Security Directory

The website ctxm.com is a domain parking and sales page with minimal content, primarily advertising that the domain is for sale. There is no business description, contact information, or services detailed on the site. The domain is registered with GoDaddy Online Services Cayman Islands Ltd. since 2003 and is locked against unauthorized changes, indicating legitimate domain management. The technical infrastructure relies on basic HTML, CSS, and JavaScript, with Google advertising scripts embedded for monetization. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic, with no DNSSEC enabled and no visible security headers, though the domain status locks provide some protection. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism. Overall, the site serves as a placeholder domain sale page with low business credibility and limited user engagement.

M

molberts.lv

molberts.lv

41

The website molberts.lv currently functions primarily as a parked domain with minimal content focused on advertising and related search results, particularly around ice cream products. There is no clear business presence, contact information, or detailed company data available on the site. The technical infrastructure relies on standard HTML, CSS, and JavaScript with integration of Google Adsense and Bodis for monetization. No CMS or advanced frameworks are detected, and the site lacks modern security headers and visible SSL configuration details. From a security perspective, the site shows a low maturity level with no evident security policies, incident response contacts, or vulnerability disclosures. The absence of contact information and business legitimacy indicators further reduces trustworthiness. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanism or GDPR compliance signals. Overall, the domain's WHOIS data is unavailable due to query limits, preventing a full legitimacy assessment. The domain appears to be monetized rather than representing an active business, resulting in a low overall risk profile but also low trust and credibility. Strategic recommendations include improving security posture, adding clear business and contact information, implementing privacy and cookie consent mechanisms, and enhancing content quality to establish legitimacy and user trust.

L

Laflora

laflora.lv

51

Laflora is a major Latvian company specializing in the extraction and processing of peat products, targeting professional gardeners and related industries. The website presents a comprehensive product catalog, sustainability initiatives, and ongoing projects in renewable energy, positioning Laflora as a leader in its sector within Latvia. The digital infrastructure includes modern web technologies and a cookie consent mechanism aligned with GDPR requirements. Security posture is moderate with room for improvement in headers and explicit policies. The absence of WHOIS data limits domain trust verification, but the presence of multiple certifications and partner organizations supports legitimacy. Overall, the website is professional, content-rich, and user-friendly, with minimal tracking and good privacy compliance.

R

Raden Solutions

radensolutions.com

69

NetXMS, operated by Raden Solutions, is a mature and established provider of open-source network and infrastructure monitoring solutions. Founded in 2004 and headquartered in Latvia, the company targets a broad range of industries including banking, telecommunications, energy, industrial monitoring, and government sectors. Their business model combines open-source software with commercial support and enterprise editions, positioning them as a reliable and scalable solution provider in the network management space. The website reflects a professional and comprehensive presentation of their services, with strong branding consistency and trust indicators such as client testimonials and third-party reviews.

T

BookStack

tenthdimensions.com

59

The website at archive.tenthdimensions.com/login serves as a login portal for BookStack, an open-source documentation and knowledge management platform. The site appears to be used for managing or accessing documentation content, targeting users who require organized knowledge bases. The platform is likely self-hosted or provided as a service by the organization behind tenthdimensions.com, though no explicit business information is presented on this login page. Technically, the site uses modern web standards including HTTPS with a valid SSL certificate, modular JavaScript, and responsive design elements. The presence of a CSRF token in the login form indicates attention to basic security practices. However, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a moderate security posture with secure form handling and HTTPS enforcement. The absence of WHOIS data for the subdomain is expected, but the lack of public business or contact information reduces transparency. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is functional and technically sound for its purpose but would benefit from enhanced privacy compliance, clearer business information, and improved security headers to strengthen trust and regulatory adherence.

The website gratitudeservices.com is a newly registered domain with minimal content primarily consisting of embedded advertisements served via Google AdSense and related Google ad services. The site lacks substantive business information, contact details, or user engagement features, indicating it may be a placeholder or parked domain rather than an active business site. The domain was registered recently through DropCatch.com, a known drop-catching registrar, which suggests speculative registration rather than an established company presence. Technically, the site uses modern HTML5 and CSS3 standards with JavaScript for ad delivery. It is served over HTTPS, but lacks advanced security configurations such as DNSSEC and security headers, which lowers its security posture. Mobile optimization and accessibility are basic, and SEO features are minimal. There is no evidence of a content management system or advanced frameworks. From a security perspective, the site has a basic SSL configuration but no visible security policies, incident response contacts, or certifications. The absence of cookie consent mechanisms and limited privacy policy details indicate poor privacy compliance. No forms or data collection points are present, reducing immediate data protection concerns but also limiting user interaction. Overall, the site scores low on business credibility and content quality, with moderate technical implementation and security posture. The domain's recent registration and lack of business identity raise concerns about legitimacy. Strategic recommendations include enhancing security headers, implementing privacy and cookie policies, adding clear business and contact information, and improving content quality to build trust and compliance.

L

Level Up

lvl-up.me

52

Level Up is a small, newly established education consultancy founded in 2023, specializing in assisting students with international education programs across countries such as the USA, UK, Canada, Australia, Switzerland, Spain, and the EU. The company offers a range of services including program selection, visa assistance, accommodation support, and language courses. Their market position is niche, targeting students and parents seeking quality education abroad. The website is built on the Tilda CMS platform, leveraging modern web technologies and includes customer testimonials and social media integration to build trust. Technically, the site is moderately performant and mobile-optimized but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced but missing several important security headers and no published security or privacy policies, indicating compliance gaps. Contact information is primarily via social media and a contact form, with a single clearly labeled phone number. Overall, the site is professional but would benefit from enhanced privacy compliance and security hardening.

J

Jungheinrich

jungheinrich.lv

71

Jungheinrich.lv is the Latvian localized website of Jungheinrich, a global leader in intralogistics and warehouse technology. The company manufactures forklifts, pallet trucks, and offers a broad spectrum of warehouse and logistics services. The website targets businesses and logistics professionals in Latvia, providing product and service information in Latvian. The site is professionally designed with consistent branding and good content relevance, supporting a large enterprise business model in the transportation sector. Technically, the website uses modern web technologies including JavaScript, CSS3, and HTML5, with Google Tag Manager and Cookiebot integrated for analytics and cookie consent management. Hosting appears to be managed via Jungheinrich's own cloud infrastructure. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible security headers and explicit privacy or security policies. No WHOIS data was available due to query limits, limiting domain trust verification. No contact information or incident response details are present, which could impact user trust and compliance. Overall, the website presents a professional and credible business presence but would benefit from enhanced transparency in privacy, security policies, and contact information to improve trust and compliance posture.

The analyzed content corresponds to a local Chrome error page (chrome-error://chromewebdata/) that displays the Chrome offline dinosaur game. No actual website content, business information, or metadata is accessible. Consequently, no insights about the company's operations, market position, or services can be derived. The technical infrastructure is limited to the embedded game scripts and styles used by Chrome for offline error handling. Security posture cannot be evaluated due to lack of real website content or headers. Overall, the site is inaccessible for meaningful analysis and appears to be a placeholder or error page rather than a functional website.

M

Magic

ddb.lv

54

Magic is a full-service advertising agency based in the Baltics, recognized as the Baltic Agency of the Year 2024. The company specializes in delivering integrated marketing solutions including campaigns, strategy, design, digital solutions, production, and activations. Their target audience primarily consists of major Baltic brands seeking comprehensive advertising services. The website is built on modern web technologies using Webflow CMS and hosting, featuring professional design and good mobile optimization. Google Analytics is used for user tracking, though privacy compliance measures such as cookie consent and privacy policies are lacking. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Overall, the website presents a credible business presence but lacks some compliance and security best practices.

S

SIA ARKOLAT

arkolat.lv

58

SIA ARKOLAT operates a professional e-commerce platform specializing in kitchenware and household goods, serving primarily the Baltic region. The company positions itself as a leading provider in this sector, offering a wide range of products for cooking, serving, and household needs. The website supports multiple languages and provides a comprehensive catalog with pricing, user accounts, and shopping cart functionality. Technically, the site uses modern web technologies including JavaScript libraries and Google Fonts, with a moderate performance profile and good mobile optimization. Security measures include HTTPS enforcement and CSRF token usage, though some security headers are missing and no vulnerability disclosure or privacy policy pages were found. Overall, the website is functional and professional but could improve in privacy compliance and security transparency.

H

Homoecos.lv

homoecos.lv

53

Homoecos.lv is an independent Latvian-language informational website focused on online gambling, providing detailed guides, reviews, and explanations about online casinos, games, bonuses, and legal regulations in Latvia. The site targets Latvian online gambling players ranging from beginners to experienced users, offering comprehensive content to help users navigate the online gambling environment responsibly. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with a responsive design optimized for mobile devices. The website is accessible without any WAF or security blocking mechanisms detected. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site presents a professional and consistent brand image with good content quality and user experience but could improve privacy compliance and security best practices.

T

Two Daughters Entertainment Ltd

twodaughtersentertainment.com

58

Two Daughters Entertainment Ltd is a British animation film studio specializing in children's television and animated feature films. Founded in 2016 by James Reatchlous, the company has a growing presence in the media industry with a focus on family-friendly content. Their website reflects a professional and consistent brand image, targeting children and families interested in animation. The company is expanding its portfolio with upcoming feature films and maintains active social media channels to engage its audience. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with animations powered by Animate.css and tracking implemented via Google Analytics. The site is hosted with domain control services consistent with UK-based businesses and is optimized for mobile devices with good navigation and content relevance. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are present, and there is no visible consent mechanism for tracking, which poses compliance risks under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security practices. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would reduce risk and increase trustworthiness among users and partners.

M

Material para Crossfit®, Gimnasio y Fitness | Maniak Fitness

maniakfitness.com

51

Maniak Fitness operates a professional e-commerce website specializing in Crossfit®, gym, and fitness equipment primarily targeting the Spanish market and European customers. The site offers a broad catalog of products including Cross Training gear, Functional training equipment, Weightlifting and Powerlifting accessories, Cardio machines, and Apparel. The business appears established with a domain age of over 10 years and consistent registration data. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics, and is mobile optimized with good SEO practices. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy, terms of service, and security headers. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site demonstrates a solid business presence with room for improvement in privacy and security transparency.

L

LIDO

lido.lv

63

LIDO is a Latvian hospitality business focused on providing fresh, authentic, and quality food with a democratic approach to choice, price, and taste nuances. The website targets Latvian-speaking consumers and positions itself as a trusted local brand in the food service industry. The digital infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Cookiebot for cookie consent, Google Tag Manager, Facebook Pixel, and reCAPTCHA for bot protection. The website is served over HTTPS with a valid SSL certificate, ensuring secure communication. However, explicit privacy policy and terms of service pages were not detected in the provided content, which may impact compliance and user trust. The security posture is generally good with HTTPS and consent mechanisms but lacks explicit security headers and detailed contact information for incident response. Overall, the website demonstrates a professional and trustworthy online presence with room for improvement in privacy transparency and security best practices.

SODECA is a Portuguese manufacturer specializing in industrial ventilation and exhaust solutions, including smoke control, tunnel ventilation, stair pressurization, and indoor air quality improvement. The company maintains a strong international presence with multiple country-specific websites, targeting industrial clients and technical professionals. Their business model combines manufacturing with direct sales, supported by online tools and technical consultancy services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates analytics and advertising tools like Google Analytics, Google Tag Manager, and Bing Ads. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks explicit security headers and published security policies or incident response contacts. Overall, the security posture is solid but could be improved by implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process. The domain WHOIS data aligns well with the business claims, supporting legitimacy. The website provides comprehensive contact information and privacy compliance features, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

AERMEC Deutschland GmbH operates in the energy sector, likely focusing on HVAC solutions, serving customers and business partners primarily in Germany. The website is currently under construction and undergoing modernization, limiting available online services and content. The company provides direct contact channels via phone and email, indicating a traditional business communication approach. Technically, the website is simple, built with basic HTML and CSS without advanced frameworks or CMS. It is hosted on UI-DNS nameservers, suggesting a standard hosting environment. Mobile optimization and accessibility are basic, and SEO practices are minimal. No analytics or tracking technologies are detected, reflecting a low digital maturity level. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The email contact link is malformed, which could impact usability and security. HTTPS status is unknown but assumed necessary. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is basic with room for improvement. The overall risk is moderate due to limited content and security features. Strategic recommendations include implementing HTTPS, fixing contact link issues, adding security headers, and introducing privacy and cookie policies to improve compliance and trust.

Ravijuhend.ee is a healthcare information portal coordinated by Tartu Ülikool and funded by Tervisekassa, providing evidence-based medical guidelines and patient instructions primarily for Estonian healthcare professionals and patients. The website serves as a trusted source for treatment guidelines, patient care instructions, and related educational content, positioning itself as a key national resource in Estonia's healthcare sector. Technically, the site employs modern web standards including HTTPS, Cloudflare DNS, and uses popular web fonts and iconography, delivering a professional and accessible user experience with good mobile optimization and SEO practices. Security-wise, the site benefits from HTTPS and secure form handling but lacks advanced DNS security (DNSSEC) and security headers, and does not publish privacy or cookie policies, which are important for GDPR compliance. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security hardening to improve compliance and user trust.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which serves as a local offline or error display, including the embedded Chrome Dino game. No external website content, business information, or contact data is present. The page is not a public website but a browser internal resource, thus no typical business or compliance information is available. The technical infrastructure is minimal, relying on Chromium's internal scripts and styles. Security posture is limited to the browser's internal environment with no external SSL or headers applicable. Overall, this page cannot be evaluated as a commercial or organizational website.

The website www.easywl.com hosts content related to the EWF CHISINAU 2025 weightlifting championship, providing event schedules, results, protocols, and live scoreboard embeds. The site targets weightlifting athletes, officials, and fans, serving as an informational portal for the event. The business model is focused on event information dissemination with no evident commercial transactions or user data collection. Technically, the site is basic, built with standard HTML and CSS, embedding YouTube videos for live content. There is no detected CMS or advanced frameworks, and the site lacks modern SEO and accessibility features. Security posture is minimal with no visible security headers or HTTPS confirmation in the data provided. The absence of privacy, cookie policies, and contact information indicates low compliance with data protection regulations. WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site functions as a niche event information platform but lacks professional security and compliance maturity.

M

Murimäe veinikelder

murimaevein.ee

43

Murimäe veinikelder is a small Estonian hospitality business operating the world's northernmost terraced vineyard. The company offers a combination of e-commerce wine sales, wine tastings, accommodation, and event hosting, targeting wine enthusiasts and tourists. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS and nonce usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the business presents a professional online presence with clear offerings but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

The website ramkool.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian company specializing in domain registration and web hosting services. The site primarily serves as a placeholder informing visitors that the domain is registered but not linked to any hosting service, while promoting Zone Media OÜ's hosting packages in multiple languages. The business operates in the technology sector, focusing on web hosting solutions for small to medium clients, with offerings including Wordpress one-click installs, SSL certificates, and dedicated IP addresses. The domain has been registered since 2010, indicating a stable presence in the market. Technically, the website is simple, built with standard HTML, CSS, and JavaScript, and optimized for mobile devices with a responsive design. The hosting provider is clearly Zone Media OÜ, and the site uses HTTPS for external links but does not host active content on the domain itself. Security headers are minimal but include a Content-Security-Policy. No analytics or tracking scripts are detected, and no forms or user input fields exist on the page. From a security perspective, the site has a basic posture with no visible vulnerabilities or exposed sensitive data, but lacks comprehensive privacy, cookie, or security policies. There is no contact information or incident response details provided, which limits transparency and user trust. The WHOIS data is consistent and legitimate, with no privacy protection, matching the hosting provider's identity. Overall, the site functions as a parked domain with promotional content for hosting services. The risk is low given the limited functionality, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

P

Põllumajanduse Registrite ja Informatsiooni Amet (PRIA)

pria.ee

55

PRIA (Põllumajanduse Registrite ja Informatsiooni Amet) is the official Estonian government agency responsible for managing agricultural subsidies, registers, and providing information services to farmers and rural entrepreneurs. The website serves as a comprehensive portal offering subsidy information, registers, news, and e-services such as the e-PRIA login portal. The site targets Estonian agricultural stakeholders and the general public interested in rural development. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics and business intelligence tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and shows no signs of exposed sensitive data or vulnerabilities. Overall, the website demonstrates a strong security posture and good privacy compliance, supporting its role as a trusted government resource.

The website mirko.ee is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, which blocks access to any substantive content. The domain is registered with Zone Media OÜ in Estonia since 2022, indicating a relatively new but legitimate registration. Due to the WAF challenge, no business information, contact details, or policies are visible, limiting the ability to assess the company's operations or compliance posture. The technical infrastructure relies on Cloudflare services for security and performance, but no additional frameworks or CMS platforms are detectable. Security headers and privacy compliance measures are not observable due to the blocked content. Overall, the site appears to be protected by Cloudflare's security mechanisms but lacks publicly accessible information for a full evaluation.

L

Luuletus.ee

luuletus.ee

60

Luuletus.ee is a well-established Estonian online platform dedicated to poetry, offering a large collection of poems with daily updates. It targets Estonian poetry enthusiasts and writers, providing services such as poem publishing, sharing, user accounts, and curated collections. The platform is owned by Zone Media OÜ and has been operational since 2011, positioning itself as the largest Estonian poetry repository online. Technically, the website employs modern web technologies including HTTPS, Cloudflare CDN, Google Analytics, and lazy loading for images, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and uses service workers but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is addressed with a visible cookie consent mechanism and a basic privacy policy aligned with GDPR requirements. Overall, the website demonstrates a solid business credibility and technical maturity with room for security enhancements.

E

Eduten Ltd.

eduten.com

65

Eduten Ltd. operates a leading digital math learning platform originating from Finland, combining Finnish educational excellence with gamification and AI technologies. The platform targets K-12 students, teachers, school leaders, and parents worldwide, offering a comprehensive content library and AI-driven learning analytics. It holds a strong market position supported by over 15 years of university research and international awards such as the UNESCO ICT for education prize and UNICEF special edtech award. Technically, the website employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly digital education platform.

EELIS (Eesti looduse infosüsteem) is an official Estonian government-operated environmental data portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides public access to nature conservation data, statistical analyses, and educational content about protected natural objects and areas in Estonia. The website targets researchers, environmental professionals, and the general public interested in Estonian nature data. The business model is non-commercial, focusing on transparency and public information dissemination. Technically, the website uses basic HTML and CSS without modern JavaScript frameworks or CMS detected. Hosting is provided by Zone Media OÜ, a reputable Estonian registrar and hosting provider. The site is functional but has limited mobile optimization and accessibility features. SEO and metadata are minimal, and no analytics or tracking services were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and contact information is limited to a feedback form without direct emails or phone numbers. The WHOIS data is consistent and legitimate, indicating a stable domain with no suspicious patterns. Overall, the website is trustworthy and credible as a government information portal but would benefit from enhanced security headers, privacy compliance documentation, and improved technical modernization to strengthen its security posture and user experience.

R

Raven OÜ

ravenou.ee

45

Raven OÜ is a small Estonian company specializing in water utility services, including water supply, water-saving advice, and infrastructure development. The company targets local residents and businesses in the Harju maakond region, providing essential water-related services and customer support. The website is professionally designed using Joomla CMS and offers clear navigation and relevant content focused on water conservation and service notifications. Technically, the website employs a standard Joomla stack with modern JavaScript and CSS assets. It is hosted by Elkdata OÜ, consistent with the domain registration data. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach but also a lack of marketing sophistication. From a security perspective, the website uses HTTPS with a valid SSL configuration and includes CSRF tokens in scripts, which is positive. However, it lacks important security headers and does not publish privacy, cookie, or security policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing a compliance and security gap. Overall, the website is legitimate and trustworthy based on domain age and registration consistency. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance the company's digital maturity and user trust.

H

Harjumaa Omavalitsuste Liit

hol.ee

51

Harjumaa Omavalitsuste Liit is a regional non-profit organization established in 2010 to foster cooperation and joint project development among local governments in Harjumaa, Estonia. The website serves as an information hub for governance, education, culture, health, safety, and regional development initiatives. It targets local government representatives, educational and cultural institutions, and the general public within the Harjumaa region. The organization positions itself as a key regional cooperation leader with a focus on community well-being and development. Technically, the website is built on a modern stack including Laravel Livewire, jQuery, and various JavaScript libraries for UI enhancements. It employs Google reCAPTCHA v3 for form security and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes CSRF tokens and reCAPTCHA to protect user inputs. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities were found in the analysis. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional government entity. Recommendations include enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen security posture and transparency.

The website tamsalusport.ee is currently a parked domain page indicating that the domain is registered but not linked to any hosting service. It primarily serves as a placeholder to promote web hosting packages offered by Zone Media OÜ, the domain registrar and hosting provider. The site is multilingual, targeting Estonian, Russian, Finnish, and English speakers, and offers basic information about hosting plans including pricing and features. There is no active business content or contact information on the site, reflecting its placeholder status. From a technical perspective, the site uses standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is Zone Media OÜ, consistent with the WHOIS data. The site is mobile responsive and has basic SEO and accessibility features but lacks comprehensive metadata or structured data. Security headers are minimal, with only a Content-Security-Policy allowing unsafe-inline scripts, and DNSSEC is not enabled, which is a security gap. Security posture is limited due to the lack of HTTPS linkage on the domain, absence of security best practices, and no privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate privacy risks but also indicating no active user engagement. The WHOIS data shows a recent domain registration consistent with the placeholder nature of the site. There are no suspicious patterns or privacy protection used, and the registrant matches the hosting provider, supporting legitimacy. Overall, the site is low risk but also low value in terms of business credibility and privacy compliance. It is recommended to enable DNSSEC, implement HTTPS hosting, add privacy and cookie policies, and provide contact information to improve trust and compliance. Until the domain is linked to an active website, the site remains a basic parked domain page with limited content and security features.

The website livekluster.ehr.ee is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. This indicates a strong security posture at the perimeter, likely to protect sensitive electronic health record (EHR) data. However, due to the content being blocked, no business or contact information, privacy policies, or terms of service are visible, limiting the ability to assess the company's market position or services. The technical infrastructure leverages Cloudflare's security and performance services, but the lack of visible content and metadata results in poor content quality and SEO. Security best practices are partially implemented through WAF and bot mitigation, but no additional security headers or policies are observable. Overall, the site demonstrates a high-security perimeter but lacks transparency and compliance disclosures in the accessible content.

T

The Hertz Corporation

hertz.co.uk

67

The Hertz Corporation operates a comprehensive car and van rental service platform targeting customers primarily in the UK and worldwide. The website offers a broad range of services including daily car hire, electric vehicles, long-term business rentals, and van hire, supported by loyalty programs such as Gold Plus Rewards. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the platform leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Stripe for payments, alongside security tools like Google reCAPTCHA Enterprise and a cookie consent mechanism powered by Securiti.ai. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. WHOIS data for the subdomain queried is unavailable due to Nominet rules, but the main domain is legitimate and consistent with the business. Overall, the website demonstrates a mature digital presence with robust security and privacy practices.

R

Rakvere Vallavalitsus

rakverevald.ee

50

Rakvere Vallavalitsus operates as the local government authority for the Rakvere municipality in Estonia, providing a wide range of public services including administration, social welfare, education, culture, and infrastructure management. The website serves as an official portal for residents and stakeholders, offering comprehensive information and access to municipal resources. The organization holds a stable position as a government entity with a medium-sized operational scope focused on community services. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Fonts, Font Awesome, and Google Maps API. The site demonstrates moderate performance and good mobile optimization, with a structured navigation system and professional design. However, the use of an outdated jQuery version introduces potential security risks that should be addressed. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good baseline security posture. There is no evidence of exposed sensitive data or insecure forms. Nonetheless, the absence of a cookie consent mechanism and explicit security or incident response policies indicates gaps in privacy compliance and security transparency. The site does not appear to use advertising or tracking services, which aligns with its public sector nature. Overall, the website is trustworthy and professional, with strong business credibility as a government portal. Strategic improvements in updating libraries, enhancing privacy compliance, and publishing security policies would further strengthen its security posture and user trust.

The domain xn--jgeva-dua.ee is registered with Zone Media OÜ, an Estonian registrar, since 2017. The website is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to actual content. No business-related content, contact information, or policies are visible, indicating the site is either under protection or not publicly available. The technical infrastructure relies on Cloudflare for security and performance, but lacks DNSSEC and security headers, which are recommended for enhanced security. The SSL configuration is basic but present. Overall, the website's digital maturity is low due to the lack of accessible content and minimal technical optimizations.

A

Alutaguse vald

alutagusevald.ee

53

Alutaguse vald operates as a local government entity in Estonia, providing a broad range of public services including social welfare, environmental management, urban planning, and cultural activities. The website serves as an information portal for residents and stakeholders, offering detailed navigation to various municipal services and administrative resources. The business model is typical of a public sector organization focused on community service and governance. The website is positioned as an official government resource with a clear focus on transparency and accessibility to local information. Technically, the website is built on the Liferay CMS platform, utilizing standard web technologies such as jQuery, Google Fonts, and Font Awesome. It integrates Google Tag Manager for analytics and tracking purposes. The site demonstrates moderate performance and good mobile optimization, with a structured and consistent design. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the website enforces HTTPS and implements several security headers, indicating a good baseline security posture. There are no visible vulnerabilities or exposed sensitive data. However, the absence of an explicit cookie consent mechanism and published security or incident response policies suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the website's government affiliation. Overall, the website presents a trustworthy and professional front for the Alutaguse vald municipality, with solid technical and security foundations. Strategic enhancements in privacy compliance, accessibility, and security policy transparency would further strengthen its position and user trust.

P

Puolustusministeriö

defmin.fi

59

Puolustusministeriö is the Finnish Ministry of Defence responsible for national defence policy, international cooperation, and administrative oversight. The website serves as an authoritative government portal providing comprehensive information on defence themes, current news, licensing, and organisational details. It targets Finnish citizens, government officials, and defence sector stakeholders, positioning itself as a key national government entity. Technically, the site employs modern web standards including HTML5, CSS3, jQuery, and FontAwesome, with responsive design and accessibility features ensuring good user experience across devices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its role as a government information source.

E

Elixir OÜ

elixir.ee

39

Elixir OÜ is a small Estonian creative agency founded in 2011, specializing in website creation, branding, and web marketing with a strong emphasis on integrating digital and physical solutions. The company has a solid market position locally with a diverse portfolio and official partnerships, indicating a stable business model focused on service delivery to other businesses. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers. Security posture is adequate with HTTPS usage implied, secure form handling, and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would improve its risk profile.

B

brandspot.eu is available for purchase - Sedo.com

brandspot.eu

53

Sedo.com operates as a well-established domain marketplace platform, offering domain sales and brokerage services globally. The analyzed page is a domain sales landing page for the domain brandspot.eu, indicating availability for purchase. The business targets domain investors and buyers, leveraging a long-standing presence since 1998. Technically, the site employs modern JavaScript modules and Cloudflare DNS services, ensuring reliable hosting and moderate performance with good mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is limited, with no explicit privacy or terms of service policies found, but a cookie consent mechanism is present. Contact and incident response information are absent, reducing transparency. Overall, the domain registration data aligns well with the business purpose, indicating legitimacy and trustworthiness.

A

AirProxy AS

airproxy.eu

46

AirProxy AS is a specialized General Sales and Service Agent (GSSA) company with 30 years of experience serving passenger and cargo airlines in the Baltic region through offices in Tallinn, Riga, and Vilnius. The company focuses on providing representation and support services to airlines, positioning itself as a trusted partner in the transportation sector. The website is built on WordPress and employs standard web technologies, offering a professional and consistent user experience with good mobile optimization and navigation clarity. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security posture and privacy compliance. HTTPS is properly implemented, ensuring secure communication. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy best practices. Overall, the website reflects a credible small business with room for improvement in security and compliance documentation.

Advokaadibüroo RASK is a leading Estonian law firm established in 2012, offering a broad range of professional legal services across multiple sectors including energy, transport, technology, healthcare, government, real estate, and finance. The firm targets Estonian businesses and individuals seeking tailored legal advice and support. Their market position is strong within Estonia, supported by a professional website showcasing detailed service areas, client case studies, and a well-presented team of partners and lawyers. The business model focuses on providing expert legal consultancy and representation.

Whyservices OÜ is a small Estonian technology company specializing in custom system administration, application hosting, and IT infrastructure consulting. Their website presents a professional image with clear service offerings including infrastructure consulting, Wordpress hosting via WellPress, containerized application hosting via WellHost, and Ruby on Rails development. The company targets digital agencies and small to medium businesses seeking tailored IT solutions. Technically, the website is built with modern HTML5, CSS3, and Tailwind CSS, and is mobile optimized with moderate performance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional web presence. Overall, the site scores well in content quality and business credibility but needs enhancements in privacy compliance and security best practices.

E

Eesti Füüsika Selts

fyysika.ee

49

FYYSIKA.EE is a specialized Estonian website operated by the Estonian Physical Society, focusing on physics, science, and technology news, seminars, and educational content. The site serves a niche audience of physics students, educators, and researchers primarily in Estonia. Technically, it is built on WordPress with a modern theme and uses standard web technologies such as jQuery and Google Fonts. The site is well-structured with semantic markup and schema.org data, enhancing SEO and accessibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is professional and trustworthy but could improve in privacy transparency and security best practices.

The website unitycicd.com serves as a dedicated landing page for Codemagic's Unity CI/CD automation services, operated by Nevercode Ltd. It targets Unity game developers and teams by offering cloud-based continuous integration and delivery solutions that simplify building, testing, and publishing games to multiple platforms including Google Play, Apple App Store, Steam, and Oculus Store. The site is well-branded, consistent with the parent Codemagic platform, and provides extensive documentation and community support links, positioning itself as a mature player in the CI/CD market for game development. Technically, the site is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging Google Tag Manager and Plausible Analytics for tracking. Hosting is inferred to be on AWS based on DNS nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. No CMS is detected, indicating a custom-built solution. Security is robust with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. From a security posture perspective, the site demonstrates good practices such as cookie consent and a published security statement. However, it lacks explicit vulnerability disclosure mechanisms and incident response contact details. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent domain registration and no privacy protection, enhancing trust. Overall, unitycicd.com is a professional, secure, and trustworthy website that effectively supports Codemagic's Unity CI/CD offering. Strategic improvements in DNS security and explicit vulnerability disclosure would further strengthen its security and compliance posture.

Nevercode Ltd. operates the Flutterci.com website, providing specialized continuous integration and continuous delivery (CI/CD) services for Flutter developers. The platform supports building, testing, and deploying Flutter applications across multiple platforms including mobile, web, and desktop. Positioned as a leading CI/CD provider in the Flutter ecosystem, the company targets mobile app developers seeking streamlined DevOps pipelines. The website reflects a mature SaaS business model with a focus on developer productivity and automation.

Stuudium operates an e-school platform primarily targeting students, parents, and teachers in Estonia. The website serves as a portal for users to select their school and log in to the platform. The business model is SaaS-based, providing educational institutions with digital tools for school management. The platform appears to have a moderate market position within the Estonian education sector, focusing on usability and accessibility for its target audience. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with assets hosted on a dedicated CDN domain. The site is basic in design and functionality, with minimal content and limited SEO or accessibility features. Mobile optimization is present but basic. No advanced frameworks or CMS platforms are detected from the provided HTML. From a security perspective, the site uses HTTPS (assumed from external asset URLs), but no explicit security headers or policies are visible. The form disables autocomplete and autocorrect to enhance input security. However, the absence of privacy, cookie, and terms of service policies indicates gaps in compliance with GDPR and other regulations. No contact or incident response information is provided, limiting transparency and trust. Overall, the website is functional but basic, with moderate business credibility but limited privacy and security maturity. Strategic improvements in compliance documentation, security headers, and user trust signals are recommended to enhance the platform's security posture and regulatory adherence.

P

Placet Group OÜ

laen.ee

68

Laen.ee is a well-established Estonian financial services provider specializing in a variety of loan products including credit cards, credit lines, consumer loans, and business loans. The company targets both private individuals and businesses within Estonia, offering flexible and user-friendly loan solutions. The website reflects a mature digital presence with clear service descriptions, a modern UI, and localized content in Estonian. Technically, the site employs standard web technologies such as JavaScript, jQuery, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be enhanced. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

D

DinoMatic

dinomatic.com

68

DinoMatic is a specialized technology company providing WordPress themes, plugins, and custom CMS solutions tailored for gambling affiliate marketers focusing on casino, sports betting, and Forex niches. The company offers a comprehensive toolkit including starter websites and custom development services, positioning itself as a niche leader with a strong emphasis on performance, SEO, and affiliate conversion optimization. The website is professionally designed with excellent content quality, clear navigation, and mobile responsiveness, targeting small to medium-sized affiliate businesses. Technically, the site uses modern web technologies including Tailwind CSS and Alpine.js, hosted with Cloudflare, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, DinoMatic presents a trustworthy and credible online presence with a high level of professionalism and user engagement.

E

Elfag

elfag.no

49

Elfag is a Norwegian electrical service provider targeting both private and business customers. The company offers a range of electrical services including smart home solutions, electrical safety checks, and electric vehicle charging installations. The website positions Elfag as a trusted local electrician chain with a 5-year warranty and partnerships with reputable Norwegian companies such as Lampehuset and Huseiernes landsforbund. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics. The site is well-structured, mobile-optimized, and uses HTTPS with a valid SSL certificate, indicating a good security baseline. However, explicit security headers and detailed security policies are not present. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, though more comprehensive GDPR documentation could improve compliance. Overall, the website demonstrates a professional and trustworthy online presence with moderate technical sophistication and a solid security posture.

О

ООО «Мега Сервис»

mega-service.org

45

ООО «Мега Сервис» is a Russian service provider specializing in maintenance, repair, and recycling of digital satellite, cable, and terrestrial receivers. The company operates a large network of over 300 authorized service centers across Russia and owns facilities for electronic waste processing in Tula and Gusev. Their business model focuses on providing professional servicing and environmentally compliant recycling solutions, targeting both end-users and partner organizations. The website content is well-structured, professionally designed, and consistent with the company's market position as a medium-sized technology service provider founded in 2009. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery libraries. It is hosted under a reputable Russian registrar with HTTPS enabled, though it lacks advanced security headers and DNSSEC. The site performs moderately well with good mobile optimization but basic accessibility and SEO features. No major technical debt or outdated technologies were detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers that could mitigate common web threats. There is no visible privacy or cookie policy, nor incident response contacts, which indicates compliance gaps especially regarding GDPR or similar regulations. No forms or user data collection mechanisms were found on the main page, reducing immediate data exposure risks but also limiting user engagement features. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information for security incidents to enhance trust and regulatory compliance.

P

Popup Sauna GmbH

popup-sauna.ch

57

Popup Sauna GmbH operates a niche hospitality business offering exclusive panoramic sauna rentals at lakeside locations in Switzerland, specifically in Cham, Oberwil, and Stansstad. The company targets private individuals and groups seeking unique sauna experiences with easy online booking via a third-party platform. The website is professionally designed with consistent branding and clear navigation, supporting German and English languages. Social media presence on Instagram and Facebook enhances customer engagement. Technically, the site uses modern web technologies and a Flexbe CMS platform, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS and security headers, though lacking published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible for its business scope.