Security Directory

M

molberts.lv

molberts.lv

41

The website molberts.lv currently functions primarily as a parked domain with minimal content focused on advertising and related search results, particularly around ice cream products. There is no clear business presence, contact information, or detailed company data available on the site. The technical infrastructure relies on standard HTML, CSS, and JavaScript with integration of Google Adsense and Bodis for monetization. No CMS or advanced frameworks are detected, and the site lacks modern security headers and visible SSL configuration details. From a security perspective, the site shows a low maturity level with no evident security policies, incident response contacts, or vulnerability disclosures. The absence of contact information and business legitimacy indicators further reduces trustworthiness. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanism or GDPR compliance signals. Overall, the domain's WHOIS data is unavailable due to query limits, preventing a full legitimacy assessment. The domain appears to be monetized rather than representing an active business, resulting in a low overall risk profile but also low trust and credibility. Strategic recommendations include improving security posture, adding clear business and contact information, implementing privacy and cookie consent mechanisms, and enhancing content quality to establish legitimacy and user trust.

L

Laflora

laflora.lv

51

Laflora is a major Latvian company specializing in the extraction and processing of peat products, targeting professional gardeners and related industries. The website presents a comprehensive product catalog, sustainability initiatives, and ongoing projects in renewable energy, positioning Laflora as a leader in its sector within Latvia. The digital infrastructure includes modern web technologies and a cookie consent mechanism aligned with GDPR requirements. Security posture is moderate with room for improvement in headers and explicit policies. The absence of WHOIS data limits domain trust verification, but the presence of multiple certifications and partner organizations supports legitimacy. Overall, the website is professional, content-rich, and user-friendly, with minimal tracking and good privacy compliance.

R

Raden Solutions

radensolutions.com

69

NetXMS, operated by Raden Solutions, is a mature and established provider of open-source network and infrastructure monitoring solutions. Founded in 2004 and headquartered in Latvia, the company targets a broad range of industries including banking, telecommunications, energy, industrial monitoring, and government sectors. Their business model combines open-source software with commercial support and enterprise editions, positioning them as a reliable and scalable solution provider in the network management space. The website reflects a professional and comprehensive presentation of their services, with strong branding consistency and trust indicators such as client testimonials and third-party reviews.

T

BookStack

tenthdimensions.com

59

The website at archive.tenthdimensions.com/login serves as a login portal for BookStack, an open-source documentation and knowledge management platform. The site appears to be used for managing or accessing documentation content, targeting users who require organized knowledge bases. The platform is likely self-hosted or provided as a service by the organization behind tenthdimensions.com, though no explicit business information is presented on this login page. Technically, the site uses modern web standards including HTTPS with a valid SSL certificate, modular JavaScript, and responsive design elements. The presence of a CSRF token in the login form indicates attention to basic security practices. However, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a moderate security posture with secure form handling and HTTPS enforcement. The absence of WHOIS data for the subdomain is expected, but the lack of public business or contact information reduces transparency. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is functional and technically sound for its purpose but would benefit from enhanced privacy compliance, clearer business information, and improved security headers to strengthen trust and regulatory adherence.

The domain dss.lv is currently parked and offered for sale, with no active business content or services presented on the website. The site primarily serves as a landing page advertising the domain's availability for purchase, targeting domain investors or buyers. The technical infrastructure relies on basic HTML and JavaScript, with third-party ad networks such as Google Adsense and DoubleClick integrated for monetization. The site is hosted via Amazon Cloudfront CDN, but lacks HTTPS and security headers, indicating a low security posture. Privacy compliance is minimal, with only a basic privacy policy present and no cookie consent mechanism. Overall, the website lacks business credibility and trust indicators, and the absence of WHOIS data due to query limits further reduces transparency.

H

HOSTING.LV

hosting.lv

58

HOSTING.LV is a Latvian web hosting service provider offering professional and reliable hosting solutions tailored for small to medium businesses and corporate clients. Their service portfolio includes standard shared hosting, dedicated business hosting, and customized hosting solutions for large-scale projects such as media portals and social networks. The website is well-structured, localized in Latvian, and targets the Latvian market specifically. Contact information is clearly provided, enhancing business credibility. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices, but lacks visible advanced security headers and formal privacy or cookie policies. No forms or direct data collection mechanisms are present on the homepage, reducing immediate data exposure risks. Security posture is moderate; HTTPS is implied by canonical URLs, but no explicit security headers or incident response information is provided. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, slightly impacting trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response and vulnerability disclosure information, and improving WHOIS data accessibility to strengthen trust and compliance.

The website gratitudeservices.com is a newly registered domain with minimal content primarily consisting of embedded advertisements served via Google AdSense and related Google ad services. The site lacks substantive business information, contact details, or user engagement features, indicating it may be a placeholder or parked domain rather than an active business site. The domain was registered recently through DropCatch.com, a known drop-catching registrar, which suggests speculative registration rather than an established company presence. Technically, the site uses modern HTML5 and CSS3 standards with JavaScript for ad delivery. It is served over HTTPS, but lacks advanced security configurations such as DNSSEC and security headers, which lowers its security posture. Mobile optimization and accessibility are basic, and SEO features are minimal. There is no evidence of a content management system or advanced frameworks. From a security perspective, the site has a basic SSL configuration but no visible security policies, incident response contacts, or certifications. The absence of cookie consent mechanisms and limited privacy policy details indicate poor privacy compliance. No forms or data collection points are present, reducing immediate data protection concerns but also limiting user interaction. Overall, the site scores low on business credibility and content quality, with moderate technical implementation and security posture. The domain's recent registration and lack of business identity raise concerns about legitimacy. Strategic recommendations include enhancing security headers, implementing privacy and cookie policies, adding clear business and contact information, and improving content quality to build trust and compliance.

L

Level Up

lvl-up.me

52

Level Up is a small, newly established education consultancy founded in 2023, specializing in assisting students with international education programs across countries such as the USA, UK, Canada, Australia, Switzerland, Spain, and the EU. The company offers a range of services including program selection, visa assistance, accommodation support, and language courses. Their market position is niche, targeting students and parents seeking quality education abroad. The website is built on the Tilda CMS platform, leveraging modern web technologies and includes customer testimonials and social media integration to build trust. Technically, the site is moderately performant and mobile-optimized but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced but missing several important security headers and no published security or privacy policies, indicating compliance gaps. Contact information is primarily via social media and a contact form, with a single clearly labeled phone number. Overall, the site is professional but would benefit from enhanced privacy compliance and security hardening.

J

Jungheinrich

jungheinrich.lv

71

Jungheinrich.lv is the Latvian localized website of Jungheinrich, a global leader in intralogistics and warehouse technology. The company manufactures forklifts, pallet trucks, and offers a broad spectrum of warehouse and logistics services. The website targets businesses and logistics professionals in Latvia, providing product and service information in Latvian. The site is professionally designed with consistent branding and good content relevance, supporting a large enterprise business model in the transportation sector. Technically, the website uses modern web technologies including JavaScript, CSS3, and HTML5, with Google Tag Manager and Cookiebot integrated for analytics and cookie consent management. Hosting appears to be managed via Jungheinrich's own cloud infrastructure. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible security headers and explicit privacy or security policies. No WHOIS data was available due to query limits, limiting domain trust verification. No contact information or incident response details are present, which could impact user trust and compliance. Overall, the website presents a professional and credible business presence but would benefit from enhanced transparency in privacy, security policies, and contact information to improve trust and compliance posture.

The analyzed content corresponds to a local Chrome error page (chrome-error://chromewebdata/) that displays the Chrome offline dinosaur game. No actual website content, business information, or metadata is accessible. Consequently, no insights about the company's operations, market position, or services can be derived. The technical infrastructure is limited to the embedded game scripts and styles used by Chrome for offline error handling. Security posture cannot be evaluated due to lack of real website content or headers. Overall, the site is inaccessible for meaningful analysis and appears to be a placeholder or error page rather than a functional website.

M

Magic

ddb.lv

54

Magic is a full-service advertising agency based in the Baltics, recognized as the Baltic Agency of the Year 2024. The company specializes in delivering integrated marketing solutions including campaigns, strategy, design, digital solutions, production, and activations. Their target audience primarily consists of major Baltic brands seeking comprehensive advertising services. The website is built on modern web technologies using Webflow CMS and hosting, featuring professional design and good mobile optimization. Google Analytics is used for user tracking, though privacy compliance measures such as cookie consent and privacy policies are lacking. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Overall, the website presents a credible business presence but lacks some compliance and security best practices.

S

SIA ARKOLAT

arkolat.lv

58

SIA ARKOLAT operates a professional e-commerce platform specializing in kitchenware and household goods, serving primarily the Baltic region. The company positions itself as a leading provider in this sector, offering a wide range of products for cooking, serving, and household needs. The website supports multiple languages and provides a comprehensive catalog with pricing, user accounts, and shopping cart functionality. Technically, the site uses modern web technologies including JavaScript libraries and Google Fonts, with a moderate performance profile and good mobile optimization. Security measures include HTTPS enforcement and CSRF token usage, though some security headers are missing and no vulnerability disclosure or privacy policy pages were found. Overall, the website is functional and professional but could improve in privacy compliance and security transparency.

The website lnxi.com is a parked domain landing page primarily serving as a placeholder for domain sale inquiries. It lacks substantive business content, contact information, or any clear indication of an active business operation. The site is heavily monetized through advertising scripts from Google and third-party ad networks, indicating a business model focused on domain parking and ad revenue rather than direct service or product offerings. The technical infrastructure is basic, relying on standard HTML, JavaScript, and cloud-based CDN assets, with no detected CMS or advanced frameworks. Security posture is minimal, with no DNSSEC, security headers, or HTTPS enforcement visible in the content, and no privacy or cookie consent mechanisms implemented. Overall, the site presents a low trust profile and limited business credibility.

H

Homoecos.lv

homoecos.lv

53

Homoecos.lv is an independent Latvian-language informational website focused on online gambling, providing detailed guides, reviews, and explanations about online casinos, games, bonuses, and legal regulations in Latvia. The site targets Latvian online gambling players ranging from beginners to experienced users, offering comprehensive content to help users navigate the online gambling environment responsibly. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with a responsive design optimized for mobile devices. The website is accessible without any WAF or security blocking mechanisms detected. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site presents a professional and consistent brand image with good content quality and user experience but could improve privacy compliance and security best practices.

T

Two Daughters Entertainment Ltd

twodaughtersentertainment.com

58

Two Daughters Entertainment Ltd is a British animation film studio specializing in children's television and animated feature films. Founded in 2016 by James Reatchlous, the company has a growing presence in the media industry with a focus on family-friendly content. Their website reflects a professional and consistent brand image, targeting children and families interested in animation. The company is expanding its portfolio with upcoming feature films and maintains active social media channels to engage its audience. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with animations powered by Animate.css and tracking implemented via Google Analytics. The site is hosted with domain control services consistent with UK-based businesses and is optimized for mobile devices with good navigation and content relevance. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are present, and there is no visible consent mechanism for tracking, which poses compliance risks under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security practices. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would reduce risk and increase trustworthiness among users and partners.

M

Material para Crossfit®, Gimnasio y Fitness | Maniak Fitness

maniakfitness.com

51

Maniak Fitness operates a professional e-commerce website specializing in Crossfit®, gym, and fitness equipment primarily targeting the Spanish market and European customers. The site offers a broad catalog of products including Cross Training gear, Functional training equipment, Weightlifting and Powerlifting accessories, Cardio machines, and Apparel. The business appears established with a domain age of over 10 years and consistent registration data. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics, and is mobile optimized with good SEO practices. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy, terms of service, and security headers. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site demonstrates a solid business presence with room for improvement in privacy and security transparency.

N

Net Affinity Ltd.

netaffinity.io

62

Net Affinity Ltd. operates an application platform accessible at app.netaffinity.io, likely serving the hospitality or travel technology sector. The website is primarily a login portal with minimal public-facing content, indicating a focus on existing customers or internal users. The technical infrastructure includes modern iconography via Font Awesome and bot mitigation through Google reCAPTCHA, reflecting a baseline digital maturity. However, the absence of visible privacy, cookie, or terms of service policies, along with no contact information, limits transparency and user trust. The WHOIS data is unavailable due to a malformed request or privacy protection, which further constrains trust assessment. Security measures are basic but include HTTPS and reCAPTCHA, though security headers and advanced protections are not evident. Overall, the site presents a moderate risk profile with room for improvement in transparency, compliance, and security hardening.

L

LIDO

lido.lv

63

LIDO is a Latvian hospitality business focused on providing fresh, authentic, and quality food with a democratic approach to choice, price, and taste nuances. The website targets Latvian-speaking consumers and positions itself as a trusted local brand in the food service industry. The digital infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Cookiebot for cookie consent, Google Tag Manager, Facebook Pixel, and reCAPTCHA for bot protection. The website is served over HTTPS with a valid SSL certificate, ensuring secure communication. However, explicit privacy policy and terms of service pages were not detected in the provided content, which may impact compliance and user trust. The security posture is generally good with HTTPS and consent mechanisms but lacks explicit security headers and detailed contact information for incident response. Overall, the website demonstrates a professional and trustworthy online presence with room for improvement in privacy transparency and security best practices.

SODECA is a Portuguese manufacturer specializing in industrial ventilation and exhaust solutions, including smoke control, tunnel ventilation, stair pressurization, and indoor air quality improvement. The company maintains a strong international presence with multiple country-specific websites, targeting industrial clients and technical professionals. Their business model combines manufacturing with direct sales, supported by online tools and technical consultancy services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates analytics and advertising tools like Google Analytics, Google Tag Manager, and Bing Ads. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks explicit security headers and published security policies or incident response contacts. Overall, the security posture is solid but could be improved by implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process. The domain WHOIS data aligns well with the business claims, supporting legitimacy. The website provides comprehensive contact information and privacy compliance features, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

AERMEC Deutschland GmbH operates in the energy sector, likely focusing on HVAC solutions, serving customers and business partners primarily in Germany. The website is currently under construction and undergoing modernization, limiting available online services and content. The company provides direct contact channels via phone and email, indicating a traditional business communication approach. Technically, the website is simple, built with basic HTML and CSS without advanced frameworks or CMS. It is hosted on UI-DNS nameservers, suggesting a standard hosting environment. Mobile optimization and accessibility are basic, and SEO practices are minimal. No analytics or tracking technologies are detected, reflecting a low digital maturity level. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The email contact link is malformed, which could impact usability and security. HTTPS status is unknown but assumed necessary. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is basic with room for improvement. The overall risk is moderate due to limited content and security features. Strategic recommendations include implementing HTTPS, fixing contact link issues, adding security headers, and introducing privacy and cookie policies to improve compliance and trust.

Sigma Technology Origo is a Sweden-based technology consulting company specializing in connecting business-critical information sources to empower data-driven decision making and personalized experiences. The company offers a range of services including Aftersales Digital Twin, Workshop solutions, Diagnostics, Renderpoint/Topicpack, and a cloud-based CCMS platform called Studio. It operates as part of the Sigma Technology Group, a global technology consulting firm with a presence in multiple countries and owned by Danir AB. The website content is professional and clearly targets businesses seeking advanced technology and digital solutions. Technically, the website uses standard web technologies such as HTML5, CSS, and JavaScript with jQuery, and is moderately optimized for mobile and performance. Security posture is moderate with HTTPS assumed but lacking explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain is well-established and trustworthy, with no blocking or WAF detected.

Airvent Légtechnikai Zrt. is a well-established Hungarian manufacturer specializing in innovative ventilation and air handling products. Founded in 1999, the company offers a broad portfolio of HVAC-related products and services, including design support, customer service, and commissioning. Their market position is solid within Hungary and surrounding regions, targeting professional customers in industrial and residential ventilation sectors. The website reflects a mature digital presence with multilingual support and detailed product information. Technically, the site employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, with secure HTTPS and CSRF protections on forms. However, explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, secure, and trustworthy, supporting the company's credibility and business operations.

G

Global Water Partnership Organisation Gwpo

gwpo-gwp.org

61

The Global Water Partnership Organisation (GWPO) operates as a global action network focused on advancing water governance and climate-resilient investments to promote sustainability and equity. The website presents basic information about the organization's mission and target audience, primarily stakeholders interested in water governance and climate resilience. The business model is that of a non-profit global network with a medium organizational size and a founding year indicated as 2025, which appears inconsistent with the organization's global positioning. Technically, the website is built using the Weblium platform, employing standard web technologies such as HTML5, CSS, and JavaScript. Hosting is provided by Loopia, with no advanced frameworks or analytics tools detected. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing domain and web security. There is no visible security policy, incident response information, or vulnerability disclosure mechanisms. The WHOIS data raises concerns due to a domain creation date set in the future (2025), which is unusual and undermines trust in the domain's legitimacy. Overall, the website provides basic content and functionality but lacks critical privacy, security, and compliance features. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and clarifying domain registration details to improve trustworthiness and compliance.

F

Fibes

eatfibes.com

63

Fibes is a small Estonian e-commerce business specializing in functional fruit purees rich in dietary fibers, targeting active individuals seeking digestive health support. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party integrations for customer reviews, analytics, and marketing. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and domain transfer lock, though improvements such as enabling DNSSEC and publishing comprehensive privacy and terms policies are recommended. Overall, the business appears legitimate and digitally mature for its size and market niche.

Ravijuhend.ee is a healthcare information portal coordinated by Tartu Ülikool and funded by Tervisekassa, providing evidence-based medical guidelines and patient instructions primarily for Estonian healthcare professionals and patients. The website serves as a trusted source for treatment guidelines, patient care instructions, and related educational content, positioning itself as a key national resource in Estonia's healthcare sector. Technically, the site employs modern web standards including HTTPS, Cloudflare DNS, and uses popular web fonts and iconography, delivering a professional and accessible user experience with good mobile optimization and SEO practices. Security-wise, the site benefits from HTTPS and secure form handling but lacks advanced DNS security (DNSSEC) and security headers, and does not publish privacy or cookie policies, which are important for GDPR compliance. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security hardening to improve compliance and user trust.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which serves as a local offline or error display, including the embedded Chrome Dino game. No external website content, business information, or contact data is present. The page is not a public website but a browser internal resource, thus no typical business or compliance information is available. The technical infrastructure is minimal, relying on Chromium's internal scripts and styles. Security posture is limited to the browser's internal environment with no external SSL or headers applicable. Overall, this page cannot be evaluated as a commercial or organizational website.

The website www.easywl.com hosts content related to the EWF CHISINAU 2025 weightlifting championship, providing event schedules, results, protocols, and live scoreboard embeds. The site targets weightlifting athletes, officials, and fans, serving as an informational portal for the event. The business model is focused on event information dissemination with no evident commercial transactions or user data collection. Technically, the site is basic, built with standard HTML and CSS, embedding YouTube videos for live content. There is no detected CMS or advanced frameworks, and the site lacks modern SEO and accessibility features. Security posture is minimal with no visible security headers or HTTPS confirmation in the data provided. The absence of privacy, cookie policies, and contact information indicates low compliance with data protection regulations. WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site functions as a niche event information platform but lacks professional security and compliance maturity.

M

Murimäe veinikelder

murimaevein.ee

43

Murimäe veinikelder is a small Estonian hospitality business operating the world's northernmost terraced vineyard. The company offers a combination of e-commerce wine sales, wine tastings, accommodation, and event hosting, targeting wine enthusiasts and tourists. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS and nonce usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the business presents a professional online presence with clear offerings but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

The website www.norway-hei.com is a personal informational site focused on Norwegian culture, history, food, and language, created by a native author. It serves a niche audience interested in authentic Norwegian experiences and provides rich content including stories, recipes, and cultural insights. The business model appears to be primarily advertising-based, leveraging Google Adsense and related ad networks. Technically, the site is built on the SBI! CMS platform with standard HTML, CSS, and JavaScript, but lacks advanced frameworks or modern infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. Security posture is moderate with HTTPS enabled but missing important security headers and policies. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which impacts privacy compliance and business credibility. Critically, WHOIS data for the domain is missing or unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires significant improvements in security, compliance, and transparency to enhance trust and professionalism.

The website ramkool.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian company specializing in domain registration and web hosting services. The site primarily serves as a placeholder informing visitors that the domain is registered but not linked to any hosting service, while promoting Zone Media OÜ's hosting packages in multiple languages. The business operates in the technology sector, focusing on web hosting solutions for small to medium clients, with offerings including Wordpress one-click installs, SSL certificates, and dedicated IP addresses. The domain has been registered since 2010, indicating a stable presence in the market. Technically, the website is simple, built with standard HTML, CSS, and JavaScript, and optimized for mobile devices with a responsive design. The hosting provider is clearly Zone Media OÜ, and the site uses HTTPS for external links but does not host active content on the domain itself. Security headers are minimal but include a Content-Security-Policy. No analytics or tracking scripts are detected, and no forms or user input fields exist on the page. From a security perspective, the site has a basic posture with no visible vulnerabilities or exposed sensitive data, but lacks comprehensive privacy, cookie, or security policies. There is no contact information or incident response details provided, which limits transparency and user trust. The WHOIS data is consistent and legitimate, with no privacy protection, matching the hosting provider's identity. Overall, the site functions as a parked domain with promotional content for hosting services. The risk is low given the limited functionality, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

P

Põllumajanduse Registrite ja Informatsiooni Amet (PRIA)

pria.ee

55

PRIA (Põllumajanduse Registrite ja Informatsiooni Amet) is the official Estonian government agency responsible for managing agricultural subsidies, registers, and providing information services to farmers and rural entrepreneurs. The website serves as a comprehensive portal offering subsidy information, registers, news, and e-services such as the e-PRIA login portal. The site targets Estonian agricultural stakeholders and the general public interested in rural development. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics and business intelligence tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and shows no signs of exposed sensitive data or vulnerabilities. Overall, the website demonstrates a strong security posture and good privacy compliance, supporting its role as a trusted government resource.

The website mirko.ee is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, which blocks access to any substantive content. The domain is registered with Zone Media OÜ in Estonia since 2022, indicating a relatively new but legitimate registration. Due to the WAF challenge, no business information, contact details, or policies are visible, limiting the ability to assess the company's operations or compliance posture. The technical infrastructure relies on Cloudflare services for security and performance, but no additional frameworks or CMS platforms are detectable. Security headers and privacy compliance measures are not observable due to the blocked content. Overall, the site appears to be protected by Cloudflare's security mechanisms but lacks publicly accessible information for a full evaluation.

E

Eesti Korvpalliliit

basket.ee

43

Eesti Korvpalliliit is the official governing body for basketball in Estonia, managing national teams, leagues, coaching, refereeing, and basketball development programs. The organization holds a strong market position as the primary basketball authority in Estonia, supported by sponsorship from Swedbank. The website provides comprehensive content including news, events, galleries, and contact information, targeting basketball players, coaches, referees, and fans within Estonia. Technically, the site uses a custom CMS with jQuery, Owl Carousel, and Google Tag Manager, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements like updated libraries and security headers are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

L

Luuletus.ee

luuletus.ee

60

Luuletus.ee is a well-established Estonian online platform dedicated to poetry, offering a large collection of poems with daily updates. It targets Estonian poetry enthusiasts and writers, providing services such as poem publishing, sharing, user accounts, and curated collections. The platform is owned by Zone Media OÜ and has been operational since 2011, positioning itself as the largest Estonian poetry repository online. Technically, the website employs modern web technologies including HTTPS, Cloudflare CDN, Google Analytics, and lazy loading for images, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and uses service workers but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is addressed with a visible cookie consent mechanism and a basic privacy policy aligned with GDPR requirements. Overall, the website demonstrates a solid business credibility and technical maturity with room for security enhancements.

E

Erasmus+ ja Euroopa Solidaarsuskorpuse agentuur

euroopanoored.eu

46

The website represents the Erasmus+ and European Solidarity Corps national agency in Estonia, providing comprehensive information, resources, and support for youth, youth workers, and organizations involved in European youth programs. It serves as a government-funded platform facilitating access to program opportunities, project guidance, and community engagement. The site is well-positioned as the authoritative national agency for these programs, targeting youth and professionals in the youth sector. Technically, the website is built on WordPress with modern performance and SEO optimizations, including WP Rocket and The SEO Framework. It employs Google Site Kit for analytics and consent management, ensuring GDPR compliance with a robust cookie consent mechanism. The site is mobile-optimized, accessible, and fast-loading, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs consent mode to restrict tracking and personalization. While explicit security headers and incident response policies are not evident, no vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the agency's Estonian identity, registered through a reputable local registrar without privacy protection, appropriate for a government entity. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy and professional platform for its audience.

E

Eduten Ltd.

eduten.com

65

Eduten Ltd. operates a leading digital math learning platform originating from Finland, combining Finnish educational excellence with gamification and AI technologies. The platform targets K-12 students, teachers, school leaders, and parents worldwide, offering a comprehensive content library and AI-driven learning analytics. It holds a strong market position supported by over 15 years of university research and international awards such as the UNESCO ICT for education prize and UNICEF special edtech award. Technically, the website employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly digital education platform.

EELIS (Eesti looduse infosüsteem) is an official Estonian government-operated environmental data portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides public access to nature conservation data, statistical analyses, and educational content about protected natural objects and areas in Estonia. The website targets researchers, environmental professionals, and the general public interested in Estonian nature data. The business model is non-commercial, focusing on transparency and public information dissemination. Technically, the website uses basic HTML and CSS without modern JavaScript frameworks or CMS detected. Hosting is provided by Zone Media OÜ, a reputable Estonian registrar and hosting provider. The site is functional but has limited mobile optimization and accessibility features. SEO and metadata are minimal, and no analytics or tracking services were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and contact information is limited to a feedback form without direct emails or phone numbers. The WHOIS data is consistent and legitimate, indicating a stable domain with no suspicious patterns. Overall, the website is trustworthy and credible as a government information portal but would benefit from enhanced security headers, privacy compliance documentation, and improved technical modernization to strengthen its security posture and user experience.

H

Harjumaa Omavalitsuste Liit

hol.ee

51

Harjumaa Omavalitsuste Liit is a regional non-profit organization established in 2010 to foster cooperation and joint project development among local governments in Harjumaa, Estonia. The website serves as an information hub for governance, education, culture, health, safety, and regional development initiatives. It targets local government representatives, educational and cultural institutions, and the general public within the Harjumaa region. The organization positions itself as a key regional cooperation leader with a focus on community well-being and development. Technically, the website is built on a modern stack including Laravel Livewire, jQuery, and various JavaScript libraries for UI enhancements. It employs Google reCAPTCHA v3 for form security and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes CSRF tokens and reCAPTCHA to protect user inputs. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities were found in the analysis. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional government entity. Recommendations include enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen security posture and transparency.

The website kalmistud.ee serves as the official Estonian cemetery portal, providing information and e-services related to cemeteries, burial places, and related administrative functions. It targets Estonian residents, municipalities, and cemetery administrators, offering a centralized platform for searching burial information and managing burial plots. The site is operated by Spin TEK AS, a registrar and hosting provider consistent with the domain registration data. Technically, the site uses modern web technologies including JavaScript and CKEditor, with a responsive and accessible design. Security posture is moderate with HTTPS enabled and CSRF protection on forms, but lacks visible security headers and comprehensive privacy compliance documentation. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security disclosures.

O

OÜ Oesel

huviregister.ee

41

Huviregister.ee is a specialized Estonian platform designed to manage hobby groups and their participants, primarily serving municipalities, hobby education providers, and parents. The service facilitates data collection, subsidy calculations, billing, and reporting related to hobby activities, supporting both public and private sector hobby schools. The platform is operated by OÜ Oesel, a small Estonian company founded in 2020. The website content is clear and relevant, though it lacks comprehensive legal and privacy documentation. Technically, the site uses a simple stack with HTML, CSS, and jQuery, hosted under a domain registered with Zone Media OÜ. Security posture is moderate but could be improved by enabling DNSSEC and adding security headers. No blocking or WAF mechanisms were detected, allowing full content access.

The website tamsalusport.ee is currently a parked domain page indicating that the domain is registered but not linked to any hosting service. It primarily serves as a placeholder to promote web hosting packages offered by Zone Media OÜ, the domain registrar and hosting provider. The site is multilingual, targeting Estonian, Russian, Finnish, and English speakers, and offers basic information about hosting plans including pricing and features. There is no active business content or contact information on the site, reflecting its placeholder status. From a technical perspective, the site uses standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is Zone Media OÜ, consistent with the WHOIS data. The site is mobile responsive and has basic SEO and accessibility features but lacks comprehensive metadata or structured data. Security headers are minimal, with only a Content-Security-Policy allowing unsafe-inline scripts, and DNSSEC is not enabled, which is a security gap. Security posture is limited due to the lack of HTTPS linkage on the domain, absence of security best practices, and no privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate privacy risks but also indicating no active user engagement. The WHOIS data shows a recent domain registration consistent with the placeholder nature of the site. There are no suspicious patterns or privacy protection used, and the registrant matches the hosting provider, supporting legitimacy. Overall, the site is low risk but also low value in terms of business credibility and privacy compliance. It is recommended to enable DNSSEC, implement HTTPS hosting, add privacy and cookie policies, and provide contact information to improve trust and compliance. Until the domain is linked to an active website, the site remains a basic parked domain page with limited content and security features.

The website livekluster.ehr.ee is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. This indicates a strong security posture at the perimeter, likely to protect sensitive electronic health record (EHR) data. However, due to the content being blocked, no business or contact information, privacy policies, or terms of service are visible, limiting the ability to assess the company's market position or services. The technical infrastructure leverages Cloudflare's security and performance services, but the lack of visible content and metadata results in poor content quality and SEO. Security best practices are partially implemented through WAF and bot mitigation, but no additional security headers or policies are observable. Overall, the site demonstrates a high-security perimeter but lacks transparency and compliance disclosures in the accessible content.

T

The Hertz Corporation

hertz.co.uk

67

The Hertz Corporation operates a comprehensive car and van rental service platform targeting customers primarily in the UK and worldwide. The website offers a broad range of services including daily car hire, electric vehicles, long-term business rentals, and van hire, supported by loyalty programs such as Gold Plus Rewards. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the platform leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Stripe for payments, alongside security tools like Google reCAPTCHA Enterprise and a cookie consent mechanism powered by Securiti.ai. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. WHOIS data for the subdomain queried is unavailable due to Nominet rules, but the main domain is legitimate and consistent with the business. Overall, the website demonstrates a mature digital presence with robust security and privacy practices.

R

Rakvere Vallavalitsus

rakverevald.ee

50

Rakvere Vallavalitsus operates as the local government authority for the Rakvere municipality in Estonia, providing a wide range of public services including administration, social welfare, education, culture, and infrastructure management. The website serves as an official portal for residents and stakeholders, offering comprehensive information and access to municipal resources. The organization holds a stable position as a government entity with a medium-sized operational scope focused on community services. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Fonts, Font Awesome, and Google Maps API. The site demonstrates moderate performance and good mobile optimization, with a structured navigation system and professional design. However, the use of an outdated jQuery version introduces potential security risks that should be addressed. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good baseline security posture. There is no evidence of exposed sensitive data or insecure forms. Nonetheless, the absence of a cookie consent mechanism and explicit security or incident response policies indicates gaps in privacy compliance and security transparency. The site does not appear to use advertising or tracking services, which aligns with its public sector nature. Overall, the website is trustworthy and professional, with strong business credibility as a government portal. Strategic improvements in updating libraries, enhancing privacy compliance, and publishing security policies would further strengthen its security posture and user trust.

The domain xn--jgeva-dua.ee is registered with Zone Media OÜ, an Estonian registrar, since 2017. The website is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to actual content. No business-related content, contact information, or policies are visible, indicating the site is either under protection or not publicly available. The technical infrastructure relies on Cloudflare for security and performance, but lacks DNSSEC and security headers, which are recommended for enhanced security. The SSL configuration is basic but present. Overall, the website's digital maturity is low due to the lack of accessible content and minimal technical optimizations.

A

Alutaguse vald

alutagusevald.ee

53

Alutaguse vald operates as a local government entity in Estonia, providing a broad range of public services including social welfare, environmental management, urban planning, and cultural activities. The website serves as an information portal for residents and stakeholders, offering detailed navigation to various municipal services and administrative resources. The business model is typical of a public sector organization focused on community service and governance. The website is positioned as an official government resource with a clear focus on transparency and accessibility to local information. Technically, the website is built on the Liferay CMS platform, utilizing standard web technologies such as jQuery, Google Fonts, and Font Awesome. It integrates Google Tag Manager for analytics and tracking purposes. The site demonstrates moderate performance and good mobile optimization, with a structured and consistent design. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the website enforces HTTPS and implements several security headers, indicating a good baseline security posture. There are no visible vulnerabilities or exposed sensitive data. However, the absence of an explicit cookie consent mechanism and published security or incident response policies suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the website's government affiliation. Overall, the website presents a trustworthy and professional front for the Alutaguse vald municipality, with solid technical and security foundations. Strategic enhancements in privacy compliance, accessibility, and security policy transparency would further strengthen its position and user trust.

P

Puolustusministeriö

defmin.fi

59

Puolustusministeriö is the Finnish Ministry of Defence responsible for national defence policy, international cooperation, and administrative oversight. The website serves as an authoritative government portal providing comprehensive information on defence themes, current news, licensing, and organisational details. It targets Finnish citizens, government officials, and defence sector stakeholders, positioning itself as a key national government entity. Technically, the site employs modern web standards including HTML5, CSS3, jQuery, and FontAwesome, with responsive design and accessibility features ensuring good user experience across devices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its role as a government information source.

E

Elixir OÜ

elixir.ee

39

Elixir OÜ is a small Estonian creative agency founded in 2011, specializing in website creation, branding, and web marketing with a strong emphasis on integrating digital and physical solutions. The company has a solid market position locally with a diverse portfolio and official partnerships, indicating a stable business model focused on service delivery to other businesses. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers. Security posture is adequate with HTTPS usage implied, secure form handling, and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would improve its risk profile.

R

www.RigaCamping.lv

rigacamping.lv

43

RigaCamping.lv is a small hospitality business providing camping accommodations in Riga, Latvia. The website offers information about camping services including tent and motorhome rentals, secure camping spots with electricity, and an online reservation system that provides a discount for bookings made through the site. The target audience consists primarily of tourists and campers visiting Riga and nearby areas. The business operates locally with a clear focus on outdoor accommodation services. Technically, the website is built using standard HTML5, CSS (W3.CSS), and JavaScript, integrating Google Analytics and Twitter widgets for tracking and social media presence. The site is mobile optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners and privacy policies. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. Nevertheless, it lacks important security headers like Content Security Policy and HSTS, and there is no visible security or incident response policy. The embedded reservation form collects user data but its security posture is unknown. The site uses Google Analytics and Tag Manager, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the website is functional and professional for a small local hospitality business but has notable gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and incident response information would enhance trust and compliance. The domain WHOIS data is consistent with the business location and shows no suspicious patterns, supporting the legitimacy of the site.

B

brandspot.eu is available for purchase - Sedo.com

brandspot.eu

53

Sedo.com operates as a well-established domain marketplace platform, offering domain sales and brokerage services globally. The analyzed page is a domain sales landing page for the domain brandspot.eu, indicating availability for purchase. The business targets domain investors and buyers, leveraging a long-standing presence since 1998. Technically, the site employs modern JavaScript modules and Cloudflare DNS services, ensuring reliable hosting and moderate performance with good mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is limited, with no explicit privacy or terms of service policies found, but a cookie consent mechanism is present. Contact and incident response information are absent, reducing transparency. Overall, the domain registration data aligns well with the business purpose, indicating legitimacy and trustworthiness.