Security Directory

C

Cedo Ltd

cedo.com

45

Cedo Ltd is a well-established manufacturer and supplier of household essentials, operating for over 60 years with a significant presence in Europe. The company focuses on producing goods such as refuse sacks, biodegradable bin liners, aluminium foil, freezer bags, cling film, and baking paper, serving both leading retailers and B2B operators. Sustainability and recycling are core to their business strategy, with a strong emphasis on reducing plastic waste and promoting circular economy principles. Their market position is supported by multiple production sites and a large workforce, reflecting a mature and stable business model. Technically, the website is built on a modern CMS platform (OctoberCMS) with standard web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and presents a professional design with good user experience. However, some technical improvements could enhance performance and accessibility further. The hosting provider is inferred from DNS records, and the domain is secured with HTTPS, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and domain registration protections but lacks advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is published, and no contact information for security issues is provided. Privacy compliance is partially addressed with a comprehensive privacy policy available as a PDF, but no cookie consent mechanism is present. The absence of visible contact details on the site may impact user trust and compliance. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced security practices and improved privacy compliance mechanisms. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, publishing security policies, and providing clear contact information to improve trust and compliance.

C

CBS Pakistan

cbspakistan.com

41

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

D

DeltaHeroes OÜ

deltaheroes.com

42

DeltaHeroes OÜ is a small Estonian consulting firm specializing in strategic partnership consulting, focusing on connecting Asia-Pacific with Estonian technology companies. Their core business involves investment scouting, matchmaking between startups and enterprises, organizing business delegations, and conducting seminars on corporate innovation and strategic investment. The company positions itself as a bridge between the Baltic and Asian regions, targeting entrepreneurs, investors, and enterprises interested in cross-regional collaboration. Technically, the website employs modern web technologies including Google reCAPTCHA for form security, Google Tag Manager for analytics, and lazy loading for images to optimize performance. The site is mobile-optimized with good navigation and SEO practices. Hosting appears to be managed via NameCheap, consistent with the domain registrar information. From a security perspective, the website enforces HTTPS and uses CAPTCHA on its contact form, which are positive indicators. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, representing an area for improvement. Overall, the website is professional and credible with consistent WHOIS data and clear business information. The main risks relate to privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms to enhance trust and compliance.

The website whatifi.com is currently a parked domain page indicating that the domain is registered but not linked to any hosting service. It primarily promotes web hosting packages from Zone.eu in multiple languages, targeting domain owners who may be interested in subscribing to hosting services. The content is basic and lacks any detailed business information, contact details, or privacy and security policies. Technically, the site uses standard HTML, CSS, and JavaScript with a Content-Security-Policy header but lacks other important security headers and HTTPS enforcement details. The domain registration is consistent and legitimate, with a long history dating back to 1999, registered through Ascio Technologies, Inc. Danmark. Overall, the site serves as a placeholder with minimal content and limited business credibility or trust signals.

The website famulus.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian domain registrar and hosting provider. The page informs visitors that the domain is registered but not linked to any hosting service and promotes Zone's web hosting packages in multiple languages. The business operates in the technology sector, focusing on domain registration and web hosting services, targeting domain owners seeking hosting solutions. The domain is mature, registered since 2010, and the registrant information aligns with the hosting provider, indicating legitimacy. Technically, the website is a simple static page built with standard HTML, CSS, and JavaScript. It is mobile responsive and provides basic user experience but lacks advanced SEO and accessibility features. Security headers are minimal, with a weak Content-Security-Policy allowing 'unsafe-inline' scripts, and DNSSEC is not enabled for the domain. No HTTPS configuration details are visible, but the domain status suggests it is active and likely supports HTTPS. From a security perspective, the site has a low security posture due to weak headers and lack of DNSSEC. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided. There are no analytics or tracking scripts detected, indicating minimal user tracking. The absence of contact details and policies reduces privacy compliance and user trust. Overall, the site serves as a placeholder with basic information and links to Zone Media OÜ's hosting services. The risk is low as no sensitive data is collected or exposed, but the lack of security best practices and compliance documentation suggests room for improvement. Strategic recommendations include enhancing security headers, enabling DNSSEC, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.

Statiiv OÜ operates a professional website focused on creative services including photography, quality calligraphy, and graphic design. The business targets individuals and organizations seeking artistic visual content, positioning itself as a small local creative service provider in Estonia. The website presents a clean, modern design with consistent branding and clear business identification through the company registration number. Technically, the website uses standard web technologies such as HTML5, CSS3, Google Fonts, and JavaScript. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or complex frameworks are detected, indicating a lightweight custom implementation. From a security perspective, the site does not exhibit advanced security measures such as security headers or documented policies. The email contact is obfuscated via JavaScript to reduce spam risk, and no forms collect sensitive data. However, the SSL status is unknown from the provided data, and no privacy or cookie policies are present, which are important for GDPR compliance. Overall, the website is functional and professional but would benefit from enhanced security practices, explicit privacy and cookie policies, and improved technical SEO and accessibility. The domain WHOIS data aligns well with the business information, supporting legitimacy and trustworthiness.

T

TVT Media

tvt.biz

48

TVT Media is a well-established media services company founded in 2004, positioning itself as a global content services powerhouse. The company offers a comprehensive suite of media management and distribution services including onboarding, metadata management, versioning, access services, asset management, playout, on-demand, and delivery. Their target audience includes broadcasters, studios, and content owners operating in the international entertainment market. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern front-end technologies such as Vue.js and integrates Google Maps API, hosted on AWS infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a cookie banner and privacy policy present but no explicit GDPR compliance statements or terms of service. Contact information is complete and includes a Singapore HQ address, phone number, and company email. Overall, the website is credible and trustworthy with room for improvement in security and compliance documentation.

J

Joss Services

joss-services.com.au

55

Joss Services is a 100% Indigenous owned and operated company specializing in security, construction, and commercial cleaning services primarily serving the Sydney Metro area. The company presents itself as a niche service provider with certifications such as FACCI ASSURED and membership in Supply Nation, indicating a commitment to quality and Indigenous business standards. The website is built on the Squarespace platform, featuring a professional design with clear navigation and mobile responsiveness. However, the absence of privacy and cookie policies, as well as incomplete WHOIS data, limits the overall trust and compliance posture. Security-wise, the site uses HTTPS but lacks security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a legitimate small business with room for improvement in privacy compliance and security best practices.

Christiansen Consulting OÜ is an international consulting firm with offices in Estonia, Denmark, and Greece, specializing in business development, organizational change, and leveraging cultural diversity. Their services include serious games development, team building, and strategic consulting projects across multiple countries. The website is professionally designed using Voog CMS, with good mobile optimization and clear navigation. Technically, it uses modern JavaScript libraries and supports HTTPS with no detected vulnerabilities. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but could improve in privacy compliance and security best practices.

P

PRIA

pria.org

60

PRIA is a well-established non-profit organization founded in 1982, specializing in participatory research, training, and capacity building to empower citizens and civil society in India and globally. The organization focuses on gender equality, sustainable urban futures, and participatory governance, positioning itself as a reputable leader in its sector. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site uses modern JavaScript libraries and CSS frameworks, hosted via GoDaddy, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published security policies. Privacy compliance is basic, with no cookie consent mechanism despite use of tracking tools. Overall, PRIA demonstrates strong business credibility and trustworthiness, though improvements in security and privacy practices are recommended.

NetMedia is a small Estonian technology-focused website providing educational content and reviews related to web development and hosting services. The site is built on WordPress and hosted by Zone Media OÜ, with a consistent domain registration and hosting provider alignment. The website demonstrates good content quality, SEO optimization, and a professional design with clear navigation. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security posture. The site uses HTTPS and modern technologies but could improve accessibility and security best practices.

F

fort.ee is available for purchase - Sedo.com

fort.ee

54

The website is a domain sales landing page hosted by Sedo.com, a well-established domain marketplace platform. The page advertises the availability of the domain fort.ee for purchase. The business model revolves around domain brokerage and parking services targeting domain buyers and sellers globally. The technical infrastructure includes modern web technologies such as JavaScript modules and Cloudflare DNS, with HTTPS enabled ensuring secure connections. However, DNSSEC is not enabled, and no advanced security headers were detected, indicating room for improvement in security hardening. Privacy compliance is minimal, with no privacy policy or terms of service found on this page, though a cookie consent banner is present. Contact information and incident response details are absent, which may impact user trust and compliance. Overall, the site is functional but basic in content and security posture, suitable for its purpose as a domain sales landing page.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or not loaded. Consequently, no business information, metadata, or security policies are present to evaluate. The page is a technical placeholder rather than a functional website, preventing meaningful analysis of business operations or security posture.

SDF Group is a globally recognized manufacturer and distributor of tractors, diesel engines, and agricultural machinery, operating under multiple well-known brands. The company targets farmers and contractors seeking advanced farming technology and precision agriculture solutions. The website demonstrates a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, incorporating analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response policies could be improved. The absence of WHOIS data reduces domain registration trust but is offset by professional branding and comprehensive content. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a strong business credibility profile.

The website ww38.mineprofs.org is a domain parking page indicating that the domain mineprofs.org is potentially for sale. It lacks substantive business content, contact information, or any active services. The site primarily serves as a placeholder with advertising scripts and links to domain sale services. The technical infrastructure relies on basic HTML, CSS, and JavaScript, with third-party ad networks such as Google Adsense Domains and Youseasky tracking scripts. Hosting is via Amazon Cloudfront CDN. Security posture is minimal with no visible HTTPS enforcement or security headers, and privacy compliance is weak due to absence of cookie consent mechanisms despite extensive tracking. The WHOIS data is unavailable due to a malformed request, suggesting privacy protection or restricted access, which aligns with the domain's parked status. Overall, the site presents low business credibility and trustworthiness.

F

Fleep Technologies

fleep.io

64

Fleep Technologies operates the website fleep.io, offering a professional messaging platform designed for companies seeking simple and effective digital communication solutions. The service integrates team chats, project communication, and email messaging into a single app, targeting small to medium-sized businesses. The company positions itself as a straightforward, subscription-based communication tool with a free trial, emphasizing ease of use and cross-organization collaboration. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google Analytics integrated for typography and user tracking respectively. Hosting is managed via Amazon AWS DNS services, and the site is mobile-optimized with responsive design elements. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response information publicly available. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation. The absence of direct contact emails or phone numbers on the main pages is a minor gap. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which indicates that the actual website content for the domain 'chromewebdata' is not accessible or blocked. This page primarily contains embedded Chromium offline game scripts and styling, with no real business or website content available. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game code, with no external hosting or CMS detected. Security posture is minimal due to lack of accessible content and absence of security headers or HTTPS enforcement details. The domain WHOIS data is not provided, preventing any domain legitimacy or registration analysis. Overall, the site is inaccessible for meaningful business or security evaluation, resulting in a low AI score and no trust indicators.

S

Stagnation Lab

stagnationlab.com

44

Stagnation Lab is a medium-sized Estonian technology company founded in 2013, specializing in designing and building cross-device and platform digital experiences. Their portfolio includes notable projects such as Smart-ID, Telia TV, and Klarvinduer, indicating a strong market presence in the Baltic region and ambitions for wider European adoption. The company offers a broad range of services including design, web and mobile applications, e-commerce, TV and VR apps, as well as IoT and robotics hardware prototyping. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices and clear navigation, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with the company's founding date. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and security headers which are recommended for enhanced security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. No incident response or security policy information is provided, limiting transparency on security governance. Overall, the website is professional and trustworthy with moderate security posture and some compliance shortcomings. Strategic improvements in privacy documentation, security headers, and DNS security would enhance trust and reduce risk.

The website bpe.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian company specializing in domain registration and web hosting services. The site informs visitors that the domain is registered but not linked to any hosting service and promotes Zone Media's hosting packages in multiple languages (Estonian, Russian, Finnish, and English). The business model focuses on providing domain registration and hosting services primarily in the Baltic region. The website content is basic and serves as a placeholder rather than a fully developed business site. Technically, the site uses standard HTML5, CSS3, SVG graphics, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is Zone Media OÜ, consistent with the WHOIS data. The site is mobile-optimized and loads quickly but lacks advanced SEO and accessibility features. Security headers are minimal, with a Content-Security-Policy header present but weakened by the use of 'unsafe-inline'. HTTPS is implied but not explicitly confirmed in the HTML content. From a security perspective, the site shows basic security hygiene but lacks comprehensive security headers and policies. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is low risk but also low in business credibility and privacy compliance. It functions primarily as a domain parking page with promotional content for hosting services. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.

O

OpenNode LLC

opennodecloud.com

49

OpenNode LLC is a small technology company specializing in open-source infrastructure management software and cloud system implementations. Their product portfolio includes Waldur, an open-source multi-cloud marketplace; Kubernetes ON, a managed Kubernetes service; and the G-Cloud Platform, targeting government cloud solutions. The company targets enterprises and public sector organizations seeking cloud infrastructure management and governance solutions. The website is professionally designed, consistent in branding, and provides clear information about products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Leaflet.js for mapping, and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and published security policies such as privacy, cookie, incident response, or vulnerability disclosure statements. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the company's credibility. Overall, the website presents a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

I

Interactive Brokers LLC

interactivebrokers.com

67

Interactive Brokers LLC operates a leading global online brokerage platform providing direct access to stocks, options, futures, currencies, bonds, and funds. The company targets a broad audience including individual traders, investors, advisors, and institutional clients. It holds a strong market position supported by a Nasdaq listing, substantial equity capital, and multiple industry awards. The website reflects a mature digital presence with comprehensive product information, multilingual support, and advanced trading technologies. Technically, the site uses modern frameworks like Bootstrap and jQuery, is well optimized for performance and mobile devices, and implements strong security headers and HTTPS encryption. Privacy compliance is evident through cookie consent mechanisms and a detailed privacy policy. However, the absence of publicly available WHOIS data and explicit security policy or incident response contacts slightly reduce trustworthiness. Overall, the site demonstrates a high level of professionalism, security, and user experience suitable for a major financial services provider.

U

United Angels VC

unitedangels.vc

54

United Angels VC is an early-stage venture capital fund based in Estonia, with a portfolio of notable startups such as Bolt and Starship. The fund's investment period for United Angels Fund I has ended, and current investments are made under the Specialist VC Fund II brand. The website reflects a professional and consistent brand presence, with clear business information and legal disclosures. Technically, the site is built on the Voog CMS platform, utilizing modern web technologies and is mobile optimized. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and privacy compliance is limited due to absence of privacy and cookie policies. Contact information is limited but includes a verified company email and physical address. Overall, the site is trustworthy and credible but could improve privacy and security transparency.

I

Intership Navigation Co. Ltd

intership-cyprus.com

49

Intership Navigation Co. Ltd operates as a specialized provider in the maritime transportation sector, focusing on ship and crew management services. Their offerings include technical management, crewing and training, commercial management, accounting, insurance, travel, catering, and sustainable management. The company positions itself as a leader with a commitment to safety, quality, and ESG principles, targeting shipowners and maritime stakeholders. The website reflects a medium-sized enterprise with consistent branding and trust signals such as certifications and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF detected, indicating reliable hosting and infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. No cookie consent mechanism is present, which impacts privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy, although the website content and certifications suggest a legitimate business. Overall, the website is professional and functional with room for improvement in privacy compliance, security best practices, and domain registration transparency. Strategic enhancements in these areas would strengthen trust and security posture.

Texas Instruments is a global semiconductor company specializing in the design, manufacture, testing, and sale of analog and embedded processing chips. The company maintains a comprehensive and professionally designed website that targets engineers, designers, and enterprises in the semiconductor industry. The site offers extensive product catalogs, design resources, and support forums, reflecting a mature and well-established business model with a strong market position. Technically, the website employs modern web technologies including JavaScript, CSS3, and custom CMS infrastructure, with integrated analytics and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers and explicit incident response contacts could be improved. The WHOIS data for the domain is not publicly available, which is unusual for a large enterprise but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the website demonstrates a high level of digital maturity and business credibility, with minor recommendations for enhancing security transparency and incident response visibility.

T

Tommi Mäkinen Racing Oy

tommimakinenracing.fi

50

Tommi Mäkinen Racing Oy operates the website www.tommimakinenracing.fi, offering specialized ice driving experiences featuring the Toyota GR Yaris and expert coaching by 4-time World Rally Champion Tommi Mäkinen. The business targets motorsport enthusiasts and individuals interested in rally driving on ice, leveraging the strong personal brand of Tommi Mäkinen to position itself as a niche leader in this segment. The website content is professionally presented with consistent branding and relevant imagery, emphasizing the adrenaline and precision of the driving experience. Technically, the website is built using the Framer platform, employing modern HTML5, CSS3, and JavaScript technologies. It includes proper meta tags for SEO and social media sharing, and the site is mobile optimized with good performance metrics. Security is well addressed with HTTPS enforced and multiple security headers present, indicating a mature security posture. However, the site lacks explicit privacy and cookie policies, GDPR compliance statements, and incident response contacts, which are important for regulatory compliance and user trust. Overall, the security posture is strong with no detected vulnerabilities or blocking mechanisms, but privacy compliance is weak due to missing policies and consent mechanisms. The business credibility is high given the clear association with Tommi Mäkinen and professional presentation, though contact information is not explicitly provided on the site. Strategic recommendations include adding comprehensive privacy and cookie policies, GDPR compliance disclosures, and clear contact channels for security incidents to enhance trust and compliance.

S

SRC Group

src.ee

46

SRC Group is a specialized marine and offshore engineering company focusing on retrofit engineering modifications including steel works, pipe works, mechanical and electrical installations, and interior refits. The company targets clients in the marine and offshore sectors, positioning itself as a niche service provider with solid references. The website reflects a small-sized business founded in 2010, with consistent branding and good content quality. Technically, the website uses modern web technologies and a custom CMS, hosted likely by Elkdata OÜ, an Estonian hosting provider. The site is mobile optimized and performs moderately well, though accessibility could be improved. Security posture is moderate with HTTPS implied but no visible security headers or policies published. Privacy compliance is good with a cookie consent mechanism and a privacy policy page. However, contact information and terms of service are not present in the analyzed content, limiting direct communication channels and legal transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

S

SOL Group

solgroup.com

72

The SOL Group is a large Italian company specializing in the production, applied research, and marketing of technical and medical gases, home care services, biotechnologies, and renewable energy production. The company targets industrial clients, healthcare facilities, patients at home, and the biotechnology sector, positioning itself as a diversified and established player in the energy and healthcare industries. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on the Plone CMS platform, utilizing modern web technologies including Bootstrap, FontAwesome, and Cookiebot for privacy management. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the SOL Group website demonstrates strong digital maturity and compliance with privacy regulations, but the domain registration inconsistency slightly impacts trustworthiness. Strategic recommendations include publishing explicit security policies, incident response contacts, and a security.txt file to enhance transparency and security posture.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as an offline or error placeholder within the Chrome browser. No actual website content, business information, or external links are present. The page includes embedded scripts related to the Chrome Dino game, which is a built-in offline game in Chrome. Due to the nature of this page, no business or security policies, contact information, or marketing data are available. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture cannot be meaningfully assessed as this is not a public-facing website. Overall, this content is not a website but a browser error page, and thus no risk or compliance assessment applies.

D

Dolm IT

dolmit.com

55

Dolm IT is a specialized software development company based in Estonia, focusing on delivering complex enterprise and government software solutions. Established in 2015, the company positions itself as a customer-obsessed partner offering services including software engineering, product management, consulting, and UX architecture. Their clientele spans private and public sectors, including notable companies and government organizations, highlighting a trusted market position in the technology industry. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not implement DNSSEC, which could enhance domain security. The absence of privacy and cookie policies, as well as no visible incident response or vulnerability disclosure mechanisms, indicates gaps in compliance and security transparency. Overall, Dolm IT presents a professional and credible online presence with a solid business foundation. To improve risk posture and compliance, the company should implement comprehensive privacy and cookie policies, enhance security headers, and publish security and incident response information.

B

成人色站,在线视频,看片-DANDANAV

bindcreative.com

52

The website bindcreative.com is an adult video streaming platform primarily targeting Chinese-speaking audiences with a variety of adult content including Asian, Japanese, and Western adult videos. The business model appears to be advertising-driven with extensive use of third-party ad and tracking domains. The site is newly registered in March 2024 and lacks detailed business or contact information, which limits trust and credibility. Technically, the site uses modern JavaScript frameworks such as Vue.js and is hosted with Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. Privacy and compliance policies are absent, and no GDPR or data protection measures are evident. The site also lacks verified contact information and does not provide terms of service or cookie consent mechanisms, which raises compliance concerns.

A

antiviruspro.com

antiviruspro.com

41

The website antiviruspro.com is currently a parked domain primarily monetized through advertising networks such as Google Adsense and Bodis. It lacks original content, business information, or active services, serving mainly as a placeholder domain with ads related to antivirus software. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The domain is hosted via Bodis name servers and registered through a domain registrar reseller, consistent with typical parked domains. From a security perspective, the site uses HTTPS but lacks essential security headers and does not implement privacy or cookie consent mechanisms. There are no forms or inputs, reducing attack surface, but the absence of security policies or incident response information indicates a low security maturity level. The domain registration is recent and consistent with the parked domain status, with no privacy protection used. Overall, the site scores low on content quality, business credibility, and privacy compliance, reflecting its nature as a parked domain rather than an active business website. There are no signs of WAF or blocking mechanisms, and the site is fully accessible. Strategic recommendations include implementing security headers, adding privacy and cookie consent notices, and providing clear business and contact information if the domain is to be developed into an active service platform.

O

ORGO OÜ

orgo.ee

37

ORGO OÜ is a small Estonian company with a minimal web presence focused primarily on providing contact information. The website lacks detailed business descriptions, service offerings, or marketing content, indicating a basic digital footprint. The domain is registered with Elkdata OÜ since 2017, consistent with the company's Estonian origin and contact details. Technically, the website uses standard HTML5 and CSS3 with Google Fonts integration but lacks advanced frameworks or CMS platforms. Performance and mobile optimization are basic but functional. Security posture is weak due to absence of security headers, privacy policies, and visible HTTPS enforcement, although no critical vulnerabilities were detected. Overall, the site is legitimate but underdeveloped in terms of content, security, and compliance.

The website prepayway.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain is registered since 2017 with OVH sas and uses Cloudflare DNS and WAF services. Due to the blocking mechanism, no business information, contact details, or policies are available for review. The technical infrastructure shows use of Cloudflare security services but lacks visible security headers or privacy compliance indicators. Overall, the security posture cannot be fully assessed, and the lack of accessible content severely limits trust and credibility evaluation.

The website fraktal.ee currently serves only a 404 Page Not Found error page with no substantive content or business information. The domain is registered since 2010 under Edicy OÜ, which is consistent with the hosting provider and CMS platform (Voog) used. However, the lack of accessible content, contact details, and policies significantly limits the website's utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with minimal optimization and no advanced frameworks or analytics. Security posture is weak, with only a basic Content-Security-Policy header present and no evidence of HTTPS enforcement. Privacy compliance is absent, with no privacy or cookie policies detected. Overall, the site appears inactive or misconfigured, presenting a high risk for users seeking information or services.

E

Eesti Geoloogia Selts

egeos.ee

45

Eesti Geoloogia Selts is an established Estonian geological society with a domain registered since 2010. The website serves as an informational portal for society members and the geology community in Estonia, providing details about the society, its members, activities, projects, and events. The site is built on the Voog CMS platform and uses standard web technologies including HTML5, CSS3, and JavaScript libraries such as jQuery. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies. Social media presence on Facebook and LinkedIn supports community engagement. Overall, the website is professional and consistent with its non-profit educational mission but would benefit from enhanced privacy compliance and security best practices.

The website wearesubrosa.com is currently a parked domain placeholder page indicating that the domain has been registered but is not actively used for any business operations. The page offers potential buyers the opportunity to solicit a request to purchase the domain from the owner. The business model revolves around domain registration and resale facilitation, with additional promotional links to domain registration, SSL certificates, professional email, and website protection services offered by the registrar Gname 118 Inc. The website content is minimal and lacks any substantive business information, contact details, or privacy and security policies. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting and domain registration are managed by Gname 118 Inc. The website is mobile responsive with basic accessibility and SEO features. However, the site lacks HTTPS usage, DNSSEC is not enabled, and no security headers are present, indicating a low security posture. There are no analytics or tracking scripts detected beyond a single script from the registrar's domain. Security posture evaluation reveals that while the domain status clientTransferProhibited is set, providing some protection against unauthorized transfers, the absence of HTTPS, DNSSEC, and security headers are notable vulnerabilities. No privacy policy, cookie policy, or terms of service are present, and no contact or incident response information is available, limiting compliance with GDPR and other regulations. Overall, the website presents a low-risk profile due to its inactive status but lacks trustworthiness and business credibility. Strategic recommendations include enabling HTTPS, implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

L

AS Levira | Väljastus,võrguteenused, IT-teenused,striiming ja TV-tootmine, satelliit

levira.ee

52

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual website. This page is a standard offline or error page embedded within the Chrome browser, featuring the well-known Chrome dinosaur game. No real business or website content is accessible, and therefore no metadata, contact information, or policies are present. The technical infrastructure is limited to embedded JavaScript and CSS for the offline game, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers applicable to this internal page. Overall, the site is inaccessible for meaningful analysis, and no business or compliance information can be derived.

T

TERE AS

tere.eu

51

Tere dairy (TERE AS) is a medium-sized Estonian dairy product manufacturer and retailer offering a variety of dairy and plant-based products such as kefir drinks and puddings. The company targets consumers in Estonia and neighboring regions, providing products in multiple languages to cater to a diverse audience. The website is professionally designed with good content quality and clear navigation, supporting the company's market presence. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Fonts. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations could be improved. The presence of Google Tag Manager indicates moderate user tracking and analytics capabilities. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible privacy policies, terms of service, or incident response information, which are critical for compliance and trust. Cookie consent is implemented, but GDPR compliance indicators are minimal. WHOIS data is unavailable due to privacy restrictions, which is common but reduces transparency. Overall, the website demonstrates a solid business and technical foundation but requires improvements in privacy compliance, security headers, and transparency to enhance trust and regulatory adherence.

The website frens.ee currently serves only a 404 Page Not Found error page with no active business content or user engagement features. The domain is registered with Zone Media OÜ, an Estonian registrar, since 2010, indicating a legitimate and aged domain. However, the lack of content and absence of privacy, cookie, or terms of service policies suggest the site is inactive or a placeholder. Technically, the site uses basic HTML, CSS, and JavaScript with minimal security headers, notably a weak Content-Security-Policy allowing 'unsafe-inline' scripts, which reduces security effectiveness. No HTTPS status was explicitly provided, but the domain status is 'ok' and presumably supports HTTPS given the registrar and hosting provider. No analytics, tracking, or social media integrations are present, indicating minimal digital maturity. Security posture is weak due to missing standard headers and lack of secure forms or incident response information. Overall, the site scores low on content quality, privacy compliance, and business credibility, reflecting its inactive state.

The website astangu.ee is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents access to any substantive content. The domain is registered since 2010 with an Estonian registrar, indicating a legitimate and established domain. However, no business information, contact details, or policies are available on the accessible page. The technical infrastructure relies on Cloudflare for security and performance, but no CMS or additional technologies are detected. The security posture is limited to Cloudflare's WAF and captcha challenge, with no further visible security headers or configurations. Due to the content being blocked, a full analysis of business, compliance, and security posture is not possible, resulting in a low overall AI score.

The Archimedes Foundation website serves as a minimal informational page indicating that as of January 1, 2021, its activities were transferred to the Estonian Education and Youth Board and the Erasmus+ and European Solidarity Corps Agency. The foundation historically managed European educational and youth programs such as Erasmus+. The website content is very limited, with no privacy, cookie, or terms of service policies, and no contact information provided. Technically, the site uses basic HTML and CSS with Google Fonts, hosted under an Estonian registrar. No advanced security headers or analytics tools are detected, and the site lacks modern SEO and accessibility features. Security posture is minimal but no critical vulnerabilities are evident. Overall, the site appears to be a legacy informational page rather than an active service platform.

1

101domain GRS Limited

acino-pharma.com

47

The website acino-pharma.com is currently a parked domain managed by 101domain GRS Limited, a domain registrar and service provider established in 1999. The site does not host any active business content related to Acino Pharma but instead displays a placeholder page offering domain management and upsell services such as Google Workspace, web hosting, and corporate brand services. The target audience appears to be individuals or businesses interested in acquiring or managing domain names. The business model is that of a domain registrar and related service provider with a moderate market presence. Technically, the site uses standard HTML5, CSS3, and JavaScript technologies including jQuery and Modernizr. It is hosted on infrastructure associated with 101datacenter.net. The site is moderately optimized for mobile devices and has basic accessibility and SEO features. However, it lacks HTTPS, security headers, and advanced technical frameworks or CMS platforms. From a security perspective, the site has several weaknesses including the absence of HTTPS, no DNSSEC enabled, and no visible security policies or incident response contacts. The domain is locked against transfer but is not actively used for business purposes. No privacy or cookie policies are present, and no contact information is provided, limiting compliance with GDPR and other regulations. Overall, the security posture is weak, and the site is primarily a parked domain with minimal risk but also minimal trust signals. The overall risk assessment is low due to the lack of active business operations on the domain. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing DNSSEC, and providing clear contact and security information to improve trust and compliance if the domain is to be used actively in the future.

C

CYBERNETICA AS

cyber.ee

57

Cybernetica AS is a well-established Estonian technology company specializing in secure digital society technologies, including e-governance, cybersecurity, digital identity, and maritime surveillance. The company has a strong market position as the architect of e-Estonia and serves governments and enterprises globally. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional design. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Cybernetica demonstrates high business credibility and technical maturity, making it a trustworthy and professional entity in its sector.

The website ubiksolutions.eu is currently a parked domain with no active business content or services. It primarily serves as a domain for sale landing page, with advertising scripts and tracking mechanisms embedded. There is no evidence of an operational company or business model on the site. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with third-party ad networks such as Google Adsense and Youseasky. The site lacks modern security practices, including HTTPS enforcement and security headers, and does not provide privacy or cookie consent mechanisms. Overall, the security posture is weak, and the site does not comply with GDPR or other privacy regulations. The domain registration is consistent with a domain parking service provider, indicating no active business ownership. Strategic recommendations include implementing HTTPS, adding clear privacy and cookie policies with consent, providing legitimate business contact information, and improving site content and design to enhance trust and compliance.

G

GreatStudio

greatstudio.com.br

54

GreatStudio is a Brazilian technology company offering a SaaS platform tailored for photographers and photography studios. The platform provides tools for photo selection, online photo sales, album approval, and business management including financial and scheduling features. It serves over 18,000 photographers across 11 countries, positioning itself as a professional and easy-to-use solution with a free 7-day trial to attract new users. The website is well-branded, mobile-optimized, and uses Cloudflare for DNS and SSL, indicating a modern technical infrastructure. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. No direct contact information or incident response channels are visible, which could impact customer support and security responsiveness.

D

Duvel

duvel.com

73

Duvel is a well-established Belgian beer brand with a rich history dating back to 1871. The company operates a professional website that showcases its premium beer products, brand heritage, and visitor experiences. The site targets beer enthusiasts primarily in Belgium and internationally, offering detailed product information, awards, and an e-commerce platform. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Flowbox for social media integration, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, includes an age verification modal to comply with legal drinking age requirements, and implements cookie consent mechanisms aligned with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data for the domain is unavailable, which slightly impacts trust analysis. Overall, the website is professional, secure, and compliant, supporting Duvel's market position as a premium beer brand.

B

Byro

byro.works

56

Byro is a small, Czech Republic-based community platform focused on creative professionals working in public administration. It aims to foster a more creative, open, and inclusive bureaucracy through networking, education, mentoring, and events. The platform targets public officials who want to improve their work and the functioning of the state. Technically, the website is built on Squarespace, leveraging modern web technologies and delivering a good user experience with mobile optimization and decent SEO. Security posture is solid with HTTPS and HSTS enabled, though some advanced security headers and privacy policies are missing. The absence of WHOIS data limits trust but is likely due to privacy protection. Overall, Byro presents as a legitimate niche community platform with room for improvement in privacy compliance and security transparency.

The website www.lancome.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual site content. This prevents extraction of any meaningful business, technical, or security information. The WHOIS lookup for the domain returned no entries, indicating either privacy protection or lack of public registration data, which further limits trust and legitimacy assessment. Without access to the site content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure appears to rely on Cloudflare services for security and hosting, but no further details are available. The security posture is limited to the presence of Cloudflare's WAF, but no other security headers or configurations can be verified. Overall, the site cannot be fully analyzed, and the risk assessment remains low due to lack of accessible data.

4

42 Luanda

42luanda.com

44

42 Luanda is a free programming education center based in Angola, part of a global network offering innovative peer-to-peer learning without traditional teachers. The website presents a clear business focus on empowering youth through gamified programming challenges and practical projects. Technically, the site uses modern frontend technologies and is hosted with Cloudflare DNS, ensuring good availability and performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and explicit privacy or cookie policies. Tracking technologies like Facebook Pixel and Google Tag Manager are used without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is professional and credible but would benefit from enhanced security and privacy transparency.

G

GreatPages

greatpages.com.br

54

GreatPages is a Brazilian technology company specializing in providing high-performance landing page templates and a platform for infoproduct creators and online course sellers. Their service enables users to create optimized landing pages with marketing tool integrations and SEO configurations, targeting the Brazilian market. The website is professionally designed with good content quality and moderate technical implementation, including Cloudflare DNS for hosting and performance. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved with better security practices and transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security measures.