Security Directory

S

SMEunited

smeunited.eu

72

SMEunited is a prominent non-profit association representing crafts and small and medium-sized enterprises (SMEs) across Europe, with a membership base spanning over 30 countries and encompassing more than 12 million enterprises. The organization focuses on advocacy, policy representation, and providing a unified voice for SMEs at the European level. Their website reflects a professional and consistent brand image, offering comprehensive information about their activities, publications, news, and events. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy disclosures and incident response contacts. Overall, the website is accessible, well-structured, and compliant with privacy regulations, presenting a trustworthy digital presence for the organization.

K

Kalastaja

kalastaja.ee

54

Kalastaja.ee is a well-established Estonian online media platform dedicated to fishing enthusiasts, providing news, articles, and interactive content since 1996. The website targets anglers and fishing hobbyists, offering specialized content to enhance their fishing experience. Technically, the site leverages modern web technologies such as React and Next.js, ensuring a responsive and moderately performant user experience. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is credible and professionally maintained, though it would benefit from enhanced privacy compliance and clearer contact information for users and security incidents.

A

AS Äripäev

laanevirumaauudised.ee

55

Lääne-Virumaa Uudised is a regional digital news platform serving the Lääne-Virumaa area in Estonia, operated by AS Äripäev. The website provides independent and fearless local news coverage, targeting residents and stakeholders of the region. It operates on a subscription and advertising business model, offering digital subscriptions, newsletters, and advertising services. The site is well-branded and consistent with its parent company’s media presence. Technically, the site is built using modern web technologies including React and Next.js, delivering a responsive and user-friendly experience with good SEO and accessibility basics. Security posture is strong with HTTPS and multiple security headers implemented, though no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its regional media market.

A

AS Äripäev

palgauudised.ee

55

Palgauudised.ee is a specialized Estonian media portal operated by AS Äripäev, focusing on payroll, labor law, taxation, and work organization topics. It serves professionals seeking up-to-date information, practical tools, and educational resources such as webinars and conferences. The website employs a subscription-based business model with tiered access to content and services. Technically, the site is built on modern web frameworks including Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance via a consent management SDK. Contact information and legal policies are clearly presented, enhancing trust and transparency. Overall, Palgauudised.ee demonstrates a mature digital presence with a solid market position in the Estonian media landscape.

A

AS Äripäev

kaubandus.ee

55

Kaubandus.ee is a leading Estonian media platform specializing in trade sector news, including retail, wholesale, and e-commerce. Operated by AS Äripäev, it offers news articles, industry reports, podcasts, and organizes conferences and training events. The website targets professionals and stakeholders in the Estonian trade industry, maintaining a strong market position as a trusted source of sector-specific information. Technically, the site is built on modern web technologies including React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR. Overall, the site demonstrates a professional and credible digital presence with clear contact information and active social media engagement.

O

Online Solution 360 GmbH

cdn-solution.net

51

Online Solution 360 GmbH operates the website cdn-solution.net, providing full service hosting, cyber security, and content delivery network solutions with a focus on eco-friendly data centers. The company targets businesses requiring advanced hosting and CDN services, emphasizing sustainability and innovative technologies such as GeoDNS, load balancing, and AI-driven energy efficiency. The website is professionally designed using WordPress CMS, hosted on Linode infrastructure, and includes a cookie consent mechanism compliant with GDPR. Contact information and company registration details are clearly presented, enhancing business credibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

E

Eesti Ajaloomuuseum SA

ajaloomuuseum.ee

41

Eesti Ajaloomuuseum SA operates as a leading historical museum in Estonia, providing cultural and educational services through multiple exhibition venues including the Film Museum, Theatre and Music Museum, Great Guild Hall, and Maarjamäe Castle. The website targets museum visitors, families, and cultural tourists, offering detailed information on exhibitions, events, and visitor planning. The business model is public/governmental, focusing on cultural preservation and education with a medium organizational size and established presence since 2010. Technically, the website is built on the Voog CMS platform, hosted by Zone Media OÜ, and employs modern web standards with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security policies and vulnerability disclosure would enhance trust further.

B

Bizberg Themes

bizbergthemes.com

58

Bizberg Themes is a small technology business specializing in the development and distribution of free and premium WordPress themes tailored for various sectors including education, NGOs, business, and eco-friendly organizations. The company emphasizes fast loading, SEO optimization, and user-friendly design, supported by dedicated customer service. Technically, the website is built on WordPress CMS, hosted behind Cloudflare CDN, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks comprehensive security headers and cookie consent mechanisms, which are areas for improvement. Overall, the website is professional and trustworthy with clear business focus, though privacy compliance could be enhanced.

A

AS Tallink Grupp

tallink.com

65

AS Tallink Grupp operates the Tallink Silja Line ferry and cruise services across the Baltic Sea, connecting major cities such as Helsinki, Stockholm, Tallinn, Turku, and the Åland Islands. The company offers passenger transportation, cargo services, onboard entertainment, tax-free shopping, and hotel accommodations, positioning itself as a leading maritime transport provider in the Baltic region. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall trustworthiness given the professional branding and extensive external references. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

I

INHUS Prefab, UAB

inhusprefab.eu

45

INHUS Prefab, UAB is a medium-sized manufacturing company specializing in prefabricated reinforced concrete structures and architectural concrete facade elements. Operating primarily in Lithuania with projects extending to Nordic countries and the UK, the company positions itself as a reliable regional player in the construction sector. Their website reflects a professional digital presence with clear navigation, multilingual support, and a portfolio of completed projects. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for user tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks advanced security headers and public security policies. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is transparent and includes company email, phone, and physical address. Overall, the website demonstrates good business credibility and digital maturity with room for security enhancements.

I

INHUS Engineering

inhusengineering.eu

18

INHUS Engineering is a medium-sized engineering firm specializing in structural design services for various building types, primarily serving clients in Lithuania and Scandinavian countries. The company employs over 100 engineers and utilizes advanced 3D modeling and calculation software to deliver precise and reliable project outcomes. Their website reflects a professional and consistent brand image, showcasing a broad portfolio of projects and maintaining active social media channels. Technically, the website uses modern web standards and integrates Google Analytics for visitor tracking. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though it lacks advanced security headers and explicit security policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Palmako UK

palmako.co.uk

65

Palmako UK operates as a specialized e-commerce retailer focused on quality garden rooms, log cabins, saunas, and greenhouses within the United Kingdom. Established in 2008, the company has a solid market presence supported by a well-structured Shopify-based website that targets consumers and businesses seeking outdoor living solutions. The website features consistent branding, clear contact information, and utilizes structured data to enhance search engine visibility. The business model centers on direct online sales with a focus on quality and customer service.

P

Põhjala Brewery

pohjalabeer.com

46

Põhjala Brewery is an established Estonian craft beer producer with a diverse portfolio of beers including lagers, IPAs, porters, and non-alcoholic options. The company leverages its heritage and local nature inspirations to create unique beer flavors, targeting craft beer enthusiasts and event attendees. The website reflects a medium-sized hospitality business with a professional and consistent brand presence. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, with good mobile optimization and SEO practices. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enforced but missing DNSSEC and security headers. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but could improve privacy compliance and security hardening.

U

U.S. Agency for International Development

usaid.gov

71

The U.S. Agency for International Development (USAID) operates as a U.S. government agency focused on international development and humanitarian assistance worldwide. The website content reflects official communications, such as administrative leave notifications for personnel, underscoring its role in managing overseas and domestic operations. The agency serves government personnel, international partners, and the public interested in foreign aid programs. The business model is government-funded, with a strong emphasis on mission-critical functions and overseas program management. Technically, the website employs a simple and clean infrastructure using standard HTML5, CSS, and Google Fonts. There is no evidence of advanced frameworks or CMS platforms in the provided content. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a minimalistic approach to user data collection. From a security perspective, the site appears to use HTTPS (implied by the .gov domain), but no security headers or explicit SSL configuration details were found in the provided data. The absence of privacy and cookie policies, as well as contact information, represents compliance gaps. The WHOIS data is incomplete but consistent with government domain privacy practices, supporting the legitimacy of the domain. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a high level of business credibility due to its official government status and consistent branding. However, technical and privacy compliance aspects could be improved to enhance security posture and user trust. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information.

I

INHUS

inhus.eu

48

INHUS is a Lithuanian-based construction and manufacturing company specializing in precast reinforced concrete building structures, operating primarily in Lithuania and Northern Europe. The company follows a design-build business model integrating design, production, and construction services. Their website presents a professional portfolio of projects and maintains a consistent brand image across multiple subsidiary domains. Technically, the website uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. Overall, the site is trustworthy and well-maintained, supporting INHUS's market position as a regional player in the construction sector.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The company targets mobile development teams seeking to automate and accelerate their build, test, and release pipelines. With over 150,000 developers trusting the platform and notable clients showcased, Codemagic holds a strong market position as a focused mobile CI/CD solution. Technically, the website is modern, fast, and mobile-optimized, leveraging cloud hosting on AWS and integrating analytics tools such as Google Tag Manager and Plausible Analytics. Security posture is robust, with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and GDPR/CCPA compliance clearly stated. However, DNSSEC is not enabled and no public security.txt or incident response contacts were found, representing areas for improvement. Overall, the platform demonstrates a mature digital presence with strong trust signals and compliance adherence.

I

Interactive Advisors

interactiveadvisors.com

76

Interactive Advisors is a well-established robo-advisor platform affiliated with Interactive Brokers Group, offering low-cost, diversified investment portfolios with a focus on transparency and ease of use. The platform targets retail investors seeking automated portfolio management and self-directed trading options. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong trust signals including SEC registration and SIPC protection. Technically, the site uses modern web technologies, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site reflects a credible and mature financial service provider with a solid digital presence.

S

Beste Online Casino Österreich | 50+ Seriöse Online Casinos

spielautomatcasinos.at

71

The website spielautomatcasinos.at serves as an informational platform focused on online casinos in Austria, particularly slot machine casinos. It provides reviews, comparisons, and guides aimed at Austrian online gambling enthusiasts. The business model appears to be affiliate marketing and content provision within the gambling niche. Technically, the site employs Cloudflare for DNS and CDN services and likely uses WordPress as its CMS. The site implements lazy loading scripts to optimize performance and is mobile-friendly, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. Contact and incident response information are absent, limiting user trust and compliance transparency. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

K

オンラインカジノ日本 ⚡️ 日本のベストカジノオンライン

kajinojapan10.com

56

KajinoJapan10.com is a Japanese language online casino affiliate and informational website targeting Japanese players interested in legal and reputable online casinos. The site provides detailed casino reviews, bonus offers, payment method guides, and legal context about gambling in Japan. The business model is primarily affiliate marketing, promoting various international online casinos accessible to Japanese users, often via VPN. Technically, the site is built on WordPress with common performance and user experience optimizations, including mobile responsiveness and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to missing privacy and cookie policies. No direct contact or incident response information is provided, which limits transparency. Overall, the domain registration is consistent and supports legitimacy. Strategic improvements in privacy, security headers, and contact transparency would enhance trust and compliance.

E

Einwohnergemeinde Cham

cham.ch

54

The Einwohnergemeinde Cham website serves as the official digital presence for the municipality of Cham, Switzerland. It provides comprehensive information and services related to local governance, community life, infrastructure, environment, education, and events. The site targets residents and visitors seeking municipal services and information. The business model is that of a government entity providing public services and information digitally. The website is well-branded, consistent, and includes trust indicators such as official contact details and certifications like Energiestadt GOLD. Technically, the site uses a modern CMS platform (i-web.ch) with Bootstrap for responsive design, ensuring good mobile optimization and accessibility. The performance is moderate with proper SEO and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is good, with clear privacy and cookie policies and user consent mechanisms. Overall, the site is trustworthy and professional, with clear contact information and partner links to regional and cantonal entities. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security posture.

Fleximed as operates the Fleximoover.no website, offering a specialized mobility aid designed for patients with Huntington's disease. The company is positioned in the healthcare sector in Norway, targeting a niche patient group with a unique product. The website provides basic information about the product concept, features, and accessories, with clear contact details and some language options for international visitors. Technically, the site is built using Adobe Muse with standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.8.3, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is average; HTTPS is used, but no advanced security headers are detected, and the use of an outdated jQuery version presents potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent WHOIS data, domain age, and clear contact information. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and modernization of its technical stack.

A

Actual Reports OÜ

pdfmake.com

59

PDFMake.com is a specialized online platform offering a suite of PDF editing tools including watermarking, encryption, decryption, and optimization. The service targets users and businesses needing straightforward PDF manipulation capabilities, supported by an API for scalable integration. The website is professionally designed with consistent branding and clear navigation, hosted on AWS infrastructure with HTTPS enabled. However, it lacks published privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS and domain transfer protection but missing key security headers and incident response disclosures. Analytics are implemented via Google Tag Manager, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the domain registration is consistent and legitimate, supporting the business claims.

P

Puratos

puratos.in

74

Puratos India operates as a dedicated supplier of bakery, pastry, and chocolate ingredients targeting professional bakers, pastry chefs, and chocolatiers. The website reflects a global brand presence with localized content and multiple language versions, indicating a mature international business model focused on B2B manufacturing and ingredient supply. The technical infrastructure is built on Adobe Experience Manager CMS, leveraging modern web technologies and analytics tools such as Visual Website Optimizer and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks comprehensive security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and credible but would benefit from enhanced privacy and security transparency.

P

Puratos

puratos.it

74

Puratos is an established enterprise-level manufacturer specializing in ingredients for professional bakery, pastry, and chocolate sectors. The company targets B2B customers in the food manufacturing industry, offering a broad range of innovative ingredients and semi-finished products. The website reflects a consistent and professional brand presence with good content quality and clear navigation, supporting its global market position. Technically, the site employs modern technologies including Google Tag Manager and Visual Website Optimizer for analytics and A/B testing, hosted on Adobe Experience Manager CMS, ensuring a moderate to good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the site is trustworthy and legitimate, with domain registration data consistent with business claims.

P

Puratos

puratos.us

70

Puratos is a global leader in the manufacturing and supply of bakery, patisserie, and chocolate ingredients, catering primarily to professional bakers, pastry chefs, and chocolatiers. The company maintains a strong market presence with a comprehensive product portfolio and a well-structured multilingual website targeting a broad international audience. The website demonstrates a mature digital infrastructure, leveraging advanced tools such as Google Tag Manager and Visual Website Optimizer for analytics and optimization, and is built on Adobe Experience Manager CMS, indicating a robust enterprise-grade platform. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the website and business present a trustworthy and professional image with moderate to high digital maturity.

A

AS Emor

mediafacts.com

64

Mediafacts.com is an established online platform operated by AS Emor, specializing in providing market research reports and consumer insights focused on the Baltic countries of Estonia, Latvia, and Lithuania. The website serves business professionals and organizations seeking detailed market data and analysis to inform strategic decisions. The business model is based on e-commerce sales of research reports, leveraging the Shopify platform for digital storefront management. The company has a consistent brand presence and offers a range of reports covering various sectors and consumer trends in the region. Technically, the website is built on Shopify using the Debut theme, employing modern web technologies including JavaScript, CSS, and HTML5. The site is hosted on Shopify's CDN infrastructure, ensuring moderate to good performance and mobile responsiveness. SEO and accessibility features are well implemented, with proper meta tags, structured data, and ARIA roles enhancing user experience and search engine visibility. From a security perspective, the site enforces HTTPS and includes basic security headers such as Referrer-Policy. There is no DNSSEC enabled, which is a recommended improvement. Forms include CAPTCHA mechanisms to prevent abuse. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a visible cookie consent banner and a privacy policy page indicating GDPR adherence. However, explicit security policies and incident response contacts are not published. Overall, Mediafacts.com presents a trustworthy and professional online presence with a mature domain and consistent business information. The site is suitable for its target audience and maintains a good security posture with room for enhancements in DNS security and published security policies.

1

14.no - Domain for sale

14.no

52

The website 14.no is a minimalistic domain-for-sale landing page created in 2022. It offers the domain 14.no for purchase and targets potential domain buyers or investors. The business model is straightforward domain resale with no additional services or content. The site uses a Vue.js framework with Google Fonts and includes basic meta tags and Open Graph data for social media sharing. However, it lacks comprehensive business information, privacy policies, or terms of service, limiting its professional presence. Technically, the site is built with modern JavaScript frameworks but lacks advanced security headers and does not provide evidence of HTTPS enforcement. Performance and mobile optimization are basic but functional. No analytics or tracking scripts are present, indicating minimal user data collection. The site includes a single contact email but no phone numbers or physical addresses. From a security perspective, the site shows limited security posture with no detected security policies, incident response contacts, or vulnerability disclosures. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. The WHOIS data shows the domain was registered in 2022, consistent with its current use as a domain sale page, with no suspicious registration patterns. Overall, the website scores low on content quality, privacy compliance, and security posture due to minimal content and lack of policies. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, enhancing security headers, and providing clearer business and contact information to improve trust and compliance.

The website object.center currently serves as a placeholder with minimal content, indicating it is not yet operational or publicly launched. The domain is registered since 2018 with privacy protection enabled, but the website lacks any business-related content, contact information, or policies. The only visible content is a 'Coming Soon' message and a link to the VESTA control panel, suggesting the site is hosted on a VESTA-managed server behind Cloudflare DNS. Technically, the site uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing security posture. No forms, analytics, or tracking mechanisms are present, indicating minimal digital maturity. The absence of privacy, cookie, or terms of service policies and contact details reflects poor privacy compliance and business credibility. Overall, the site scores low on content quality, security, and compliance, representing a high-risk profile for trust and professionalism.

AVCO Productions Ltd is a London-based creative technology studio specializing in delivering digital projects for educational institutions, cultural organizations, architectural practices, and artists. The company positions itself as a niche provider focusing on creative technology solutions, editorial systems for storytelling, and live event delivery. Their website showcases a portfolio of projects emphasizing design efficiency and meaningful digital experiences. Technically, the website is built using modern frameworks such as Gatsby and React, leveraging a headless CMS (Sanity) and Google Tag Manager for analytics. The site is mobile-optimized with good design quality and user experience, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and incident response contact information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Farmwell operates as a specialized e-commerce platform targeting food hubs, farms, and online grocery stores, focusing on food box delivery and recurring order management. The platform is built on the Shoperb CMS and offers tailored features such as box customization, delivery, and inventory management. The website is professionally designed with good user experience and mobile optimization, though accessibility and SEO could be improved. Security posture is moderate with HTTPS usage but lacks explicit security headers and policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance and user trust. Overall, the site presents a niche e-commerce solution with room for improvement in security and compliance.

O

ooogo LLC.

ad110.com

26

AD110 is a non-profit project operated by ooogo LLC., focusing on art, design, creativity, and lifestyle content primarily targeted at design professionals and enthusiasts. The website offers curated articles, design resources, event coverage, and job listings within the creative industry. The platform positions itself as a niche media outlet with a long-standing presence since 2004, emphasizing open content sharing under Creative Commons licensing. Technically, the site is built using modern JavaScript frameworks such as Vue.js, with a custom CMS or proprietary platform, and includes advertising via Google Adsense. While the design and user experience are good, the site lacks HTTPS, security headers, and formal privacy or cookie policies, which impacts its security posture and privacy compliance. The domain is registered with GoDaddy and shows no suspicious WHOIS patterns, supporting its legitimacy. Overall, the site is functional and professional but requires significant improvements in security and privacy to meet modern standards.

E

Eesti Lauatenniseliit

eltl.ee

50

Eesti Lauatenniseliit is a national sports organization dedicated to table tennis in Estonia, providing news, event calendars, club information, player rankings, and regulatory details. The website serves as an information hub for players, clubs, and enthusiasts within the Estonian table tennis community. Technically, the site uses modern web technologies including JavaScript modules and CSS, hosted on DigitalOcean with DNS managed by the same provider. The site appears to be built on WordPress, indicating a standard CMS approach. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent WHOIS data showing local Estonian registration and a new domain appropriate for the organization's recent founding. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

S

STIGA Sports

stigasports.se

67

STIGA Sports operates an e-commerce platform specializing in sports and leisure products, including table tennis equipment, scooters, and hockey games. The website targets consumers interested in sports gadgets and leisure activities, positioning itself as a recognized brand in the retail sports sector primarily in Sweden. The business model focuses on direct online sales with a moderate company size and consistent branding. Technically, the website is built using modern frameworks such as Next.js and integrates multiple third-party services for analytics, marketing, and user engagement, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is partial, with a cookie consent banner present but no explicit privacy policy or terms of service detected in the provided content. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include enhancing privacy disclosures, improving security headers, and verifying domain registration details to strengthen business credibility and compliance.

N

Nameshift.com

weglot.eu

49

The website weglot.eu currently serves as a domain sales landing page operated by Nameshift.com, a domain brokerage and escrow service based in the Netherlands. The platform offers domain purchase services with an emphasis on safe, fast, and fee-free domain transfers for buyers. The business model focuses on domain resale with escrow facilitation to ensure secure transactions. The target audience includes domain investors and buyers seeking a trusted intermediary for domain acquisitions. The website content is minimal and primarily transactional, reflecting its purpose as a domain sales portal rather than a full business site. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, hosted on a CDN associated with Nameshift.com. The site demonstrates moderate performance and basic mobile optimization. However, SEO and accessibility features are basic, and there is no evidence of a CMS or extensive platform integrations. The site uses external scripts for analytics and Trustpilot reviews, indicating some level of marketing and trust-building efforts. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks explicit security headers such as Content Security Policy or HSTS, and no privacy or cookie policies are present, which are critical for GDPR compliance. There is no visible incident response or security contact information. The domain registration data is consistent with the business purpose, registered via a known registrar without privacy protection, supporting legitimacy. Overall, the site presents a low-risk profile but has significant gaps in privacy compliance and security best practices. Strategic improvements in policy disclosures, security headers, and contact transparency would enhance trust and compliance. The site’s limited content and basic design reflect its narrow business focus but also limit user engagement and SEO potential.

R

Rodinné zápolení | Další web používající WordPress

rodinnezapoleni.cz

50

Rodinnezapoleni.cz is a Czech language website created in 2011, built on WordPress using the Divi theme. The site appears to be a small-scale or personal project with limited content and minimal business information. The technical infrastructure is standard for WordPress sites, utilizing common libraries such as jQuery and Google Fonts. Hosting is provided by REG-ZONER, a Czech domain registrar and hosting provider, consistent with the website's regional focus. Security posture is basic with HTTPS enabled but lacking important security headers and policies. No privacy or cookie policies are present, indicating potential compliance gaps. Contact information and social media presence are not evident, limiting business credibility and user trust. Overall, the site is functional but lacks comprehensive security, privacy, and business transparency features.

R

Restaurace Tiskárna

restauracetiskarna.cz

38

Restaurace Tiskárna is a small hospitality business operating multiple restaurant locations in Prague, Czech Republic, specializing in modern Czech cuisine and quality draft Pilsner beer. The website provides clear contact information and basic business descriptions but lacks advanced digital maturity features such as privacy policies, cookie consent, and security disclosures. Technically, the site uses standard HTML and CSS with Google Fonts, hosted likely via REG-WEBGLOBE, but lacks modern CMS or frameworks. Security posture is weak due to missing security headers, unclear SSL status, and absence of vulnerability disclosures. Overall, the site is functional and professional but requires significant improvements in privacy compliance and security to reduce risk and enhance trust.

The Lindner Group website presents a comprehensive portfolio of interior fit-out and custom system products targeting construction and architectural professionals. The company positions itself as a strong partner in the manufacturing sector, focusing on acoustics, fire protection, sustainability, and design. The website is professionally designed with clear navigation and a broad product catalog, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools such as Matomo and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Privacy compliance is minimal, with no clear privacy or cookie policies detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

K

Online Kasino Česko ⚡️ Nejlepší Kasina v České Republice

kasinoczech10.com

49

The website kasinoczech10.cz is a Czech-language online casino affiliate and review platform focused on providing detailed information about online casinos available to Czech players. It offers curated casino reviews, bonus offers, payment method guides, and game type information to help users make informed decisions. The site targets adult Czech players interested in online gambling and operates primarily through affiliate marketing partnerships with various casinos. Technically, the site is built on WordPress, uses Cloudflare DNS, and integrates Google Analytics, Google Tag Manager, and OneSignal for analytics and notifications. The site is mobile-optimized with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formal privacy or cookie policies. The domain is relatively new (created in 2023) but consistent with the business age and model. Overall, the site is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and security policy disclosures.

A

A-B help s.r.o.

abhelp.cz

58

A-B help s.r.o. is a Czech non-profit organization established in 2006 that focuses on improving the lives of disadvantaged children, seniors, and handicapped individuals by providing minibuses to social institutions. The organization partners with socially responsible companies that sponsor these vehicles, which are branded with sponsor logos to enhance corporate social responsibility visibility. The website is built on WordPress and presents a professional, content-rich platform primarily in Czech. It provides clear contact information and testimonials that enhance trustworthiness. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Technically, the site is well-structured, mobile-optimized, and secure with HTTPS, but could benefit from enhanced security headers and privacy mechanisms.

H

HERVIS Österreich

hervis.cz

72

HERVIS Österreich operates a professional e-commerce platform specializing in sports apparel, shoes, and equipment targeted primarily at customers in Austria and neighboring regions. The website presents a consistent brand image with good content quality and clear navigation, supporting a positive user experience. Technically, the site leverages modern frameworks such as Angular and integrates marketing and identity management tools like Adobe Launch and Gigya, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the overall professionalism and content quality support a moderate to high trust level. Privacy and cookie policies are not explicitly found, which impacts compliance scoring. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing vulnerability disclosure information to strengthen security and trust further.

G

GUN PRODUCTIONS

gutterdammerung.com

54

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

P

ProFuturo

profuturo.education

56

ProFuturo is a well-established global digital education program supported by Fundación Telefónica and Fundación la Caixa, focused on reducing educational inequality by providing quality digital education to children and teachers in vulnerable environments. The website reflects a mature digital presence with multilingual support, a proprietary educational platform, and extensive educational content. Technically, the site is built on WordPress with modern tracking and consent tools, showing good performance and mobile optimization. Security posture is solid with HTTPS and bot protection, though improvements in DNS security and security headers are recommended. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its non-profit educational mission.

N

Nordic Symphony Orchestra

nordicsymphony.com

45

Nordic Symphony Orchestra is a small cultural organization based in Estonia, specializing in classical symphony performances with a focus on Nordic composers and artists. The website serves primarily as an informational portal providing concert schedules, streaming links, and contact details for management and artistic leadership. The business operates in the media sector, targeting classical music audiences in Estonia and the Nordic region. The domain age of nearly two decades supports the legitimacy and established presence of the organization. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS platforms. It lacks mobile optimization and accessibility features, which limits user experience on diverse devices. There is no evidence of advanced analytics, tracking, or advertising technologies, indicating a minimalistic digital footprint. Hosting and DNS are managed through EuroDNS and elkdata name servers, but DNSSEC is not enabled, and no security headers are detected. From a security perspective, the site does not demonstrate strong security practices. There is no visible HTTPS confirmation in the provided data, no privacy or cookie policies, and no incident response or security contact information. These gaps represent compliance and security risks, especially under GDPR regulations. However, the domain registration is consistent and transparent, with no privacy protection or suspicious WHOIS patterns, which supports trustworthiness. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility standards to enhance user trust and regulatory compliance.

F

Funky Pigeon

funkypigeon.com

70

Funky Pigeon is a UK-based e-commerce retailer specializing in personalized greeting cards, gifts, and flowers. The company operates under the parent company WH Smith PLC, positioning itself as a significant player in the UK retail market for personalized gifting solutions. The website offers a broad range of products tailored for various occasions, targeting consumers seeking unique and personal gift options. Technically, the site is built using modern web technologies including React and Next.js, with integrations for customer data platforms and marketing analytics, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and provides comprehensive privacy and cookie policies with consent mechanisms, indicating a strong commitment to user data protection. However, the absence of WHOIS registration data is a notable anomaly, though the overall site professionalism and parent company association mitigate concerns. Strategic recommendations include publishing explicit security policies and incident response contacts, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

E

Estonian Maritime Cluster

maritimecluster.ee

40

Estonian Maritime Cluster is a newly established (2024) non-profit organization focused on fostering collaboration, innovation, and growth within Estonia's maritime sector. It serves as a network for maritime professionals, companies, and organizations, aiming to position Estonia as a leading maritime hub in the Baltic Sea region. The website presents a professional and well-structured digital presence built on WordPress, featuring comprehensive contact information and a broad membership base. Technically, the site uses modern web technologies and includes security measures such as HTTPS and Cloudflare Turnstile captcha on forms. However, it lacks critical compliance documents like privacy and cookie policies, and security headers are not implemented, which are areas for improvement. Overall, the domain registration is consistent with the business claims, indicating legitimacy.

B

Baltic Legal

baltic-legal.com

44

Baltic Legal is a specialized corporate law office providing company formation, legal, accounting, and immigration services focused on the Baltic states of Latvia, Estonia, and Lithuania. The company targets entrepreneurs and businesses seeking to establish operations in these countries, offering a one-stop solution for business registration, tax management, and residence permits through investment. The website content is professionally structured and provides detailed service descriptions, although it lacks explicit contact information and privacy policies. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, Font Awesome icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, but lacks advanced accessibility features and security headers. The absence of HTTPS status information and security headers suggests room for improvement in security posture. From a security perspective, the site does not expose sensitive data and uses no known vulnerable libraries. However, the lack of privacy and cookie policies, absence of contact details for incident response, and missing WHOIS registration data reduce trustworthiness and compliance with data protection regulations. The WHOIS query returned no registration data, which is inconsistent with the active website presence and raises concerns about domain legitimacy. Overall, Baltic Legal presents a credible business offering with good content quality and technical implementation but requires significant improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

Trade House Co. LLC is a medium-sized, established company founded in 1975 and headquartered in Sharjah, UAE. It operates as a manufacturer, importer, and distributor of building materials such as steel, cement, timber, and plywood, serving the construction industry primarily in the UAE and globally. The company positions itself as one of the oldest and largest distributors of high tensile steel bars in the region, emphasizing operational excellence and product quality. The website content is basic but relevant, providing essential business information and navigation.

M

Mellow

mellow.ee

43

Mellow is a small creative company based in Estonia specializing in video production, photography, animation, visual effects, and graphic design. The website presents a minimalistic portfolio and contact information, targeting clients seeking creative media services. The business appears to be a small niche player with a straightforward service offering and a modest online presence. Technically, the website is built with basic HTML and CSS without any detected CMS or advanced frameworks. Hosting is provided by Zone Media OÜ, an Estonian registrar and hosting provider. The site lacks HTTPS on some assets, and no security headers or modern web technologies are detected. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. There is no evidence of privacy or cookie policies, no incident response or security policies, and no vulnerability disclosure mechanisms. The absence of HTTPS on all content and lack of security headers represent notable risks. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website scores moderately low on security and privacy compliance but maintains basic business credibility and content relevance. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

N

Nameshift.com

heyday.eu

50

Nameshift.com operates as a domain name marketplace specializing in secure and efficient domain transfers using an escrow service. The platform targets individuals and businesses seeking to purchase domain names with minimal risk, offering free assistance and VAT invoicing. The business model relies on seller commissions, providing a fee-free experience for buyers. The website content is minimal but consistent with the business purpose, emphasizing safety, speed, and no additional fees. Technically, the website is built using modern web technologies, notably the SvelteKit framework, and leverages CDN-hosted assets for performance. The site is mobile-optimized with basic accessibility and SEO features. However, it lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No vulnerabilities or malicious scripts were detected. The WHOIS data is consistent and transparent, with no privacy protection masking the registrant, enhancing trustworthiness. However, the absence of privacy and cookie policies, as well as incident response contacts, indicates room for improvement in compliance and security posture. Overall, the website presents a moderate risk profile with a solid business foundation but requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.