Security Directory

A

Art Media Agency OÜ

elundidoonorlus.ee

41

The website elundidoonorlus.ee serves as an informational platform dedicated to organ, tissue, and cell donation and transplantation in Estonia. It is operated by Art Media Agency OÜ and provides educational content, registration links for organ donors, and related legal and statistical information. The site targets Estonian residents interested in organ donation and transplantation, positioning itself as a niche public health resource. Technically, the site uses legacy JavaScript libraries such as jQuery 1.4.4 and integrates Google Analytics and Facebook Pixel for user tracking. The hosting is provided by Zone Media OÜ, an Estonian registrar, and the domain has been active since 2011, indicating a stable presence. Security-wise, the site uses HTTPS but lacks visible security headers and employs outdated libraries that may pose vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, despite the use of tracking technologies. Contact information is not explicitly provided on the main page, limiting direct user engagement. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

S

Sõeluuring.ee

soeluuring.ee

54

Sõeluuring.ee is a health screening awareness website focused on early detection of cellular changes and pre-cancerous conditions in Estonia. The website provides informational content aimed at encouraging participation in health screenings to improve treatment outcomes. Technically, the site is built on WordPress using the Divi theme, with integrations for Google Analytics and Facebook Pixel for tracking user interactions. The site is hosted with DNS managed by Cloudflare, providing good performance and security benefits. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap given the use of tracking technologies. Business credibility is moderate, with consistent branding and good content quality, but no explicit contact information or certifications are provided. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security transparency.

E

ENRE OÜ

oakohv.ee

46

ENRE OÜ operates the website oakohv.ee, an Estonian e-commerce platform specializing in the retail and wholesale of coffee products including coffee beans, capsules compatible with Dolce Gusto, Nespresso, and Senseo machines, as well as coffee machines and accessories. The company targets both individual consumers and businesses within Estonia, offering a broad product range with options for bulk purchases and subscription services. The website is professionally designed with clear navigation, product categorization, and detailed product information, supporting a positive user experience.

P

PHORIA

phoria.com.au

60

PHORIA is a specialized XR studio based in Australia, focusing on emerging immersive technologies such as Augmented Reality, Virtual Reality, and Mixed Reality. The company positions itself as an award-winning provider crafting impactful stories and experiences using cutting-edge XR technologies. Their target audience includes businesses and organizations seeking innovative immersive solutions. The website reflects a professional and modern digital presence with good design quality and mobile optimization. Technically, the site employs a variety of modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Segment Analytics, indicating a mature digital marketing strategy. Security-wise, the site benefits from HTTPS and uses secure third-party scripts but lacks explicit security headers and formal security policies, which are recommended for improvement. The WHOIS data is incomplete and malformed, which raises some concerns about domain registration transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy, security disclosures, and clearer contact information to improve trust and compliance.

L

Luke Mõis

lukemois.ee

41

Luke Mõis is a hospitality business based in Estonia, operating a website that serves as a digital presence for their venue and services. The website is built on WordPress using the Divi theme and integrates WooCommerce for e-commerce functionality. It targets local and regional customers interested in hospitality, events, and accommodation services. The site demonstrates a moderate level of digital maturity with standard tracking tools such as Google Analytics and Facebook Pixel implemented alongside cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the website is functional and professional but lacks some compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

M

MTÜ Sibulatee

sibulatee.ee

44

Sibulatee is a non-profit organization dedicated to promoting the cultural and tourism assets of the Peipsimaa region in Estonia. The website serves as a comprehensive portal for events, local businesses, cultural heritage, and educational opportunities, targeting tourists and local communities interested in authentic regional experiences. The platform leverages WordPress and WooCommerce to provide event listings, e-commerce for local products, and seminar information, supported by active social media engagement and newsletter subscriptions. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and policies are recommended. Privacy compliance is addressed with a clear privacy policy and cookie banner, aligning with GDPR requirements. Overall, the site is professionally designed, user-friendly, and trustworthy, with clear contact information and consistent branding. No critical vulnerabilities or blocking mechanisms were detected, supporting a positive risk profile.

T

Tartu Ärinõuandla

arinouandla.ee

41

Tartu Ärinõuandla is a non-profit organization based in Estonia, providing expert consultancy and support services to entrepreneurs, NGOs, youth labs, and investors. The organization is recognized within its network as a leading entrepreneurship developer since 2014. The website serves as a portal for information, events, and service registration, targeting local and regional business communities. Technically, the site is built on WordPress, leveraging common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Sendinblue for newsletter management. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

S

Sisevete festival

sisevetefestival.ee

47

The Sisevete festival website represents a regional cultural event focused on Estonia's largest inland water bodies, offering a 12-day program of activities, workshops, and concerts. The site targets watercraft enthusiasts and cultural visitors, providing detailed event information and a newsletter subscription. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies such as jQuery and Facebook Pixel for marketing and tracking. The site is mobile-optimized with good navigation and content relevance. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

E

Eesti Spordi- ja Olümpiamuuseum SA

spordimuuseum.ee

49

Eesti Spordi- ja Olümpiamuuseum is a well-established cultural institution located in Tartu, Estonia, serving as the largest and most modern sports museum in the Baltic region. The museum offers a rich visitor experience with over 15 attractions, educational programs, exhibitions, and a dedicated Hall of Fame. Its target audience includes families, groups, individual sports enthusiasts, and educational institutions. The business model combines ticket sales, educational services, event hosting, and an online store. The museum maintains a strong market position supported by partnerships with cultural and Olympic organizations and environmental certifications.

Z

Zone Media OÜ

korvpall24.ee

36

Korvpall24.ee is a specialized Estonian media website focusing on basketball news, interviews, and event coverage. Operated by Zone Media OÜ since 2017, it serves a niche audience of basketball enthusiasts primarily in Estonia. The website features regularly updated content, including interviews and reports on local and international basketball events. Technically, the site is built on WordPress with Elementor and integrates modern web technologies such as push notifications (OneSignal), Google Analytics, and Facebook Pixel for marketing and analytics. The site uses HTTPS with good SSL configuration, ensuring secure data transmission. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are important for GDPR compliance and user trust. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, but could improve privacy compliance and security transparency.

Teamspirit is an Estonian e-commerce retailer specializing in sportswear and merchandise for local sports teams and events. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics, Facebook Pixel, and CookieYes for consent management. The business targets sports fans and clubs within Estonia, offering custom sports apparel and accessories. The domain is registered to an Estonian company, Zone Media OÜ, consistent with the website's market and content. The website demonstrates good technical maturity with responsive design, SEO optimization, and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

P

Pilt Ruudus OÜ

piltruudus.ee

41

Pilt Ruudus OÜ operates as a creative agency based in Estonia, offering a comprehensive suite of digital marketing, SEO, web development, video, and photography services. The company targets Estonian businesses seeking to enhance their online presence and marketing effectiveness. The website reflects a professional and consistent brand image, with clear service descriptions and a user-friendly contact form facilitating client engagement. The business appears well-established with a domain age consistent with its operational history.

S

SYNLAB Holding Deutschland GmbH

synlab.fi

66

SYNLAB Suomi operates as a healthcare diagnostics service provider in Finland, offering laboratory testing and related services to individuals, healthcare professionals, companies, and municipalities. The website is part of the SYNLAB group, registered under SYNLAB Holding Deutschland GmbH in Germany, reflecting a mature and established business presence since 2013. The site supports multiple languages and provides online booking and result portals, indicating a customer-centric digital approach. Technically, the website leverages the BigCommerce platform with modern web technologies including asynchronous script loading, Google Fonts, and integration of analytics tools such as Facebook Pixel and Piwik PRO. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks DNSSEC and explicit security or incident response policies. No privacy or cookie policies were detected, which is a compliance gap given GDPR requirements. Tracking and marketing scripts are present, suggesting moderate user tracking. Overall, SYNLAB Suomi presents a professional and trustworthy online presence with a solid business foundation. However, improvements in privacy compliance, security transparency, and accessibility would strengthen its security posture and regulatory adherence.

V

Visit Pärnu

visitparnu.com

51

Visit Pärnu operates a well-established regional tourism portal focused on the Pärnu area in Estonia, providing comprehensive information on accommodation, dining, events, transport, and general tourism guidance. The website targets tourists and visitors seeking detailed and localized travel information. The business is positioned as a key regional tourism information provider with a clear focus on hospitality and visitor services. Technically, the site is built on WordPress with Elementor and integrates modern plugins for search, analytics, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and no critical vulnerabilities detected, though improvements in DNSSEC and security headers are recommended. Privacy compliance is robust with accessible privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates a professional and trustworthy online presence with good user experience and content relevance.

V

Virupärane

laaneviru.ee

44

The website laaneviru.ee serves as an official regional portal for Lääne-Viru County in Estonia, focusing on tourism, living, and entrepreneurship. It provides comprehensive information about local attractions, events, accommodation, business support, and municipal resources. The site targets tourists, residents, and entrepreneurs interested in the region. The business model is informational and promotional, likely operated by a government or regional development entity. The domain is newly registered in 2024, consistent with the website's launch and content. Technically, the site is built on WordPress with modern performance and image optimization plugins. It uses Google Tag Manager and Facebook Pixel for analytics and marketing, with a cookie consent mechanism implemented via CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. From a security perspective, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and no published security or incident response policies were found. Privacy compliance is basic, with no visible privacy policy or terms of service pages, which should be addressed to improve compliance and user trust. Overall, the website is professional and trustworthy, with a solid technical foundation and clear business purpose. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen security posture and compliance.

E

Eesti Võrkpalli Liit

volley.ee

40

Eesti Võrkpalli Liit operates as the official Estonian Volleyball Federation, providing comprehensive information on volleyball teams, competitions, and related activities in Estonia. The website serves as a central hub for volleyball enthusiasts, players, coaches, and fans, offering news, schedules, and organizational details. The site is well-structured and professionally designed, reflecting its role as a national sports governing body. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements some best practices like opening external links in new windows with noopener. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. Overall, the domain is legitimate, well-established since 2010, and consistent with the organization's profile. Strategic improvements in privacy compliance and security headers would enhance the site's trustworthiness and regulatory adherence.

T

Tallinn City Tourist Office & Convention Bureau

visittallinn.ee

69

Visit Tallinn is the official tourism portal managed by the Tallinn City Tourist Office & Convention Bureau, providing comprehensive information about the city's attractions, events, public transport, and dining options. The website targets tourists and visitors seeking practical and up-to-date travel information about Tallinn, Estonia. It holds a strong market position as the official city guide and tourism authority, supported by consistent branding and good content quality. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with integrations for analytics and tracking such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site demonstrates good mobile optimization and moderate performance, reflecting a mature digital infrastructure. Hosting and domain registration are consistent and stable, managed by Spin TEK AS since 2014. From a security perspective, the website uses HTTPS with good SSL configuration and includes several security-related HTTP headers. However, it lacks visible privacy and cookie policies, consent mechanisms, and incident response contact information, which are critical for GDPR compliance and user trust. No significant vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and transparency measures to improve user trust and regulatory adherence.

M

MTÜ Eesti Keskkonnamõju Hindajate Ühing

eaia.eu

41

MTÜ Eesti Keskkonnamõju Hindajate Ühing (KeMÜ) is a small Estonian non-profit organization founded in 2012 that unites professionals and interested parties in the field of environmental impact assessment. The website serves as an information hub and membership portal, offering news, organizational details, and contact avenues primarily through structured navigation and login forms. The organization targets environmental impact assessors and stakeholders within Estonia, positioning itself as a niche entity in the environmental non-profit sector. Technically, the website is built on Joomla CMS with Yootheme templates, leveraging common web technologies such as jQuery and Widgetkit. It integrates Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized and features a moderate performance profile. Security measures include HTTPS enforcement and CSRF tokens in forms, but it lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site demonstrates a good baseline posture with encrypted communications and secure login forms. However, the absence of privacy and cookie policies, as well as missing security headers, represents compliance and security gaps. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Overall, the website is professionally designed and functional for its purpose but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

E

Eesti Noorteühenduste Liit

enl.ee

47

Eesti Noorteühenduste Liit (ENL) is a well-established non-profit umbrella organization founded in 2010 that unites youth associations and participation bodies across Estonia. The organization focuses on advocacy, youth participation, training, and international cooperation, positioning itself as a leading entity in the Estonian youth sector. The website reflects a professional and comprehensive digital presence with clear content, strong branding, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS, cookie consent, and error reporting, though some security headers and formal policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement.

T

Teeviit

teeviit.ee

56

Teeviit is an Estonian youth information portal affiliated with the Haridus- ja Noorteamet (Education and Youth Board). It provides comprehensive content on education, career, health, relationships, and social topics targeted primarily at young people. The website serves as a central hub for youth-related resources, including news, podcasts, event calendars, and partner portals such as Teeviit Juunior and Infohunt. The platform is well-positioned in the Estonian education and government sector as a trusted information source for youth.

S

Sillamäe Muuseum - SASIMU

sasimu.ee

43

Sillamäe Muuseum SASIMU is a recently established cultural institution in Estonia, focusing on the rich and complex history of Sillamäe through permanent exhibitions, educational programs, and innovative virtual reality experiences. The museum targets tourists, local visitors, and educational groups, offering a blend of historical insight and interactive technology to enhance visitor engagement. The website is built on WordPress and integrates common marketing and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy image aligned with its business goals.

T

Tervisekassa

tervisekassa.ee

64

Tervisekassa is the official Estonian national health insurance portal, providing information and services related to state health insurance, medical benefits, and healthcare access. The website targets insured individuals, employers, healthcare providers, and partners within Estonia. It offers comprehensive content on insurance coverage, medical services, reimbursements, and public health initiatives. The site is well-positioned as a government-backed service with a clear mission to facilitate healthcare access and information dissemination. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Siteimprove. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. Accessibility and mobile optimization are well addressed, with features like contrast toggling and skip links. Security posture is strong with HTTPS, cookie consent mechanisms, and bot protection via Google reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and GDPR-aligned consent management. Contact information is transparent, including official email and phone numbers, and social media presence is active on major platforms. Overall, the website demonstrates a mature digital infrastructure suitable for a public healthcare service, balancing usability, security, and compliance effectively.

V

Visit Lahemaa

visitlahemaa.com

47

Visit Lahemaa is a regional tourism website dedicated to promoting Lahemaa National Park in Estonia. It provides comprehensive information on local attractions, accommodations, dining, transport, and events, targeting tourists interested in exploring this natural and cultural area. The website is multilingual, supporting several languages to cater to a diverse audience. Technically, it is built on WordPress using the Elementor page builder, with integration of common analytics and tracking tools such as Facebook Pixel and Microsoft Clarity. The site is hosted under a legitimate domain registered since 2017, with standard security practices like HTTPS enabled. However, there is room for improvement in privacy compliance, notably the absence of a cookie consent mechanism and limited explicit privacy-related disclosures. Security posture is generally good but could be enhanced by enabling DNSSEC and publishing security policies. Overall, the website is professional and functional, serving its purpose as a tourism information portal effectively.

The website 'Maardu 45' serves as a dedicated platform for celebrating the 45th anniversary of Maardu city in Estonia. It provides residents and visitors with information about the city's history, culture, events, and local government contacts. The site is positioned as a local government information portal aimed at community engagement and city promotion. Technically, the site leverages a modern tech stack including Alpine.js, jQuery, Leaflet for maps, and multiple analytics tools such as Google Analytics and Matomo, hosted likely by Telia Eesti AS. The website is mobile optimized and offers a good user experience with clear navigation and consistent branding. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies, which are important for GDPR compliance. The domain is very recently registered, which is somewhat unusual for a city site but may reflect a new dedicated event domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

Z

Zone Media OÜ

vaktsineeri.ee

63

vaktsineeri.ee is a public health information website focused on vaccination awareness and education in Estonia. It provides comprehensive information on immunization schedules, vaccine safety, travel vaccinations, and related news. The site targets the general Estonian population including parents, adults, and travelers, positioning itself as an official or semi-official government-affiliated resource. The business model is informational and supported by partnerships with Estonian health and government institutions. Technically, the site is built on Drupal 10 with modern web technologies, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

T

Tapa Valla Spordikeskus

tapasport.ee

46

Tapa Valla Spordikeskus is a municipal sports center in Lääne-Virumaa, Estonia, offering diverse sports facilities including swimming pools, gyms, health trails, and event hosting. The website serves local residents and sports enthusiasts with information on training, events, and additional services such as accommodation and seminar rooms. The business operates under a government sector model, founded in 2020, and maintains a consistent and professional online presence with active social media channels. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted by Virtuaal.com OÜ, and optimized for mobile devices with good performance and accessibility. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and explicit privacy and cookie policies are missing, representing compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

V

Virumaa Koostöökogu

viko.ee

40

Virumaa Koostöökogu is a small Estonian non-profit organization focused on regional cooperation and rural development in the Virumaa area. Founded in 2006, it serves local municipalities and communities by managing projects, organizing events, and facilitating cooperation among stakeholders. The website reflects this mission with relevant content, event announcements, and organizational information. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but missing important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms despite tracking scripts. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

K

Kihnu Vallavalitsus

visitkihnu.ee

43

Visit Kihnu is a specialized tourism website promoting the Estonian island of Kihnu. It provides comprehensive information about local events, accommodations, transport options, cultural heritage, and services, targeting tourists interested in visiting the island. The website is operated by Kihnu Vallavalitsus, an official local government entity, which adds credibility and trustworthiness to the platform. The domain is registered since 2017 and aligns well with the business purpose and location. Technically, the website uses a modern JavaScript stack including jQuery, Leaflet.js for maps, Google Analytics, and Facebook Pixel for tracking. It employs Google reCAPTCHA for form security and uses HTTPS to secure communications. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site has a good SSL configuration and uses CSRF tokens in forms, but no security headers were detected in the provided data. There is no visible incident response or vulnerability disclosure information. Tracking and analytics are moderately extensive, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is a credible and functional tourism portal with good business credibility and technical implementation. To improve, it should address privacy compliance by publishing policies and implementing cookie consent, enhance security headers, and provide incident response contacts to strengthen trust and compliance.

Z

Zone Media OÜ

hiiumaa.ee

48

The website hiiumaa.ee serves as a comprehensive tourism information portal for Hiiumaa island in Estonia, providing visitors with details on events, accommodation, transport, and local attractions. It targets tourists and visitors interested in exploring the island, positioning itself as a regional tourism promotion platform. The business behind the domain is registered as Zone Media OÜ, an Estonian company, with the domain established in 2010, indicating a mature presence in the market. Technically, the site is built on WordPress 6.7.2 with a modern tech stack including Yoast SEO, Google Tag Manager, Facebook Pixel, and multilingual support via WPML. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected in the HTML content. However, the absence of a published security policy or incident response contact limits transparency. Overall, the website presents a professional and trustworthy front for regional tourism promotion, with moderate tracking and advertising practices. The lack of explicit privacy and terms of service policies is a compliance gap. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the site's security posture and user trust.

X

XetNET

xetnet.fi

62

XetNET is a Finnish-based hosting and domain registration company established in 2002, offering a range of web hosting solutions including webhotelli packages, virtual servers, Docker services, and business email. The company emphasizes local Finnish hosting infrastructure and customer service, positioning itself as a reliable and performance-oriented provider in the Finnish market. Their website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technically, the site uses WordPress with modern technologies such as LiteSpeed Cache, PHP 8.x, Redis, and Docker, ensuring good performance and scalability. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism that complies with GDPR. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency. Overall, the site reflects a mature, trustworthy business with good digital maturity and compliance practices.

Copix is a modern digital printing company based in Estonia, offering a wide range of printing products and services such as labels, floor stickers, books, and interior decoration prints. The company targets businesses and individuals requiring quality printing solutions and operates an e-commerce platform for convenient ordering. The website is built on WordPress with modern technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. The domain is newly registered in 2024, consistent with the business's apparent recent establishment. Contact information is comprehensive and transparent, enhancing business credibility.

Q

Quality Pixels

qualitypixels.pl

41

Quality Pixels is a Polish interactive agency specializing in website design, creation, SEO, and Google Ads campaigns. Established in 2009, the company targets businesses seeking professional digital presence and marketing services. Their website reflects a consistent brand with good content quality and clear navigation, supporting their service offerings effectively. Technically, the site is built on WordPress with common plugins for SEO and multilingual support, and integrates major analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site is hosted by cyber_Folks S.A., a reputable registrar and hosting provider. Security-wise, the website uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit privacy or security policies. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent and trustworthy. Overall, the site demonstrates a moderate to good security posture with room for improvement in privacy compliance and security best practices.

L

La Gazette Drouot

gazette-drouot.com

67

La Gazette Drouot is a leading French media outlet specializing in auction news, art market updates, and cultural heritage content. It operates both as a weekly magazine and an online platform, offering comprehensive coverage of auction calendars, results, and featured lots. The website targets collectors, art professionals, and enthusiasts, providing subscription services and advertising opportunities. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools, hosted behind Cloudflare for performance and security. The site is well-optimized for mobile and SEO, with good content quality and navigation. Security posture is strong with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with cookie consent and GDPR-aligned policies. However, the lack of WHOIS data for the domain raises questions about domain registration transparency, though the site content and branding strongly indicate legitimacy. Overall, the site scores well on content, technical implementation, and security, with room for improvement in business credibility and security transparency.

G

Grano Oy

emmi.fi

50

Grano Oy operates the EMMi Mediapankki, a comprehensive digital asset management platform designed to help businesses efficiently manage and share their digital materials. The website positions itself as a trusted solution with over 250 brands relying on its services, offering features such as metadata management, user access control, and API integrations. The platform targets businesses seeking streamlined digital asset workflows. Technically, the website is built on WordPress with Elementor and incorporates modern marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Hotjar. It demonstrates strong digital maturity with excellent SEO, mobile optimization, and user experience. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and policies are not fully detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could enhance its security posture by publishing dedicated security policies and implementing additional HTTP security headers.

M

Międzynarodowy Festiwal Komiksu i Gier w Łodzi

komiksfestiwal.com

67

The Międzynarodowy Festiwal Komiksu i Gier w Łodzi website represents a well-established cultural event focused on comics and games, primarily targeting creators and enthusiasts in Poland and Central-Eastern Europe. The festival is the largest of its kind in the region, with a history dating back to 2006 for the domain and earlier for the event itself. The site offers multilingual support, event information, contests, and partner links, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a standard but effective infrastructure. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Privacy compliance is basic but present, with cookie and privacy policies accessible and a consent mechanism implemented. Business credibility is strong due to the festival's reputation, social media presence, and consistent branding. Overall, the site is professional and trustworthy with room for security enhancements.

EC1 Łódź - Miasto Kultury is a well-established cultural and educational institution based in Łódź, Poland, offering a broad range of services including exhibitions, workshops, film screenings, and educational programs. The website serves as a comprehensive portal for visitors, schools, and cultural enthusiasts, providing detailed information about events, offers, and the institution's mission. The site is built on TYPO3 CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The domain is long-standing and registered with a reputable registrar, supporting the legitimacy of the institution. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, positioning EC1 Łódź as a credible and trusted cultural hub.

M

Motor Agency

motor.ee

40

Motor Agency is a specialized exhibition design and production company based in Estonia, founded in 2014. They focus on creating immersive experiences for museums, expos, and showrooms by integrating multimedia and virtual reality technologies. Their market position is that of a niche, innovative agency with recognized awards and international partnerships. The website is built on Concrete CMS with modern frontend technologies like Bootstrap 5 and jQuery, and it demonstrates good mobile optimization and user experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, the business presents a professional and trustworthy image but should enhance privacy compliance and security transparency to strengthen its digital maturity.

L

Logotrade OÜ

logotrade.ee

46

Logotrade OÜ is a well-established Estonian company specializing in promotional products, including advertising gifts, business gifts, and branded merchandise. With over 20 years of experience and a strong client base exceeding 4000 customers, Logotrade positions itself as a leading provider in the promotional retail sector in Estonia and Europe. The company offers a comprehensive range of services including promotional gifts, advertising services, and advertising design, supported by professional expertise and strategic marketing insights. The website reflects a mature business with consistent branding, clear communication, and strong trust indicators such as customer testimonials and industry memberships. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Segment Analytics, integrated with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, well-structured, and uses HTTPS with good SSL configuration. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates good practices including secure forms, privacy policies, and cookie consent. However, there is room for improvement by implementing additional security headers and publishing a formal security or vulnerability disclosure policy. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, Logotrade's website is professional, secure, and compliant, supporting its business credibility and customer trust. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, formalizing security policies, and continuous monitoring of third-party scripts to maintain a robust security posture.

Copix is a newly established Estonian digital printing company specializing in a wide range of printing services including labels, packaging, interior decoration prints, and book printing. The website is professionally designed using WordPress and Bootstrap, featuring a modern and responsive layout with clear navigation and multiple contact channels. The company targets businesses, schools, publishers, designers, and individual customers, positioning itself as a regional printing service provider with an online ordering platform. The technical infrastructure includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking, integrated via Google Tag Manager. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. The domain is newly registered in 2024, consistent with the business launch, and shows no suspicious registration patterns. Overall, the website is functional, trustworthy, and business credible, though it would benefit from enhanced privacy and security policies.

K

Kartra

krtra.com

67

Kartra is a technology company offering an all-in-one marketing platform designed to streamline marketing efforts through automated email, sales funnels, landing pages, and forms. The company targets businesses and marketers seeking integrated marketing automation solutions and operates a SaaS business model. The website is professionally designed, SEO optimized, and uses modern marketing and tracking technologies, indicating a mature digital presence. Technically, the site is built on WordPress with Cloudflare DNS and CDN services, and integrates multiple analytics and advertising tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Taboola. Security posture is good with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the provided content. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

D

Doping

doping.agency

55

Doping is a results-driven digital marketing agency specializing in Google Ads management and growth strategies for e-commerce, B2B, and B2C companies primarily in Estonia. The company emphasizes a 90-day Growth Sprint™ methodology to deliver measurable sales growth and ROI improvements. Their website showcases strong client testimonials, case studies, and a clear service offering including campaign optimization, landing page creation, and training programs. Technically, the site is built on Webflow with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some advanced security headers and published policies. The absence of WHOIS data for the domain raises concerns about registration transparency, though the professional presentation and active business presence mitigate some risk. Overall, the site is credible and well-structured, but could improve privacy compliance and domain legitimacy disclosures.

E

Easy Web Soutions

easyweb.ee

49

EasyWeb is a small Estonian technology service provider specializing in WordPress website creation, management, SEO, marketing, UX, and design services targeted primarily at small businesses. The company presents a professional and user-friendly website with clear service offerings and client testimonials, positioning itself as a reliable local partner for digital presence needs. Technically, the website is built on WordPress with modern tools such as GSAP for animations, Facebook Pixel for tracking, and Google Analytics for analytics, hosted likely by Elkdata OÜ as indicated by the WHOIS and nameserver data. The site is mobile-optimized and performs well with fast loading times and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.

S

Sotsiaalkindlustusamet

tarkvanem.ee

46

Tarkvanem.ee is a government-affiliated Estonian website operated by Sotsiaalkindlustusamet, providing comprehensive parenting information and resources targeted at parents of children of all ages. The site offers educational content on child development, parenting styles, health, and safety, supported by tests, videos, and expert advice. It holds a strong market position as a trusted public information portal in Estonia. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, alongside SEO optimization via Yoast. The site is mobile-optimized and accessible with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited but includes a verified company email and a contact form. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

S

Stirling Brandworks

stirlingbrandworks.com

62

Stirling Brandworks is a specialized branding, marketing, and technology agency that offers a comprehensive suite of services including strategy, creative, marketing, UX/UI, and technology solutions. The company positions itself as a passionate and diverse team dedicated to helping brands grow and realize their potential. Their market presence is supported by a professional website with clear navigation and strong branding consistency. Technically, the website is built on modern frameworks such as React and Next.js, hosted on WPEngine, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and HubSpot Forms. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not negate the professional appearance and functionality of the site. Overall, the website demonstrates a mature digital presence with room for enhanced security and privacy compliance.

K

KiVa

kivaschool.nl

51

KiVa is an established educational program focused on promoting social safety and positive group dynamics in schools, primarily in the Netherlands. The website presents a comprehensive and scientifically backed anti-bullying program, supported by certified trainers and a large network of schools and teachers. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, Google Maps API, and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-positioned in the education sector.

M

Moncera OU

moncera.com

65

Moncera OU operates an investment platform based in Estonia that enables investors to invest in assigned loan claims with buyback guarantees, offering returns up to 12%. The platform is part of the Placet Group, a financial services conglomerate with over 15 years of experience and multiple subsidiary brands across Estonia, Lithuania, and Poland. Moncera targets retail investors seeking passive income through diversified loan investments. Technically, the website employs modern JavaScript libraries such as jQuery and Handlebars, integrates Google Analytics and Facebook Pixel for tracking, and provides a responsive, well-structured user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and formal security policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Moncera presents a trustworthy and professional online presence with strong business credibility and moderate technical sophistication.

T

Tervise Arengu Instituut

tubakainfo.ee

43

Tubakainfo.ee is an official Estonian government public health website managed by the Tervise Arengu Instituut (Health Development Institute). It provides comprehensive educational content on the harms of tobacco use, passive smoking, and supports tobacco cessation efforts. The site targets Estonian-speaking tobacco users, their families, and healthcare professionals, offering interactive tools, videos, and guidance. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. It uses HTTPS with good SSL configuration but lacks some security headers. The site does not display a privacy or cookie policy, which is a notable compliance gap, especially given the use of tracking pixels. Contact information is clearly provided, enhancing business credibility. From a security perspective, the site shows good practices like HTTPS and nonce usage for AJAX but could improve by adding security headers and publishing explicit security and incident response policies. No vulnerabilities or suspicious patterns were detected. WHOIS data confirms the domain is registered to the official Estonian health institute, supporting legitimacy. Overall, the site is trustworthy and professional but should address privacy compliance and security policy transparency to improve its security posture and regulatory adherence.

H

Avaleht - Hiv

hiv.ee

40

The website hiv.ee serves as an informational and support portal focused on HIV awareness, prevention, testing, and living with HIV in Estonia. It targets Estonian-speaking individuals, including those living with HIV and at-risk populations, providing educational content, testing locations, and counseling resources. The site is positioned as a trusted health information source, likely operated or supported by public health entities or non-profit organizations. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Slick Carousel, and integrates marketing and analytics tools like Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the site is functional, professional, and moderately secure, with room to enhance privacy compliance and security posture.

V

Visionest Institute

invicta.ee

47

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a wide range of professional development programs, including corporate training, personal development plans, and a digital magazine. The company targets businesses and individual learners, focusing on leadership, marketing, sales, and export sectors. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on WordPress with WooCommerce and integrates advanced marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain registration details align well with the business profile, indicating legitimacy and consistency.