Medium-risk security reports

VOLIS is a specialized electronic meeting and voting platform serving Estonian local governments, enabling virtual meetings, electronic voting, and public participation in municipal decision-making. The platform is supported by the Estonian Association of Cities and Municipalities and developed by Novian Eesti OÜ. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its government audience. Technically, the site uses legacy JavaScript libraries and Grails-based server-side rendering, with moderate performance and basic mobile optimization. Security posture is strengthened by ISKE certification and audit references, but outdated libraries and lack of modern security headers present risks. Privacy compliance is partial, with no cookie consent mechanism and limited GDPR indicators. Overall, the site is trustworthy and credible but would benefit from technical and compliance improvements.

Apotheka is a leading Estonian online pharmacy and health product retailer offering over 8000 products with fast delivery options including home courier and free pick-up from physical pharmacies. The website targets Estonian consumers seeking pharmaceutical, health, and cosmetic products. The business operates a multi-brand ecosystem including PetCity, Apotheka Beauty, Apollo, and Inimene.ee, indicating a broad market presence. Technically, the site is built on Magento with integrations for Google Tag Manager, Hotjar, and Google Translate, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in transparency of security policies and contact information.

The website kaitsealad.ee is an official Estonian government-related portal managed by Keskkonnaamet (Environmental Board) providing comprehensive information about Estonia's protected areas. It serves as an educational and informational resource for the public, nature enthusiasts, landowners, and youth conservation groups. The site offers news, events, maps, and educational content related to nature conservation and sustainable tourism. Technically, the site is built on Drupal 10 CMS with modern frontend libraries and is hosted via Zone Media OÜ. It features a cookie consent mechanism compliant with EU regulations and uses Matomo for analytics. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Contact information is clearly provided, enhancing trust and credibility. However, privacy policy and terms of service pages are not explicitly found, which is a gap in compliance. Overall, the site is professional, accessible, and trustworthy, supporting its government mission effectively.

Ida-Viru Ühistranspordikeskus is a non-profit organization dedicated to coordinating and providing public transportation services in the Ida-Viru region of Estonia. The website serves as an information hub for passengers and transport providers, offering schedules, route maps, contact details, and ticket purchasing options. The organization is small-sized, regionally focused, and operates transparently with clear contact information and official registration details. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and Yoast SEO for optimization. It employs Google reCAPTCHA v3 for form security and uses privacy-conscious analytics tools like Plausible. The site is hosted by Elkdata OÜ, consistent with the domain registration data, and uses HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and spam protection on forms. However, it lacks published security policies, security headers, and cookie consent mechanisms, which are important for compliance and enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is professional, trustworthy, and functional, but it would benefit from improved privacy compliance and enhanced security policies to better protect users and meet regulatory requirements.

vaktsineeri.ee is a public health information website focused on vaccination awareness and education in Estonia. It provides comprehensive information on immunization schedules, vaccine safety, travel vaccinations, and related news. The site targets the general Estonian population including parents, adults, and travelers, positioning itself as an official or semi-official government-affiliated resource. The business model is informational and supported by partnerships with Estonian health and government institutions. Technically, the site is built on Drupal 10 with modern web technologies, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

The website kalmistud.ee serves as the official Estonian cemetery portal, providing information and e-services related to cemeteries, burial places, and related administrative functions. It targets Estonian residents, municipalities, and cemetery administrators, offering a centralized platform for searching burial information and managing burial plots. The site is operated by Spin TEK AS, a registrar and hosting provider consistent with the domain registration data. Technically, the site uses modern web technologies including JavaScript and CKEditor, with a responsive and accessible design. Security posture is moderate with HTTPS enabled and CSRF protection on forms, but lacks visible security headers and comprehensive privacy compliance documentation. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security disclosures.

The analyzed page is an error page related to Synology's QuickConnect service, hosted under the domain gofile.me. The business behind the service is Synology Inc., a reputable technology company specializing in network-attached storage and related services. The page content is minimal and focused on troubleshooting connection issues, with no direct business or security policy information presented. The technical infrastructure includes AWS DNS hosting and JavaScript-based front-end components, with Google Analytics used for tracking. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing explicit security policies. Privacy compliance is basic, with a cookie policy and consent mechanism present but no privacy policy on this page. Overall, the domain registration is consistent and legitimate, with privacy protection justified for this business type.

Ida-Virumaa Omavalitsuste Liit is a regional government association serving the municipalities of Ida-Virumaa, Estonia. The website provides comprehensive information on governance, development strategies, programs, projects, education, public health, safety, culture, and visa-related matters. It targets local residents, government officials, and stakeholders interested in regional development. The organization operates as a small-sized government entity founded in 2010, with a clear focus on regional coordination and public service. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Font Awesome. The site is hosted by Elkdata OÜ, consistent with the WHOIS data. The website is mobile-optimized and provides a good user experience, although some technical aspects like the use of an outdated jQuery version and lack of security headers indicate areas for improvement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate automated abuse. However, the absence of security headers and outdated JavaScript libraries present potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and improved privacy compliance to align with modern standards and regulations.

Ida-Viru Ettevõtluskeskus AS operates the website idaviru.ee, a regional tourism cluster portal promoting adventure and leisure activities in Ida-Virumaa, Estonia. The site targets tourists and families seeking diverse experiences including outdoor adventures, cultural sites, accommodation, and events. The business model focuses on tourism promotion and cluster partnership facilitation, positioning itself as a key regional information hub. Technically, the website is built on WordPress with Elementor and WooCommerce, optimized with WP Rocket, and uses Cloudflare DNS. It integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and no critical vulnerabilities detected. However, the absence of explicit privacy policy and terms of service pages indicates room for compliance improvement. Overall, the website is professional, well-branded, and trustworthy, with good performance and user experience.

Koigi Kool is a small educational institution located in Koigi village, Estonia, providing primary and kindergarten education services. The website serves as an information portal for students, parents, and staff, offering news, event updates, school life details, and contact information. The site is built on Drupal 10 and incorporates modern web technologies and accessibility features, reflecting a moderate to good level of digital maturity. The presence of Matomo analytics indicates a privacy-conscious approach to user tracking. Security posture is adequate but could be improved by enabling DNSSEC and implementing security headers. No privacy policy or explicit security policies are published, which is a gap in compliance. Overall, the domain is legitimate and stable, with clear contact details and partner affiliations.

Ahula Pansionaat is a small healthcare service provider based in Estonia, offering general care services outside the home in a homely environment. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and frameworks. The site is accessible, mobile-optimized, and uses HTTPS, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data limits the ability to fully verify domain legitimacy. Overall, the website presents a professional front for a local care facility but would benefit from enhanced security and compliance measures.

The website planeeringud.ee serves as the official Estonian national repository for established planning documents, providing public access to planning data and downloadable files. It targets municipalities, planners, and the general public interested in regional planning information. The platform is built on modern Angular technology with Material Design components, ensuring a responsive and user-friendly interface. The site integrates Google Analytics for usage tracking but lacks visible privacy and cookie policies, indicating compliance gaps with GDPR requirements. Security posture is solid with HTTPS and a Content-Security-Policy header, though additional security headers and vulnerability disclosure mechanisms are absent. Overall, the site is professionally presented and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Skepast & Puhkim OÜ is a leading Estonian consultancy specializing in infrastructure, environmental, and spatial planning services with over 15 years of experience. The company offers expert engineering and consulting services including infrastructure design, environmental impact assessments, and spatial planning solutions. Their market position is strong within Estonia, supported by a medium-sized team of 40 experts and a professional digital presence. The website is well-structured, multilingual, and provides clear contact channels and business information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and cookie consent banner. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and business operation.

Eesti Spordiregister, operated by Spordikoolituse ja -Teabe SA under the Estonian Ministry of Culture, serves as the official national registry and information portal for sports organizations, schools, facilities, and coaches in Estonia. It provides comprehensive data services including statistics, data submission portals, and public access to sports-related information, targeting sports entities and the general public. The platform is well-positioned as a trusted governmental resource in the Estonian sports sector. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Highcharts, Leaflet, and other modern JavaScript libraries, ensuring a responsive and accessible user experience. The site is mobile-optimized and implements basic SEO and accessibility features. The infrastructure appears custom-built without reliance on popular CMS platforms, indicating tailored development for specific governmental needs. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or malware were detected, and cookie consent mechanisms are in place, supporting GDPR compliance. The WHOIS data aligns well with the website's governmental nature, reinforcing legitimacy. Overall, the website demonstrates a solid security posture and technical maturity suitable for its governmental role, with room for improvement in security header implementation and transparency around security policies. The business credibility is high given its official status and clear contact information.

Rakvere kultuurikeskus is a public cultural center based in Rakvere, Estonia, providing cultural event hosting, room rentals, and advertising services to the local community and visitors. The website serves as an information portal for cultural activities and services offered by the institution. The domain is well-established since 2012 and aligns with the organization's public service role. Technically, the website is built on WordPress using a modern theme and several plugins to enhance functionality, including social media integration and event management features. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, serving its purpose effectively with room for security and compliance improvements.

The website www.llr.ee operates as the national pet registry platform for Estonia, managed by Spin TEK AS. It serves municipalities, veterinarians, shelters, and pet owners by providing a centralized system for pet registration and data management. The site is primarily in Estonian with an English option, targeting local government entities and citizens. The business model is focused on providing a government-aligned service with partnerships across municipalities and veterinary services, positioning itself as an essential national infrastructure for pet management. Technically, the website uses standard web technologies including jQuery and Google Analytics, with HTTPS enforced. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but lacks explicit security headers such as CSP and HSTS. No vulnerability disclosures or incident response contacts are published, and no forms are present on the homepage to analyze input security. The use of Google Analytics without a cookie consent mechanism suggests potential GDPR compliance gaps. Overall, the website is legitimate and consistent with its stated purpose and ownership. The risk level is moderate due to missing privacy and security best practices. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and reduce potential regulatory risks.

Tapa Perearstikeskus OÜ operates as a local healthcare provider in Estonia, offering primary care services including general practitioners, nurses, midwifery, and physiotherapy. The website presents comprehensive contact details and staff information, positioning itself as a trusted community medical center. Technically, the site is built on the Odoo CMS platform with standard web technologies and demonstrates good mobile optimization and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR requirements. Security posture is moderate with some best practices like CSRF tokens but lacks visible security headers and explicit HTTPS enforcement details. Overall, the site is functional and credible but would benefit from enhanced privacy and security measures.

Olevalmis.ee is a government-affiliated Estonian crisis preparedness information portal operated under the auspices of the Estonian Rescue Board (Päästeamet). The website provides practical guidance on handling various crises, behavioral instructions, emergency contact information, and news updates relevant to public safety. It targets Estonian residents seeking reliable and official information on crisis readiness. The business model is informational and public service oriented, positioning itself as a trusted government resource in the emergency preparedness sector. Technically, the website is built on modern web technologies including Nuxt.js and Vue.js frameworks, leveraging Cloudinary for media delivery and Matomo for analytics. The site demonstrates good mobile optimization, accessibility at a basic level, and solid SEO practices. Performance is moderate with no critical technical issues detected. The infrastructure reflects a mature digital presence suitable for a government service. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers. No exposed sensitive data or vulnerable libraries were found. However, the site lacks explicit cookie consent mechanisms and does not publish dedicated security or incident response policies, which are areas for improvement. The WHOIS data confirms the domain's legitimacy and consistency with the website's government affiliation. Overall, Olevalmis.ee presents a trustworthy, professional, and well-maintained platform for crisis information in Estonia. Strategic recommendations include implementing explicit cookie consent, publishing security and incident response policies, enhancing accessibility, and adding vulnerability disclosure information to further strengthen trust and compliance.

PuhkaEestis.ee is a professional tourism portal focused on promoting Estonia's unique cultural, natural, and recreational offerings to visitors. The website is well-established, with a domain age dating back to 2010, and is operated by Zone Media OÜ. It targets tourists and travelers interested in exploring Estonia, providing curated content on activities, destinations, and local experiences. The site leverages modern web technologies including Next.js and React, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit contact information, terms of service, and security policy pages are not publicly available, which could be improved to enhance transparency and trust. Security posture is strong with HTTPS enforcement and monitoring tools like New Relic in place, but incident response details are absent. Overall, the site presents a trustworthy and professional front for Estonia's tourism promotion, with room for improvement in compliance documentation and contact accessibility.

Lääne-Viru Omavalitsuste Liit is a regional government association serving the municipalities of Lääne-Viru County, Estonia. The organization focuses on regional development, public health, safety, education, tourism, entrepreneurship, and cooperation among local governments. The website reflects a well-established entity with a domain registered since 2010, consistent with its government association status. The site targets local government officials, residents, and regional partners, providing information on programs, events, and strategic initiatives. Technically, the website is built on WordPress with modern plugins and technologies, including GDPR-compliant cookie consent and Google Analytics integration. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Häirekeskus is the official Estonian Emergency Response Center responsible for managing emergency calls and coordinating emergency services such as ambulance, police, and rescue. The website serves as a public information portal providing emergency contact numbers, career opportunities, and safety guidance. It targets Estonian residents and visitors requiring emergency assistance, positioning itself as a critical government agency in public safety. The site is well-branded and consistent with government standards, offering content primarily in Estonian with English and Russian alternatives. Technically, the website is built on modern web technologies including Nuxt.js and Vue.js, ensuring good mobile optimization, accessibility, and SEO. The site loads with moderate performance and includes security best practices such as HTTPS enforcement and security headers. No major vulnerabilities or exposed sensitive data were detected. However, explicit cookie consent mechanisms and security policy disclosures could be improved. The security posture is strong with excellent SSL configuration and standard security headers. The absence of a published incident response or vulnerability disclosure policy is noted but not critical. WHOIS data confirms the domain's legitimacy and consistency with the Estonian government entity. Overall, the website demonstrates a mature digital presence with a high level of trustworthiness and professionalism. Strategic recommendations include implementing explicit cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to enhance transparency and compliance. These improvements will further strengthen the site's security posture and user trust.

The Hertz Corporation operates a comprehensive car and van rental service platform targeting customers primarily in the UK and worldwide. The website offers a broad range of services including daily car hire, electric vehicles, long-term business rentals, and van hire, supported by loyalty programs such as Gold Plus Rewards. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the platform leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Stripe for payments, alongside security tools like Google reCAPTCHA Enterprise and a cookie consent mechanism powered by Securiti.ai. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. WHOIS data for the subdomain queried is unavailable due to Nominet rules, but the main domain is legitimate and consistent with the business. Overall, the website demonstrates a mature digital presence with robust security and privacy practices.

The website cms-dt.com currently serves a 404 error page indicating that the requested content is not available or has been moved. There is no visible business information, contact details, or privacy-related policies on the accessible page. The domain is relatively new, registered in April 2023 via Amazon Registrar, Inc., and uses the Laravel framework with common JavaScript libraries such as jQuery and Bootstrap. The technical infrastructure appears standard but lacks advanced security configurations such as DNSSEC and security headers. The absence of privacy policies, cookie consent mechanisms, and contact information indicates low compliance with privacy regulations and poor user trust signals. Overall, the site is in an early or incomplete state, limiting its business credibility and security posture.

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Southern Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental sector. The website offers multilingual support, currency selection, and a comprehensive booking system, targeting travelers seeking affordable car rentals. Technically, the site uses modern frameworks such as Bootstrap and integrates performance and consent management tools like Akamai Boomerang and Didomi SDK. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be verified further. The absence of WHOIS domain registration data is a transparency concern but does not detract from the overall legitimacy indicated by the brand presence and structured data. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

Goldcar is a large car rental company operating over 115 offices primarily in Europe and the United States, targeting travelers and tourists. The company is part of the Europcar Mobility Group, which enhances its market credibility and operational scale. The website is professionally designed, mobile-optimized, and provides comprehensive information about office locations and services. Technically, the site uses modern frameworks such as Bootstrap, integrates Google Tag Manager and Akamai Boomerang for analytics and performance monitoring, and employs Didomi for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and association with Europcar support its legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

Goldcar is a well-established car rental company operating primarily in Spain with a strong presence in major tourist destinations. The company offers a variety of car rental services, including innovative features like the Key'n Go automatic key pickup system and a loyalty program called GO Club. The website serves as a comprehensive help center supporting customers with FAQs, booking assistance, and contact options. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a CDN likely provided by Akamai, ensuring moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

Prisma.fi is a large Finnish e-commerce retail platform offering a wide range of consumer products including electronics, home goods, fashion, sports, and garden supplies. The website is professionally designed with clear navigation and a comprehensive product catalog targeting Finnish consumers. Technically, the site uses modern frameworks such as Next.js and React, with Contentful as the CMS, and integrates Usercentrics for cookie consent management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages. Overall, the site is trustworthy and well-positioned in the Finnish retail market, but could improve transparency and security documentation.

Goldcar Spain S.L. operates a large car rental service with over 95 offices across multiple countries, primarily in Europe. The company is a subsidiary of Europcar, positioning it as a significant player in the transportation rental industry. The website is professionally designed, mobile-optimized, and provides comprehensive content including offers, destinations, and customer reviews. Technically, the site uses modern frameworks like Bootstrap and integrates third-party services such as Google Tag Manager and Didomi for consent management, hosted likely on Akamai infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and corporate affiliations. Privacy compliance is well addressed with GDPR-consistent cookie policies and consent banners.

Dollar Car Rental operates a professional and user-friendly website offering car rental services across Europe with over 400 locations. The company targets budget-conscious travelers and provides flexible rental options with an emphasis on ease of booking and management. The website demonstrates a mature digital presence with modern technologies and compliance mechanisms such as cookie consent and privacy policies. However, the domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional branding and content. The site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published incident response policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency on domain registration and enhanced security practices.

Thrifty Car Rental operates a professional and user-friendly website offering car rental services primarily across Europe. The company targets both business and leisure travelers with a broad fleet including electric and economy vehicles. The website demonstrates a mature digital presence with responsive design, clear navigation, and integration of modern technologies such as Google Tag Manager and cookie consent management via Securiti.ai. However, the absence of WHOIS registration data for the domain www.thriftycars4rent.com raises concerns about domain legitimacy, despite the website's strong branding alignment with the parent company Hertz. Security posture is generally good with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhancement of security transparency.

Europcar is a globally recognized leader in the vehicle rental industry, offering a wide range of car and van rental services across more than 140 countries with over 3835 locations. The company caters to both business and leisure travelers, providing flexible rental options, loyalty programs, and digital conveniences such as online check-in and mobile app bookings. The website reflects a mature digital presence with modern technologies and comprehensive content supporting its market position. Technically, the site uses advanced frameworks like Nuxt.js and integrates monitoring tools such as Dynatrace for performance and security insights. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with detailed privacy and cookie policies and consent mechanisms. Overall, Europcar's website demonstrates a high level of professionalism, trustworthiness, and digital maturity, supporting its enterprise-scale operations.

Opinion System is a French independent survey organization specializing in verified customer reviews, positioning itself as a trusted third party between professionals and consumers, primarily in the service and real estate sectors. The company holds multiple ISO certifications, reinforcing its commitment to quality and transparency. The website reflects a professional and consistent brand image, targeting both consumers seeking trustworthy professionals and businesses looking to leverage customer feedback. Technically, the site uses modern JavaScript frameworks, Matomo analytics for tracking, and HubSpot forms for lead capture, hosted on AWS infrastructure. Security posture is good with HTTPS enforced and secure login forms, though explicit security headers and privacy policies are lacking. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Kihnu.ee is the official website of the Kihnu Municipality Government in Estonia, serving as a comprehensive portal for local governance, community services, cultural events, and public information. The site targets residents, visitors, and local businesses, providing timely news, event calendars, and access to municipal resources. The business model is that of a governmental public service provider with a clear focus on community engagement and transparency. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Font Awesome. It is hosted by Zone Media OÜ, an Estonian hosting provider, and employs HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and basic accessibility features. From a security perspective, the site enforces HTTPS but lacks several security headers and uses an outdated version of jQuery, which could expose it to vulnerabilities. There is no visible cookie consent mechanism or published security policy, which are important for GDPR compliance. Contact information is clearly provided, but incident response and vulnerability disclosure details are absent. Overall, the website is trustworthy and professional, reflecting its governmental nature. However, improvements in security practices, privacy compliance, and technical modernization are recommended to enhance its security posture and user trust.

Viru-Nigula vald operates as a local government entity serving the Viru-Nigula municipality in Estonia. The website functions as an official portal providing residents and stakeholders with access to municipal news, events, services, and contact information. It maintains a clear market position as a trusted source of local government information and services. The site targets local residents, businesses, non-profit organizations, and visitors, offering a range of public services and community resources. The business model is focused on governmental public service and community engagement.

Väike-Maarja vald operates as a local government entity in Estonia, providing a broad range of municipal services including administration, social welfare, education, culture, and community engagement. The website serves as an official portal for residents and stakeholders, offering news, event information, contact details, and access to various public services. The site is well-structured and content-rich, targeting local residents, businesses, and visitors. Technically, the website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, Google Analytics, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by Telia Eesti AS and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though accessibility features could be improved. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several important security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the municipality but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and regulatory adherence.

Tapa Vallavalitsus operates as the official municipal government portal for Tapa vald in Estonia, providing residents, businesses, and visitors with comprehensive information on local governance, social services, urban planning, cultural events, and community resources. The website is well-structured with clear navigation and a focus on public service delivery, targeting local citizens and stakeholders. The business model is that of a governmental public service entity, with a medium-sized operational scope typical for a municipality.

Rakvere Vallavalitsus operates as the local government authority for the Rakvere municipality in Estonia, providing a wide range of public services including administration, social welfare, education, culture, and infrastructure management. The website serves as an official portal for residents and stakeholders, offering comprehensive information and access to municipal resources. The organization holds a stable position as a government entity with a medium-sized operational scope focused on community services. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Fonts, Font Awesome, and Google Maps API. The site demonstrates moderate performance and good mobile optimization, with a structured navigation system and professional design. However, the use of an outdated jQuery version introduces potential security risks that should be addressed. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good baseline security posture. There is no evidence of exposed sensitive data or insecure forms. Nonetheless, the absence of a cookie consent mechanism and explicit security or incident response policies indicates gaps in privacy compliance and security transparency. The site does not appear to use advertising or tracking services, which aligns with its public sector nature. Overall, the website is trustworthy and professional, with strong business credibility as a government portal. Strategic improvements in updating libraries, enhancing privacy compliance, and publishing security policies would further strengthen its security posture and user trust.

Rakvere Linnavalitsus operates as the local government authority for the city of Rakvere, Estonia, providing a wide range of municipal services including public administration, social welfare, urban planning, crisis management, and cultural and sports activities. The website serves residents, visitors, and local businesses with comprehensive information and e-services. The organization maintains a medium-sized municipal operation with a well-structured digital presence. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized and features clear navigation and professional design. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some modern security headers and incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and legitimate, reflecting a stable municipal entity with room for improvements in privacy and security practices.

Põltsamaa vald operates a comprehensive local government website serving the residents of Põltsamaa municipality in Estonia. The site provides a broad range of services including news updates, contact information for municipal departments, public service details, event calendars, and project information. The website is positioned as an essential government portal facilitating communication and service delivery to its local community. The business model is focused on public service and community engagement, with a clear target audience of local residents and stakeholders. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Font Awesome, and Google Fonts. It integrates external services like Facebook SDK and Google Analytics for social media and analytics purposes. The site demonstrates moderate performance and good mobile optimization, although some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent banner, indicating awareness of privacy compliance. However, the use of an outdated jQuery version introduces potential vulnerabilities, and the absence of explicit security headers reduces the overall security posture. No public security policies or incident response contacts are available, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and functional, serving its purpose as a government information portal effectively. Strategic improvements in updating third-party libraries, enhancing security headers, and publishing privacy and security policies would strengthen its security and compliance stance.

Järva vald operates as a local government authority in Estonia, providing a wide range of public services including social welfare, education, cultural activities, infrastructure management, and environmental oversight. The website serves as a comprehensive portal for residents, businesses, and visitors, offering detailed information and access to municipal resources. The site is well-structured with clear navigation and extensive content primarily in Estonian, targeting local stakeholders. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Analytics, and Font Awesome. While the site is mobile-optimized and uses HTTPS, some technologies like jQuery 1.10.2 are outdated, which may introduce security risks. Performance is moderate, and SEO and accessibility are adequately addressed. From a security perspective, the website enforces HTTPS and includes some security best practices such as the use of security tokens in forms. However, it lacks several modern security headers and uses an outdated JavaScript library. Privacy compliance is partially met with a comprehensive privacy policy and data protection officer information, but no visible cookie consent mechanism is present. Incident response and security policies are not explicitly published. Overall, the website is trustworthy and professional, reflecting its governmental nature. The main risks relate to outdated libraries and incomplete privacy compliance. Strategic improvements in security headers, library updates, and privacy mechanisms would enhance the site's security posture and regulatory adherence.

Novian Eesti OÜ operates the KOVTP service portal, providing IT infrastructure and software development services primarily targeted at local governments in Estonia. The company has a long-standing history dating back to 1970 and is part of the Novian group, positioning itself as a key player in e-government solutions. The website is professionally designed, mobile-optimized, and provides clear contact information and user support resources. Technically, the site uses Liferay CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and jQuery version is outdated. Privacy compliance is adequate with a cookie policy and GDPR considerations, but no explicit privacy or security policies are prominently available. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

Sillamäe linn is the official municipal government website for the city of Sillamäe in Estonia. The site provides comprehensive information about the city's history, governance, social services, cultural events, and economic development initiatives. It serves residents, visitors, and businesses with a broad range of public service information and community engagement tools. The website is built on the Liferay CMS platform, featuring a responsive design suitable for desktop and mobile users. It integrates common web technologies such as jQuery, Bootstrap, and Font Awesome, and uses Google Analytics for visitor tracking. The site enforces HTTPS and includes a cookie consent banner, demonstrating awareness of privacy regulations such as GDPR. However, some technical aspects like the use of an outdated jQuery version and absence of security headers indicate areas for security improvement. Contact information is clearly presented, and the WHOIS data confirms the domain's legitimacy as a government entity. Overall, the website is professional and trustworthy but would benefit from technical and security enhancements.

Narva-Jõesuu Linnavalitsus operates as the local government authority for the city of Narva-Jõesuu in Estonia, providing essential municipal services, governance information, and community engagement through its official website. The site targets local residents, businesses, and visitors, offering news, event calendars, contact details, and public service forms. The business model is typical of a government entity, funded by public resources and focused on transparency and service delivery. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Font Awesome. The infrastructure is stable and moderately performant, with good mobile optimization and basic accessibility features. The site is hosted under the domain registered by Zone Media OÜ, a known registrar and hosting provider, with a domain age consistent with a mature municipal website. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks several security headers and does not provide explicit privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are evident, indicating room for improvement in security governance. Overall, the website is professional and trustworthy, serving its governmental purpose effectively. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

Jõhvi vallavalitsus operates as the official municipal government for the Jõhvi region in Estonia, providing a wide range of public services including governance, social welfare, education, cultural events, urban planning, and community engagement. The website serves as a comprehensive portal for residents and stakeholders to access information, participate in local initiatives, and stay informed about municipal activities. The target audience primarily consists of local residents, businesses, and visitors seeking official information and services. Technically, the website is built on the Liferay CMS platform, utilizing JavaScript, jQuery, Bootstrap, and Font Awesome for UI components and styling. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site demonstrates good mobile responsiveness and clear navigation, although some technical debt is evident with the use of an outdated jQuery version, which could pose security risks. From a security perspective, the site benefits from HTTPS encryption and a cookie consent mechanism indicating GDPR awareness. However, it lacks visible security headers and explicit security or incident response policies. The absence of a vulnerability disclosure policy and the use of outdated libraries suggest areas for improvement. No critical vulnerabilities or blocking mechanisms were detected, and contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and functional, serving its governmental role effectively. Strategic improvements in updating libraries, implementing security headers, and publishing comprehensive security policies would enhance its security posture and compliance standing.

Alutaguse vald operates as a local government entity in Estonia, providing a broad range of public services including social welfare, environmental management, urban planning, and cultural activities. The website serves as an information portal for residents and stakeholders, offering detailed navigation to various municipal services and administrative resources. The business model is typical of a public sector organization focused on community service and governance. The website is positioned as an official government resource with a clear focus on transparency and accessibility to local information. Technically, the website is built on the Liferay CMS platform, utilizing standard web technologies such as jQuery, Google Fonts, and Font Awesome. It integrates Google Tag Manager for analytics and tracking purposes. The site demonstrates moderate performance and good mobile optimization, with a structured and consistent design. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the website enforces HTTPS and implements several security headers, indicating a good baseline security posture. There are no visible vulnerabilities or exposed sensitive data. However, the absence of an explicit cookie consent mechanism and published security or incident response policies suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the website's government affiliation. Overall, the website presents a trustworthy and professional front for the Alutaguse vald municipality, with solid technical and security foundations. Strategic enhancements in privacy compliance, accessibility, and security policy transparency would further strengthen its position and user trust.

Raasiku Vallavalitsus operates as the local government authority for Raasiku vald in Estonia, providing a broad range of public services including social welfare, education, environmental management, and urban planning. The website serves as an information hub for residents and stakeholders, offering news, contact details, e-services, and detailed sectoral information. The organization holds a stable market position as a small-sized governmental entity with a domain age consistent with its operational history since 2010. Technically, the website is built on the Liferay CMS platform, utilizing standard web technologies such as JavaScript, jQuery, Bootstrap, and Google Fonts. It is hosted under a reputable registrar, Telia Eesti AS, and employs HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The use of Google Analytics introduces moderate user tracking, balanced by privacy compliance measures including a privacy policy and cookie policy. Overall, the website presents a trustworthy and professional digital presence for a local government entity. Strategic recommendations include enhancing security headers, publishing incident response information, updating libraries regularly, and improving accessibility compliance to further strengthen the security posture and user trust.

Maardu Linnavalitsus operates as the municipal government portal for the city of Maardu, Estonia, providing residents and visitors with information about city services, news, events, and contact details. The website serves as an essential communication channel for local government functions and citizen engagement. It targets local residents, visitors, and stakeholders seeking municipal information and services. The business model is that of a government entity offering public services and information dissemination.

Lääne-Harju vald operates as a local government entity in Estonia, providing a wide range of public services including administration, social and health care, education, culture, environmental management, and transportation. The website serves as an official portal for residents, businesses, and visitors to access information, news, events, and e-services. It reflects a medium-sized municipality with a population of approximately 13,816 as of mid-2025. The site is well-structured with clear navigation and content relevant to its audience. Technically, the website is built on the Liferay Portal CMS platform, utilizing technologies such as jQuery, Bootstrap, Font Awesome, and Google Fonts. It is hosted by Telia Eesti AS, a reputable Estonian hosting provider. The site is mobile-optimized and includes basic accessibility features. Performance is moderate, with room for improvement in modernizing some libraries and enhancing accessibility. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating awareness of privacy regulations. However, it lacks explicit security headers and dedicated security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Google Analytics is used for user tracking, with moderate privacy compliance. Overall, the website demonstrates a solid business credibility and technical foundation suitable for a government portal. Strategic recommendations include enhancing security headers, updating legacy libraries, adding explicit security and incident response policies, and improving accessibility compliance to strengthen trust and resilience.

Kuusalu vallavalitsus is the official local government authority for the Kuusalu municipality in Estonia, providing a wide range of public services including governance, social welfare, education, culture, environment, and crisis preparedness. The website serves residents, local businesses, and visitors by offering comprehensive information and access to municipal services. The site is built on the Liferay CMS platform and uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with tracking enabled via Google Analytics and Google Tag Manager. The website is mobile optimized and presents a professional and consistent brand image aligned with government standards. Security-wise, the site enforces HTTPS but lacks visible security headers and uses an outdated jQuery version, which could pose vulnerabilities. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is functional and credible but would benefit from security and compliance improvements.