Medium-risk security reports

Fujitsu Limited operates a comprehensive and professionally designed website focused on sustainability transformation and digital innovation, targeting businesses in Estonia and globally. The company offers a broad range of services including consulting, business applications, and IT infrastructure solutions, positioning itself as a leader in technology-driven sustainability. The technical infrastructure leverages modern JavaScript libraries, Bootstrap framework, and Azure DNS hosting, ensuring good performance, accessibility, and SEO optimization. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website reflects a mature digital presence consistent with Fujitsu's global brand and business model.

Tallinna Teeninduskool is a well-established vocational education institution in Estonia specializing in hospitality, catering, spa services, and commerce. The website reflects a medium-sized educational entity with a strong focus on practical training and international cooperation, including Erasmus+ projects. The digital infrastructure is built on WordPress with modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the website presents a trustworthy and professional image consistent with its educational mission.

Postimees is a leading Estonian news media company providing comprehensive news coverage from Estonia and abroad. The website serves a broad Estonian-speaking audience with diverse content including politics, economy, culture, sports, and regional news. It operates a subscription-based business model complemented by advertising revenue. The company maintains multiple regional and thematic subsidiaries, enhancing its market reach and content diversity. Technically, the website employs modern web technologies including advanced analytics, consent management, and subscription/paywall systems, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and technical sophistication, positioning it well in the Estonian media landscape.

Tere dairy (TERE AS) is a medium-sized Estonian dairy product manufacturer and retailer offering a variety of dairy and plant-based products such as kefir drinks and puddings. The company targets consumers in Estonia and neighboring regions, providing products in multiple languages to cater to a diverse audience. The website is professionally designed with good content quality and clear navigation, supporting the company's market presence. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Fonts. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations could be improved. The presence of Google Tag Manager indicates moderate user tracking and analytics capabilities. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible privacy policies, terms of service, or incident response information, which are critical for compliance and trust. Cookie consent is implemented, but GDPR compliance indicators are minimal. WHOIS data is unavailable due to privacy restrictions, which is common but reduces transparency. Overall, the website demonstrates a solid business and technical foundation but requires improvements in privacy compliance, security headers, and transparency to enhance trust and regulatory adherence.

AS Printall is an established printing house based in Estonia, operating since 1971. The company offers a wide range of printing services including flyers, newspapers, magazines, catalogs, books, and marketing materials, with a strong emphasis on environmental responsibility and digitalization of production processes. Their market position is supported by multiple environmental and quality certifications such as FSC, PEFC, ISO 9001, and Nordic Swan, reflecting a commitment to sustainability and quality. The website targets customers and designers seeking professional printing solutions with fast turnaround and finishing options.

OneTouch is a Malta-based mobile casino game developer specializing in premium mobile-first games, including the world’s best mobile Baccarat. The company operates under OT Malta Ltd and holds a Malta Gaming Authority B2B Critical Supply License, positioning it as a trusted supplier in the iGaming industry. The website reflects a professional and consistent brand with clear industry partnerships and testimonials, targeting mobile casino operators and players globally. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering a good user experience with mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and cookie consent are recommended. WHOIS data is unavailable, limiting domain transparency, but regulatory licensing and business information support legitimacy. Overall, the site is credible, well-structured, and aligned with industry standards.

Neste Eesti AS operates as a leading energy company in Estonia, specializing in renewable fuels and sustainable energy solutions. The company is part of the larger Neste Oyj group, which has a strong market presence in the Baltic region and globally. Neste's website reflects a professional and modern digital presence, targeting both consumers and business clients interested in sustainable energy products. The site offers comprehensive information about products, services, and corporate responsibility initiatives, supporting Neste's market positioning as a sustainability leader. Technically, the website is built on Drupal CMS with integrations of modern JavaScript libraries and third-party marketing and analytics tools, including Piwik PRO and Google Tag Manager. The presence of a chatbot enhances customer engagement and support capabilities. Security-wise, the site enforces HTTPS with robust security headers and cookie consent mechanisms compliant with GDPR, although explicit security policies and incident response contacts are not publicly detailed. Overall, Neste's digital infrastructure and business information demonstrate a mature and trustworthy online presence with room for improvement in security transparency and accessibility.

Trinidad Wiseman OÜ is a well-established Estonian technology company specializing in human-centric digital services including software development, business analytics, user experience design, accessibility, and training. With over 20 years of experience and a large team of specialists, the company holds a strong market position, particularly in the public sector. Their business model focuses on consulting, software solutions, and training services, supported by a subsidiary Intelex Insight OÜ. The website reflects a mature digital presence with comprehensive content and consistent branding. Technically, the site is built on Drupal 10, uses modern libraries like Font Awesome 6 Pro, and integrates Google Maps and Cookiebot for enhanced user experience and compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Moosedog Oy is a Finnish innovation company specializing in patenting, trademark protection, and intellectual property rights (IPR) services globally. Established in 2010, the company offers a comprehensive suite of services including patent searches, trademark registrations, design protections, innovation workshops, and patent commercialization. Moosedog has built significant patent portfolios for numerous startups, contributing to a combined exit valuation exceeding fifteen billion euros. The company is a founding member of the Aalbun international network, enabling cost-effective patent services worldwide. Additionally, Moosedog embraces virtual environments for innovative service delivery.

Fin-Tek Ozone Water Treatment is a specialized service provider with over 30 years of experience in the design, installation, maintenance, and optimization of ozone generating systems. The company focuses on delivering environmentally responsible water treatment solutions, targeting industrial and commercial customers requiring ozone generator services and related maintenance. Their market position is that of a niche, experienced provider with a clear emphasis on quality and reliability. The website reflects this with detailed service descriptions and regional contact phone numbers, supporting their global reach in the US, Asia/Pacific, and Europe. Technically, the website is built on WordPress using modern plugins and themes such as Astra and Beaver Builder, with integration of CleanTalk Anti-Spam and Google Analytics for spam protection and analytics respectively. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Hosting details are limited but the domain registrar is Hostopia Canada Corp, consistent with the company's Canadian origin. From a security perspective, the site uses HTTPS and anti-spam measures but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie consent mechanisms are present, indicating partial GDPR compliance. No incident response or security policies are published, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security headers, privacy compliance, and published security policies would strengthen their security posture and regulatory adherence, supporting continued business growth and customer confidence.

Riigimetsa Majandamise Keskus (RMK) is a government agency responsible for managing Estonia's state-owned forests and natural ecosystems. The organization focuses on sustainable forest growth, conservation of natural values, generating revenue through forest management, facilitating outdoor activities, and providing nature education. RMK holds a strong market position as the largest forest management entity in Estonia, serving a broad audience including general public, specialists, and governmental stakeholders. The website reflects this with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and CookieYes for cookie consent management. It is hosted by Zone Media OÜ, with a domain registered since 2010, indicating a mature and stable online presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with detailed cookie categories and a comprehensive privacy policy. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

Metaprint AS is an international manufacturing group specializing in metal containers, with a well-established presence since 2006. The company targets industrial clients requiring metal packaging solutions, positioning itself as a reliable medium-sized manufacturer in the sector. Their website reflects a professional and consistent brand image, providing clear business information and contact details. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and SEO-friendly, though performance is moderate. From a security perspective, the website employs HTTPS and a comprehensive cookie consent mechanism that supports GDPR compliance. However, there is room for improvement in security headers and explicit security policies. No incident response or vulnerability disclosure information is provided, which could enhance trust and preparedness. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, with no privacy protection masking registrant details. Overall, the website demonstrates a solid digital maturity with good privacy compliance and business credibility. The main risks relate to the absence of detailed security policies and vulnerability disclosure mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and introducing terms of service to strengthen legal and compliance posture.

Viron ulkoilmamuseo (Estonian Open Air Museum) operates as a cultural and educational institution showcasing Estonia's rural heritage through exhibitions, events, and educational programs. The museum targets families, tourists, and cultural enthusiasts, positioning itself as a leading open-air museum in Estonia with a medium organizational size and a history dating back to 2010. The website is professionally designed, multilingual, and provides comprehensive visitor information and event details. Technically, the site uses modern web technologies including Voog CMS, Google Analytics, Facebook Pixel, and Leaflet.js for interactive maps. It is hosted by Zone Media OÜ, an Estonian registrar and hosting provider. Security posture is good with HTTPS enforced and secure forms, though some security headers and cookie consent mechanisms are missing. Privacy compliance is adequate with a clear privacy policy and consent on newsletter subscription, but lacks a cookie banner. Overall, the site is trustworthy and credible with active social media presence and clear contact information.

Comodule is a specialized IoT solutions provider focused on connectivity for e-bikes and light electric vehicles. Their offerings include flexible IoT solutions tailored for manufacturers, fleet operators, and software developers, positioning them as a leading player in the emissionless transport technology sector. The website reflects a professional digital presence with clear navigation and targeted content for their audience. Technically, the site is built on Squarespace with integration of multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the overall business presentation and related domains support credibility. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving WHOIS transparency to strengthen trust.

1oT is a technology company specializing in global IoT connectivity solutions, primarily offering eSIM and connectivity management platforms. Their services target IoT companies, telecom operators, and enterprises requiring seamless IoT device deployment across 190+ countries. The website presents a professional and modern digital presence, leveraging Webflow CMS and integrating advanced analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The technical infrastructure is robust with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA; however, the absence of explicit privacy and security policies limits full compliance visibility. The lack of WHOIS data raises concerns about domain legitimacy, impacting overall trustworthiness despite the professional site content.

Nobel Digital OÜ is a well-established digital marketing agency based in Estonia, positioning itself as one of the largest in the region with over 15 years of experience as a Google Partner. The company offers a comprehensive suite of digital services including SEO, UX/UI audits, Google Ads management, social media advertising, digital strategy, and web development. Their target audience primarily consists of businesses aiming to grow their digital presence both domestically and internationally. Technically, the website is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Usercentrics for consent management. The security posture is strong with HTTPS enforced and appropriate security headers in place, although explicit privacy and terms of service policies are missing. Overall, the site demonstrates good digital maturity and professionalism, with room for improvement in privacy compliance documentation and contact information transparency.

The domain acornblu.ee currently hosts only a Wix error placeholder page indicating that the domain is not connected to an active website. There is no business-related content, contact information, or policies present. The site is built on the Wix platform using AngularJS and jQuery libraries, but lacks any custom content or branding beyond the default Wix error page. The technical infrastructure is basic and standard for Wix-hosted sites, with no advanced security headers or analytics detected. Security posture is minimal, with no HTTPS or security headers verifiable from the data provided. Overall, the site is non-operational and does not provide any business or compliance information, resulting in a low trust and credibility score.

AS Stallion Ltd. is an established Estonian cybersecurity company founded in 1994, specializing in network security solutions such as firewalls, VPNs, data protection, and malware prevention. With over 30 years of experience and offices in Tallinn and Riga, Stallion serves business clients requiring comprehensive IT security and network infrastructure solutions. The company partners with leading global cybersecurity vendors, reinforcing its market position as a trusted provider in the Baltic region. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript, with Google Analytics for visitor tracking. However, the site lacks modern security implementations such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. The site’s design and navigation are functional but could benefit from improved mobile optimization and accessibility. From a security perspective, the absence of HTTPS and security headers represents a significant risk, potentially exposing users to data interception and other attacks. The lack of privacy and cookie policies also indicates compliance gaps. No forms or input fields are present on the main page, reducing attack surface but also limiting user interaction. The company’s domain registration data aligns well with its business claims, supporting legitimacy. Overall, while Stallion demonstrates strong business credibility and domain trustworthiness, the website’s security posture and privacy compliance require urgent improvements to meet modern standards and regulatory requirements.

Wolf Group is a manufacturer specializing in construction chemistry products such as PU foams, sealants, adhesives, and coatings targeted at professional construction markets. The company presents itself as a global player with a focus on energy-saving solutions. The website is built on WordPress with modern SEO practices and integrates multiple Google services for analytics and marketing. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, though some security headers are missing. The absence of explicit privacy policies, terms of service, and contact information reduces transparency and compliance posture. The WHOIS data is notably missing or inaccessible, raising concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and well-designed but requires improvements in compliance documentation and domain registration transparency.

Smart MasterKey is a technology company specializing in cloud-based access control solutions that unify mobile smart keys with property systems. The company offers a SaaS platform with features such as digital access administration, multiple access types, integration with existing security infrastructure, and white-label options. Positioned as an innovator with TÜV SÜD certifications and industry awards, Smart MasterKey targets businesses and organizations across sectors including energy, real estate, hospitality, and critical infrastructure. The website demonstrates a high level of professionalism, clear navigation, and multilingual support, reflecting a mature digital presence for a company founded in 2024. Technically, the website is built on WordPress hosted on Amazon AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and HubSpot. Performance and mobile optimization are good, with SEO best practices implemented. Security posture is solid with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the security posture is strong but could be enhanced by publishing explicit security policies and incident response contacts, enabling DNSSEC, and adding vulnerability disclosure mechanisms. The domain registration is consistent with the company's founding timeline and shows no suspicious patterns, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing transparency around security policies, and continuing to build trust through certifications and clear contact channels.

Keemilise ja Bioloogilise Füüsika Instituut (KBFI) is an established interdisciplinary research institution based in Estonia, focusing on fundamental and applied research in materials science, particle physics, informatics, and health and environmental sciences. The website reflects a government-affiliated entity with a clear institutional presence, supported by EU-funded projects and collaborations with academic partners such as TalTech. The site targets researchers, academics, and the scientific community, providing news, contact information, and research services. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating Google Maps and FontAwesome for enhanced user experience. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented with detailed cookie categories, although some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence. Overall, the website scores well on business credibility and technical implementation but could enhance privacy compliance by publishing explicit privacy and terms of service policies.

Abc Motors is an automotive dealership website based in Estonia, offering new and used cars, special offers on stock vehicles, and car servicing booking options. The site prominently features brands such as Renault, Dacia, and SWM, targeting car buyers and service customers in the regional market. The business model focuses on vehicle sales and after-sales services. Technically, the website uses a combination of jQuery, Bootstrap, and Cookiebot for cookie consent management, along with Google Tag Manager for analytics and marketing integration. The site is mobile optimized and uses HTTPS with a good SSL configuration. Security posture is adequate with cookie consent and Google Consent Mode configured to deny ad personalization by default, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Contact information such as emails and phone numbers are not explicitly found in the HTML content, which may impact user trust. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security documentation.

FINEST AS is an established Estonian technology company specializing in digital and IT solutions with over 20 years of experience. Their business model focuses on software development, e-commerce platforms, and practical business solutions, serving both government and private sector clients. The company maintains a professional online presence with multilingual support and active social media channels. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for performance and SEO, though some accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks published security policies or incident response information. Overall, the website reflects a credible and professional business with room for improvement in security transparency and contact information clarity.

Iglu is an Estonian software development company specializing in business analysis, UI design, and development of e-services, self-service portals, and Java portals. Founded in 2013, it serves a range of clients including telecommunications, banking, and government sectors, positioning itself as a reliable partner with strong client relationships and a focus on agile development. The website reflects a professional and modern digital presence built on Gatsby and React technologies, with integration of Google Analytics and Tag Manager for performance and user tracking. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap given GDPR requirements. Overall, the site is well-designed and trustworthy, but enhancing privacy and security transparency would strengthen its compliance and user trust.

1Partner is a well-established Estonian real estate company offering comprehensive property services including buying, selling, renting, and valuation. With over 20 years of market presence and more than 45,000 satisfied clients, it holds a strong position in the Estonian real estate sector. The website reflects a professional and consistent brand image, targeting both private and business clients. Technically, the site uses modern web technologies such as Bootstrap and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security policies and vulnerability disclosures.

SecureOps is a Canadian-based boutique cybersecurity service provider with over 25 years of industry experience, offering managed security services including 24/7 SOC monitoring, security infrastructure management, vulnerability management, and professional services. The company emphasizes personalized, collaborative, and scalable cybersecurity solutions tailored to enterprise clients across multiple sectors globally. Their market position is strengthened by a SOC 2 Type 2 certification and a strong reputation for quality service delivery. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, HubSpot, and multiple marketing and tracking tools. The site is well-optimized for SEO and mobile devices, with good performance and accessibility features. Hosting and domain registration are consistent with the business claims, with Amazon Registrar as the registrar and a domain age of over 20 years. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and no visible sensitive data exposure. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is good with a clear privacy policy and cookie consent mechanism, though no explicit GDPR statement or data retention policies were found. Overall, SecureOps presents a professional and trustworthy online presence with comprehensive service offerings and solid technical infrastructure. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance their security posture and trustworthiness.

Levercode.com is a domain registered since 2018 and currently displays a permanent closure notice with no active business content or services. The website provides only a single contact email address that does not match the domain, indicating minimal operational presence. The technical infrastructure is minimal, with Cloudflare DNS used for hosting, but no CMS, analytics, or advertising technologies detected. The site lacks privacy, cookie, or terms of service policies, and no security headers or HTTPS status information is available from the provided data. Overall, the website is inactive and does not present a professional or trustworthy online presence.

Elisa Eesti AS is a leading telecommunications company in Estonia, providing a broad range of services including mobile and fixed internet, telephony, TV packages, and e-commerce for devices and accessories. The company targets private customers with a comprehensive portfolio of digital services and applications, positioning itself as a market leader with a strong brand presence and multiple industry recognitions. The website reflects a mature digital infrastructure built on Drupal CMS and custom Elisa design systems, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, security headers, and a robust cookie consent mechanism, although explicit security policy and incident response contacts are not publicly detailed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements, supporting Elisa Eesti AS's reputation as a reliable telecommunications provider.

Smarten Logistics AS operates as the largest third-party logistics (3PL) service provider in Estonia, offering comprehensive supply chain solutions to businesses seeking to optimize their logistics operations. The company positions itself as a key player in the Estonian transportation sector, targeting local enterprises requiring efficient logistics services. The website reflects a mature digital presence with professional design and consistent branding, supported by structured data and social media integration. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and a robust cookie consent mechanism via Cookiebot, demonstrating compliance with GDPR consent requirements. However, the absence of explicit privacy policies, terms of service, and incident response information represents a compliance gap. Overall, the website is professional and trustworthy, with a good security posture but room for improvement in privacy and legal disclosures.

Fiizy operates as a leading marketplace connecting customers with financial products and services, leveraging technology to provide personalized offers from a broad network of partners. With over 10 years in the market, it serves millions of customers and supports lenders and affiliates through tailored lead generation and partnership programs. The company is headquartered in Estonia with local presence in multiple countries, emphasizing a customer-first approach and state-of-the-art technology infrastructure built on modern frameworks like Next.js and hosted on AWS. Technically, the website is well-structured, mobile-optimized, and performs well, utilizing modern web technologies. However, there is room for improvement in security practices, notably the absence of DNSSEC, missing security headers, and lack of published privacy and cookie policies. The domain registration is consistent with the business claims, showing a mature and legitimate online presence. Security posture is moderate with HTTPS enabled and domain protections in place, but the lack of explicit security policies and incident response contacts indicates potential compliance gaps. No critical vulnerabilities or exposed sensitive data were detected, but improvements in transparency and security best practices are recommended. Overall, Fiizy presents a credible and professional online presence with a solid business model and technical foundation. Strategic enhancements in privacy compliance, security headers, and incident response readiness would strengthen trust and regulatory adherence.

E*TRADE Financial, a subsidiary of Morgan Stanley, operates a comprehensive online financial services platform offering brokerage, retirement, banking, and trading services to retail investors. The website reflects a mature, enterprise-grade digital presence with strong branding, extensive product offerings, and educational resources. The platform leverages advanced marketing, analytics, and consent management technologies to deliver a personalized and compliant user experience. Security measures such as HTTPS, Content Security Policy, and fraud protection guarantees are in place, underscoring a strong security posture. While WHOIS data for the subdomain is unavailable, this is typical for subdomains and does not detract from the site's legitimacy. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

Krabu is an established Estonian IT services company specializing in software development, project management, UX/UI design, and AI solutions. The company serves a diverse clientele including public sector entities and private businesses, emphasizing innovation and quality, supported by ISO 9001 certification. Their website reflects a professional digital presence with clear service offerings and project references. Technically, the site uses WordPress CMS with modern plugins and SEO tools, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit privacy and cookie policies. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in privacy compliance and security transparency.

Saku Õlletehas is a well-established Estonian brewery founded in 1820, operating as a subsidiary of the Carlsberg Group. The company specializes in manufacturing and retailing a wide range of beverages including beers, ciders, energy drinks, and soft drinks, serving both local and international markets. The website reflects a mature digital presence with comprehensive product listings, clear navigation, and consistent branding aligned with its parent company. Technically, the site uses a mix of legacy and modern JavaScript libraries, is mobile-optimized, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and compliance scripts in place, though some security headers could be more explicitly defined. No blocking or WAF mechanisms interfere with content accessibility. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Solaris is a well-established cultural and commercial center located in the heart of Tallinn, Estonia. Founded in 2010, it offers a diverse range of services including retail shops, restaurants, entertainment venues, office spaces, and parking facilities. The website reflects a professional and modern digital presence, targeting local visitors and shoppers with relevant content and event information. The business maintains a solid market position as a key destination for shopping and cultural activities in Tallinn.

Coolbet is an online gambling platform offering sports betting, casino games, and poker primarily targeting the Finnish and Nordic markets. The website presents a professional and consistent brand image with a focus on providing competitive odds and engaging gaming experiences. The platform integrates modern technologies such as React, Google Tag Manager, and Geocomply for geolocation enforcement, indicating a mature digital infrastructure. Security practices include HTTPS and error monitoring via Sentry, though explicit security headers and policies are not evident in the provided content. The absence of WHOIS data raises some concerns about domain registration transparency, but the website's content and licensing claims suggest legitimacy. Overall, Coolbet demonstrates a solid market presence with room for improvement in privacy compliance and security transparency.

Tripod is an Estonian service provider specializing in recruitment, testing, research, and coaching services. Established in 2010, the company targets businesses and professionals within Estonia, offering niche HR and development solutions. The website reflects a professional presence with clear branding and a focus on service offerings relevant to its market segment. The company maintains active social media profiles on Facebook and LinkedIn, enhancing its market visibility. Technically, the website is built on WordPress CMS, leveraging Yoast SEO for search optimization and Cookiebot for GDPR-compliant cookie consent management. The site uses modern web technologies including jQuery and integrates Google Tag Manager and Meta Pixel for marketing and analytics purposes. Hosting appears to be managed by Zone Media OÜ, consistent with the domain registration data. The website demonstrates good mobile optimization and moderate performance. From a security perspective, the site employs HTTPS with good SSL configuration and uses cookie consent mechanisms to comply with privacy regulations. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and providing clearer contact information to improve business credibility and user trust.

Raha24, operated by BB Finance OÜ, is an Estonian online lending platform specializing in unsecured loans up to 10,000 EUR with quick approval processes. The company targets individuals in Estonia seeking fast and reliable credit solutions. The website demonstrates a mature digital presence with a domain registered since 2010, consistent with the business's operational history. Technical infrastructure is based on WordPress with modern SEO and consent management tools, indicating a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers appear missing. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target market.

Adcash is a well-established global online advertising platform founded in 2000, serving media buyers, affiliates, and publishers worldwide. The company offers a variety of advertising and monetization solutions including Pop-Under, Interstitial, Native, and Banner ads, supported by advanced targeting, anti-fraud technology, and real-time analytics. The website reflects a mature digital presence with comprehensive SEO, mobile optimization, and a professional design that supports user engagement and conversion. Technically, the site leverages modern tools such as Google Tag Manager, Matomo Analytics, and Cloudflare DNS, hosted on a WordPress CMS platform, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced and domain registration protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, Adcash demonstrates a high level of business credibility and digital maturity, positioning itself as a trusted player in the online advertising industry.

The website acino-pharma.com is currently a parked domain managed by 101domain GRS Limited, a domain registrar and service provider established in 1999. The site does not host any active business content related to Acino Pharma but instead displays a placeholder page offering domain management and upsell services such as Google Workspace, web hosting, and corporate brand services. The target audience appears to be individuals or businesses interested in acquiring or managing domain names. The business model is that of a domain registrar and related service provider with a moderate market presence. Technically, the site uses standard HTML5, CSS3, and JavaScript technologies including jQuery and Modernizr. It is hosted on infrastructure associated with 101datacenter.net. The site is moderately optimized for mobile devices and has basic accessibility and SEO features. However, it lacks HTTPS, security headers, and advanced technical frameworks or CMS platforms. From a security perspective, the site has several weaknesses including the absence of HTTPS, no DNSSEC enabled, and no visible security policies or incident response contacts. The domain is locked against transfer but is not actively used for business purposes. No privacy or cookie policies are present, and no contact information is provided, limiting compliance with GDPR and other regulations. Overall, the security posture is weak, and the site is primarily a parked domain with minimal risk but also minimal trust signals. The overall risk assessment is low due to the lack of active business operations on the domain. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing DNSSEC, and providing clear contact and security information to improve trust and compliance if the domain is to be used actively in the future.

ITT Group is a small Estonian company specializing in education-related innovative mechatronic products, training, and e-solution development, primarily targeting educational institutions in Estonia, Scandinavia, and Europe. With over 20 years of experience, the company has evolved to include consulting and development services in autonomous systems, collaborating with European and US higher-education institutions. The website is built on Joomla CMS, featuring a consistent and professional design with moderate performance and good mobile optimization. However, it lacks critical compliance documentation such as privacy and cookie policies, and no contact information is provided, which impacts trust and compliance perception. Security posture is basic with HTTPS enabled but missing advanced security headers and incident response details. Overall, the site is functional and informative but requires improvements in compliance and security transparency to enhance trustworthiness and regulatory adherence.

Industry62 is a small, employee-owned digital design company operating primarily in Finland and Estonia, with offices in Helsinki, Turku, Tallinn, and Tampere. The company focuses on creating impactful digital services and positions itself as a human-centric, value-driven organization. Their website reflects a professional and consistent brand image, targeting businesses seeking digital design and development services. The technical infrastructure is based on the Squarespace platform, leveraging modern web technologies including Google Analytics and YouTube integrations, providing a moderate performance and good mobile optimization. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. The domain WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and social media presence support the business's authenticity. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

Cybernetica AS is a well-established Estonian technology company specializing in secure digital society technologies, including e-governance, cybersecurity, digital identity, and maritime surveillance. The company has a strong market position as the architect of e-Estonia and serves governments and enterprises globally. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional design. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Cybernetica demonstrates high business credibility and technical maturity, making it a trustworthy and professional entity in its sector.

The website www.esplan.ee is currently non-functional due to a fatal PHP error caused by an outdated WordPress plugin (wpml-string-translation). This prevents any content from being displayed, including business information, policies, or contact details. The domain is registered in Estonia with consistent WHOIS data, suggesting legitimacy, but the website itself lacks operational status and visible content. The technical infrastructure relies on WordPress CMS but suffers from plugin compatibility issues that must be addressed to restore functionality. Security posture is weak due to lack of visible security headers, unknown SSL status, and absence of privacy or cookie policies. Overall, the website presents a high risk due to inaccessibility and lack of compliance indicators.

Eolane France was an electronics manufacturing services company operating production sites in France and Morocco. The company has ceased operations and is undergoing judicial liquidation, with its activities acquired by the Cicor Group, a pan-European EMS provider. The website serves primarily as an informational notice about this transition and does not provide active business or customer engagement features. The technical infrastructure appears minimal, with no detected CMS, scripts, or advanced technologies. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, limiting user engagement and transparency. Security posture is basic with no DNSSEC and no visible security headers, though the domain registration is consistent and legitimate with a long history dating back to 2000. Overall, the website functions as a static notice rather than an active business platform.

Riigi Kinnisvara AS is a state-owned enterprise responsible for managing and developing Estonia's public real estate portfolio. The company focuses on efficient property management, environmental sustainability, and supporting public sector clients through various services including leasing, sales, and technical requirements for buildings. The website reflects a professional government entity with clear communication and comprehensive service offerings. Technically, the site is built on Drupal 10 with modern libraries ensuring good performance and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate online presence.

Infonet AS is a well-established Estonian Internet Service Provider operating since 1993, offering a broad range of telecommunications services including high-speed internet, digital television, hosting, domain registration, virtual servers, and mobile telephony. The company targets both residential and business customers within Estonia, positioning itself as a reliable local ISP with a TIER 3 compliant data center partner. The website reflects this business focus with clear service offerings and contact information. Technically, the website uses legacy JavaScript libraries such as jQuery 1.5.2 and several jQuery plugins, indicating a need for modernization to improve security and performance. The site is served over HTTPS with no blocking mechanisms detected, but lacks advanced security headers and uses outdated libraries that pose potential vulnerabilities. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though GDPR compliance indicators could be enhanced. Business credibility is strong, supported by consistent WHOIS data and transparent contact details. Overall, the website is functional and trustworthy but would benefit from technical and security updates.