Security Directory

Viipekeeletõlkide OÜ is a small Estonian company specializing in sign language interpreting services. The website serves as a basic informational platform with navigation to various sections such as services, pricing, and contact details. The company appears to target individuals and organizations in Estonia requiring sign language interpretation. The domain is mature, registered since 2010, and hosted by Edicy OÜ, a known Estonian registrar and hosting provider. Technically, the website is built on the Voog CMS platform and uses common JavaScript libraries such as jQuery and LazyLoad. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, the content is minimal and lacks comprehensive textual information or rich media. From a security perspective, the site uses HTTPS (implied by the URL), but no explicit security headers or policies are detected in the HTML content. There are no privacy or cookie policies, nor any incident response or security contact information, indicating gaps in compliance and security posture. No forms are present that collect user data, reducing some risk but also limiting user engagement. Overall, the website is functional but basic, with moderate business credibility but low privacy and security compliance. Strategic improvements in privacy policies, security headers, and incident response readiness are recommended to enhance trust and compliance.

The website seitse.tv is currently a domain parking page owned by Private by Design, LLC, a US-based entity. The domain was registered recently in August 2024 and is actively offered for sale via the Sedo platform for 99 USD. The site content is minimal, primarily consisting of generic Finnish language category links and promotional text indicating the domain's availability for purchase. There is no active business or service presented on the site, and no direct contact information or privacy compliance mechanisms are implemented. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting and DNS appear to be managed via Sedo and Porkbun, respectively. The site lacks DNSSEC and security headers, and no HTTPS status was determinable from the provided data. Performance and mobile optimization are basic, reflecting the minimal content and simple design. From a security perspective, the domain registration includes protections against unauthorized deletion and transfer, which is positive. However, the absence of DNSSEC, security headers, and HTTPS reduces the overall security posture. No privacy or cookie consent mechanisms are present, and no incident response or security policies are disclosed. Overall, the site represents a low-risk domain parking page with limited business credibility and minimal content. Strategic recommendations include enabling DNSSEC, implementing HTTPS with strong security headers, adding privacy and cookie policies with consent mechanisms, and providing clear contact information to improve trust and compliance.

M

MRPeasy

mrpeasy.com

69

MRPeasy is a cloud-based SaaS provider specializing in Manufacturing ERP and MRP software tailored for small manufacturers. The company offers a comprehensive suite of services including production planning, stock management, CRM, purchases, finances, and team collaboration tools. Positioned as a leading solution for small manufacturers, MRPeasy emphasizes simplicity and power in its offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates advanced analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, with good accessibility and SEO features. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data reduces the overall trust score, as domain legitimacy cannot be fully verified. Contact information is available, including verified company emails and social media presence, enhancing business credibility. Overall, MRPeasy presents a trustworthy and professional online presence suitable for its target market, but improvements in transparency regarding security policies and domain registration details would further strengthen trust and compliance.

K

Klöckner Pentaplast

kpfilms.com

64

Klöckner Pentaplast is a global leader in manufacturing sustainable and recyclable plastic films and high-barrier protective packaging, serving sectors such as food, pharmaceutical, health, and durable goods. The company emphasizes sustainability and circular economy principles, with a strong market presence and over 60 years of industry experience. Their website reflects a professional and comprehensive digital presence, showcasing detailed product information, sustainability reports, and corporate governance content. Technically, the site employs modern frameworks like Bootstrap and AngularJS, integrates accessibility tools such as Recite Me, and uses analytics services responsibly with cookie consent mechanisms in place. Security posture is solid with HTTPS enforcement and privacy policies, though some security headers and explicit incident response information are absent. The WHOIS data for the domain is missing, which is unusual for a company of this size and history, slightly impacting trust but not undermining the overall legitimacy given the strong branding and external presence. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and clarifying domain registration details.

IITEE OÜ is an Estonian IT service provider specializing in professional IT solutions for companies, particularly those in the manufacturing sector. Founded in 2006, the company offers IT maintenance, hosting services with high availability, and Office 365 business-class email solutions. Their business model focuses on providing reliable and efficient IT support to improve operational efficiency for their clients. The website reflects a small but professional company with clear contact information and a focus on B2B services. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Owl Carousel, and Google Fonts. Google Analytics and Google Tag Manager are employed for user tracking and marketing insights. The site is mobile responsive and well-structured, though accessibility features are basic. Hosting appears to be managed by Elkdata OÜ, consistent with the WHOIS data. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and there is a lack of privacy and cookie policies, which impacts GDPR compliance. No vulnerability disclosure or incident response information is provided. The security posture is moderate but could be improved by implementing standard security headers and formal policies. Overall, the website is professional and trustworthy with a solid business foundation. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

W

Wiru õlu

wiru.ee

39

Wiru õlu is a small Estonian craft beer brand with a professionally designed WordPress website launched in December 2023. The site focuses on presenting the brand's artisanal beer products with rich descriptive content targeting beer enthusiasts. The technical infrastructure is modern, leveraging WordPress CMS, jQuery, and popular plugins such as Contact Form 7 and All in One SEO, hosted likely by Zone Media OÜ in Estonia. The website is accessible, mobile-optimized, and SEO-friendly with structured data implemented. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site demonstrates a good baseline for a new small business but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Baklavacı Güllüoğlu

gulluoglu.com

61

Baklavacı Güllüoğlu operates a well-established e-commerce website specializing in traditional Turkish desserts such as baklava, kadayıf, lokum, and chocolates. The company targets consumers interested in authentic Turkish sweets and offers a variety of products with online ordering and delivery options. The website demonstrates a good level of digital maturity with modern technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google Analytics integrated for marketing and analytics purposes. The site is built on the Hipotenus e-commerce platform, indicating a professional infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers are not explicitly detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent banner supporting GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trustworthiness. No evidence of WAF or blocking mechanisms was found, allowing full content accessibility and analysis.

HeiVäl OÜ, operating as HeiVäl Consulting, is a small Estonian management consulting firm established in 1993. The company specializes in strategic planning, quality management, market research, export planning, and stakeholder satisfaction surveys, serving both private and public sector clients. The website reflects a professional but basic digital presence with content primarily in Estonian and options for English, Finnish, and Russian languages. The technical infrastructure is based on WordPress CMS with legacy JavaScript libraries and Google Analytics for tracking. Security posture is moderate but weakened by outdated libraries and lack of security headers. Privacy compliance is poor due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility.

B

Baptist Bible Fellowship Internation

bbfi.org

58

Baptist Bible Fellowship International (BBFI) is a non-profit religious fellowship organization dedicated to serving Baptist pastors and their churches in fulfilling the Great Commission. With a history spanning over 75 years, BBFI organizes events, conferences, and provides resources to support its community. The organization maintains an active digital presence through its website and multiple social media platforms, offering event registrations, official reports, and educational materials. The website is built on the Squarespace platform, leveraging modern web technologies and multimedia content such as YouTube videos to engage its audience. Technically, the website demonstrates moderate digital maturity with good mobile optimization and a clean, professional design. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The site enforces HTTPS, ensuring secure communications, but could improve its security posture by implementing additional best practices. No forms or direct data collection mechanisms are present on the homepage, reducing immediate privacy risks. Overall, BBFI's website reflects a legitimate and established organization with consistent branding and clear contact information. The absence of WHOIS data limits domain registration insights, but the content and external partnerships support the site's authenticity. Strategic improvements in privacy compliance and security configurations would enhance trust and regulatory adherence.

O

Outline Reklaam

outline.ee

39

Outline Reklaam is an established Estonian marketing and advertising agency with over 20 years of experience. They offer a comprehensive suite of services including graphic design, internet solutions, photography, 3D, video marketing, and website development. Their business model focuses on in-house content creation and serving a diverse client base, as evidenced by their portfolio and testimonials. Technically, the website is built on WordPress using the Avada theme and integrates common plugins such as Contact Form 7 and MonsterInsights for analytics. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

The website www.trustedmediabrands.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha. This prevents access to any meaningful content, business information, or contact details. The WHOIS lookup returned no registration data, indicating the domain may be unregistered, inactive, or protected by privacy mechanisms that block WHOIS queries. The technical infrastructure relies on Cloudflare services for security and performance, but no CMS or business platform details are discernible. Due to the lack of accessible content and metadata, no security policies, privacy statements, or compliance indicators are available for evaluation. Overall, the site’s security posture cannot be fully assessed, and the domain’s legitimacy is questionable given the absence of WHOIS data. The site is effectively blocked for analysis, resulting in a low AI score and limited insights.

F

Fractory

fractory.co

63

Fractory is a UK-based manufacturing service platform specializing in scalable metal fabrication solutions including laser cutting, CNC machining, welding, and assembly. Established in 2000, the company targets engineering businesses requiring project and series manufacturing with 1-1 engineering support and flexible payment terms. Their market position is strengthened by certifications such as ISO 9001 and JOSCAR, and a professional online presence with multi-language support. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, and integrates advanced analytics tools like Google Tag Manager, FullStory, and RudderStack. Hosting is on AWS infrastructure, ensuring reliability and speed. The site is mobile-optimized and SEO-friendly, providing an excellent user experience. From a security perspective, the site enforces HTTPS and uses domain registration protections but lacks some advanced security headers and explicit incident response disclosures. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are missing. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Fractory presents a trustworthy and professional digital footprint with strong business credibility and technical maturity. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance their security posture and compliance.

L

Lamark

lamark.com

47

Lamark is a Dutch company specializing in exam logistics and management services, operating over 20 locations across the Netherlands. Their core offerings include a proprietary Exam Management System (EMS) that facilitates flexible booking, fraud prevention, and real-time reporting for exam centers and candidates. The company emphasizes a serene, minimalistic environment with certified hosts to ensure exam integrity. Technically, the website is built on WordPress using Oxygen Builder and WPML for multilingual support, with performance optimizations via Flying Press and cookie consent managed by CookieYes. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though no explicit security policy or incident response information is published. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a professional, trustworthy image with good content quality and technical implementation.

O

Orkla Eesti AS

kalev.eu

46

Kalev is a prominent Estonian confectionery brand operating under Orkla Eesti AS, offering a wide range of chocolates and sweets through retail stores and e-commerce. The website showcases the brand's rich history, product offerings, sustainability initiatives, and retail locations, targeting consumers in Estonia. Technically, the site is built on WordPress with modern plugins and technologies, optimized for SEO and mobile use. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though formal security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive user experience and business credibility.

M

MAINOR

mainor.ee

45

MAINOR is an established Estonian corporate group with a 50-year history, operating primarily in environment, education, healthcare, and energy sectors. The company acts as a parent entity to multiple subsidiaries and is involved in significant development projects including Estonia's third largest economic city. The website is professionally designed, multilingual, and built on WordPress with modern frontend technologies. It includes SEO optimizations and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is supported by a privacy policy and cookie consent, but lacks detailed data protection officer or incident response information. Overall, the site is trustworthy and credible, with room for improvement in security best practices and transparency.

M

MM Grupp

upi.ee

50

MM Grupp is an Estonian capital-based investment company focusing on broad cross-sector investments aimed at societal development. Established in 2010, it manages a portfolio of over 130 companies and reports significant turnover and employee numbers, positioning itself as a large player in the Estonian investment landscape. The website reflects a professional and consistent brand image with good content quality and clear business messaging. Technically, the site uses the Voog CMS platform, includes modern technologies like jQuery and Google Tag Manager, and is hosted by a reputable Estonian provider. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security practices.

MTÜ Eesti Kvaliteediühing is a non-profit organization based in Estonia focused on uniting organizations and individuals dedicated to development and quality improvement. The website serves as a platform for sharing news, events, and international quality-related activities, targeting quality professionals and organizations. The business model centers on membership and community engagement within the quality sector. The organization appears established with a domain age consistent with its founding year of 2018 and maintains a moderate market position within Estonia's quality community. Technically, the website is built on WordPress 6.5.5 using the Avada theme and integrates popular plugins such as Yoast SEO and CleanTalk anti-spam. It employs modern web technologies including jQuery and Font Awesome, and uses Google Analytics for visitor tracking. The site is served over HTTPS, indicating a secure transport layer, and shows moderate performance and good mobile optimization. SEO practices are implemented with meta tags and structured data, although accessibility features are basic. From a security perspective, the site benefits from HTTPS and anti-spam measures but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR. Incident response and vulnerability disclosure mechanisms are not evident, limiting transparency in security management. Overall, the website demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and security policy transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and publishing incident response contacts to strengthen trust and compliance.

M

Mandatum

mandatumlife.fi

61

Mandatum is a prominent Finnish financial services group specializing in investment management, insurance, pension solutions, and employee reward services. The company positions itself as a unique combination of financial expertise and human-centric service, targeting individual customers, businesses, and entrepreneurs. Their market position is strong within Finland, supported by a comprehensive portfolio of services and a large professional workforce. The website reflects a mature digital presence with multilingual support and rich content tailored to diverse customer segments. Technically, the website employs modern frameworks such as Vue.js and Tailwind CSS, integrated with advanced analytics and marketing tools including Adobe Analytics, Microsoft Application Insights, and OneTrust for cookie consent management. The platform appears to be built on Episerver CMS, ensuring robust content management and search capabilities. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. From a security perspective, the site enforces HTTPS and incorporates cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not visible in the provided data, the presence of security policy pages and incident reporting channels indicates a proactive security posture. No critical vulnerabilities or suspicious activities were detected. However, improvements such as publishing a security.txt file and providing direct incident response contact emails could enhance transparency and readiness. Overall, Mandatum's website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations. The digital infrastructure supports business goals effectively, though minor enhancements in security transparency and incident response communication are recommended to further strengthen their security posture.

A

ADM Cloudtech

admcloudtech.com

56

ADM Cloudtech is a technology service provider specializing in cloud management solutions. Their website presents a professional image with clear descriptions of their services including cloud planning, architecture, migration, and ongoing management. The technical infrastructure is based on WordPress CMS with modern plugins and libraries, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks comprehensive security headers and explicit privacy policies. The absence of WHOIS data raises concerns about domain legitimacy and business credibility, which should be addressed to improve trust. Overall, the website is functional and well-designed but requires enhancements in privacy compliance and transparency.

S

Sandman Group

sandman.ee

55

Sandman Group is a well-established wholesale distributor of consumer electronics in the Baltic region, founded in 1992 and operating the largest warehouse for home appliances in the Baltics. The company serves a broad range of partners including distributors, retail chains, and independent resellers, offering logistics, retail partnerships, and after-sales services. Their market position is strong within Estonia and the wider Baltic states. Technically, the website is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, but lacks published security policies and comprehensive privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security disclosures.

The website seo.com.au is currently a parked domain with minimal content indicating it is available for purchase or joint venture. There is no active business operation or service offering visible on the site. The primary contact method is a single email address. The technical infrastructure includes use of Google Tag Manager, Google Analytics, and Facebook Pixel for tracking, hosted on AWS DNS servers. However, the site lacks security headers, DNSSEC, and visible HTTPS confirmation, which reduces its security posture. Privacy compliance is poor, with no privacy or cookie policies present despite extensive tracking scripts. Overall, the site is low in content quality and business credibility, reflecting its parked status rather than an operational business.

S

Suomen Terveystalo Oy

terveystalo.com

69

Terveystalo is a prominent Finnish healthcare organization offering a wide range of health and wellbeing services across more than 300 locations in Finland, including comprehensive 24/7 remote healthcare services. The website is professionally designed with clear navigation and mobile optimization, targeting Finnish residents seeking accessible healthcare solutions. The business model focuses on both physical and digital healthcare delivery, positioning Terveystalo as a large-scale healthcare provider in the Finnish market. Structured data and contact information reinforce the company's legitimacy and customer service orientation. Technically, the website employs modern JavaScript frameworks, likely React, and integrates advanced analytics and marketing tools such as Piwik Pro, VWO, and Sleeknote. Cookie consent management is robust and GDPR-compliant, with detailed cookie declarations and user controls. Hosting and security infrastructure appear solid, likely leveraging Cloudflare services, with HTTPS enforced and secure cookie practices in place. Security posture is strong with good privacy compliance, though explicit security headers and a public security policy or vulnerability disclosure are absent. No WAF or blocking mechanisms were detected, allowing full content access. The lack of WHOIS registration data slightly reduces trust but does not undermine the overall legitimacy given the professional web presence and compliance indicators. Overall, Terveystalo's website demonstrates a mature digital infrastructure supporting its healthcare services, with strong privacy and security practices. Strategic improvements could include publishing explicit security policies, enhancing accessibility, and improving domain registration transparency to further strengthen trust and compliance.

J

Just another WordPress site

efa.biz

48

EFA Platform is a specialized financial research database management and publication platform targeting equity, fixed income, and multi-asset analyst teams. The website presents a professional and modern design built on WordPress with the Divi theme, incorporating essential SEO metadata and client trust indicators such as logos and demo requests. Technically, the platform uses standard web technologies including Google reCAPTCHA for form protection, but lacks visible advanced security headers and privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and structure suggest an operational business. Overall, the security posture is moderate with room for improvement in privacy and transparency. Strategic recommendations include adding privacy and cookie policies, improving security headers, and clarifying domain registration details to enhance trust.

M

meedium.ee is available for purchase - Sedo.com

meedium.ee

53

The website is a domain sales landing page hosted on Sedo.com, offering the domain meedium.ee for purchase. Sedo is a recognized domain marketplace platform with a long-established presence since 1998. The page content is minimal, focusing on domain availability and purchase options, targeting domain investors and buyers. Technically, the site uses modern web technologies including JavaScript ES modules and Cloudflare DNS services, with HTTPS enabled and a clientTransferProhibited domain status enhancing security. However, the absence of privacy and terms of service policies, as well as lack of direct contact information, limits the site's compliance and business credibility. Security posture is good with HTTPS and Cloudflare DNS, but DNSSEC is not enabled. Overall, the site is functional for its purpose but lacks comprehensive compliance and business transparency documentation.

F

Forlle'd

forlle-d.com

54

Forlle'd appears to be a skincare brand with a website built on modern JavaScript frameworks such as Nuxt.js and Vue.js. The site includes product showcases and professional/scientific content related to skincare. The technical infrastructure is moderately modern with Google Analytics and Tag Manager integrated for tracking. However, the website lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain is well-established, registered since 2004 with a reputable registrar, indicating business stability. Security posture is weak due to missing headers and lack of explicit security policies. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

D

Devtailor

devtailor.com

59

Devtailor is a technology company specializing in turnkey software development services and white label products such as license plate recognition, facial recognition, and tvOS applications. Founded in 2015, the company targets businesses seeking scalable software solutions and innovative technology products. Their market position is that of a niche provider with a focus on quality and specialized offerings. Technically, the website is built on Angular 13 with server-side prerendering, uses modern tracking and analytics tools, and is hosted likely on AWS infrastructure. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks published security policies, security headers, and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no privacy policy or terms of service pages. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

T

Thulema

thulema.ee

39

Thulema is a well-established Estonian company specializing in the manufacturing and retail of ergonomic and modern office and public furniture. The company positions itself as a leading brand in Estonia, emphasizing human-friendly materials and innovative Nordic design. Their website reflects a medium-sized business with a clear focus on sustainability, as evidenced by their published carbon footprint report. The target audience includes businesses and institutions seeking quality workplace solutions. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and SEO optimization. Security posture is solid with HTTPS and nonce usage, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic, with no visible cookie consent mechanism or GDPR-specific disclosures. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

A

AKU Collective OÜ

aku.co

40

AKU Collective OÜ is a small, established design studio based in Tallinn, Estonia, specializing in branding, strategy, and creative solutions across various media. Founded in 2012, the company serves clients in culture, government, music, and other sectors, with a strong portfolio and multiple design awards. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and Tag Manager for tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is privacy protected but legitimate, with no suspicious patterns.

E

Ellex Raidla Advokaadiburoo OU

raidlaellex.ee

58

Ellex is a leading Baltic law firm with over 30 years of experience and a team of 250+ professionals, offering a wide range of legal services across multiple sectors including banking, energy, technology, real estate, and healthcare. The firm operates regionally with offices in Estonia, Latvia, and Lithuania, and holds international recognition and awards. The website is built on WordPress with modern SEO and analytics tools, featuring a comprehensive cookie consent mechanism and multi-language support. Security posture is strong with HTTPS enforcement and domain transfer protection, though some security headers could be improved and no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

KV.EE is a leading Estonian real estate portal offering a wide range of property listings including apartments, houses, land, and commercial spaces for sale and rent. The website targets Estonian property buyers, sellers, and renters, positioning itself as the first and foremost real estate portal in Estonia. The business model revolves around providing an online marketplace and listing service for real estate, supported by RSS feeds and categorized property types. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, and uses popular fonts and icon libraries. The design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible advanced frameworks or CMS identification and shows moderate performance.

P

Proact IT Group AB

proact.ee

82

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data center modernization, cybersecurity, and managed services. The company operates across 12 countries in Europe and North America, targeting medium to large enterprises seeking advanced IT infrastructure solutions. Their website reflects a mature digital presence with comprehensive service offerings and investor relations transparency. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web standards and good performance practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve transparency around vulnerability disclosure and incident response. Overall, Proact demonstrates a high level of professionalism and trustworthiness, consistent with its market position as a major IT services provider.

E

Eesti Kirjandusmuuseum

kirmus.ee

55

Eesti Kirjandusmuuseum is a well-established Estonian national scientific and cultural institution focused on managing important archives related to cultural history and folklore. The website serves a diverse audience including researchers, students, cultural enthusiasts, and the general public by providing access to archives, scientific projects, educational programs, exhibitions, and an online store. The institution holds a strong market position as a central cultural memory organization in Estonia. Technically, the website is built on Drupal 8 with modern libraries and tools, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and anonymized analytics, though security headers and explicit security policies could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

M

Mellow

mellow.ee

43

Mellow is a small creative company based in Estonia specializing in video production, photography, animation, visual effects, and graphic design. The website presents a minimalistic portfolio and contact information, targeting clients seeking creative media services. The business appears to be a small niche player with a straightforward service offering and a modest online presence. Technically, the website is built with basic HTML and CSS without any detected CMS or advanced frameworks. Hosting is provided by Zone Media OÜ, an Estonian registrar and hosting provider. The site lacks HTTPS on some assets, and no security headers or modern web technologies are detected. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. There is no evidence of privacy or cookie policies, no incident response or security policies, and no vulnerability disclosure mechanisms. The absence of HTTPS on all content and lack of security headers represent notable risks. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website scores moderately low on security and privacy compliance but maintains basic business credibility and content relevance. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

A

Andevis

andevis.ee

34

Andevis is an Estonian software development company specializing in integrated HR, payroll, and personnel management solutions, notably the Virosoft HR system and self-service portals. The company targets Estonian businesses seeking comprehensive personnel management software tailored to their organizational rules and accounting needs. The website reflects a professional and consistent brand presence with clear contact information and multiple service offerings. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Google reCAPTCHA v2 for form security. Performance and mobile optimization are adequate, though accessibility and SEO could be enhanced. Security posture is moderate with HTTPS enforced and anti-spam measures in place, but lacks important security headers and explicit privacy or cookie policies, indicating compliance gaps. The domain is well-established since 2010 with consistent WHOIS data, supporting business legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

Evex.ge is the official website of Evex Clinics, a large healthcare network in Georgia established in 2014. The company provides a wide range of medical services including state healthcare programs, private insurance, and specialist consultations. The website is professionally designed, mobile-optimized, and offers clear navigation to services, doctors, clinics, and booking options. The business holds ISO 9001:2015 and TÜV AUSTRIA certifications, indicating a commitment to quality standards. Technically, the site uses modern JavaScript libraries and analytics tools, with HTTPS enabled and good SSL configuration. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security headers are not detected, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Pure Norwegian Seafood

pns.no

42

Pure Norwegian Seafood is a Norwegian family-owned seafood producer specializing in high-quality salmon products. The company emphasizes sustainability, quality assurance, and traceability, aiming to be a leading supplier for premium seafood markets. Their website reflects a professional and consistent brand image focused on natural purity and product excellence. Technically, the site uses modern tracking tools such as Google Analytics and Google Tag Manager, with images optimized via Imgix CDN. The site is mobile-optimized and SEO-friendly, though no explicit CMS or hosting provider is identified. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and detailed security policies. WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and justified for this business type. Overall, the website presents a trustworthy and credible business presence with room for improvement in security transparency and contact information availability.

Y

YIT Eesti

yit.ee

73

YIT Eesti is a prominent real estate and infrastructure development company operating in Estonia, specializing in residential apartments, commercial properties, and complex infrastructure projects. The website reflects a mature digital presence with a professional design, clear business focus, and comprehensive cookie consent management aligned with GDPR requirements. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and Azure Application Insights for monitoring, indicating a well-maintained and performance-conscious platform. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a high level of professionalism and compliance, with room for improvement in transparency around terms of service and direct contact information.

B

Bestnet Group

tikitreiler.com

48

Bestnet Group is a medium-sized manufacturing company based in Estonia, specializing in metal industry services including trailer development, subcontracted metalworking, and environmentally friendly surface coatings. The company positions itself as a reliable partner with over 30 years of experience and significant factory space in Scandinavia and the Baltics. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, Bootstrap, and Google Analytics for tracking. Structured data and SEO practices are well implemented, enhancing their digital presence. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no cookie consent mechanism despite active analytics tracking. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

W

Wunderkraut

wunder.io

76

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

N

Nameshift.com

heyday.eu

50

Nameshift.com operates as a domain name marketplace specializing in secure and efficient domain transfers using an escrow service. The platform targets individuals and businesses seeking to purchase domain names with minimal risk, offering free assistance and VAT invoicing. The business model relies on seller commissions, providing a fee-free experience for buyers. The website content is minimal but consistent with the business purpose, emphasizing safety, speed, and no additional fees. Technically, the website is built using modern web technologies, notably the SvelteKit framework, and leverages CDN-hosted assets for performance. The site is mobile-optimized with basic accessibility and SEO features. However, it lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No vulnerabilities or malicious scripts were detected. The WHOIS data is consistent and transparent, with no privacy protection masking the registrant, enhancing trustworthiness. However, the absence of privacy and cookie policies, as well as incident response contacts, indicates room for improvement in compliance and security posture. Overall, the website presents a moderate risk profile with a solid business foundation but requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.