Security Directory

Longitude.me is a small technology service operated by Heylab AB, based in Sweden, offering a simple and privacy-conscious real-time location sharing platform. The website is authored by Jonatan Heyman and is part of a portfolio of related travel and location-based projects. The service targets general internet users who want to share their location easily and temporarily. Technically, the site uses modern JavaScript libraries, integrates social media widgets, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No direct contact information or incident response details are provided, limiting transparency. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

Asociacija „Kraujas“

bukgeras.lt

40

The website bukgeras.lt represents the non-profit initiative "Būk geras" operated by Asociacija „Kraujas", focused on raising awareness about blood cancer and bone marrow donation in Lithuania. It serves as an informational and advocacy platform encouraging donor registration and financial support. The site is well-positioned within the Lithuanian health non-profit sector, targeting the general public and potential donors with educational content and personal stories. Technically, the website is built on WordPress using established libraries such as Bootstrap and Font Awesome, with integration of Google Analytics and Facebook SDK for tracking and social engagement. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though security headers and incident response policies are absent, indicating room for improvement. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

Valga Kultuurikeskus is a local cultural center based in Valga, Estonia, established in 2010. It serves as a community hub offering a variety of cultural experiences including theater, concerts, exhibitions, cinema, and room rental services. The website effectively communicates event information and provides contact details, positioning itself as a trusted local institution. Technically, the site uses a modern CMS (Greativ) and integrates popular JavaScript libraries and marketing tools such as Facebook Pixel and Google Analytics. However, it lacks published privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing key security headers and vulnerability disclosure mechanisms. Overall, the site is accessible, professionally designed, and serves its target audience well but should improve privacy compliance and security transparency.

F

Fotoklub Čakovec

fotoklub-cakovec.hr

40

Fotoklub Čakovec is a small, local photography club based in Croatia, established in 2008. The organization focuses on photography education, community workshops, exhibitions, and publishing photography-related books. Their website is built on WordPress and uses a variety of plugins to support photo galleries, user interaction, and SEO. The club targets photography enthusiasts including children and adults, providing educational and cultural services. The website content is rich and professionally presented, with consistent branding and good navigation. Technically, the site uses modern web technologies including WordPress 6.4.7, Yoast SEO, and Google Fonts. It is hosted under a Croatian registrar (CARNET) with DNS managed by infoitdns.com. The site is served over HTTPS with good SSL configuration and includes CAPTCHA protection on forms to prevent abuse. However, some security best practices such as security headers are not explicitly detected, and there is no cookie consent mechanism despite GDPR privacy policy presence. From a security perspective, the site shows a moderate security posture with HTTPS, CAPTCHA, and no visible sensitive data exposure. The absence of explicit security headers and lack of published incident response or vulnerability disclosure policies are areas for improvement. The domain registration data is consistent with the website content and business type, indicating legitimacy and trustworthiness. Overall, the website is a well-maintained, content-rich platform for a non-profit photography club with good technical and security foundations but could enhance privacy compliance and security transparency to improve trust and compliance.

S

Sveitarfélagið Skagaströnd

skagastrond.is

58

Sveitarfélagið Skagaströnd operates an official municipal website serving the local community of Skagaströnd, Iceland. The site provides comprehensive information about local government administration, public services, institutions, news, events, and community resources. It targets residents and visitors seeking municipal information and services. The business model is that of a government service portal, focusing on transparency and community engagement. The website is well-branded and consistent with trust indicators such as official contact details and certifications.

T

tufi.sk

tufi.sk

60

Tufi.sk is a Slovakian e-commerce retailer specializing in furniture, home, garden, sports, and hobby products. The website targets general consumers in Slovakia offering a broad product range with a focus on convenience, competitive pricing, and customer satisfaction. The business operates primarily online using the Shoptet e-commerce platform and integrates multiple marketing and analytics tools to optimize user engagement and sales. The site is well-branded and professionally designed, with clear navigation and mobile optimization.

vykup.sk s.r.o. operates a local business in Bratislava, Slovakia, specializing in the purchase of precious metals such as gold and silver, as well as watches, antiques, paintings, and real estate. The company targets general consumers looking to sell these valuables quickly and at market prices. The website provides a basic online calculator for gold and silver valuation and includes contact information and a physical address, reinforcing its local presence. Partner websites suggest a networked business model within the precious metals and pawnshop sector. Technically, the website uses standard web technologies including JavaScript, Google Analytics, and Facebook SDK for tracking and social engagement. The site is moderately optimized with basic mobile and accessibility features but lacks advanced SEO and security headers. The absence of privacy and cookie policies indicates a gap in compliance with GDPR requirements. Forms collect personal data with consent checkboxes but without visible anti-CSRF protections. Security posture is moderate; HTTPS is implied but not explicitly confirmed in the provided data. No advanced security headers or incident response contacts are present. The WHOIS data is consistent with the business claims, showing no privacy protection and a domain age appropriate for the business history. No suspicious or malicious content was detected, and the site is accessible without WAF or blocking mechanisms. Overall, the website is functional and credible for a small local business but requires improvements in security best practices and privacy compliance to enhance trust and regulatory adherence.

G

Global Services Slovakia s.r.o.

brigada.sk

58

Brigada.sk is a Slovak online job portal specializing in part-time and seasonal jobs primarily targeted at students. Operated by Global Services Slovakia s.r.o., the platform offers a comprehensive range of job listings both within Slovakia and abroad, supplemented by educational resources such as salary calculators, interview simulators, and online courses. The portal enjoys a strong market position as a trusted source for student employment opportunities, supported by regular content updates and active social media engagement. Technically, the website employs standard web technologies including JavaScript, Google Adsense, Facebook SDK, and tracking via Gemius and Google Tag Manager. While the site is served over HTTPS and includes secure login forms, it lacks some modern security headers and a cookie consent mechanism, which are areas for improvement. No explicit security or incident response policies are published, and no direct company contact emails or phone numbers are visible on the homepage, relying instead on contact forms. Overall, the site is professional, content-rich, and trustworthy, but could enhance privacy compliance and security posture.

S

SuperFaktúra

superfaktura.sk

11

Superfaktura.sk is a Slovak-based online invoicing platform targeting small businesses and freelancers. It offers reliable invoicing, offers, credit notes, and delivery notes accessible anywhere and anytime, with a 30-day free trial to attract users. The company positions itself as a leading SaaS provider in the Slovak market for business invoicing solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Tag Manager, Microsoft Clarity, and OneSignal for push notifications. The site is well optimized for mobile and desktop, with fast performance and good accessibility. Security posture is strong with HTTPS, security headers, cookie consent, and no visible vulnerabilities. However, there is no explicit security policy or incident response contact published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible service provider in its niche.

M

MR Studio Information Technologies

proon.tech

10

Proon.tech is a Slovak-based technology company offering an integrated SaaS platform for project management, CRM, and business activity management. The platform consolidates multiple business tools into a single solution aimed at improving efficiency and reducing operational costs for small to medium-sized enterprises. The company is positioned as a niche regional provider with a focus on Slovak and EU markets, supported by a development partner MR Studio Information Technologies. The website presents a professional and consistent brand image with clear business messaging and client references. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. It uses Google Analytics and Facebook SDK for tracking and marketing purposes, with a compliant cookie consent mechanism in place. Hosting is provided via Websupport.sk, a known Slovak hosting provider. The site is mobile optimized and SEO friendly, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, it lacks DNSSEC and explicit security headers, and no dedicated security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. Overall, Proon.tech demonstrates a solid business and technical foundation with good privacy compliance and moderate security posture. Strategic improvements in security headers, DNSSEC, and explicit security policies would enhance its security maturity and trust further.

V

VSE

vse.sk

69

The website www.vse.sk represents a large Slovak energy supplier offering electricity and gas services to households and businesses. It positions itself as the largest supplier in Slovakia, providing 24/7 service and customer connection options. The site uses modern web technologies including JavaScript ES modules, Google Tag Manager, Cookiebot for cookie consent, and Microsoft Omnichannel for live chat support, indicating a mature digital infrastructure. However, explicit privacy policies, terms of service, and direct contact information are not evident in the provided content, which could impact user trust and compliance transparency. Security measures such as HTTPS and cookie consent are in place, but additional security headers and incident response information are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

O

Odpadový hospodár s.r.o.

odpadovyhospodar.sk

45

Odpadový hospodár s.r.o. is a Slovak consulting company specializing in waste management services for small and medium enterprises as well as municipalities. Founded in 2012, the company offers e-learning, on-site training, consulting on waste legislation compliance, and electronic templates to simplify waste management processes. Their market position is supported by over 200 customers and official certifications from Slovak environmental authorities. The website is professionally designed, content-rich, and targets Slovak-speaking business and municipal clients. Technically, the site is built on WordPress with common plugins for analytics, live chat, and email marketing, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and anti-spam measures but lacks some security headers and explicit incident response contacts. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness with clear contact information and customer testimonials.

The website andresond.is represents a small Icelandic media business focused on audio book subscriptions and Disney/Pixar related content. The site is built on the LiSA CMS platform by Advania and hosted via an Icelandic provider, reflecting a mature domain established in 2009. The business targets families and children interested in audio books and related media products, operating primarily through e-commerce and subscription models. The site integrates social media sharing via Facebook and tracks user activity with Google Analytics, indicating a moderate level of digital maturity. However, the website lacks critical privacy and cookie policies, and no terms of service or security policies are present, which are important for compliance and user trust. Security posture is basic, with no DNSSEC enabled and no security headers detected, though HTTPS usage is implied by external script loading. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

S

STOTEN.CZ

stoten.cz

57

STOTEN.CZ operates as a specialized retail e-commerce platform focused on table tennis equipment and apparel, targeting enthusiasts primarily in the Czech Republic. The website offers a broad catalog of products including paddles, rubbers, balls, clothing, and accessories, supported by a physical store and a table tennis academy. The business model centers on niche retail with additional services such as sponsorship and event organization, positioning itself as a trusted provider within its market segment. Technically, the website is built on the Shoptet e-commerce platform, utilizing legacy jQuery libraries alongside modern tracking tools like Google Analytics 4 and Facebook Pixel. The site is served over HTTPS with a good SSL configuration and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequate, though some accessibility features could be enhanced. From a security perspective, the site employs CSRF tokens on forms and uses HTTPS, but the presence of an outdated jQuery version introduces potential vulnerabilities. Security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web attacks. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a moderate risk profile with no signs of blocking or WAF interference. The lack of public WHOIS data reduces transparency but is typical for small retail businesses. Strategic recommendations include updating JavaScript libraries, implementing comprehensive security headers, and publishing clear privacy and security policies to enhance trust and compliance.

Red Robin Books is an independent children's book publisher and retailer specializing in high-quality books for early years to early teens. The company offers a range of products including picture books, board books, audio books, and educational resources, targeting children, parents, and educators. The website serves as an e-commerce platform built on WordPress and WooCommerce, providing a professional and user-friendly shopping experience. The business appears to be small-sized and niche-focused with a consistent brand presence and active social media engagement. Technically, the website leverages modern web technologies such as WordPress CMS, WooCommerce for e-commerce, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile-optimized with good SEO practices implemented via Yoast SEO plugin. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling. However, it lacks visible security headers and does not display privacy or cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security best practices, and domain registration transparency are recommended to enhance trust and security posture.

BIOK laboratorija is a Lithuanian cosmetics manufacturing company specializing in natural and innovative cosmetic and oral care products. They manage multiple brands and serve Nordic and European markets with over 250 products. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site uses a mix of legacy and modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and tracking. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and uses an outdated jQuery version. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and domain registration visibility.

O

OREON

somelierskepotreby.cz

61

The website somelierskepotreby.cz operates as an e-commerce platform specializing in sommelier supplies and wine accessories, targeting consumers and professionals interested in wine-related products primarily in the Czech Republic and EU. The business offers a range of products including wine cooling containers, racks, serving accessories, glassware, bottles, and gift sets, with additional services such as product branding. The site is professionally designed with clear navigation and multi-language support, enhancing user experience and accessibility. Technically, the website is built on the Shoptet CMS platform, utilizing common web technologies such as jQuery, Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook SDK. It leverages Amazon Cloudfront CDN for content delivery and integrates modern payment APIs like Google Pay and Apple Pay. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, and uses an outdated jQuery version which could pose vulnerabilities. No critical security issues or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for its niche retail business, though the absence of WHOIS data limits domain transparency and trust assessment. Strategic improvements in security headers and technology updates are recommended to enhance security posture and compliance.

P

PagFerry.com

pagferry.com

45

PagFerry.com is a small Croatian website providing up-to-date ferry schedules, real-time ferry status, weather forecasts, and webcam feeds for the Prizna - Žigljen ferry route. It serves a niche audience of travelers and locals seeking reliable maritime transport information. The website is well-branded and consistent, with a clear focus on transportation services in the Croatian region. Technically, the site leverages modern web technologies including AMP for mobile optimization, jQuery, Bootstrap, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and registers a service worker, but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site is functional and useful but would benefit from enhanced security practices and verified domain registration to improve trustworthiness.

D

Direktno.hr

direktno.hr

58

Direktno.hr is a Croatian news media website delivering a wide range of news content including politics, local news, sports, and international affairs. The site targets a general Croatian-speaking audience and operates primarily on an advertising-supported business model. It holds a moderate market position as a regional news outlet with a medium-sized operation. The website features a professional design with consistent branding and good content quality, supporting user engagement and trust. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook SDK, Chartbeat, Hotjar, and New Relic for performance monitoring. It appears to be built on the Newscoop CMS platform, which is common for news organizations. The site is mobile optimized and performs moderately well, with basic accessibility and good SEO practices. From a security perspective, Direktno.hr enforces HTTPS and implements standard security headers such as Content-Security-Policy and Strict-Transport-Security. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, the site lacks a dedicated security policy page, vulnerability disclosure program, and explicit incident response contacts, which are areas for improvement. Overall, the website is legitimate and trustworthy, with privacy policies and cookie consent mechanisms in place to comply with GDPR. The WHOIS data is privacy protected, which is justified given the EU jurisdiction and media nature of the site. No WAF or blocking mechanisms were detected, allowing full content access. Strategic recommendations include enhancing security transparency, improving accessibility, and maintaining regular audits of third-party scripts to mitigate risks.

V

Valga Muuseum

valgamuuseum.ee

40

Valga Muuseum is a regional cultural and educational institution based in Valga, Estonia, providing museum exhibitions, educational programs, research activities, and a museum shop. The website reflects a stable and established organization with a domain registered since 2010. The museum targets a broad audience including local visitors, students, and researchers, offering a variety of cultural and educational services. Technically, the website uses a common CMS (Greativ), standard JavaScript libraries, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which impacts privacy compliance. Overall, the website is professional, trustworthy, and serves its purpose well.

E

Europe Direct Informacijski ured Split

europedirect-split.hr

43

Europe Direct Informacijski ured Split operates as an official European Union information center serving the Split region in Croatia. The website provides comprehensive information and advisory services about the EU, targeting local citizens and residents. It is part of the Europe Direct network, offering free services and acting as a trusted source for EU-related news, publications, and guidance. The business model is non-profit and government-affiliated, focusing on public information dissemination. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Revolution Slider, ensuring good SEO and user experience. The site is mobile-optimized and includes accessibility features, enhancing usability for diverse audiences. External integrations include Google Tag Manager and Facebook SDK for analytics and social media engagement. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, showing consistent registration details and domain age appropriate for the organization's history. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional business credibility. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and expanding contact channels for security matters.

S

SHOEI CO., LTD.

shoei.com

59

SHOEI CO., LTD. is a globally recognized premium motorcycle helmet manufacturer with a strong market presence and a network of regional distributors worldwide. The website serves as a hub for worldwide distributor contacts and product information tailored to regional markets. The company targets motorcycle riders and distributors, emphasizing safety, design, and performance in its product offerings. Technically, the website employs modern JavaScript libraries and tracking tools, including Google Analytics, Facebook SDK, and Line Tag, indicating a mature digital infrastructure. The site is mobile-optimized with good navigation and professional design, though it lacks some privacy and security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and legitimacy of the business. Overall, the website is safe, professional, and functional, with recommendations to enhance privacy compliance and security transparency.

H

Hrvatski savez za sportski ribolov na moru

hssrm.hr

42

Hrvatski savez za sportski ribolov na moru (HSSRM) is a well-established Croatian non-profit sports federation dedicated to marine sport fishing. Founded in 1953, it serves approximately 25,000 members and provides key services such as fishing permit distribution, organizing competitions, and educational programs. The website reflects a consistent brand and offers relevant content for its target audience of fishing enthusiasts in Croatia. Technically, the site uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Leaflet.js, with integration of Facebook social plugins for community engagement. The site is moderately optimized for mobile and performance, with clear navigation and good content quality. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is lacking as no privacy or cookie policies are present. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

V

Valga Muusikakool

valgamuusikakool.ee

43

Valga Muusikakool is a well-established music school based in Valga, Estonia, with a history spanning approximately 100 years. The institution provides structured music education programs, organizes academic concerts, and participates in projects aimed at enhancing inclusive education and modernizing public services. The website serves as an information hub for students, parents, and the local community, offering event calendars, news updates, and application submission forms. The business model focuses on education and cultural enrichment within the local region, positioning the school as a key regional player in music education. Technically, the website is built on the Greativ CMS platform and incorporates modern web technologies such as Google Analytics, Facebook SDK, and Owl Carousel for interactive content. The site is mobile-optimized with good navigation and content quality, although some SEO and accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes some best practices like secure form handling and analytics integration. However, it lacks explicit security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were found, indicating a generally sound security posture but with room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and serves its educational purpose effectively. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and considering a vulnerability disclosure program to strengthen trust and compliance.

A

Allee restoran

alleerestoran.ee

44

Allee restoran is a small hospitality business located in Tallinn, Estonia, offering a diverse and seasonal menu with a focus on fresh, local ingredients catering to omnivores and vegans alike. The restaurant operates at two addresses and provides services including lunch offers, breakfast, drinks, group menus, and event hosting. The website is professionally designed, mobile-optimized, and integrates modern web technologies and analytics tools, reflecting a mature digital presence. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy, content-rich, and well-positioned in its market segment.

Lokalna Hrvatska is a Croatian non-profit organization operating a national news service focused on local government and municipal news. The website serves as a platform for disseminating news, event calendars, weather updates, and email newsletters targeted at local authorities and citizens interested in local governance. The organization appears well-established with a domain age consistent with its founding year of 2013 and transparent registrant information matching the website's claims. Technically, the website uses a custom CMS and integrates several legacy and modern technologies including jQuery 1.8.3, Leaflet for mapping, and multiple analytics and advertising platforms such as Google Analytics, Yandex Metrika, Facebook Pixel, and Mailchimp. While the site is functional and moderately optimized for mobile, it lacks some modern security headers and uses outdated JavaScript libraries, which could pose security risks. From a security perspective, HTTPS is enforced, and no sensitive data is exposed in the HTML. However, the absence of active Content-Security-Policy headers and the use of outdated jQuery versions are notable vulnerabilities. Privacy compliance is partially addressed with a GDPR privacy statement, but no cookie consent mechanism is present despite active tracking scripts. Overall, the website is moderately secure and credible, with clear business information and contact details. Strategic improvements in updating libraries, enhancing security headers, and implementing cookie consent would strengthen its security posture and privacy compliance.

Z

Zavod za hitnu medicinu Krapinsko - zagorske županije

hitna-kzz.hr

46

Zavod za hitnu medicinu Krapinsko - zagorske županije is a regional public healthcare institution providing emergency medical services in the Krapinsko-zagorska county of Croatia. The website serves as an official portal offering information about emergency services, first aid education, public health announcements, and EU project participation. The target audience is the general public within the region. The business model is that of a public healthcare service provider with a medium-sized operational scope.

T

Telia Eesti AS

winterplace.ee

45

Otepää Winterplace is Estonia's largest winter park located in the city center of Otepää, offering a variety of winter leisure activities including snowtubing, ice skating, igloo cinema, and play areas for children. The business targets families, youth, and groups such as schools and companies, positioning itself as a premier winter entertainment destination in Estonia. The website reflects a well-structured and visually appealing platform with integration of social media and mapping services to enhance user engagement. Technically, the site employs modern JavaScript libraries and Google services, managed via the Greativ CMS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic consent mechanisms, but lacks explicit privacy policies and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence for the business.

M

Mulgi Kultuuri Instituut

mulgimaa.ee

45

The website mulgimaa.ee serves as a cultural and tourism portal for the Mulgimaa region in Estonia, promoting local traditions, events, and products. It is operated by regional cultural institutions such as Mulgi Kultuuri Instituut and Mulgimaa Arenduskoda, which are small-sized organizations focused on community development and cultural preservation. The site provides comprehensive information on events, local crafts, tourism guides, and news relevant to the Mulgimaa area. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, Facebook SDK, and YouTube iframe API, built on the Greativ CMS platform. It is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider, with a domain age consistent with the business history. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic, lacking a privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-structured, targeting tourists, cultural enthusiasts, and the local community.

V

Valga Gümnaasium

valgagym.ee

50

Valga Gümnaasium is a secondary educational institution located in Valga, Estonia, with a domain established in 2012. The website serves students, parents, staff, and alumni by providing information about school activities, news, schedules, and contact details. The institution maintains a solid local presence with partnerships and affiliations to various educational and governmental organizations. Technically, the website uses a modern CMS (Greativ), integrates Google Fonts, Google Analytics, and Facebook SDK for social media and analytics purposes. The site is mobile-optimized and offers clear navigation and relevant content. Security posture is adequate with HTTPS enabled and some consent management for cookies, but lacks explicit privacy and cookie policies and security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

E

Eesti Lihaveisekasvatajate Ühistu

veis.ee

43

Eesti Lihaveisekasvatajate Ühistu operates as a cooperative primarily focused on the purchase, sale, and brokerage of beef cattle in Estonia. Founded in 2015, it serves a significant network of over 200 cattle breeders and is a founding member of a larger association with 400+ members. The cooperative maintains a modern livestock collection center and targets both domestic and international markets. Their business model centers on providing reliable and professional services to cattle breeders, ensuring quality livestock for various purposes including breeding and meat production. Technically, the website is built on the Greativ CMS platform and employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Hosting is provided by Zone Media OÜ, a known Estonian hosting provider, consistent with the domain registration data. From a security perspective, the site uses HTTPS and client-side form validation but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The business provides clear contact information but does not disclose incident response or vulnerability disclosure policies. Overall, the website presents a trustworthy and professional image suitable for its target audience of livestock breeders. Strategic improvements in privacy compliance and security hardening would enhance its risk profile and user trust.

T

Tirespot OÜ

tirespot.ee

43

Tirespot OÜ is a small Estonian company specializing in the retail and servicing of automotive tires and related products and services. The company operates primarily in Pärnu, Estonia, offering a wide range of tires including summer and winter tires, tire changes, rim sales and restoration, oil changes, and air conditioning services. The website reflects a well-established regional business with a clear focus on automotive maintenance and tire sales. The company holds a Gasellfirma certification, indicating strong business performance and growth. Technically, the website is built on the Greativ CMS platform and leverages modern web technologies including Google Tag Manager, Google Analytics, Facebook SDK, and lazy loading libraries. The site is mobile-optimized with good SEO practices and clear navigation. Hosting is provided by Zone Media OÜ, consistent with the Estonian business location. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response contacts, and advanced security headers are not evident. No security blocking or WAF challenges were detected, and no vulnerabilities were apparent from the content analysis. Overall, the website presents a professional and trustworthy online presence for a small automotive retail and service business in Estonia. Strategic improvements could include publishing a security policy, incident response information, and enhancing security headers to strengthen the security posture further.

E

Ekotek Eesti OÜ

ekotek.com

45

Ekotek Eesti OÜ operates as the authorized distributor of Victorinox products in the Baltic region, primarily serving Estonia with a retail presence in over 50 stores. The company focuses on offering high-quality Victorinox pocket tools, kitchen knives, and corporate gifting solutions, targeting both consumers and business clients. Founded in 1997, Ekotek has established a reputable market position as a trusted regional distributor. Technically, the website is built on the Greativ CMS platform and leverages modern JavaScript libraries such as Swiper.js and Plyr.js for enhanced user experience. It integrates Google Fonts, Facebook SDK, and YouTube APIs, indicating a mature digital infrastructure. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, DNSSEC is not enabled, and explicit security headers are not detected in the HTML content, suggesting room for improvement in hardening security posture. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and compliance. Overall, Ekotek's website is professional, trustworthy, and compliant with privacy regulations, with a solid business foundation and a clear focus on retail distribution. Strategic improvements in security headers and DNS security would further strengthen its security posture.

E

Ekstreemmoto OÜ

ktm.ee

43

Ekstreemmoto OÜ operates the ktm.ee website, serving as a regional retailer specializing in KTM motorcycles and related riding gear in Estonia, with physical stores in Tallinn and Tartu. The website provides comprehensive product categories including onroad and offroad motorcycles, used bikes, powerwear, and rental services. The company targets motorcycle enthusiasts and buyers within Estonia, positioning itself as a trusted local dealer with a decade-long presence since 2010. Technically, the website is built on the Greativ CMS platform and integrates modern web technologies such as Google Analytics, Facebook SDK, and various JavaScript libraries to enhance user experience and marketing capabilities. The site is mobile-optimized and provides clear navigation and professional design.

K

Koalicija "Galiu gyventi"

galiugyventi.lt

53

Koalicija "Galiu gyventi" is a Lithuanian non-profit coalition dedicated to advocacy, education, and research related to addiction and associated social issues. The organization provides legislative monitoring, legal advocacy, networking, training, and publishes informational materials targeting policymakers, vulnerable groups, and professionals. The website is built on WordPress with modern technologies such as Bootstrap and Zion Builder, hosted by Hostinger. It features a professional design, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no exposed sensitive data, though security headers and privacy compliance mechanisms are lacking. Contact information is clearly provided, and social media integration is present via Facebook SDK. Overall, the site is trustworthy and serves its non-profit mission effectively.

Johnson & Johnson is a globally recognized healthcare enterprise specializing in innovative medicines, medical devices, and consumer health products. The company positions itself as a leader in preventing and curing complex diseases with a focus on smarter, less invasive treatments and personalized solutions. The website reflects a mature digital presence with comprehensive content targeting healthcare professionals, investors, job seekers, and the general public interested in health. The business model is diversified across multiple healthcare sectors, maintaining a strong market position worldwide. Technically, the website employs modern web technologies including JavaScript frameworks, WebComponents, and a Brightspot CMS platform. It integrates analytics and marketing tools such as Google Analytics, Facebook SDK, and Kameleoon for A/B testing, alongside a robust cookie consent mechanism powered by OneTrust. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements key security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, explicit security policies, incident response details, and vulnerability disclosure programs are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and secure, supporting Johnson & Johnson's reputation as a leading healthcare company. The absence of WHOIS data is likely due to privacy protection, common for large enterprises, and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data retention and protection officer contacts.

F

Fotbolti Ehf.

fotbolti.net

53

Fótbolti.net is a well-established Icelandic football news and media website, operating since 2002. It serves as a primary source of football news, live scores, articles, and multimedia content for football fans in Iceland. The website is professionally designed with consistent branding and offers a variety of football-related services including news, video content, podcasts, and advertising opportunities. The target audience is primarily Icelandic football enthusiasts. Technically, the site uses a mix of modern JavaScript libraries such as jQuery, Facebook SDK, Google Analytics, and Plyr for video playback. The domain is registered with GoDaddy and uses Cloudflare DNS services, indicating a stable and secure hosting environment. Security posture is good with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy found. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

Húnahornið is a local Icelandic news and community portal serving the Húnvetninga region. Established in 2001, it provides news articles, event announcements, photo galleries, classifieds, and local weather and traffic updates. The website targets residents and community members in North Iceland, focusing on regional content and community engagement. The business operates as a small media entity with a regional market position and a focus on local news dissemination. Technically, the website uses legacy technologies such as jQuery 1.7.1 and integrates social media widgets from Facebook and Twitter, along with Google APIs and AddThis for sharing. The CMS appears custom or unknown, hosted on servers associated with netvistun.is. The site shows basic mobile optimization and accessibility features but lacks modern technical enhancements and security headers. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled. The use of outdated JavaScript libraries introduces potential vulnerabilities. Cookie consent is implemented, but privacy policy and GDPR compliance are basic and not comprehensive. No incident response or vulnerability disclosure information is present, indicating limited formal security posture. Overall, the website is functional and serves its community purpose but would benefit from technical modernization, enhanced security practices, and improved privacy compliance to strengthen trust and resilience.

F

Fjölmiðlatorgið ehf.

eyjan.is

56

DV (Fjölmiðlatorgið ehf.) operates as a prominent Icelandic independent media outlet providing news, opinion articles, and advertising services. The website 'Eyjan - DV' serves as a dedicated section for opinion and editorial content, targeting a general Icelandic audience interested in current affairs and commentary. The business model relies on advertising revenue and possibly subscriptions, supported by a professional and content-rich platform. The site maintains consistent branding and a strong social media presence, reinforcing its market position as a trusted media source in Iceland. Technically, the website is built on WordPress CMS, leveraging common web technologies such as jQuery, Google Analytics, Facebook SDK, and advertising platforms like Airserve. The site demonstrates moderate performance and good mobile optimization, with SEO enhancements via Yoast SEO. While HTTPS is enforced, some security headers are missing, and no explicit cookie consent mechanism was detected, indicating areas for compliance improvement. From a security perspective, the site shows a reasonable posture with HTTPS and no exposed sensitive data. However, the absence of WHOIS data for the domain www.dv.is is notable, likely due to Icelandic registry policies rather than malicious intent. The site lacks explicit security policies or incident response information, which could be enhanced to improve trust and readiness. Overall, DV's website is a professional, content-rich media platform with good technical implementation and business credibility. Strategic improvements in privacy compliance and security headers would strengthen its security posture and regulatory adherence.

D

DV

dv.is

56

DV is a well-established Icelandic online news media platform offering a wide range of content including news, sports, lifestyle, and cultural articles. The website targets the Icelandic-speaking general public and operates under the parent company Fjölmiðlatorgið ehf. It maintains a professional online presence with consistent branding and a good quality content offering. The business model primarily relies on advertising revenue and possibly subscriptions. Technically, the site is built on WordPress CMS and uses common web technologies such as jQuery, Slick Carousel, and integrates multiple third-party analytics and advertising services. The site is mobile optimized and SEO friendly, providing a good user experience.

R

ROCKETMOTORS

rocketmotors.sk

10

ROCKETMOTORS is a Slovakian e-commerce retailer specializing in motor vehicles such as ATVs, motorcycles, electric vehicles for children, and related accessories. The company targets general consumers interested in motorized recreational and utility vehicles. Their market position is that of a niche regional player with a comprehensive product offering and a customer-centric approach. The website is built on the Shoptet e-commerce platform, leveraging modern web technologies and integrations with Google Analytics, Facebook SDK, and other marketing tools. The technical infrastructure is solid, with good mobile optimization and moderate performance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website presents a professional and trustworthy front for the business.

S

SCONTO Nábytok s. r. o.

sconto.sk

65

SCONTO Nábytok s. r. o. is a well-established furniture retailer in Slovakia, operating both physical stores and an online e-commerce platform. As part of the German Hoffner group, it benefits from a strong market position and brand recognition since its founding in 1990. The website offers a broad range of furniture and home accessories targeting general consumers seeking quality home furnishings. Technically, the site employs modern web technologies including Google Tag Manager, Facebook SDK, and advanced analytics tools like Exponea, ensuring a mature digital presence. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-optimized for user experience and marketing effectiveness.

A

ASB

asb.sk

58

ASB.sk is a Slovak online media platform specializing in architecture, construction, and business news and insights. It serves professionals and enthusiasts in these sectors within Slovakia, offering articles, event calendars, and a membership club. The website is built on WordPress and integrates common digital marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook SDK. Advertising is managed through Advanced Ads and Google Ad Manager, indicating a monetization model based on ad revenue. The site demonstrates good technical implementation with HTTPS and consent management for GDPR compliance, although explicit privacy and terms of service pages are not detected in the provided content. Social media presence on Facebook and Pinterest supports community engagement. Overall, ASB.sk is a credible and professional regional media outlet with a solid digital infrastructure.

L

Landsprent ehf.

landsprent.is

58

Landsprent ehf. is a specialized newspaper printing company based in Iceland, offering printing and distribution services for various Icelandic newspapers and promotional materials. It operates as a subsidiary of Árvakur hf., the publisher of Morgunblaðið, positioning itself as a key player in the Icelandic media printing sector. The website provides detailed information about its services, client newspapers, and technical printing specifications, targeting media companies and advertisers in Iceland. Technically, the website employs a Foundation CSS framework, jQuery 1.11.1, and Facebook SDK, indicating a moderately modern but somewhat legacy technology stack. The site is mobile-optimized with good navigation and content quality but lacks advanced accessibility features. Security posture is moderate with HTTPS usage but missing security headers and outdated JavaScript libraries. No privacy or cookie policies are present, indicating compliance gaps. Overall, the domain WHOIS data is unavailable, which reduces trustworthiness but the website content and business information appear legitimate and consistent with the claimed business. Strategic improvements in security headers, privacy compliance, and technology updates are recommended to enhance trust and security.

W

Whow Games GmbH

myjackpot.se

65

Myjackpot.se is a Swedish-language social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games. The website offers a variety of slot games accessible via web and mobile platforms, with no real money gambling involved, targeting adult users aged 18 and above. The platform supports social login options including Facebook, Google, and Paypal, enhancing user convenience. The site is part of a broader international network of similar sites in multiple languages, indicating a well-established market presence in the social casino niche. Technically, the website employs modern web technologies, cookie consent mechanisms compliant with GDPR, and integrates social media SDKs for enhanced functionality. Security posture is adequate with HTTPS enforced and basic security headers present, though additional headers and explicit security policies could improve trust. The absence of WHOIS data for the exact domain raises some concerns about domain registration legitimacy, but the professional presentation and company association mitigate this risk. Overall, the platform is a legitimate social gaming site with moderate risk and good compliance practices.

W

Whow Games GmbH

myjackpot.ro

68

Myjackpot.ro is a Romanian localized social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games. The website offers a variety of slot games without real money gambling, targeting adult users aged 18 and above. The platform supports multiple languages and promotes mobile app usage for Android and iOS. Technically, the site uses modern JavaScript libraries, social login integrations, and a robust cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR adherence. Overall, the site presents a professional and trustworthy social gaming experience with moderate business credibility due to lack of direct contact details.

W

Whow Games GmbH

myjackpot.pt

68

Myjackpot.pt is a social casino platform operated by Whow Games GmbH, offering free online casino games such as slots and free spins targeted at Portuguese-speaking adult users. The platform emphasizes a free-to-play model with no real money gambling, supported by social login options including Facebook, Google, and Paypal. The website is professionally designed with good navigation and mobile optimization, hosted on a CDN with modern JavaScript technologies and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the site presents a trustworthy and legitimate business with transparent WHOIS data and consistent branding.

W

Whow Games GmbH

myjackpot.com.br

68

Myjackpot.com.br is a social casino platform operated by Whow Games GmbH, a German company specializing in free-to-play online slot games. The website targets Portuguese-speaking adults, primarily in Brazil, offering a variety of slot games without real money gambling. The platform supports social logins and mobile app access, positioning itself as a niche player in the social casino market. Technically, the site uses modern web technologies, including OneTrust for cookie consent and Facebook SDK for social integration, hosted on AWS infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.

W

Whow Games GmbH

myjackpot.hu

70

MyJackpot.hu is a Hungarian-language social casino platform operated by Whow Games GmbH, a German company. The site offers free-to-play online slot games and casino entertainment without real money gambling, targeting adult users aged 18 and above. It supports multiple platforms including web, Android, iOS, and Windows, and provides social login options for user convenience. The business operates within the niche social casino market, leveraging a consistent brand presence across multiple country-specific domains. The website is professionally designed with good content quality, clear navigation, and mobile optimization.