Security Directory

Adaltum.ee is a small Estonian translation service provider operated by Elkdata OÜ, founded in 2022. The website offers professional translation and localization services targeting businesses and organizations requiring multilingual content adaptation. The site is built on WordPress and uses standard themes and scripts, providing a moderate level of technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. No direct contact information or incident response policies are published, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation to improve trust and legal adherence.

E

Elektrum Eesti OÜ

elektrum.ee

61

Elektrum Eesti OÜ is a well-established energy company operating in Estonia, offering a range of electricity packages, insurance, renewable energy solutions, and electric vehicle charging services. As part of the Latvenergo group, it holds a strong market position in the Baltic energy sector, serving both private and business customers with a focus on reliability and environmental sustainability. The website reflects a professional digital presence with clear navigation, multi-language support, and comprehensive service information. Technically, the site employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Google Tag Manager and Usercentrics for cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good privacy compliance and business credibility, supported by consistent WHOIS data and transparent contact information.

Meidron is a small Estonian company founded in 2011, offering IT support and consulting services, EU funding project management, and environmental consulting. The company targets businesses and organizations requiring specialized consulting and support services. The website is simple and functional, providing basic business information and contact details, including email, phone, and LinkedIn profile. The market position appears niche and regional with a focus on professional service delivery. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. Hosting appears to be on Oracle Cloud infrastructure. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected, indicating a custom or static site. From a security perspective, the domain is well-registered with a long history and transfer protection. However, the site lacks DNSSEC, visible HTTPS enforcement, and security headers. No privacy or cookie policies are present, and no consent mechanisms are implemented, indicating GDPR compliance gaps. The use of Google Analytics without cookie consent further impacts privacy compliance. No incident response or vulnerability disclosure information is provided. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

H

Hauser's Jewelers

hausersjewelers.com

60

Hauser's Jewelers is a long-established retail and e-commerce business specializing in high-end jewelry and watches, with a heritage dating back to 1898. The website serves as a professional online storefront built on the Shopify platform, showcasing various jewelry collections and brands. The business targets consumers seeking luxury jewelry and watch products, offering both sales and repair services. The site demonstrates consistent branding and good content quality, reflecting its market position as a reputable jeweler. Technically, the website leverages modern web technologies including Shopify's Expression theme, web fonts, and JavaScript libraries. It is hosted on Shopify's infrastructure with Network Solutions as the domain registrar. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Performance is moderate, with standard Shopify CDN usage. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information is limited to contact forms without explicit emails or phone numbers. No vulnerability disclosure or incident response information is provided. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security header implementation to improve its security posture and regulatory adherence.

R-Systems is an Estonian software development company specializing in hydrography and spatial data software solutions, founded in 1989. The company offers services including hydrographic survey software, spatial data processing, and sensor integration, targeting sectors such as military, air surveillance, logistics, and GIS. The website reflects a small, niche technology business with a long operational history but limited online presence and content depth. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. The site lacks modern frameworks or CMS and shows basic performance and SEO optimization. Mobile optimization and accessibility are minimal, indicating room for improvement in digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are provided, limiting transparency and trust. The use of Google Analytics without a consent mechanism further impacts privacy compliance. Overall, the website presents a moderate risk profile with no critical security issues detected but several compliance and usability gaps. Strategic improvements in privacy policies, security headers, mobile optimization, and contact transparency are recommended to enhance trust and compliance.

The website cityntel.com represents a small Chinese company specializing in the rental, leasing, sales, and recycling of diesel generators ranging from 30KW to 2000KW, focusing on imported brands such as Cummins, Mitsubishi, and Caterpillar. The target audience includes infrastructure sectors such as railway, transportation, municipal engineering, real estate, factories, hotels, and construction sites. The business model is primarily service-oriented, providing equipment solutions tailored to client needs. The website content is primarily in Simplified Chinese and provides product listings, case studies, team introductions, and news updates related to diesel generators. Technically, the website is built on the EmpireCMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, and libraries such as Blazy for lazy loading and WOW.js for animations. The site has basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. There is no evidence of modern frameworks or advanced hosting details. The WHOIS data shows inconsistencies, including a domain creation date in the future and minimal registrant information, which raises legitimacy concerns. From a security perspective, the website lacks critical security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement information. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure information is provided. These gaps indicate a low security maturity level and potential compliance issues with data protection regulations such as GDPR. Overall, the website presents a functional but basic online presence for a niche diesel generator rental business. The main risks relate to domain legitimacy concerns and insufficient security and privacy practices. Strategic improvements in security posture, compliance documentation, and WHOIS transparency are recommended to enhance trust and reduce operational risks.

E

Eklips Digital

eklips.se

57

Eklips Digital is a specialized provider of subscription-based corporate websites, targeting listed and non-listed companies primarily in the Nordic region. Founded in 2011, the company offers a Corporate Website as a Service (CWaaS) platform that includes web development, design, branding, hosting, maintenance, security, and support services. Their market position is strengthened by serving 10% of Nasdaq Stockholm Main Market companies and delivering over 300 websites with a 99.9% uptime guarantee. The website is professionally designed using modern technologies such as Next.js and React, reflecting a mature digital infrastructure. However, the absence of WHOIS data for the domain www.eklips.se raises concerns about domain registration legitimacy, which should be verified. Security posture is moderate with no visible vulnerabilities but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional business presence but requires improvements in compliance and domain legitimacy verification.

A

Afternic (GoDaddy Operating Company, LLC)

ryapolov.com

70

The website ryapolov.com is a domain sales landing page hosted on the Afternic platform, a domain aftermarket service owned by GoDaddy Operating Company, LLC. It offers the domain ryapolov.com for sale with options to buy outright or lease to own. The site targets domain buyers including businesses and individuals seeking premium domain names. The business model is focused on domain brokerage and sales, leveraging GoDaddy's extensive infrastructure and brand recognition. The platform provides contact forms and phone support to facilitate domain price inquiries and transactions. Technically, the site is built using modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure. It employs HTTPS with strong security headers and integrates third-party services such as Klarna for payments and Trustpilot for reputation. The site is optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital presence. From a security perspective, the website demonstrates strong posture with enforced HTTPS, secure forms protected by reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain reduces transparency but is likely due to privacy protection or query limitations. Overall, the site is legitimate, professional, and secure, suitable for its domain sales purpose. The overall risk assessment is low, with recommendations to improve transparency by publishing security policies and incident response details, enhancing accessibility, and maintaining regular audits of third-party scripts. These steps will further strengthen trust and compliance in the competitive domain aftermarket space.

N

Nord Property Ltd

nordproperty.com

43

Nord Property Ltd is a medium-sized real estate company based in Estonia, specializing in international real estate services including brokering, property management, consulting, appraisal, investment counseling, and development sales. The company targets property buyers, sellers, and investors primarily in Estonia and Spain, offering multilingual support and a professional service portfolio. The website is well-structured with clear navigation and relevant content, supporting a good user experience and moderate mobile optimization. Technically, the site uses common analytics and tracking tools such as Google Analytics and Google Tag Manager, along with Google Maps API for location services. However, no CMS or hosting provider details were identified, and performance is moderate.

C

For Sale Page

copterline.com

51

The website copterline.com currently serves as a domain parking and sales page hosted by the Spaceship.com marketplace platform. It does not represent an active business but offers the domain for sale with a fixed price and option to make an offer. The site targets domain investors and buyers, providing secure payment options and transaction support. The branding is consistent with the Spaceship marketplace, and the site includes a contact form for potential buyers to submit their information. Technically, the site uses standard HTML, CSS, and JavaScript, hosted on Spaceship's CDN infrastructure, with moderate performance and good mobile optimization. However, the site lacks advanced SEO, accessibility features, and security headers. The WHOIS data shows inconsistencies such as a future creation date and missing registrant details, which lowers trustworthiness. No privacy, cookie, or terms of service policies are present, and no direct company contact emails or phone numbers are provided. Overall, the site is functional for domain sales but lacks comprehensive business and security information.

I

interUX Usability Engineering Studio OÜ

interux.com

47

interUX Usability Engineering Studio OÜ is a small, Estonia-based consultancy specializing in user experience and usability engineering services across Estonia, Latvia, and Russia. With over 20 years of professional expertise, the company offers a comprehensive suite of UX services including user interface design, expert evaluations, field studies, usability testing, and eye tracking. Their client base spans multiple industries such as retail, insurance, travel, and telecommunications, positioning them as a trusted usability partner in the region. Technically, the website employs a basic but functional technology stack consisting of HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and SEO, with basic mobile responsiveness and accessibility features. However, there is no evidence of a CMS or advanced frameworks, indicating a relatively simple infrastructure. From a security perspective, the domain is well-established with a consistent WHOIS record and domain status protections. However, the website lacks critical security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement or privacy compliance mechanisms such as privacy or cookie policies. Google Analytics is used without a cookie consent banner, which may raise GDPR compliance concerns. Overall, the website presents a professional and credible business front but requires improvements in privacy compliance and security best practices to reduce risk and enhance trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, enforcing HTTPS, and providing incident response information.

A

Ambient Sound Investments

asi.ee

46

Ambient Sound Investments (ASI) is a private asset management firm established in 2003 by four founding engineers of Skype. The company operates as a family office with a focus on investments across venture capital, private equity, listed equity, and real assets, with assets geographically located in Europe, the US, and Asia. The website presents a professional image with clear navigation and relevant business content, targeting investors and professionals interested in diversified asset management. The business model is niche and specialized, leveraging the founders' technology and finance backgrounds. Technically, the website is built on the Voog CMS platform, utilizing standard web technologies such as JavaScript, CSS, and HTML5. The site is mobile optimized and performs moderately well, though accessibility features are basic. The hosting and domain registration are consistent with the business location in Estonia, with no signs of privacy protection or suspicious WHOIS data. External scripts are limited and primarily related to the CMS platform. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and visible security policies. There are no privacy or cookie policies, nor contact information for security incidents or data protection officers. No vulnerabilities or exposed sensitive data were detected, but the absence of key compliance documents and security headers represents a moderate risk. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

S

Sviiter Studio

sviiter.ee

56

Sviiter Studio is a small, independent full-service design-oriented studio based in Estonia, specializing in branding, digital, and print design services. The company positions itself as innovative and client-focused, targeting businesses and organizations seeking comprehensive design solutions. The website is professionally designed using the Squarespace platform, featuring clear navigation, responsive design, and integration with social media channels such as Instagram, Facebook, and Behance. Technical infrastructure leverages modern web technologies and content delivery networks to ensure moderate performance and good user experience across devices. Security posture is strong with HTTPS enforced, HSTS enabled, and a cookie consent mechanism in place, although explicit privacy policies and incident response information are absent. Overall, the website reflects a trustworthy and credible business presence with room for improvement in privacy compliance and security transparency.

E

Eton

etonshirts.com

72

Eton is a well-established Swedish brand specializing in premium men's shirts and accessories, with a history dating back to 1928. The company operates a sophisticated e-commerce platform targeting men seeking quality and style in shirts and related apparel. Their market position is strong within the premium retail segment, supported by a comprehensive product range including custom-made options and a membership club offering exclusive benefits. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Contentful CMS and integrating analytics tools like Google Tag Manager and Voyado. The site demonstrates excellent design quality, mobile optimization, and accessibility, providing a seamless user experience. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of explicit security policy or incident response information is noted. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the site's legitimacy and professional appearance. Overall, the website is secure, professional, and user-friendly but would benefit from improved domain registration transparency and explicit security disclosures.

The website ww.ee represents a small Estonian technology-related company operating under the names OÜ Wõrgu Wõlurid and Web Wizards LLC. The business appears to provide web or IT services, targeting both Estonian and English-speaking clients. The domain is well-established since 2010 and hosted by Zone Media OÜ, consistent with the company's location and language. The website content is minimal but accessible, providing basic contact information in two languages. Technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript without advanced frameworks or CMS platforms. Mobile optimization and accessibility are basic but functional. From a security perspective, the site lacks critical security headers and published policies such as privacy, cookie, or terms of service, which indicates compliance gaps and potential risks. No incident response or vulnerability disclosure mechanisms are present. The absence of analytics or tracking scripts suggests minimal user tracking, which is positive for privacy but also indicates limited marketing sophistication. WHOIS data is transparent and consistent with the website's claims, supporting legitimacy. Overall, the website scores moderately on business credibility but falls short on privacy compliance and security posture. The lack of published policies and security best practices presents risks that should be addressed to improve trust and regulatory compliance. Strategic improvements in security headers, policy publication, and incident response readiness are recommended to enhance the site's security and compliance maturity.

A

Actual Reports OÜ

actualreports.com

67

Actual Reports OÜ is a small Estonian technology company specializing in business process automation with a focus on document generation and data collection solutions. Their website presents a professional and consistent brand image, targeting developers, eCommerce merchants, and general users with products such as PDF Generator API, PDFViewer, Printout Designer, and PDFMake. The company leverages a partner ecosystem to provide comprehensive automation tools. Technically, the website uses modern web fonts, Font Awesome icons, embedded YouTube videos, and Google Tag Manager for analytics. Hosting appears to be on Amazon AWS infrastructure. The website is mobile optimized with good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is limited to email and physical address with no phone or contact forms. Overall, the website is functional and professional but could improve in privacy and security transparency.

SRV Yhtiöt Oyj operates in the Finnish real estate sector, focusing on sustainable and energy-efficient construction of new residential and commercial properties. The website targets potential home buyers and commercial tenants, presenting a professional and modern digital presence built with React and Gatsby technologies. The content is relevant and well-structured, although explicit privacy and cookie policies are not found in the provided content. Security posture is limited due to lack of visible security headers and policies, and no contact information or incident response details are provided. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity in Finland. Overall, the website demonstrates a good business credibility and technical foundation but requires improvements in privacy compliance and security best practices.

I

ITM Trade

itm.ee

67

ITM Trade is an established IT services company based in Estonia, providing a broad range of services including programming, SEO, server and workstation administration, marketing, and e-commerce solutions. With over 15 years of experience and a portfolio of more than 300 projects across 35 countries, ITM Trade holds a strong market position as a leader in its industry. The website reflects a professional and consistent brand image targeting businesses seeking comprehensive IT solutions. The technical infrastructure of the website is modern and functional, utilizing Google Fonts, Google reCAPTCHA for form security, and slick sliders for UI elements. The site is mobile optimized and SEO friendly, though there is room for improvement in accessibility and performance optimization. Hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar. From a security perspective, the website employs HTTPS and reCAPTCHA, and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and a published security policy or incident response contacts. No vulnerability disclosure or security.txt file is present, which are recommended for enhanced transparency and security posture. Overall, the website is trustworthy and professionally maintained, with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security policies and DNS security would further strengthen its risk profile.

R

Route One

routeone.co.uk

70

Route One is a specialized retailer focusing on skateboarding, snowboarding, and streetwear apparel and accessories, targeting youth and young adults in Europe. The company operates a professional e-commerce platform built on Shopify, offering a broad product range and a user-friendly shopping experience. The website demonstrates good digital maturity with modern technologies, mobile optimization, and integrated marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears legitimate and professionally managed with a solid market position in its niche.

TIIB Kindlustusmaakler OÜ is an Estonian insurance brokerage firm established in 2010, offering various insurance products such as traffic, casco, home, and property insurance. The company maintains a basic but functional website providing essential business and contact information, including financial reports and legal documents, which supports its credibility in the local market. The website targets Estonian customers seeking insurance brokerage services and positions itself as a trusted local player in the finance sector. From a technical perspective, the website is built using basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced accessibility features, indicating a need for modernization. No analytics or tracking technologies are present, suggesting minimal user data collection. Hosting and domain registration are stable and consistent with the business profile, registered through Telia Eesti AS. Security posture is weak due to the absence of visible HTTPS confirmation, security headers, privacy and cookie policies, and incident response information. No forms or interactive elements are present, reducing attack surface but also limiting user engagement. The lack of GDPR compliance indicators and cookie consent mechanisms poses regulatory risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The platform targets mobile development teams seeking to automate build, test, and release workflows to accelerate app delivery. With over 150,000 developers trusting the service, Codemagic holds a strong market position as a focused mobile CI/CD solution with enterprise-grade features and integrations. Technically, the website demonstrates a modern and performant infrastructure hosted on AWS, utilizing JavaScript, CSS, and HTML5 with integrations for Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The platform itself offers cloud-based, fully maintained infrastructure with support for multiple hardware/software configurations, emphasizing ease of use and automation. From a security perspective, Codemagic maintains a robust posture with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and compliance with GDPR and CCPA. The website includes privacy and security statements and cookie consent mechanisms. However, there is no public incident response contact or security.txt file, which could enhance transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, Codemagic presents a trustworthy, professional, and technically sound offering with strong compliance and security practices. The domain registration is privacy protected but consistent with the company profile and age. Strategic recommendations include publishing a security.txt file, adding explicit incident response contacts, and enhancing security headers to further strengthen security posture and trust.

The website kkfashion.eu is an early-stage or under-construction online presence for a fashion e-commerce business, as indicated by the linked shop subdomain. The site is built on WordPress 6.8.1 and hosted under the registrar Zone Media OÜ in Estonia, consistent with the domain's country. The content is minimal, with no privacy, cookie, or terms of service policies present, and no contact or security information provided. Technically, the site uses standard WordPress assets and scripts but lacks advanced SEO, accessibility, and security headers. No analytics or advertising technologies are detected, indicating a low digital maturity level. Security posture is basic with no visible vulnerabilities but also no advanced protections or policies. Overall, the site is low in trustworthiness and professionalism due to its incomplete state and lack of compliance documentation.

O

ONLINE ONLY OÜ

onlineonly.com

62

ONLINE ONLY OÜ is a small, Estonia-based digital marketing and online business management company operating a fully remote team of about 30 people. The company focuses on managing and investing in profitable online businesses including SaaS, eCommerce, and publishing sectors. Their key services include conversion optimization, Google Ads, SEO, design, and development. The company presents a professional and consistent brand image with a clear portfolio of owned businesses, indicating a stable market position in their niche. Technically, the website is built on a modern React and Gatsby framework, delivering good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, and no security headers were detected, which are areas for improvement. The domain is well maintained with a long history and consistent WHOIS data, supporting the legitimacy of the business. Overall, the security posture is moderate with room for enhancements in policy transparency and technical security measures.

A

Amandus Communication

amanduscommunication.com

61

Amandus Communication is a specialized online corporate communications agency focusing on corporate websites and related services, primarily serving publicly traded companies and organizations. Their offerings include website advisory, design, production, IPO and transaction support, integrated connections for investor relations and recruitment, concept and design services, and financial reporting. The company leverages platforms such as WordPress and Optimizely and promotes a Website as a Service (WaaS) model through their partner domain amanduswp.com. Technically, the website uses modern web technologies with JavaScript and CSS, is mobile optimized, and served over HTTPS, but lacks advanced security headers and privacy compliance mechanisms. Security posture is moderate with room for improvement in DNS security and policy disclosures. Overall, the site presents a professional and trustworthy image with clear contact information and consistent branding.

V

Volvo Trucks

volvotrucks.ee

48

Volvo Trucks is a globally recognized enterprise specializing in manufacturing and selling heavy-duty trucks and related services. The website serves the Estonian market, providing comprehensive information about truck models, financing, fleet management, and other services. The site is built on a robust technical infrastructure leveraging Adobe Experience Manager and Adobe analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit privacy and security policies are not found in the provided content. Overall, the website reflects a professional and trustworthy brand with room for improvement in transparency and compliance documentation.

Raido Tamar is a seasoned SEO specialist operating primarily in the Estonian market, offering consulting, training, and SEO project execution services. The website positions him as a leading expert with over 10 years of experience and more than 300 completed SEO projects, supported by client testimonials from reputable Estonian companies and media appearances. The business model focuses on personalized SEO services and education for businesses, especially e-commerce operators. Technically, the website is built on WordPress using the GeneratePress theme and Yoast SEO plugin, hosted by Zone Media OÜ, with good mobile optimization and SEO best practices implemented. Security posture is solid with HTTPS and hCaptcha integration, though lacks some advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche, but could improve in privacy and security transparency.

Pet Service is a Mexican small business specializing in a broad range of pet-related services including pet hotel accommodations, boutique products, veterinary clinic services, pet schooling, transportation, and testing. The website targets local pet owners seeking comprehensive pet care solutions. The digital presence is basic with limited content quality and minimal SEO or accessibility features. The technical infrastructure relies on older technologies such as jQuery 1.9.1 and lacks modern security headers or HTTPS enforcement visible in the HTML content. Security posture is moderate with some risks due to outdated libraries and missing security best practices. Privacy compliance is poor with no visible privacy or cookie policies. Overall, the website is functional but requires significant improvements in security, privacy, and technical modernization to enhance trust and compliance.

A

Arengupartner

arengupartner.ee

40

Arengupartner is a small Estonian coaching service provider established in 2010, offering life coaching, work-related coaching, team coaching, and training services. The website is built on Joomla! CMS using UIkit and Yootheme frameworks, hosted by Radicenter OÜ. The site is professionally designed with good navigation and mobile optimization, targeting individuals and teams seeking coaching services. Social media presence on Facebook and LinkedIn and partner logos enhance trustworthiness. Security posture is basic with HTTPS enabled but lacking security headers and formal policies. No privacy or cookie policies were found, indicating compliance gaps. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.

R

Reliance Jio Infocomm Limited

jio.com

77

Reliance Jio Infocomm Limited operates India's largest telecom network, offering a comprehensive suite of prepaid and postpaid mobile plans, broadband services including JioFiber and AirFiber, and a variety of digital applications. The website reflects a mature enterprise with a strong market position and a focus on delivering digital connectivity and entertainment solutions to both consumers and businesses across India. The company leverages modern web technologies such as Next.js and CDNs to ensure fast and responsive user experiences. Security posture is generally strong with HTTPS and secure form handling, though there is room for improvement in security headers and transparency around privacy and incident response. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing privacy compliance, publishing vulnerability disclosure information, and improving security header implementation to strengthen trust and compliance.

M

Maxima

maxima.ee

69

Maxima is a large retail grocery chain operating in Estonia, offering over 2000 promotional deals weekly to its customers. The website is professionally designed with good content quality and clear navigation, targeting retail consumers seeking affordable daily groceries. Technically, the site employs modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating reliable hosting and security infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks visible security policies and incident response contacts. Privacy compliance is partially addressed via Cookiebot consent but lacks a publicly accessible privacy policy or terms of service pages. Overall, the site demonstrates moderate to good digital maturity with room for improvement in privacy transparency and security documentation.

AS Stallion Ltd. is an established Estonian cybersecurity company founded in 1994, specializing in network security solutions such as firewalls, VPNs, data protection, and malware prevention. With over 30 years of experience and offices in Tallinn and Riga, Stallion serves business clients requiring comprehensive IT security and network infrastructure solutions. The company partners with leading global cybersecurity vendors, reinforcing its market position as a trusted provider in the Baltic region. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript, with Google Analytics for visitor tracking. However, the site lacks modern security implementations such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. The site’s design and navigation are functional but could benefit from improved mobile optimization and accessibility. From a security perspective, the absence of HTTPS and security headers represents a significant risk, potentially exposing users to data interception and other attacks. The lack of privacy and cookie policies also indicates compliance gaps. No forms or input fields are present on the main page, reducing attack surface but also limiting user interaction. The company’s domain registration data aligns well with its business claims, supporting legitimacy. Overall, while Stallion demonstrates strong business credibility and domain trustworthiness, the website’s security posture and privacy compliance require urgent improvements to meet modern standards and regulatory requirements.

H

Heateo Sihtasutus

heategu.ee

42

Heateo Sihtasutus operates as a non-profit organization in Estonia, focusing on promoting social change and charitable activities. The website serves as a platform to engage the Estonian community in good deeds and social initiatives. The organization has an established presence since 2010, supported by a professionally designed website built on WordPress and hosted by a reputable Estonian provider. The technical infrastructure is modern and secure, with HTTPS and security headers properly configured. However, the site lacks visible privacy and cookie policies, which impacts its compliance posture. No explicit contact information or incident response details are provided, limiting direct communication channels. Overall, the website demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and transparency to enhance trust and regulatory adherence.

The website bytetrain.com currently serves as a login portal for konsoleH, a server and account administration interface likely associated with the Hetzner hosting provider. The site provides minimal content focused on navigation to webmail and account administration services, with no direct business description or contact information visible. The domain is well-established, registered since 2012, and shows stable registration status, but the website itself lacks modern security and privacy features. Technically, the site uses basic HTML and CSS without any detected modern frameworks or CMS. It is hosted likely by Hetzner, as inferred from URLs and copyright notices. The site lacks HTTPS, DNSSEC, security headers, and any form of privacy or cookie policy, indicating a low level of digital maturity and security posture. No analytics or tracking technologies are present, and the site is not optimized for mobile or accessibility. From a security perspective, the absence of HTTPS is a critical issue, exposing users to potential interception risks. The lack of security headers and privacy policies further reduces trust and compliance with GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and legitimate, but the website's security and privacy posture require significant improvement. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include immediate HTTPS enablement, publishing privacy and cookie policies, adding security headers, and improving content and contact transparency to enhance trust and compliance.

W

WHSmith PLC

whsmithcareers.co.uk

68

WHSmith PLC is a well-established global retailer with a rich history dating back to 1792. The company operates over 1,700 stores across more than 30 countries, encompassing a diverse portfolio of retail and online brands including WHSmith Travel, WHSmith High Street, funkypigeon.com, and cultpens.com. The careers website serves as a comprehensive portal for job seekers, highlighting the company's growth, culture, and opportunities across various business areas. Technically, the website employs modern web technologies such as Google Tag Manager, Vimeo for video content, and a chatbot powered by Chatter Communications, ensuring a user-friendly and interactive experience. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, although there is room for improvement by adding explicit security policies and incident response contacts. Overall, the domain registration and WHOIS data align well with the company's legitimacy and long-standing market presence, supporting a high trustworthiness rating.

E

East West Connection – Official Website

ewcmeetings.com

48

East West Connection's website is a WordPress-based site using the Astra theme and Divi builder compatibility, hosted via GoDaddy.com, LLC. The domain is mature, registered since 1998, indicating a long-standing presence. However, the website content is minimal, lacking critical business descriptions, contact information, and privacy or cookie policies. Technically, the site uses modern CMS technologies but lacks advanced security headers and comprehensive privacy compliance mechanisms. The security posture is basic with HTTPS enabled but missing other best practices. Overall, the site presents a low level of trustworthiness and professionalism due to missing policies and contact details, which could impact user confidence and regulatory compliance.

A

Welcome!

aluminium.ee

25

The website aluminium.ee currently serves as a default placeholder page with no substantive business content or branding. The domain is registered to Compic OÜ, an Estonian registrar, with a creation date in 2013, indicating a legitimate and established domain. However, the lack of any customized content, contact information, or policies suggests the site is either inactive or under initial development. The technical infrastructure is minimal, relying on basic HTML and CSS served via ISPConfig hosting, with no detected CMS or advanced frameworks. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the site lacks trust signals and professional presentation, limiting its credibility and user trust.

Port of Antwerp-Bruges is a major European port authority, operating the second largest port in Europe with extensive shipping and logistics services. The website reflects a mature digital presence with comprehensive content targeting businesses and individuals involved in maritime transport and port operations. The technical infrastructure is modern, leveraging Next.js and React frameworks, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant. However, the lack of WHOIS data reduces transparency slightly, though the overall trustworthiness remains high due to consistent branding and official social media presence.

G

Global Gardens Chicago

globalgardenschicago.org

57

Global Gardens Chicago is a small non-profit organization dedicated to urban farming and refugee support in Chicago's Albany Park neighborhood. The organization operates a one-acre farm where over 75 refugee families grow organic vegetables for personal use and sale, fostering community, sustainable growth, and supplemental income. The website is built on Squarespace, featuring a clean design with good navigation and mobile optimization. Security best practices such as HTTPS and HSTS are implemented, but the site lacks visible privacy and cookie policies, as well as explicit contact information, which impacts privacy compliance and business credibility scores. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency. Overall, the site presents a trustworthy and professional image with room for improvement in compliance and contact transparency.

FB GROUPE is a French company specializing in concrete flooring solutions with a significant installed base in France. The company provides manufacturing, delivery, and technical support services primarily targeting construction professionals such as contractors, architects, and engineering offices. The website content is basic but functional, offering navigation through product ranges and company information. Technically, the site uses standard HTML, CSS, and JavaScript without modern frameworks or CMS, hosted behind Cloudflare DNS but lacking advanced security headers and cookie consent mechanisms. Security posture is moderate with domain registration protections but missing DNSSEC and security headers. Overall, the site is accessible and trustworthy but would benefit from enhanced security and privacy compliance features.

T

Thibault Bâtiment Industriel

thibaultbatimentindustriel.fr

43

Thibault Bâtiment Industriel is a French industrial building manufacturer and constructor, serving clients in the industrial construction sector. The website presents a professional design built on WordPress with Elementor, targeting a niche market in France. The technical infrastructure is moderate, with basic performance and mobile optimization. However, the absence of WHOIS data limits the ability to verify domain legitimacy and trustworthiness. Security posture is average, with no detected security headers and no explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

T

Tiger Technologies

tigertech.biz

58

Tiger Technologies is a small, established web hosting provider offering affordable and reliable hosting services with a focus on green, carbon-neutral operations. Their business model centers on subscription-based web hosting plans that include free domain registration and a variety of hosting features such as spam protection, SSL certificates, and one-click WordPress installation. The company targets individuals and businesses seeking dependable hosting solutions without setup fees or long-term contracts. Technically, the website is well-structured with modern HTML, CSS, and JavaScript, providing a good user experience and mobile optimization. However, no advanced frameworks or CMS platforms are detected, indicating a straightforward custom implementation. Security posture is strong with HTTPS enforced, free wildcard SSL certificates, and spam filtering, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and service offerings appear professional and trustworthy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site scores well in business credibility and security but could improve in privacy compliance and transparency.

T

Tiger Technologies LLC

tigertech.net

58

Tiger Technologies LLC is a well-established web hosting provider founded in 2000, offering affordable and reliable hosting services with a focus on green, carbon-neutral operations. Their service includes free domain registration, email hosting, SSL certificates, and WordPress support, targeting individuals and businesses seeking dependable web hosting solutions. The website is professionally designed with clear navigation and relevant content, supporting a positive user experience and trustworthiness. Technically, the site uses standard web technologies with moderate performance and basic mobile optimization. Security posture is solid with HTTPS and free wildcard SSL certificates, but lacks DNSSEC and security headers, and does not publish formal security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie policy or consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust.

T

Tiger Technologies

tigertech.org

58

Tiger Technologies is a small, established web hosting provider offering affordable and reliable hosting services with a focus on green, carbon-neutral operations. Their business model centers on subscription-based web hosting plans that include free domain registration and a variety of hosting features such as email, SSL certificates, and one-click WordPress installation. The website is professionally designed with clear navigation and relevant content targeting individuals and businesses seeking dependable web hosting solutions. Technically, the website uses standard web technologies including HTML, CSS, and JavaScript, and is served over HTTPS with free wildcard SSL certificates, indicating a good baseline security posture. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and explicit security headers. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. Security-wise, the site demonstrates good practices such as spam and virus filtering, WHOIS privacy protection, and uptime guarantees. However, the absence of explicit security headers, vulnerability disclosure policies, and incident response contacts indicates room for improvement. The missing WHOIS data for the domain raises some concerns about domain registration transparency, although the website content itself appears legitimate and professional. Overall, Tiger Technologies presents a trustworthy and functional web hosting service with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security policy transparency, and domain registration verification would enhance their credibility and reduce risk.

I

Interneto vizija, UAB

sertifikatai.lt

54

Sertifikatai.lt is a Lithuanian website operated by the company Interneto vizija, UAB, specializing in SSL certificates and data security solutions. The site targets businesses and website owners in Lithuania seeking to secure their online presence with SSL certificates, emphasizing trust and data protection. The business model is primarily e-commerce and service provision focused on security products. The website presents professional content with good branding consistency and trust indicators such as HTTPS and cookie consent mechanisms.

V

VTDigger Shop

vtdiggershop.org

59

VTDigger Shop is an e-commerce website dedicated to selling branded merchandise that supports independent journalism in Vermont. The site offers products such as tote bags, hats, t-shirts, and gift cards, targeting Vermont residents and supporters of local journalism. The business model focuses on on-demand production to reduce overproduction and promote thoughtful purchasing. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager for analytics and Typekit for fonts. The site is mobile optimized with a clear navigation structure and professional design, providing a good user experience. Security posture is strong with HTTPS and HSTS enabled, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of a privacy policy and cookie consent banner. WHOIS data is unavailable, likely due to privacy protection, but the domain and website content appear consistent with a legitimate small media-related e-commerce operation. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents.

S

Sparkasse Oberlausitz-Niederschlesien

sparkasse-oberlausitz-niederschlesien.de

66

Sparkasse Oberlausitz-Niederschlesien is a well-established regional financial institution in Germany with a strong heritage of 200 years. The website serves both private and corporate customers, offering a broad range of banking products including accounts, loans, investments, insurance, and real estate services. The digital presence is professional, well-structured, and optimized for accessibility and mobile use, reflecting a mature digital infrastructure based on Adobe Experience Manager and modern web technologies. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The website integrates trusted third-party services such as Deka Investments and a virtual assistant chatbot to enhance customer experience. Overall, the site demonstrates high business credibility and compliance with GDPR and cookie regulations.

S

Sparkasse Nürnberg

sparkasse-nuernberg.de

64

Sparkasse Nürnberg is a well-established regional bank in Germany offering a comprehensive range of financial services including online banking, loans, insurance, investment products, and advisory services targeted at both private and corporate customers. The website reflects a strong market position with recognized awards for customer service and employer reputation. Technically, the site is built on Adobe Experience Manager, uses modern web technologies, and provides a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, although explicit security policies and incident response information are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sparkasse Nürnberg

zukunftsstiftung-nuernberg.de

66

Sparkasse Nürnberg's Zukunftsstiftung website presents a well-established non-profit foundation focused on enhancing the quality of life in Nürnberg through funding sustainable and cultural projects. The site is professionally designed, content-rich, and targets local citizens and organizations. Technically, the site uses modern web technologies, including JavaScript and CSS, and is likely powered by an enterprise CMS such as Adobe Experience Manager. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. The domain registration aligns well with the business identity, indicating legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

I

Interneto vizija, UAB

hostingas.lt

56

The website pro.hostingas.lt represents a Lithuanian company, Interneto vizija, UAB, offering professional managed hosting and server administration services. The business targets projects requiring high reliability and flexibility in hosting infrastructure, positioning itself as a specialized service provider in Lithuania. The website content is professionally presented in Lithuanian, with clear descriptions of services and a focus on business customers. The digital infrastructure includes modern cookie consent management and integration with marketing and analytics platforms such as Intercom, Google Analytics, and Sales Manago. However, the absence of a visible privacy policy and terms of service pages limits transparency and compliance clarity. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces trustworthiness from a security perspective.

I

Interneto vizija, UAB

dizaineriai.lt

53

Dizaineriai.lt is a Lithuanian website offering accessible and user-friendly website creation and web design services, operated by the company Interneto vizija, UAB. The site targets individuals and businesses in Lithuania seeking to create functional, secure, and visually appealing websites quickly. The business model focuses on providing easy-to-use web design tools and hosting services, positioning itself as a local player in the Lithuanian technology sector. The website content is professionally presented with clear metadata and branding consistency.