haridus- ja Noorteamet (Education and Youth Board). It provides comprehensive content on education, career, health, relationships, and social topics targeted primarily at young people. The website serves as a central hub for youth-related resources, including news, podcasts, event calendars, and partner portals such as Teeviit Juunior and Infohunt. The platform is well-positioned in the Estonian education and government sector as a trusted information source for youth.

Hannomal OÜ operates a professional web development and e-commerce service business based in Estonia, with a strong market presence since 2011. The company offers a comprehensive suite of services including website creation, e-shop development, graphic design, programming, and content writing, primarily leveraging the WordPress platform. Their website reflects a mature digital presence with good SEO and user experience design. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the business demonstrates transparency and credibility with clear contact information and consistent branding.

Eduten Ltd. operates a leading digital math learning platform originating from Finland, combining Finnish educational excellence with gamification and AI technologies. The platform targets K-12 students, teachers, school leaders, and parents worldwide, offering a comprehensive content library and AI-driven learning analytics. It holds a strong market position supported by over 15 years of university research and international awards such as the UNESCO ICT for education prize and UNICEF special edtech award. Technically, the website employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly digital education platform.

WEN Themes is a small technology company specializing in the development and distribution of WordPress themes and plugins. Established in 2015, the company offers both free and premium products targeting WordPress users seeking elegant and fresh website designs. Their business model includes direct product demos and sales, with payment processing handled through a partner platform, Theme Palace. The website demonstrates a professional and consistent brand presence with active social media channels and clear navigation.

ELIIS is a specialized online information system designed for pre-school organizations, including kindergartens, local governments, teachers, and parents. It offers a comprehensive suite of features such as curriculum planning, child development analysis, digital diaries, communication tools, and document management. The platform is positioned as a trusted solution across the EU, with over 15,000 teachers and 1,000 institutions relying on it. The business model is subscription-based, charging local governments per child, while teachers and parents have free access. The website is professionally designed, multilingual, and emphasizes GDPR compliance.

Sihtasutus Ida-Viru Investeeringute Agentuur (IVIA) is a public sector development organization based in Estonia, specializing in the creation and management of modern industrial and business parks in the Ida-Viru region. The agency facilitates investment by offering land plots with established infrastructure and provides free support services to investors, including administrative assistance and networking. The website reflects a well-established regional development entity with a clear focus on industrial real estate and investment promotion. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, and integrates Google Maps and reCAPTCHA for enhanced user experience and security. Security posture is strong with HTTPS, security headers, and consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the site presents a credible, professional, and trustworthy digital presence aligned with its public sector mission.

Spin TEK AS is an established Estonian IT company specializing in software and hardware development with over 30 years of experience. The company serves both private and public sector clients, focusing on developing functional, user-friendly, and flexible information systems tailored to client needs. Their website reflects a professional digital presence built on WordPress with Elementor and Astra theme, indicating a moderate level of digital maturity. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. Security posture is adequate with HTTPS enabled but could be improved by implementing security headers and formal incident response channels. Overall, the website demonstrates moderate trustworthiness and business credibility but would benefit from enhanced privacy compliance and security transparency.

Peatus.ee is a digital journey planning user interface focused on public transportation in Estonia, leveraging the Digitransit platform. The website targets public transport users seeking route planning and transit information. Technically, it employs modern web technologies including React, JavaScript, and integrates analytics tools such as Matomo and Google Tag Manager. The site demonstrates good security practices with HTTPS and security headers, but lacks explicit privacy and cookie policies, as well as contact information, which impacts privacy compliance and user trust. Overall, the domain registration data aligns well with the website's purpose, indicating legitimacy. Strategic improvements in privacy disclosures and user contact options would enhance compliance and trust.

Tervisekassa is the official Estonian national health insurance portal, providing information and services related to state health insurance, medical benefits, and healthcare access. The website targets insured individuals, employers, healthcare providers, and partners within Estonia. It offers comprehensive content on insurance coverage, medical services, reimbursements, and public health initiatives. The site is well-positioned as a government-backed service with a clear mission to facilitate healthcare access and information dissemination. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Siteimprove. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. Accessibility and mobile optimization are well addressed, with features like contrast toggling and skip links. Security posture is strong with HTTPS, cookie consent mechanisms, and bot protection via Google reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and GDPR-aligned consent management. Contact information is transparent, including official email and phone numbers, and social media presence is active on major platforms. Overall, the website demonstrates a mature digital infrastructure suitable for a public healthcare service, balancing usability, security, and compliance effectively.

EELIS (Eesti looduse infosüsteem) is an official Estonian government-operated environmental data portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides public access to nature conservation data, statistical analyses, and educational content about protected natural objects and areas in Estonia. The website targets researchers, environmental professionals, and the general public interested in Estonian nature data. The business model is non-commercial, focusing on transparency and public information dissemination. Technically, the website uses basic HTML and CSS without modern JavaScript frameworks or CMS detected. Hosting is provided by Zone Media OÜ, a reputable Estonian registrar and hosting provider. The site is functional but has limited mobile optimization and accessibility features. SEO and metadata are minimal, and no analytics or tracking services were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and contact information is limited to a feedback form without direct emails or phone numbers. The WHOIS data is consistent and legitimate, indicating a stable domain with no suspicious patterns. Overall, the website is trustworthy and credible as a government information portal but would benefit from enhanced security headers, privacy compliance documentation, and improved technical modernization to strengthen its security posture and user experience.

eElurikkus is a government-backed public portal aggregating biodiversity data for Estonia, integrating scientific, monitoring, and citizen science datasets. It serves researchers, environmental agencies, and the public by providing access to species taxonomy, occurrence records, and monitoring projects. The platform is built on the PlutoF biodiversity data infrastructure and collaborates with global partners like GBIF. Technically, the website uses modern JavaScript libraries such as Leaflet for mapping and Google Analytics for user tracking. The site is mobile-optimized with a clear navigation structure and good content relevance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy links. Overall, the site is trustworthy and professionally maintained, reflecting its governmental and research affiliations.

Keskkonnaportaal.ee is an Estonian government environmental data portal managed by Keskkonnaagentuur. It consolidates key environmental datasets and information to provide quality and up-to-date data for environmental stakeholders and the public. The portal uses Drupal 10 CMS and integrates modern frontend libraries and Google Tag Manager for analytics. The website is well-structured, mobile-optimized, and provides clear navigation through extensive environmental themes and data sources. Security posture is solid with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the site is credible, professional, and trustworthy, serving as a key government resource for environmental information in Estonia.

Loodusveeb is an official Estonian governmental environmental information portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides comprehensive information on Estonia's nature, biodiversity, ecological themes, citizen science projects, and environmental education. The website targets Estonian residents, environmental enthusiasts, researchers, and volunteers, serving as a trusted source for nature-related data and public engagement. Technically, the site is built on Drupal 10 with modern libraries and includes a cookie consent mechanism compliant with EU regulations. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the governmental nature of the site. Overall, the website is professional, trustworthy, and well-positioned as a governmental environmental resource.

Apotheka Beauty is a prominent Estonian e-commerce retailer specializing in health and beauty products, particularly pharmacy-approved cosmetics. The website offers a broad selection of products from well-known brands and targets consumers interested in healthy beauty solutions in the Baltic region. The platform is built on Magento CMS and integrates modern technologies such as Google Tag Manager, Hotjar, and Google Translate, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a positive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its target audience.

PetCity is a leading Estonian pet retail and veterinary service provider, operating a large e-commerce platform alongside physical stores and modern veterinary clinics in major cities such as Tallinn, Tartu, and Pärnu. The website is professionally designed, localized in Estonian, and targets pet owners primarily of cats and dogs. The business model integrates product sales with veterinary services, positioning PetCity as a comprehensive pet care provider in the Estonian market. Technically, the site leverages Magento as its e-commerce platform, enhanced with modern JavaScript frameworks and integrations such as Google Analytics, Google Tag Manager, Hotjar, and Google Translate for multilingual support. The site demonstrates good digital maturity with responsive design and accessibility considerations.

Visit Harju is the official tourism portal for Harju County, Estonia, providing comprehensive information on the region's natural beauty, cultural heritage, and leisure activities. The website targets tourists and visitors seeking to explore Harju's attractions, travel routes, and experiences. Managed by SA Harju Ettevõtlus- ja Arenduskeskus, it serves as a trusted regional resource with consistent branding and a clear focus on hospitality and cultural tourism. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. The site is mobile-optimized and accessible, with moderate performance and integration of analytics tools like Google Analytics and Plausible. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, though explicit security headers and policies are not fully documented. Privacy compliance is a notable gap, lacking visible privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent and legitimate, supporting the site's credibility as an official tourism portal.

Metana Digiagentuur is a small digital agency based in Tallinn, Estonia, specializing in website design, email marketing, and digital advertising services such as Meta Ads and Google Ads. The company targets businesses seeking comprehensive digital marketing and web development solutions. Their website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures.

The website 'Maardu 45' serves as a dedicated platform for celebrating the 45th anniversary of Maardu city in Estonia. It provides residents and visitors with information about the city's history, culture, events, and local government contacts. The site is positioned as a local government information portal aimed at community engagement and city promotion. Technically, the site leverages a modern tech stack including Alpine.js, jQuery, Leaflet for maps, and multiple analytics tools such as Google Analytics and Matomo, hosted likely by Telia Eesti AS. The website is mobile optimized and offers a good user experience with clear navigation and consistent branding. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies, which are important for GDPR compliance. The domain is very recently registered, which is somewhat unusual for a city site but may reflect a new dedicated event domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

Notarite Koda is the official Estonian organization representing notaries, providing authoritative information and services related to notarial acts, registers, and legal procedures. The website serves as a comprehensive portal for citizens and businesses to access notarial services, including an e-notary self-service platform for booking and managing transactions. The organization holds a strong market position as a government-related entity ensuring legal security in Estonia. Technically, the website is built on Drupal 7 with a moderate performance profile and good mobile and accessibility features, though some libraries like jQuery are outdated, posing potential security risks. Security posture is generally good with HTTPS enabled and secure form handling, but lacks visible security headers and explicit privacy or cookie policies, which impacts compliance and trust. Contact information is clearly presented, and social media presence enhances credibility. Overall, the site is professional and trustworthy but would benefit from modernization and enhanced privacy compliance.

Õigusbüroo HUGO.legal is an Estonian legal services platform offering fast, accessible legal advice through professional jurists. The website provides multiple consultation channels including in-office, video, web, and phone, targeting residents of Estonia. The platform also offers legal applications to help users resolve debt and other legal issues efficiently. The business is positioned as a trusted local legal aid provider with a strong digital presence and content marketing through blogs and testimonials. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good performance, SEO optimization, and mobile responsiveness. The site uses HTTPS with a valid SSL certificate and integrates Google Analytics for user tracking. However, DNSSEC is not enabled, and security headers are missing, indicating room for security enhancements. From a security perspective, the site demonstrates good baseline practices including HTTPS and cookie consent mechanisms. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency. The domain registration is stable but shows partial privacy in WHOIS data, which is reasonable for this business type. Overall, the website is professional, trustworthy, and well-optimized for its target audience. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and compliance. The business appears credible and well-established with a medium-sized market presence in Estonia.

Harjumaa Omavalitsuste Liit is a regional non-profit organization established in 2010 to foster cooperation and joint project development among local governments in Harjumaa, Estonia. The website serves as an information hub for governance, education, culture, health, safety, and regional development initiatives. It targets local government representatives, educational and cultural institutions, and the general public within the Harjumaa region. The organization positions itself as a key regional cooperation leader with a focus on community well-being and development. Technically, the website is built on a modern stack including Laravel Livewire, jQuery, and various JavaScript libraries for UI enhancements. It employs Google reCAPTCHA v3 for form security and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes CSRF tokens and reCAPTCHA to protect user inputs. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities were found in the analysis. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional government entity. Recommendations include enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen security posture and transparency.