Security Directory

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

P

Pepe Jeans London

pepejeans.com

65

Pepe Jeans London is a well-established fashion retail brand offering a wide range of apparel and accessories for women, men, and children. The website serves as an official e-commerce platform targeting international consumers interested in contemporary fashion trends. The brand maintains a consistent and professional online presence with active social media channels and a clear focus on retail sales. Technically, the website is built on Salesforce Commerce Cloud, leveraging modern JavaScript libraries such as jQuery, and integrates multiple third-party services for marketing, analytics, and payment processing, including Monetate, Cookiebot, FullStory, Global-e, and PayPal. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced further. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The WHOIS data is privacy protected, which is typical for commercial retail domains, and no suspicious indicators were found. Overall, the website presents a solid digital infrastructure with moderate to good security posture and privacy compliance, suitable for its business model and market position.

The website at hashtago.com/lander is currently a minimal placeholder or parking page with very limited content and no substantive business information. The domain is registered since 2013 with GoDaddy.com, LLC and has standard domain status protections but lacks DNSSEC and advanced security configurations. The technical infrastructure includes basic JavaScript and a parking-lander framework with Google Adsense advertising. There are no privacy, cookie, or terms of service policies present, nor any contact or security incident response information. The security posture is weak with no security headers detected and no evidence of HTTPS enforcement in the provided content. Overall, the site lacks professionalism, trust indicators, and compliance features, resulting in a low trust and security score.

T

Tallinna Tehnikaülikool (TalTech)

gi.ee

64

Tallinna Tehnikaülikool's Geoloogia instituut is a reputable academic unit specializing in geology, mineral resources, and mining engineering. It serves as a key educational and research hub within Estonia, offering undergraduate, graduate, and doctoral programs, alongside active research groups and modern laboratories. The institute maintains a strong presence in the academic community through events, publications, and collaborations. Technically, the website employs modern frameworks such as Next.js and integrates multiple analytics and marketing tools while ensuring GDPR-compliant cookie consent. Security posture is strong with HTTPS enforcement and bot protection mechanisms, though explicit security policies and incident response information are not publicly detailed. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence aligned with its institutional mission.

G

GH Imaging

ghimaging.com

55

GH Imaging is a medium-sized manufacturing company specializing in large format digital printing products such as custom decals, vehicle wraps, banners, and rigid prints. The company operates under the Graphics House family umbrella, with multiple related subsidiaries supporting various product lines. The website is professionally designed using WordPress with Elementor and OceanWP theme, providing a good user experience and clear navigation. Contact information including phone number and physical address is prominently displayed, supporting business credibility. However, the absence of WHOIS data raises concerns about domain registration legitimacy. The website uses HTTPS and includes anti-spam and tracking technologies but lacks explicit privacy and cookie policies, which impacts privacy compliance scores.

M

Mipro Oy

mipro.fi

66

Mipro Oy is a Finnish specialist company focused on railway and industrial systems, with a history dating back to 1980. The company provides advanced safety and operational solutions for railway traffic, metro systems, water and energy supply, and industrial sectors. With headquarters in Mikkeli and offices in Espoo, Oulu, and Tallinn, Mipro serves a broad international client base including government agencies and utility companies. The website reflects a mature business with clear market positioning and a strong emphasis on safety and technology expertise. Technically, the site is built on WordPress with modern plugins and includes security measures such as HTTPS and hCaptcha for form protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is good but could be enhanced by adding security headers and publishing explicit security policies. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy business presence.

T

Tallinna Linnateater

linnateater.ee

43

Tallinna Linnateater operates as a cultural institution providing theatrical performances and related visitor services primarily to the Estonian audience. The website serves as an official portal for event information, ticket sales, and theatre news, positioning itself as a reputable and established player in the local media and cultural sector. The domain has been registered since 2010, indicating a stable presence in the market. The site content is professionally presented with good navigation and mobile optimization, supporting a positive user experience.

E

Eklips Digital

eklips.se

57

Eklips Digital is a specialized provider of subscription-based corporate websites, targeting listed and non-listed companies primarily in the Nordic region. Founded in 2011, the company offers a Corporate Website as a Service (CWaaS) platform that includes web development, design, branding, hosting, maintenance, security, and support services. Their market position is strengthened by serving 10% of Nasdaq Stockholm Main Market companies and delivering over 300 websites with a 99.9% uptime guarantee. The website is professionally designed using modern technologies such as Next.js and React, reflecting a mature digital infrastructure. However, the absence of WHOIS data for the domain www.eklips.se raises concerns about domain registration legitimacy, which should be verified. Security posture is moderate with no visible vulnerabilities but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional business presence but requires improvements in compliance and domain legitimacy verification.

I

Islamic Azad University | Dubai Branch

iau.ae

49

Islamic Azad University Dubai Branch is an educational institution offering fourteen quality and cost-effective degree programs with English as the medium of instruction. The university aligns its curricula with nationally approved standards, targeting students in Dubai and the UAE region. The website is built on a WordPress platform using Elementor, indicating a modern and maintainable technical infrastructure. SEO practices are implemented, and the site is mobile optimized with good user experience. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and incident response information. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional and credible but would benefit from enhanced privacy and security disclosures.

R

RTT AS

rtt.ee

45

RTT AS is an established Estonian company specializing in retail technology and office supplies, with over 28 years of experience. The company offers a broad range of products including cash registers, printers, copiers, and consumables, alongside installation, maintenance, and training services. Their market position is that of a trusted local provider catering primarily to business customers in Estonia. The website reflects a mature e-commerce platform built on WordPress and WooCommerce, featuring multilingual support and a comprehensive product catalog. Technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and CookieYes for consent management. Security posture is solid with HTTPS enforced and reCAPTCHA integration, although explicit security policies and incident response contacts are not published. Privacy compliance is supported by a detailed cookie consent mechanism, but lacks a visible privacy policy page. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in formal policy disclosures and security header implementation.

C

Cryo Transport

cryo-transport.com

55

Cryo Transport is a specialized courier service focused on the transport of cryopreserved human biological materials such as sperm, eggs, embryos, and stem cells from clinics or cryobanks to IVF clinics. The company operates in a niche segment of medical logistics, serving fertility and reproductive medicine providers. The website is built on WordPress and employs modern digital tools including Cookiebot for cookie consent, Google Tag Manager for analytics, and Tawk.to for live chat support. The technical infrastructure is standard for small to medium-sized service providers, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is supported by cookie consent mechanisms and links to third-party privacy policies, but the site lacks an explicit privacy policy and terms of service pages. Overall, the website presents a professional and trustworthy image consistent with its business focus.

Advoco Konsultandid OÜ is a small Estonian company founded in 2010, providing professional and personalized accounting services primarily targeting small and medium-sized enterprises in Tallinn. The website reflects a clear business focus on flexible and reliable bookkeeping services, with content tailored to the local market. The company maintains a consistent brand presence and provides clear contact information, enhancing business credibility. Technically, the website is built on the Voog CMS platform, utilizing common web technologies such as jQuery and lazy loading scripts. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO is implemented at a basic level with appropriate meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS encryption but lacks important security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or data collection mechanisms are detected on the homepage, reducing immediate data protection risks. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen trust and regulatory adherence.

S

Stockholm Independent Art Fair

supermarketartfair.com

52

Stockholm Independent Art Fair operates the Supermarket art fair, a niche cultural event focused on artist-run initiatives in Stockholm. The website provides comprehensive information about the event, including exhibitor details, tickets, talks, and publications. The business targets artists, exhibitors, and art enthusiasts, positioning itself as a key platform for independent art in the region. Technically, the site is built on WordPress with Elementor and uses modern frontend libraries, ensuring good mobile optimization and SEO. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

Addenda OÜ is an Estonian-based professional training and consulting company established in 2010. The company offers a wide range of training courses, including construction, occupational safety, accounting, and legal topics, both in-person and via an e-learning platform called Addenda e-akadeemia. The website targets Estonian professionals and organizations seeking continuing education and compliance training. The business maintains a stable market position with a comprehensive course catalog and partnerships with local organizations. Technically, the website uses a custom CMS with legacy JavaScript libraries such as jQuery 1.11.1, and integrates common analytics and advertising tools like Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks modern security headers and updated libraries. Security posture is moderate with HTTPS enabled but missing explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

A

Arme Oy

arme.fi

40

Arme Oy is a well-established Finnish industrial service and contracting company specializing in insulation and scaffolding services for various heavy industries including oil and gas, petrochemical, energy, and pulp and paper sectors. The company offers flexible service models ranging from standalone services to turnkey project deliveries and maintenance contracts, positioning itself as a leading provider in the Finnish market with international reach. The website reflects a professional digital presence built on WordPress with modern SEO and privacy compliance features, including a comprehensive cookie consent mechanism and detailed privacy policies. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response contacts could enhance resilience. Overall, Arme Oy demonstrates a mature business and digital infrastructure with trustworthy domain registration and consistent branding.

F

Fort Aero

fort.aero

51

Fort Aero is a specialized aviation service provider focused on corporate jet management, sales, acquisition, maintenance, and charter services. Established since 1997, the company positions itself as a trusted and experienced player in the business aviation sector, primarily serving corporate jet owners and operators. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to privacy protection, which is common for this business type but slightly reduces trust. Overall, Fort Aero presents a credible and professional online presence with room for improvement in privacy and security transparency.

H

Hansabuss AS

hansabuss.ee

41

Hansabuss AS is an established Estonian transportation company specializing in bus services including charter, line routes, employee transport, school transport, and city tours. With over 30 years of experience, the company positions itself as a reliable and caring bus partner in Estonia and neighboring regions. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the site is built on WordPress with modern plugins and SEO tools, offering a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and spam protection on forms, though explicit security policies and incident response contacts are not published. Privacy compliance is basic with cookie consent mechanisms and privacy policy presence, but lacks detailed GDPR documentation or data protection officer contact. Overall, the website and domain registration data indicate a legitimate and professional business with moderate to high trustworthiness.

G

GDPR Register

gdprregister.eu

53

GDPR Register is a specialized technology company providing GDPR compliance software tools designed to streamline privacy management for organizations. The company offers a SaaS platform that supports data mapping, records of processing activities, data breach registers, contract lifecycle management, and reporting tools. Their market position is that of an established GDPR compliance software provider with a focus on privacy teams and Data Protection Officers, primarily serving clients in the EU and UK regions. The website demonstrates a mature digital presence with multilingual support and integration of modern marketing and analytics technologies. Technically, the website is built on WordPress using Elementor, with a modern tech stack including jQuery, FontAwesome, and Klaviyo for marketing automation. The site is well-optimized for SEO and mobile responsiveness, with good performance and accessibility features. Security posture is strong, with HTTPS enforced and multiple security headers present. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly visible vulnerability disclosure policy and explicit incident response contact details. Overall, GDPR Register presents a professional, trustworthy, and secure online presence consistent with its business focus on data privacy compliance. The domain WHOIS data is privacy protected, which aligns with the nature of the business. The site integrates trusted client logos and provides comprehensive privacy and cookie policies, reinforcing its compliance credentials. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and improving accessibility compliance to further strengthen trust and security posture.

O

olgatessari

olgatessari.com

47

Olga Tessari is a small Brazilian business focused on personal development, psychology, and behavioral consulting. The website provides guidance and information aimed at helping individuals improve themselves and achieve happiness across various life areas. The business operates primarily through content dissemination and consulting services, targeting individuals interested in self-improvement. The site is built on WordPress using common plugins and themes, indicating a moderate level of digital maturity. The technical infrastructure supports good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. The absence of privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable, which raises some trust concerns, but the website content and social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and improving incident response transparency.

Q

Qminder

qminderapp.com

67

Qminder operates as a SaaS platform specializing in queue management, appointment scheduling, and service analytics for businesses with physical customer service locations. Their market position is strong, serving a diverse range of sectors including healthcare, government, retail, and banking. The website presents a professional and modern digital presence with clear navigation and mobile optimization, reflecting a mature technical infrastructure. The technology stack includes JavaScript frameworks, HubSpot marketing and analytics tools, and cookie consent solutions, indicating a well-integrated digital marketing and analytics environment. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published, representing an area for improvement. The absence of WHOIS domain registration data reduces transparency and slightly impacts trustworthiness. Overall, Qminder demonstrates a solid business and technical foundation with room to enhance security communication and domain registration transparency.

B

broadline.eu is available for purchase - Sedo.com

broadline.eu

52

The analyzed website is a domain sales landing page hosted on Sedo.com, a well-known domain marketplace platform. The page advertises the availability of the domain broadline.eu for purchase. The business model revolves around domain brokerage and marketplace services targeting domain investors and buyers. The website content is minimal, focusing primarily on domain sale information without detailed business or contact information. Technically, the site uses modern web technologies including JavaScript modules and CSS3, hosted via a reputable registrar and Cloudflare DNS, ensuring good performance and security basics. However, the site lacks privacy and cookie policies, contact details, and security policy disclosures, which impacts its privacy compliance and business credibility scores. The WHOIS data shows the domain is long-registered since 1998 with a reputable registrar and has protective domain status, indicating legitimacy. Overall, the site is functional for its purpose but lacks comprehensive compliance and business transparency features.

The website bkry.org is a personal or small-scale blog site operated by an individual named Adam Saynuk. The site primarily serves as a platform for philosophical blog content with minimal additional business or commercial services. The domain is registered since 2011 under the organization 'studio_saynuk' in the US, consistent with the website owner’s identity. The site uses WordPress CMS with standard plugins and minimal customization. Technical infrastructure is basic but functional, with HTTPS enabled and moderate performance. However, the site lacks advanced security measures such as DNSSEC and security headers, and no privacy or cookie policies are present, indicating limited compliance with privacy regulations. Contact information is not explicitly provided, reducing business credibility and user trust.

Z

Zone Media OÜ

depile.ee

51

Depile.ee is an established Estonian e-commerce website specializing in beauty, health, and wellness products. The site offers a wide range of branded products including hair care, nail care, body care, massage items, and related accessories. The business targets both consumers and professionals in the beauty sector, primarily serving the Estonian market. The company behind the domain is Zone Media OÜ, with a domain age dating back to 2010, indicating a mature online presence. Technically, the website is built on Magento 2, leveraging modern web technologies such as RequireJS, jQuery, and FontAwesome. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site demonstrates good mobile optimization and SEO practices, with a clear navigation structure and responsive design. Performance is moderate, with room for optimization. From a security perspective, the website enforces HTTPS and includes several security headers, contributing to a good security posture. Cookie consent is implemented with a detailed mechanism allowing users to manage preferences, which aligns with GDPR requirements. However, the absence of a publicly accessible privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or exposed sensitive data were detected. Overall, Depile.ee presents a professional and trustworthy e-commerce platform with solid technical foundations and security practices. To enhance compliance and trust, it is recommended to publish comprehensive privacy and terms of service documents and improve accessibility features. Regular security audits and updates to third-party scripts will further strengthen the site's security posture.

C

Cedo Ltd

cedo.com

45

Cedo Ltd is a well-established manufacturer and supplier of household essentials, operating for over 60 years with a significant presence in Europe. The company focuses on producing goods such as refuse sacks, biodegradable bin liners, aluminium foil, freezer bags, cling film, and baking paper, serving both leading retailers and B2B operators. Sustainability and recycling are core to their business strategy, with a strong emphasis on reducing plastic waste and promoting circular economy principles. Their market position is supported by multiple production sites and a large workforce, reflecting a mature and stable business model. Technically, the website is built on a modern CMS platform (OctoberCMS) with standard web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and presents a professional design with good user experience. However, some technical improvements could enhance performance and accessibility further. The hosting provider is inferred from DNS records, and the domain is secured with HTTPS, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and domain registration protections but lacks advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is published, and no contact information for security issues is provided. Privacy compliance is partially addressed with a comprehensive privacy policy available as a PDF, but no cookie consent mechanism is present. The absence of visible contact details on the site may impact user trust and compliance. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced security practices and improved privacy compliance mechanisms. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, publishing security policies, and providing clear contact information to improve trust and compliance.

K

Kolmeks Group

kolmeks.fi

48

Kolmeks Group is a Finnish family-owned industrial company established in 1945, specializing in high-quality pump technology and contract manufacturing services. With operations spanning Finland, Estonia, China, and India, Kolmeks serves a diverse industrial clientele, focusing on durable products and long-term customer relationships. The website reflects a mature digital presence built on WordPress with WooCommerce and Yoast SEO, supporting both Finnish and English languages and providing comprehensive information about products, services, and corporate responsibility. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled, representing a minor security gap. No blocking or WAF challenges were detected, allowing full content accessibility.

B

Baltresto

baltresto.com

52

Baltresto is a specialized manufacturer and retailer of high-quality wooden and fiberglass hot tubs and outdoor saunas, operating primarily in the EU market since 2008. The company offers a broad product range including wood-fired hot tubs, fiberglass hot tubs, hot tub liners, and sauna accessories, targeting consumers and businesses seeking durable and affordable private garden spa solutions. Their market position is supported by direct manufacturing and a 15+ year history, with localized partner sites in multiple European countries enhancing regional reach. Technically, the website is built on a mature WordPress and WooCommerce platform, utilizing popular plugins such as WPBakery Page Builder and WP Rocket for performance optimization. The site integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, Yandex Metrika, and Trustpilot reviews, reflecting a moderate to advanced digital maturity. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized domain changes. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No explicit security policies or incident response contacts are published, which could be enhanced to improve trust and compliance. Privacy compliance is basic with cookie consent implemented but no dedicated privacy policy page clearly identified. Overall, Baltresto presents a credible and professional online presence with solid business credibility and moderate security posture. Strategic improvements in security headers, DNSSEC, and privacy documentation would strengthen their security and compliance stance, supporting continued growth and customer trust.

ProPXLS is a small-scale business with an online presence focused on simplicity and direct contact. The website content is minimal, providing only basic contact information without detailed business descriptions or service offerings. The technical infrastructure relies on legacy technologies such as jQuery 1.8 and Google Analytics for user tracking, indicating a need for modernization. Security posture is moderate but impacted by the use of outdated libraries and lack of security headers. Privacy compliance is poor due to absence of privacy and cookie policies, and no GDPR compliance indicators are present. Overall, the website is functional but lacks comprehensive content, security best practices, and compliance measures.

The American Chamber of Commerce in Estonia (AmCham Estonia) is a well-established non-profit organization founded in 2010 that serves as a key platform for business professionals and investors from 25 countries to foster a competitive business climate in Estonia. The organization offers membership-based services including advocacy, networking, events, and business visibility. The website reflects a professional and consistent brand image with comprehensive content about membership, events, and partners. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

T

The University of Alabama

ua.edu

66

The University of Alabama is a prominent public educational institution offering a broad spectrum of undergraduate and graduate programs. The website reflects a strong brand identity consistent with a major university, targeting prospective students, current students, faculty, staff, and alumni. The site provides comprehensive academic information, campus life resources, and news updates, supporting its role as a leading university in the region. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, New Relic for performance monitoring, and various font and icon libraries. The site demonstrates excellent performance, mobile optimization, and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs monitoring tools, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security transparency. The domain WHOIS data is unavailable due to .edu domain restrictions but the site’s content and external references strongly affirm its legitimacy.

N

Nordic Hunting Club

nordichuntingclub.com

55

Nordic Hunting Club is a specialized outfitter offering guided hunting experiences in Estonia, focusing on big game and migratory birds. The company positions itself as a high-quality service provider with over 15 years of experience, targeting hunters interested in trophy hunting in Northern Europe. The website is professionally designed using WordPress and the Avada theme, with SEO optimized via Yoast plugin and enriched with structured data. The technical infrastructure includes modern JavaScript libraries and analytics tools, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, raising concerns about domain legitimacy and registration consistency. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency.

K

Kuusakoski Oy

kuusakoski.com

77

Kuusakoski Oy is a well-established company specializing in expert-level recycling services, focusing on restoring value to waste materials by collecting, processing, and producing new raw materials. With a history spanning over 100 years, Kuusakoski positions itself as a pioneer in the circular economy, serving industrial and business customers worldwide. Their key services include material processing, sale of recycled raw materials, data security and reuse, logistics, analysis and research, and local service offerings. The company emphasizes sustainability and holds certifications such as EcoVadis Silver. Technically, the website employs modern JavaScript libraries and tracking tools including Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, explicit security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security maturity. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website provides clear contact information, including official company emails and phone numbers, and maintains active social media profiles, enhancing trustworthiness. Overall, Kuusakoski demonstrates a mature digital presence aligned with its business goals, though it should address security header implementation and publish incident response policies to strengthen its security posture and compliance stance.

C

CBS Pakistan

cbspakistan.com

41

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

Stimscape OÜ is a small specialized service provider operating primarily in Estonia and Finland, offering digital imaging technician (DIT) services and technical solutions for film and TV production sets and studios. Their key offerings include on-set data management, LTO archiving, and IT solutions tailored to the media production industry. The website presents a professional image with clear navigation, client logos, and references to notable film and TV projects, positioning the company as a niche technical partner in the media sector. Technically, the website uses a basic but functional technology stack including jQuery, Google Fonts, Font Awesome, and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. No CMS or hosting provider details are evident. SEO is basic with meta keywords and description present but no advanced structured data or Open Graph tags. From a security perspective, the site lacks critical security headers and does not provide privacy or cookie policies, which impacts GDPR compliance. No forms or user input fields reduce attack surface, but the absence of incident response contacts and security policies indicates a low maturity in security governance. The WHOIS data aligns well with the business claims, showing a consistent registrant in Estonia, supporting domain legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security posture, and more comprehensive contact and policy disclosures to increase trust and reduce risk.

V

Valio

valio.fi

70

Valio is a leading Finnish dairy and food company recognized for its innovation in the food sector. The website serves as a comprehensive platform showcasing their products, recipes, and corporate information targeted primarily at Finnish consumers. The company maintains a strong market position as an innovative food producer with a large operational scale. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO and Google Tag Manager, complemented by a cookie consent mechanism via OneTrust and an AI-powered chatbot from Boost.ai. The site demonstrates good mobile optimization, accessibility, and performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although explicit security policies and incident response information are not publicly found. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business identity.

A

Afternic (GoDaddy Operating Company, LLC)

ryapolov.com

70

The website ryapolov.com is a domain sales landing page hosted on the Afternic platform, a domain aftermarket service owned by GoDaddy Operating Company, LLC. It offers the domain ryapolov.com for sale with options to buy outright or lease to own. The site targets domain buyers including businesses and individuals seeking premium domain names. The business model is focused on domain brokerage and sales, leveraging GoDaddy's extensive infrastructure and brand recognition. The platform provides contact forms and phone support to facilitate domain price inquiries and transactions. Technically, the site is built using modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure. It employs HTTPS with strong security headers and integrates third-party services such as Klarna for payments and Trustpilot for reputation. The site is optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital presence. From a security perspective, the website demonstrates strong posture with enforced HTTPS, secure forms protected by reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain reduces transparency but is likely due to privacy protection or query limitations. Overall, the site is legitimate, professional, and secure, suitable for its domain sales purpose. The overall risk assessment is low, with recommendations to improve transparency by publishing security policies and incident response details, enhancing accessibility, and maintaining regular audits of third-party scripts. These steps will further strengthen trust and compliance in the competitive domain aftermarket space.

R

Register OÜ

ir.ee

62

Register OÜ operates the Inforegister website, a platform providing credit ratings, beneficial ownership information, financial forecasts, and business risk assessments primarily targeting Estonian businesses and individuals. The company positions itself as a trusted local provider of business and financial data services, leveraging a subscription-based model to deliver valuable insights. The website supports multiple languages and offers a user-friendly search interface to access company and individual data. Technically, the site is built on WordPress with modern integrations such as Google Site Kit for analytics and OAuth for authentication, indicating a moderate level of digital maturity. The site is mobile-optimized and employs HTTPS with a valid SSL certificate, ensuring secure communications. Security posture is solid with cookie consent mechanisms and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a professional and trustworthy online presence with good compliance to privacy regulations and a clear business focus.

H

Hedgehog OÜ

hedgehog.ee

47

Hedgehog OÜ is a specialized Estonian electronics engineering bureau established in 2011, focusing on economical and reliable system design, prototyping, and manufacturing. Their expertise spans analog and digital circuit design, PCB layout, and embedded software development, serving startups, IT, and electronics companies as well as academic institutions. The website reflects a professional and consistent brand image with detailed team contacts and service descriptions. Technically, the site uses a CMS (Voog), jQuery, Google reCAPTCHA for form security, and Facebook SDK for social integration. While HTTPS is enabled and forms are protected with reCAPTCHA, the site lacks explicit privacy and cookie policies and security headers, which are areas for improvement. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the site is functional, trustworthy, and professionally presented but could enhance compliance and security posture.

E

Elkdata OÜ

remedyway.ee

45

Wiru Mill operates an e-commerce website specializing in organic and specialty food products such as specialty breads, organic olive oil, and buckwheat products. The business is relatively new, established in 2023, and targets consumers interested in healthy and organic food options. The website is built on WordPress with WooCommerce, leveraging common plugins and Google services for analytics and advertising. The technical infrastructure is standard for small to medium e-commerce sites, hosted by Elkdata OÜ, which is also the domain registrar, indicating consistency and legitimacy. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies. The absence of contact information and compliance documents reduces trust and privacy compliance scores.

G

GBC Team

gbc-team.com

40

GBC Team is a specialized technology consulting company focused on Salesforce CRM platform implementation, training, and maintenance. Established in 2016, the company positions itself as a certified Salesforce Consulting Partner, targeting local and international corporations seeking CRM integration and support services. Their website reflects a professional and consistent brand image with clear service offerings centered on Salesforce solutions. The technical infrastructure is based on Joomla! CMS with modern JavaScript libraries and Yandex Metrika analytics, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC.

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

T

Taylor Corporation

taylorcommunications.com

70

Taylor Corporation operates a professional and comprehensive website offering commercial printing, marketing, packaging, labeling, and supply chain services primarily targeting business clients. The site is well-branded and positioned as an enterprise-level B2B service provider with a broad range of solutions. Technically, the website leverages HubSpot CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not publicly visible. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. WHOIS data is unavailable or not returned for the queried domain, which raises some questions but the professional presentation and alignment with known Taylor Corporation branding mitigate concerns. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for its enterprise audience.

A

AS G4S Eesti

g4s.ee

68

AS G4S Eesti is a leading security services provider in Estonia, operating as part of the international G4S group. The company specializes in a broad range of security solutions including home security, video surveillance, manned guarding, fire safety, event security, and training services. Their website reflects a mature and professional organization with a strong market position and a comprehensive service portfolio targeting both private individuals and business clients. The company has been established since 2010, with a consistent domain registration and a clear digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with a CMS likely based on Strapi, hosted on reliable infrastructure including AWS and Ultradns. The site is well-optimized for mobile devices, SEO, and accessibility, providing a positive user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates trusted third-party services like LiveChat and Cookiebot. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations such as GDPR.

C

COMBICON OÜ

combicon.ee

50

COMBICON OÜ is a small Estonian company specializing in the design, construction, and development of production, warehouse, and commercial buildings, including additions and real estate acquisition assistance. The company targets local businesses and individuals seeking construction and real estate services, positioning itself as a professional local player with a clear focus on project-based services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Voog CMS, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy but could improve transparency and compliance.

B

Brand Effect

brandeffect.com

59

Brand Effect is a small US-based holistic design, marketing, and strategy firm established in 2001. The company targets startups, businesses, brands, and marketers seeking creative and data-driven digital solutions. Their website is built on the Squarespace platform, leveraging modern web technologies and hosting infrastructure with Cloudflare DNS. The site demonstrates good design quality, mobile optimization, and basic accessibility, but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. Contact information is limited to a contact page and Instagram social media link, with no direct emails or phone numbers visible. Overall, the website is professional and trustworthy but could improve privacy compliance and transparency.

V

Viru Elektrikaubandus

ve.ee

64

Viru Elektrikaubandus is an established Estonian company specializing in the sale of electrical goods, operating both online and through four physical stores across Estonia. The company targets business clients and retail customers seeking quality electrical products. Their website is built on the nopCommerce platform, indicating a mature e-commerce infrastructure. The site employs modern technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and compliance. Security measures such as HTTPS and reCAPTCHA are implemented, contributing to a solid security posture. However, explicit privacy policy and terms of service pages are not detected in the provided content, which may affect compliance and user trust. Overall, the website presents a professional and trustworthy front with room for improvement in privacy transparency and contact information visibility.

O

Oy Flinkenberg Ab

flinkenberg.fi

59

Oy Flinkenberg Ab is a well-established Finnish company founded in 1921, serving industrial, commercial, and public sector clients primarily in Finland. The company specializes in steel products, energy solutions including batteries and solar energy, chemicals for various industries, and electronic components. Their website reflects a mature B2B business model with a focus on professional service and product offerings across multiple sectors. The company maintains a consistent brand presence and active engagement through social media channels.

L

LandCredit AS

landcredit.ee

44

LandCredit AS is an Estonian financial services company specializing in loans secured by agricultural and forestry land. Their website targets farmers, forestry businesses, and renewable energy project developers, offering flexible loan products with faster processing times than traditional banks. The company positions itself as a niche lender contributing to rural development in Estonia. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, and CookieYes for GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact channels and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS and secure form handling, though improvements are recommended in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a mature digital presence with good compliance and business credibility.

S

Speakly

speakly.me

53

Speakly is a modern language learning platform offering online courses in multiple languages such as Spanish, French, and German. The website targets a global audience of language learners and positions itself as a fast and effective learning solution with over a million users. The business model is subscription-based, focusing on delivering educational content through a web and mobile app interface. The company was founded in 2016 and maintains a medium-sized presence in the education sector. Technically, the website uses modern JavaScript frameworks like Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with professional design and clear navigation. Security-wise, the website uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the site is legitimate and professionally maintained but would benefit from enhanced transparency and security practices.

L

Leden Group

ojalagroup.com

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and production of cold roll formed steel profiles. The company is positioned as a leading partner in the Baltic region, offering comprehensive OEM services from design to logistics. It is part of the HANZA Group, which enhances its market presence and operational capabilities. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and Elementor for content management and user experience. Technical infrastructure includes modern JavaScript libraries and consent management tools, indicating a mature digital strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance resilience. Privacy compliance is supported by Usercentrics consent mechanisms, though explicit privacy and security policies could be more comprehensive. Overall, the website and business demonstrate high trustworthiness and professionalism, suitable for industrial clients seeking reliable manufacturing partnerships.