Security Directory

The website terviseamet.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks direct content access. This prevents extraction of meaningful business, contact, or policy information from the site. The domain is registered since 2010 with an Estonian registrar, consistent with the domain's country and likely government affiliation. The technical infrastructure relies on Cloudflare for security and content delivery, indicating a modern approach to protection against automated threats. However, the lack of accessible content limits the ability to assess the website's design, user experience, and compliance with privacy regulations. Security posture is enhanced by Cloudflare's WAF, but no internal security policies or incident response information is visible. Overall, the site appears legitimate but is currently locked behind a security gate, limiting detailed analysis.

M

Moonwalk

moonwalk.ee

46

Moonwalk is an Estonian music agency specializing in artist management, music production, and event promotion. The company represents notable artists such as Stefan, Getter Jaani, Black Velvet, and Mr Happyman, positioning itself as a recognized player in the Estonian music industry. The website reflects a professional and consistent brand image, targeting music fans and industry professionals. Technically, the site is built on Squarespace, leveraging modern web technologies and standard analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS but lacks several important security headers such as HSTS and Content-Security-Policy, which could improve its security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is credible and functional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

L

Likewize

brightstar.com

67

Likewize is a technology service provider focused on offering comprehensive protection and support for technology disruptions. The company positions itself as a reliable partner for consumers and businesses seeking to mitigate technology-related issues. The website is professionally designed using WordPress CMS, enhanced with SEO tools like Yoast, and incorporates modern tracking and consent technologies such as Google Tag Manager and OneTrust. While the site is accessible and well-structured, it lacks explicit privacy and terms of service documentation, as well as direct contact information, which are important for trust and compliance. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content suggests a legitimate business presence. Security posture is generally good with HTTPS and cookie consent, but could be improved by adding security headers and incident response contacts.

I

Indevex

indevex.com

54

Indevex is a small healthcare-focused company specializing in the development of science-based nutritional products, such as NGC®, aimed at supporting health, recovery, and performance. The company positions itself as a niche innovator leveraging clinical research to back its product offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization, targeting health-conscious consumers and athletes. Technically, the site is built on WordPress 6.8.1, utilizing modern technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the domain is legitimate, long-established since 1999, and registered through a reputable registrar without privacy protection, supporting trustworthiness. Strategic improvements in privacy transparency, security headers, and contact information publication are recommended to enhance compliance and user trust.

W

Weekdone

weekdone.com

64

Weekdone is a technology company specializing in SaaS-based OKR (Objectives and Key Results) software designed to help businesses align goals, track progress, and manage performance. The company offers a suite of services including OKR management, weekly progress reporting, project tracking, and continuous performance management. Positioned as a leading provider in the OKR software market, Weekdone targets businesses and teams seeking structured goal-setting and transparent progress reporting tools. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress CMS and leverages modern front-end technologies such as jQuery, Google Analytics, Google Tag Manager, and CookieYes for consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with multiple external resources loaded from reputable domains. The technical infrastructure is supported by GoDaddy as the registrar and hosting provider. From a security perspective, the website enforces HTTPS with excellent SSL configuration and employs a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, it lacks explicit security headers, published security policies, incident response contacts, and vulnerability disclosure mechanisms. No exposed sensitive data or vulnerable libraries were detected in the HTML content. The security posture is solid but could be improved by implementing additional security best practices and transparency measures. Overall, Weekdone presents a trustworthy and professional online presence with a mature domain and consistent business information. The main risks relate to the absence of published privacy and security policies and limited contact information. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility compliance to further strengthen trust and compliance.

R

Recticel

recticel.com

61

Recticel is a well-established insulation company focused on sustainable thermal and acoustic solutions, targeting investors, customers, and partners in the energy sector. The website demonstrates a mature digital presence with comprehensive content, investor relations, and sustainability reporting. Technically, the site uses Drupal CMS with modern libraries and includes GDPR-compliant cookie consent and security measures such as HTTPS and Google reCAPTCHA. However, the absence of WHOIS registration data is unusual and warrants monitoring, though the website's content and linked domains strongly support legitimacy. Security posture is good but could be improved by adding more security headers and publishing a formal security policy or incident response information. Overall, the site is professional, trustworthy, and well-optimized for users and compliance.

N

Nex OÜ

nex.ee

40

Nex OÜ operates as a small Estonian IT service provider specializing in computer repair, network consulting, remote support, and IT infrastructure management. The company positions itself as a reliable local partner with authorized partnerships from recognized brands such as Lenovo and Epson. Their website clearly communicates their service offerings and contact information, targeting businesses and individuals requiring IT support and hardware sales. Technically, the website is built on WordPress and utilizes modern web technologies including jQuery, LiteSpeed Cache, and Google Tag Manager. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks published privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for compliance and trust. The WHOIS data is consistent with the business claims, enhancing legitimacy. Overall, the website is professional and functional but would benefit from improved privacy compliance and enhanced security headers to strengthen trust and regulatory adherence.

J

JAS Worldwide Inc.

jas.com

71

JAS Worldwide Inc. is a well-established global freight forwarding and logistics company offering a comprehensive range of services including airfreight, ocean freight, ground freight, customs brokerage, cargo insurance, contract logistics, and green solutions. The company positions itself as a leader in international shipping and supply chain support with over four decades of industry experience. Their market presence is supported by partnerships such as with Lufthansa Cargo and a network of subsidiaries including JAS Jet Air Service S.p.A., Multilogistics S.p.A., and Setoa S.p.A. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. Accessibility is good, though there is room for further enhancement. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It implements a GDPR-compliant cookie consent mechanism and maintains privacy and cookie policies. However, there is no explicit security policy or incident response contact information visible, and no vulnerability disclosure or security.txt file is present. The absence of WHOIS data for the domain is a notable concern, though the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and secure digital presence for JAS Worldwide, with recommendations to improve transparency around security policies and domain registration details to further enhance trust and compliance.

D

Domestack

domestack.com

51

Domestack is a small technology company specializing in tailored software development services across various business sectors. Founded in 2018, the company presents a professional online presence with a well-structured website built on WordPress and Elementor. The site targets businesses seeking custom software solutions and emphasizes expertise in multiple technologies. Technically, the website employs modern tools including Google reCAPTCHA for form security and EWWW Image Optimizer for performance enhancements. SSL is properly configured, ensuring secure communications. However, the absence of explicit privacy policies, terms of service, and direct contact details limits full compliance and trust transparency. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

V

Visit Estonia

visitestonia.com

69

Visit Estonia operates as the official national tourism website for Estonia, providing comprehensive travel information, tips, and cultural insights to visitors. The website targets tourists and travelers seeking to explore Estonia's attractions, nature, and culinary experiences. It maintains a strong market position as a government-backed tourism portal with a well-established domain since 2000. The business model focuses on tourism promotion and trip planning services, leveraging digital content to attract and assist visitors.

D

Decoland

decoland.cz

52

Decoland is a Czech Republic based luxury and design furniture retailer and interior design studio. The company offers a curated gallery of design furniture and accessories, targeting consumers seeking high-end interior solutions. The website is built on a modern React and Next.js framework, incorporating cookie consent and Google Tag Manager for analytics and privacy compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies in Czech language. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not indicate malicious intent. Overall, Decoland presents a professional and trustworthy online presence in the luxury furniture retail sector.

The website epicenter.ee is currently inaccessible due to an HTTP 403 Forbidden error, indicating that access to the site's content is blocked or restricted by server configuration or security policies. As a result, no metadata, structured data, contact information, or business content is available for analysis. The domain is registered to Zone Media OÜ since 2012, which suggests a legitimate and established presence in Estonia. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. Technically, the site runs on an Apache server hosted by Zone Media OÜ, but no further technology stack details or security headers are visible due to the access restriction. Security posture cannot be evaluated beyond the presence of HTTPS (implied by port 443) and the 403 error. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the blocked content.

T

TBD Pharmatech

biodiscovery.eu

52

TBD Pharmatech is a European-based Contract Development and Manufacturing Organization (CDMO) specializing in Active Pharmaceutical Ingredients, advanced intermediates, and fine chemicals production. Founded in 2021, the company positions itself as a reliable partner for pharmaceutical companies seeking development and manufacturing services. The website reflects a professional and consistent brand image with clear business focus and relevant service offerings. Technically, the site is built on WordPress with modern analytics and tracking tools integrated, including Google Analytics and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security practices to align with regulatory requirements and industry best practices.

I

ITM Trade

itm.ee

67

ITM Trade is an established IT services company based in Estonia, providing a broad range of services including programming, SEO, server and workstation administration, marketing, and e-commerce solutions. With over 15 years of experience and a portfolio of more than 300 projects across 35 countries, ITM Trade holds a strong market position as a leader in its industry. The website reflects a professional and consistent brand image targeting businesses seeking comprehensive IT solutions. The technical infrastructure of the website is modern and functional, utilizing Google Fonts, Google reCAPTCHA for form security, and slick sliders for UI elements. The site is mobile optimized and SEO friendly, though there is room for improvement in accessibility and performance optimization. Hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar. From a security perspective, the website employs HTTPS and reCAPTCHA, and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and a published security policy or incident response contacts. No vulnerability disclosure or security.txt file is present, which are recommended for enhanced transparency and security posture. Overall, the website is trustworthy and professionally maintained, with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security policies and DNS security would further strengthen its risk profile.

The website iaconsulting.info currently presents minimal content, consisting solely of a frameset that redirects visitors to an external domain (www.searchvity.com). There is no visible business information, contact details, or policies on the site, which severely limits the ability to assess the company's market position or services. The domain is registered since 2015 with privacy protection, but the lack of transparency and meaningful content raises concerns about legitimacy and professionalism. From a technical perspective, the website lacks modern infrastructure elements such as HTTPS, security headers, and accessible HTML structure. The use of framesets is outdated and negatively impacts user experience and SEO. No scripts, analytics, or tracking technologies were detected, indicating a very basic or placeholder site. Security posture is weak due to the absence of HTTPS, security headers, and any visible security or privacy policies. The WHOIS privacy protection, while common for small businesses, combined with the minimal content and redirect behavior, suggests a low trust level. There are no indications of incident response readiness or certifications. Overall, the website poses a high risk from a security and trust perspective. It is recommended to implement HTTPS, develop meaningful content including privacy and cookie policies, provide clear contact information, and modernize the technical implementation to improve credibility and compliance.

Accenture is a global professional services company specializing in consulting, technology, and operations services. The analyzed webpage focuses on supply chain networks consulting services and solutions, highlighting Accenture's capabilities in helping clients anticipate demand and drive efficiency, sustainability, and growth. The company targets client prospects in various industries including technology, manufacturing, energy, transportation, and finance. Accenture operates at an enterprise scale with a strong market position and a comprehensive service portfolio. Technically, the website is built on Adobe Experience Manager CMS and employs modern web technologies such as Adobe Helix RUM, jQuery, and OneTrust for consent management. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforcement, security headers, and no exposed sensitive data. However, explicit security policies and incident response information are not publicly available on the analyzed page. The WHOIS data for the domain is unavailable, likely due to registry restrictions or privacy policies, but this does not detract from the site's legitimacy given Accenture's global brand recognition. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website presents a professional, secure, and trustworthy digital presence aligned with Accenture's business stature. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

L

LVM Kinnisvara

lvm.ee

46

LVM Kinnisvara is a well-established Estonian real estate company providing comprehensive property services including sales, valuation, development, and brokerage. The company operates across major Estonian cities with multiple office locations and a professional online presence. Their website is built on WordPress with modern plugins and integrates marketing and analytics tools to engage and track users effectively. Security measures such as HTTPS, CAPTCHA on forms, and cookie consent mechanisms are implemented, though some security headers could be improved. The domain registration data aligns well with the business profile, indicating legitimacy and a mature online presence.

J

Jolos

jolos.eu

44

Jolos is a full spectrum creative agency based in Estonia, specializing in world-class event production, branding, campaigns, and live and virtual events. The company positions itself as a high-quality, professional agency focused on delivering unique and memorable experiences for brands and organizations. The website reflects a mature digital presence built on WordPress, leveraging modern optimization and analytics tools such as Google Analytics and Tag Manager with IP anonymization enabled. The site is well-designed, mobile-optimized, and rich in multimedia content, showcasing detailed case studies and team profiles that enhance trust and professionalism. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

F

FDF

fdf.dk

57

FDF.dk is the official website of FDF, a Danish voluntary youth organization focused on outdoor activities and community engagement for children and young people. The organization has an established presence since 1996, reflected in the domain age and consistent WHOIS data. The website is built on WordPress and uses modern frontend technologies such as Bootstrap and Google Fonts, providing a good user experience with mobile responsiveness and clear navigation. The site employs a comprehensive cookie consent mechanism compliant with GDPR, detailing cookie categories and third-party data processors. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. No direct contact information or security policies are found, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.

O

Onninen AS

onninen.no

67

Onninen AS operates as a leading electrical wholesaler in the Nordic region, primarily serving contractors, projects, and industrial clients with a broad product range exceeding 100,000 electrical items. The company maintains a strong market position supported by a network of 26 express stores across Norway and a comprehensive online webshop. Their business model focuses on rapid delivery and extensive product availability, targeting professional customers in the energy and industrial sectors. Technically, the website leverages modern web technologies including React, Contentful CMS, and integrates Google Tag Manager and YouTube APIs for analytics and media embedding. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, though WHOIS data is unavailable due to privacy protection, which is justified for a commercial entity of this scale.

R

RESCUE®

rescuefirst.com

64

RESCUE® is a specialized roadside assistance provider operating primarily in Bengaluru, India, offering 24/7 vehicle breakdown services including puncture repair, battery jumpstart, towing, emergency fuel delivery, and key recovery. The company positions itself as a premier and reliable service provider with OEM trained mechanics and a fleet of state-of-the-art tow trucks, servicing over 100,000 vehicles since 2011. Their business model focuses on rapid dispatch of mechanics and tow trucks within 30 minutes to customer locations, targeting vehicle owners in need of emergency roadside help. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile optimized with good SEO practices and moderate performance. Accessibility is basic but functional. The hosting and infrastructure appear stable and professionally managed. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with reCAPTCHA, and no sensitive data is exposed in the HTML. However, the site lacks a visible cookie consent mechanism and formal security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, RESCUE® demonstrates a solid business presence with a trustworthy domain registration and consistent branding. The website quality is good, supporting the business credibility. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

The website salto.co is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information. The domain is registered through GoDaddy with privacy protection enabled, which obscures registrant details. The domain age suggests it has been active since 2013, but the lack of accessible content limits verification of business operations or legitimacy. Technical infrastructure details such as hosting and SSL configuration cannot be confirmed due to the blocked content. Security posture cannot be evaluated, and no privacy or cookie policies are present. Overall, the site appears to be either restricted or misconfigured, resulting in a very low trust and credibility score.

N

Nordic Hotel Forum

nordichotels.eu

51

Nordic Hotel Forum is a modern four-star superior hotel located in the heart of Tallinn, Estonia, just 150 meters from the Old Town. The hotel targets business travelers, conference attendees, and tourists seeking quality accommodation and conference facilities. The website is built on WordPress using the Avada theme and integrates WooCommerce for e-commerce capabilities. It employs modern analytics and marketing tools such as Google Analytics, Hotjar, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though it lacks some HTTP security headers and formal privacy and terms of service pages. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains. Overall, the website represents a legitimate hospitality business with moderate digital maturity and good security hygiene.

R

Rescoval

rescoval.ee

42

Rescoval is an Estonian company specializing in advertising installation services, including banner and sticker advertising, seasonal sales areas, and rental of advertising trailers across Estonia. Established in 2010, the company targets retail chains, supermarkets, and shopping centers, offering professional and rapid campaign installations. The website reflects a mature local business with consistent branding and clear service offerings. Technically, the site is built on WordPress with common plugins for SEO, forms, and sliders, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response policies. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness.

L

Luxury Produtos & Ecommerce

luxurysex.com.br

58

Luxury Sex is a Brazilian e-commerce retailer specializing in adult pleasure products, founded in 2018. The company offers a wide range of products including cosmetics, accessories, vibrators, and fetish items, targeting adult consumers seeking to enhance their intimate experiences. The business emphasizes fast delivery, discreet packaging, and multiple payment options including Pix with discounts, positioning itself as a niche market leader in Brazil. The website is professionally designed with consistent branding and clear contact information, supporting a trustworthy online shopping experience. Technically, the site leverages a modern tech stack including the Yampi e-commerce platform, Google Analytics, Microsoft Clarity, and Mixpanel for analytics and user tracking. It uses HTTPS with a secure checkout subdomain and integrates various marketing and retargeting tools. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Cookie consent mechanisms are implemented, but a dedicated privacy policy page is missing. From a security perspective, the website enforces HTTPS and uses secure payment processing domains. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with the business information, indicating legitimate domain ownership. Overall, the site demonstrates a good security posture but could improve transparency and compliance documentation. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and enhancing accessibility. These improvements would strengthen the site's security posture and compliance, further boosting customer trust and business credibility.

K

Kinema

kinema.eu

56

Kinema OÜ is a small Estonian company specializing in the sale, installation, and maintenance of modern garage doors, industrial lifting doors, loading equipment, and access control systems. The company targets both industrial and private customers within Estonia, positioning itself as a local provider of comprehensive door and automation solutions. The website is built on WordPress with WooCommerce components, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and moderately optimized for performance and mobile use, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but could be improved by adding explicit security headers and publishing formal privacy and security policies. No contact emails or phone numbers were found in the provided content, which limits direct customer engagement visibility. Overall, the website reflects a professional small business with consistent branding and a clear business focus, but with room for improvement in privacy compliance and security transparency.

T

Tickmill Europe Ltd

tickmill.com

69

Tickmill Europe Ltd operates as a regulated online forex and CFD broker targeting European clients. The company offers a range of trading instruments including forex, cryptocurrencies, stocks, indices, bonds, and commodities through popular platforms such as MetaTrader 4 and 5. The website demonstrates a strong market position with emphasis on low spreads, fast execution, and comprehensive client support. The digital infrastructure leverages modern technologies including Google Analytics, HubSpot, and Cloudflare, ensuring robust performance and user experience. Security posture is solid with HTTPS enforcement, bot management, and cookie consent mechanisms, although explicit security headers and incident response contacts could be enhanced. The absence of WHOIS domain registration data introduces some uncertainty in domain legitimacy, but the professional presentation and regulatory references mitigate this concern. Overall, the website is well-designed, compliant with GDPR, and employs extensive analytics and advertising tools to support its business model.

Y

Yolla Calls International OÜ

yollacalls.com

75

Yolla Calls International OÜ operates a telecommunications service focused on providing affordable international calling and texting through its mobile app and web platform. Founded in 2014 and based in Estonia, Yolla targets international callers, expatriates, and travelers seeking cost-effective communication solutions. The company offers free calls between Yolla users and low-cost calls to any mobile or landline worldwide, supported by subscription offers and a reseller program. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content including FAQs, offers, and social proof via Trustpilot reviews. Technically, the site uses modern frameworks such as Next.js and Material UI, integrates Google Tag Manager for analytics, and employs CookieYes for cookie consent management. Security posture is good with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved and a formal security policy is absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site presents a trustworthy and mature business with a solid digital presence.

N

Nordic Consult

nordicconsult.ee

40

Nordic Consult is a small Estonian corporate services provider specializing in online company registration, legal address provision, accounting, and e-Residency support. Established since 1997, it targets entrepreneurs and e-Residents seeking efficient company formation in Estonia. The website is built on WordPress with SEO and form plugins, offering a user-friendly experience with clear navigation and relevant content. Technically, the site is hosted via Zone Media OÜ and uses HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure form handling but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security practices.

R

Route One

routeone.co.uk

70

Route One is a specialized retailer focusing on skateboarding, snowboarding, and streetwear apparel and accessories, targeting youth and young adults in Europe. The company operates a professional e-commerce platform built on Shopify, offering a broad product range and a user-friendly shopping experience. The website demonstrates good digital maturity with modern technologies, mobile optimization, and integrated marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears legitimate and professionally managed with a solid market position in its niche.

Tehnolabor OÜ is a specialized technology development laboratory based in Estonia, focusing on electronics, automation, telecommunication, and industrial solutions. With over 20 years of experience, the company offers comprehensive services from prototype creation to product development and production management. Their portfolio includes projects in healthcare, transportation, and industrial sectors, with notable collaborations such as Airbus and EU-funded research initiatives. The company targets businesses and individuals seeking reliable technology development and automation solutions. Technically, the website is built on WordPress with common plugins and modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is adequate with enforced HTTPS, though improvements are needed in security headers and server-side HTTPS enforcement. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for compliance and security enhancements.

S

Sevana

sevana.biz

50

Sevana is a specialized telecommunications technology company based in Estonia, founded in 2012, providing advanced call quality testing and monitoring solutions for VoIP and mobile networks including 2G to 5G. Their product suite includes proprietary tools such as AQuA, PVQA, and QualTest, targeting telecom operators, VoIP providers, and testers globally. The company positions itself as a reliable partner offering comprehensive voice and audio quality assessment technologies that enhance customer satisfaction and network performance. Technically, the website is built on a modern WordPress platform with a robust tech stack including Bootstrap, jQuery, and multiple analytics and marketing tools, hosted on DigitalOcean. The site is well-optimized for SEO and mobile devices, with good content quality and clear navigation. Security posture is solid with HTTPS enforced, reCAPTCHA protection on forms, and cookie consent mechanisms, though some security headers like Content-Security-Policy could be improved. WHOIS data confirms domain legitimacy with consistent registration details and a long domain age. Overall, the website reflects a professional and trustworthy business with a mature digital presence.

E

European Film Agency Directors association

europeanfilmagencies.eu

68

The European Film Agency Directors association (EFAD) is a non-profit organization representing national film and audiovisual agencies across European countries. It serves as a collective voice for these agencies, which are government or government-associated bodies responsible for funding and regulating audiovisual policies. EFAD's market position is that of a recognized umbrella organization facilitating cooperation, joint initiatives, and advocacy in the European audiovisual sector. The website reflects a professional and well-structured digital presence, supporting EFAD's mission and providing resources such as news, projects, and member information. Technically, the website employs modern web technologies including JavaScript ES modules, Google Fonts, and the Vite build tool. It uses Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting details are not explicitly identified, but the site uses HTTPS with strong SSL configuration. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy or X-Frame-Options, and does not publish a security policy or vulnerability disclosure. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns are detected. Contact information and privacy compliance measures are clearly presented, supporting trustworthiness. Overall, EFAD's website demonstrates a mature digital presence aligned with its organizational goals. Security posture is good but could be improved with additional headers and published policies. The domain and business information align well, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to maintain transparency and privacy compliance.

S

SandFox OÜ

sandfox.ee

42

SandFox OÜ is a small Estonian company founded in 2016 specializing in integrated energy storage solutions, smart battery management, solar panel integration, and Linux-based IT infrastructure services. The company targets industrial clients and businesses in the energy sector, offering critical IT and industrial automation solutions. Their market position is supported by partnerships with major technology vendors such as RedHat, IBM, Huawei, and SUSE, and they emphasize business-critical IT solutions and energy management. Technically, the website uses a basic but functional stack including jQuery, Google Analytics, and Google Translate, hosted likely by Zone Media OÜ. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and visible privacy compliance mechanisms. Overall, the company presents a credible and trustworthy business presence with room for improvement in privacy compliance and technical modernization.

S

Saarioinen Oy

saarioinen.fi

60

Saarioinen Oy is a well-established Finnish food manufacturer specializing in popular ready meals and traditional Finnish foods. The company engages consumers through its website by offering product information, recipes, and a community platform. The website reflects a strong brand presence with consistent branding and multiple trust certifications such as Avainlippu and Sydänmerkki. The target audience primarily consists of Finnish consumers interested in convenient and traditional food products. Technically, the website is built on a modern stack including Vue.js and Episerver CMS, with integrations for Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's market position as a leading Finnish food brand.

S

Salva Kindlustuse AS

salva.ee

54

Salva Kindlustuse AS is an established Estonian insurance company founded in 1993, offering a range of insurance products to the local market. The website reflects a mature business with consistent branding and a focus on providing insurance services to Estonian customers. The technical infrastructure is modern, leveraging React and Material-UI frameworks, integrated with Google Tag Manager for analytics and Apple MapKit for mapping services. The presence of a chat widget indicates customer engagement capabilities. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and terms of service documentation are missing, which impacts compliance confidence. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and contact information clarity.

V

Valio Eesti AS

valio.ee

56

Valio Eesti AS is a well-established dairy manufacturing company founded in 1992, operating primarily in Estonia. It produces and markets fresh dairy products and cheeses sourced mainly from Central and Southern Estonian farms. The company holds a strong market position as one of the largest local dairy producers, supported by a professional and content-rich website targeting Estonian consumers. The website demonstrates a mature digital infrastructure using modern technologies such as React, Azure hosting, and integrated analytics tools including Google Analytics and Hotjar. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the website reflects a high level of professionalism and business credibility.

The website leegohansson.com is currently inaccessible due to an origin web server downtime, as indicated by the Cloudflare 521 error page. The domain is very recently registered (July 2024) and uses Cloudflare as a CDN and security provider. There is no accessible business content, contact information, or policies available on the site, which severely limits the ability to assess the business or its market position. Technically, the site relies on Cloudflare but lacks DNSSEC and security headers, and the server is currently non-responsive. The security posture is weak due to the downtime and lack of standard security configurations. Overall, the site presents a high risk due to unavailability and lack of transparency, and it is recommended to restore server availability, implement security best practices, and publish necessary compliance policies to improve trust and security.

T

The Institute of World Politics

iwp.edu

58

The Institute of World Politics is a specialized graduate school focused on educating future leaders in national security, intelligence, diplomacy, and military strategy. It offers a range of graduate degree programs, certificates, and continuing education opportunities tailored to professionals and students seeking careers in statecraft and international affairs. The institution positions itself as a niche leader with a strong emphasis on scholar-practitioner faculty and practical skills development. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrations such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is hosted likely on SiteGround, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and does not expose sensitive data in the HTML. However, there is no publicly visible security policy or incident response page, and no vulnerability disclosure mechanism was found. The WHOIS data is unavailable or restricted, typical for .edu domains, but the domain's legitimacy is supported by the content and .edu status. Overall, the site demonstrates a strong professional presence with good security hygiene, though it could improve transparency around security policies and incident response. The business is credible and well-positioned in its educational niche, with a clear target audience and robust digital infrastructure.

G

GS Group

gs-group.com

44

GS Group is a well-established Russian investment and industrial holding company with over 30 years of expertise in high-tech industries, primarily focusing on electronics development and manufacturing. The company operates a diversified portfolio including microelectronics, software development, packaging production, and energy-efficient lighting solutions. Their market position is strong within Russia, supported by a robust production base and a strategic focus on import substitution and technology localization. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting industrial partners, investors, and technology professionals. Technically, the website is built on the Bitrix CMS platform, leveraging modern JavaScript libraries and analytics tools such as Yandex Metrika and Google Tag Manager. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial; a comprehensive privacy policy is present, but no cookie consent mechanism was detected, which may pose compliance risks under GDPR. Contact information is limited to a subscription form without direct emails or phone numbers, reducing transparency. The domain WHOIS data is consistent with the business profile, showing a long-standing registration with no privacy protection, indicating legitimacy. Overall, GS Group's digital presence is professional and credible but could benefit from enhanced security practices and improved privacy compliance to strengthen trust and regulatory adherence.

M

MyHome OÜ

myhome.ee

42

MyHome OÜ operates a professional real estate brokerage and property management business primarily serving the Estonian market with additional offerings in Spain. The company provides services including property sales, rentals, management, and interior design. The website reflects a well-established small business with a consistent brand and a focus on quality customer service, as evidenced by testimonials and detailed property listings. The technical infrastructure is based on WordPress with common plugins and integrations such as Google Analytics, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS and some security best practices, but lacks advanced headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

F

Ferdio

ferdio.com

57

Ferdio is a Denmark-based visual communication agency founded in 2014, specializing in creating infographics, animations, presentations, and other visual storytelling content. The company targets businesses and organizations that require professional visual explanations of complex information. Their market position is supported by a portfolio featuring notable clients and a consistent brand presence across their website and social media channels. Technically, the website is built on WordPress hosted on WP Engine, utilizing modern web technologies such as jQuery, Vimeo API, and Google Analytics, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response plans. Overall, Ferdio presents a professional, trustworthy, and well-maintained digital presence with moderate technical maturity and good privacy compliance.

C

Chudovo

chudovo.com

60

Chudovo is a well-established software development company founded in 2004, offering a broad range of IT services including custom software development, dedicated development teams, application maintenance, and cloud development. The company targets businesses seeking scalable and innovative software solutions, leveraging AI and machine learning technologies to enhance delivery speed and quality. With multiple international offices and a strong portfolio of over 160 projects, Chudovo positions itself as a reliable partner in the technology sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, optimized for mobile and SEO. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site uses standard plugins for forms and code highlighting, and implements lazy loading for images to improve load times. From a security perspective, the site enforces HTTPS and employs clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. Contact forms include CAPTCHA and an NDA option, enhancing data protection. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure mechanism is present. Overall, the website demonstrates a solid business and technical foundation with good content quality and user experience. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic, with cookie consent present but no dedicated privacy policy page detected. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website lasitamaja.com/lander is a newly registered domain (August 2023) currently serving a minimal placeholder or parking page with no substantive business content. The site uses React and JavaScript technologies and includes Google AdSense scripts, indicating an intent to monetize traffic. However, there is no visible business information, contact details, privacy or cookie policies, or terms of service, which limits trust and credibility. Technically, the site is hosted via GoDaddy with domain status locks enabled but lacks DNSSEC and security headers, which are important for domain and web security. The minimal content and lack of SEO or accessibility features suggest a low level of digital maturity. No forms or user data collection mechanisms are present. From a security perspective, the absence of HTTPS enforcement details, security headers, and privacy compliance measures indicates a basic security posture with room for improvement. The domain registration is consistent with a new business but the lack of transparency and content reduces confidence. Overall, the site scores low on content quality, privacy compliance, and business credibility, with moderate technical implementation.

M

MasterBase®

masterbase.com

70

MasterBase® is a Spanish technology company specializing in providing access to multi-skilled automation tools designed to enhance productivity and improve quality of life. The website is professionally designed using WordPress and Elementor, targeting Spanish-speaking professionals and businesses interested in automation solutions. The company has a mature domain presence dating back to 2002, indicating a stable market position within its niche. Technically, the website leverages modern technologies including Cloudflare DNS, Cookiebot for cookie consent, Google Tag Manager for analytics, and Rank Math for SEO optimization. Hosting is provided by WordPress.com, ensuring reliable infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the website enforces HTTPS with a strong SSL configuration and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. Cookie consent mechanisms are in place, but the absence of DNSSEC and lack of published security policies or incident response contacts represent areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a moderate risk profile with good business credibility and technical implementation. Strategic improvements in privacy compliance, explicit contact information, and security policy transparency would further strengthen trust and compliance posture.

A

Ave Munde

avemunde.com

63

Ave Munde is a small lifestyle and wellness brand focused on introducing consumers to global foods and promoting healing to embrace the outside world. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services. The technical infrastructure is standard for Wix sites, with moderate performance and basic mobile optimization. Security posture is basic with HTTPS enabled but lacks important security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site provides basic content and branding but lacks comprehensive security and privacy compliance measures.

M

Myoton AS

myoton.com

60

Myoton AS is a specialized company providing advanced digital palpation devices (MyotonPRO) for measuring muscle tone, stiffness, and elasticity. Their products serve medical professionals, sports scientists, and researchers, positioning them as a niche leader in soft tissue assessment technology. The company has a well-established online presence with a website created on a WordPress platform, optimized for SEO and mobile use, and supported by modern analytics tools such as Google Analytics and Plausible Analytics. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by adding security headers and a cookie consent mechanism to enhance GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history dating back to 2004 and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-suited for its target audience, with minor recommendations to improve privacy compliance and security headers.

S

Standard

standard.ee

46

Standard is a well-established Estonian company specializing in office and hospitality interior solutions, offering high-quality furniture and comprehensive services including design, manufacturing, and installation. The company targets B2B clients such as businesses, architects, and hotels, with a strong market presence supported by decades of experience and international exports. The website reflects a mature digital infrastructure built on WordPress, leveraging modern technologies and SEO best practices to deliver a professional user experience. Security posture is solid with HTTPS enforcement, cookie consent compliance, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a trustworthy and credible business presence with room for enhanced privacy and security disclosures.

B

BekaertDeslee

bekaertdeslee.com

67

BekaertDeslee is a specialized manufacturer and provider of mattress textiles and fabric solutions, targeting mattress manufacturers and related industries. The website demonstrates a professional digital presence with multilingual support and modern web technologies, primarily built on the Liferay CMS platform. The site includes rich multimedia content such as corporate videos and product showcases, enhancing user engagement. Security posture is solid with HTTPS enforced and consent-based analytics tracking, though explicit security headers and policies are not evident. The absence of WHOIS registrant data raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the site is functional and professional but would benefit from improved transparency and compliance documentation.