Security Directory

A

AirProxy AS

airproxy.eu

46

AirProxy AS is a specialized General Sales and Service Agent (GSSA) company with 30 years of experience serving passenger and cargo airlines in the Baltic region through offices in Tallinn, Riga, and Vilnius. The company focuses on providing representation and support services to airlines, positioning itself as a trusted partner in the transportation sector. The website is built on WordPress and employs standard web technologies, offering a professional and consistent user experience with good mobile optimization and navigation clarity. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security posture and privacy compliance. HTTPS is properly implemented, ensuring secure communication. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy best practices. Overall, the website reflects a credible small business with room for improvement in security and compliance documentation.

E

Eesti Ajaloomuuseum SA

ajaloomuuseum.ee

41

Eesti Ajaloomuuseum SA operates as a leading historical museum in Estonia, providing cultural and educational services through multiple exhibition venues including the Film Museum, Theatre and Music Museum, Great Guild Hall, and Maarjamäe Castle. The website targets museum visitors, families, and cultural tourists, offering detailed information on exhibitions, events, and visitor planning. The business model is public/governmental, focusing on cultural preservation and education with a medium organizational size and established presence since 2010. Technically, the website is built on the Voog CMS platform, hosted by Zone Media OÜ, and employs modern web standards with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security policies and vulnerability disclosure would enhance trust further.

B

Bizberg Themes

bizbergthemes.com

58

Bizberg Themes is a small technology business specializing in the development and distribution of free and premium WordPress themes tailored for various sectors including education, NGOs, business, and eco-friendly organizations. The company emphasizes fast loading, SEO optimization, and user-friendly design, supported by dedicated customer service. Technically, the website is built on WordPress CMS, hosted behind Cloudflare CDN, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks comprehensive security headers and cookie consent mechanisms, which are areas for improvement. Overall, the website is professional and trustworthy with clear business focus, though privacy compliance could be enhanced.

I

INHUS Prefab, UAB

inhusprefab.eu

45

INHUS Prefab, UAB is a medium-sized manufacturing company specializing in prefabricated reinforced concrete structures and architectural concrete facade elements. Operating primarily in Lithuania with projects extending to Nordic countries and the UK, the company positions itself as a reliable regional player in the construction sector. Their website reflects a professional digital presence with clear navigation, multilingual support, and a portfolio of completed projects. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for user tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks advanced security headers and public security policies. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is transparent and includes company email, phone, and physical address. Overall, the website demonstrates good business credibility and digital maturity with room for security enhancements.

I

INHUS Engineering

inhusengineering.eu

18

INHUS Engineering is a medium-sized engineering firm specializing in structural design services for various building types, primarily serving clients in Lithuania and Scandinavian countries. The company employs over 100 engineers and utilizes advanced 3D modeling and calculation software to deliver precise and reliable project outcomes. Their website reflects a professional and consistent brand image, showcasing a broad portfolio of projects and maintaining active social media channels. Technically, the website uses modern web standards and integrates Google Analytics for visitor tracking. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though it lacks advanced security headers and explicit security policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

Advokaadibüroo RASK is a leading Estonian law firm established in 2012, offering a broad range of professional legal services across multiple sectors including energy, transport, technology, healthcare, government, real estate, and finance. The firm targets Estonian businesses and individuals seeking tailored legal advice and support. Their market position is strong within Estonia, supported by a professional website showcasing detailed service areas, client case studies, and a well-presented team of partners and lawyers. The business model focuses on providing expert legal consultancy and representation.

Whyservices OÜ is a small Estonian technology company specializing in custom system administration, application hosting, and IT infrastructure consulting. Their website presents a professional image with clear service offerings including infrastructure consulting, Wordpress hosting via WellPress, containerized application hosting via WellHost, and Ruby on Rails development. The company targets digital agencies and small to medium businesses seeking tailored IT solutions. Technically, the website is built with modern HTML5, CSS3, and Tailwind CSS, and is mobile optimized with moderate performance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional web presence. Overall, the site scores well in content quality and business credibility but needs enhancements in privacy compliance and security best practices.

P

Põhjala Brewery

pohjalabeer.com

46

Põhjala Brewery is an established Estonian craft beer producer with a diverse portfolio of beers including lagers, IPAs, porters, and non-alcoholic options. The company leverages its heritage and local nature inspirations to create unique beer flavors, targeting craft beer enthusiasts and event attendees. The website reflects a medium-sized hospitality business with a professional and consistent brand presence. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, with good mobile optimization and SEO practices. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enforced but missing DNSSEC and security headers. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but could improve privacy compliance and security hardening.

U

U.S. Agency for International Development

usaid.gov

71

The U.S. Agency for International Development (USAID) operates as a U.S. government agency focused on international development and humanitarian assistance worldwide. The website content reflects official communications, such as administrative leave notifications for personnel, underscoring its role in managing overseas and domestic operations. The agency serves government personnel, international partners, and the public interested in foreign aid programs. The business model is government-funded, with a strong emphasis on mission-critical functions and overseas program management. Technically, the website employs a simple and clean infrastructure using standard HTML5, CSS, and Google Fonts. There is no evidence of advanced frameworks or CMS platforms in the provided content. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a minimalistic approach to user data collection. From a security perspective, the site appears to use HTTPS (implied by the .gov domain), but no security headers or explicit SSL configuration details were found in the provided data. The absence of privacy and cookie policies, as well as contact information, represents compliance gaps. The WHOIS data is incomplete but consistent with government domain privacy practices, supporting the legitimacy of the domain. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a high level of business credibility due to its official government status and consistent branding. However, technical and privacy compliance aspects could be improved to enhance security posture and user trust. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information.

O

OpenSpeedTest™

openspeedtest.com

45

OpenSpeedTest™ is a technology-focused company providing a free, open-source HTML5 internet speed testing tool accessible via any modern web browser without requiring plugins like Flash or Java. Established in 2013, the company targets a broad audience including individual internet users, website and app owners, and enterprise infrastructure operators. Their business model centers on offering free tools supported by advertising and self-hosted deployment options. The website demonstrates a mature technical infrastructure leveraging modern web standards, Google analytics and advertising services, and a reliable CDN provider (Cachefly) to ensure fast and responsive user experiences across devices. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring a detailed consent management platform aligned with GDPR requirements. However, the site lacks explicit Terms of Service and incident response contact details, which could enhance trust and compliance. Overall, OpenSpeedTest™ presents a professional, trustworthy, and technically sound online presence with room for improvement in formal policy disclosures and direct contact information.

I

INHUS

inhus.eu

48

INHUS is a Lithuanian-based construction and manufacturing company specializing in precast reinforced concrete building structures, operating primarily in Lithuania and Northern Europe. The company follows a design-build business model integrating design, production, and construction services. Their website presents a professional portfolio of projects and maintains a consistent brand image across multiple subsidiary domains. Technically, the website uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. Overall, the site is trustworthy and well-maintained, supporting INHUS's market position as a regional player in the construction sector.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The company targets mobile development teams seeking to automate and accelerate their build, test, and release pipelines. With over 150,000 developers trusting the platform and notable clients showcased, Codemagic holds a strong market position as a focused mobile CI/CD solution. Technically, the website is modern, fast, and mobile-optimized, leveraging cloud hosting on AWS and integrating analytics tools such as Google Tag Manager and Plausible Analytics. Security posture is robust, with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and GDPR/CCPA compliance clearly stated. However, DNSSEC is not enabled and no public security.txt or incident response contacts were found, representing areas for improvement. Overall, the platform demonstrates a mature digital presence with strong trust signals and compliance adherence.

The website unitycicd.com serves as a dedicated landing page for Codemagic's Unity CI/CD automation services, operated by Nevercode Ltd. It targets Unity game developers and teams by offering cloud-based continuous integration and delivery solutions that simplify building, testing, and publishing games to multiple platforms including Google Play, Apple App Store, Steam, and Oculus Store. The site is well-branded, consistent with the parent Codemagic platform, and provides extensive documentation and community support links, positioning itself as a mature player in the CI/CD market for game development. Technically, the site is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging Google Tag Manager and Plausible Analytics for tracking. Hosting is inferred to be on AWS based on DNS nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. No CMS is detected, indicating a custom-built solution. Security is robust with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. From a security posture perspective, the site demonstrates good practices such as cookie consent and a published security statement. However, it lacks explicit vulnerability disclosure mechanisms and incident response contact details. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent domain registration and no privacy protection, enhancing trust. Overall, unitycicd.com is a professional, secure, and trustworthy website that effectively supports Codemagic's Unity CI/CD offering. Strategic improvements in DNS security and explicit vulnerability disclosure would further strengthen its security and compliance posture.

Nevercode Ltd. operates the Flutterci.com website, providing specialized continuous integration and continuous delivery (CI/CD) services for Flutter developers. The platform supports building, testing, and deploying Flutter applications across multiple platforms including mobile, web, and desktop. Positioned as a leading CI/CD provider in the Flutter ecosystem, the company targets mobile app developers seeking streamlined DevOps pipelines. The website reflects a mature SaaS business model with a focus on developer productivity and automation.

I

Interactive Advisors

interactiveadvisors.com

76

Interactive Advisors is a well-established robo-advisor platform affiliated with Interactive Brokers Group, offering low-cost, diversified investment portfolios with a focus on transparency and ease of use. The platform targets retail investors seeking automated portfolio management and self-directed trading options. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong trust signals including SEC registration and SIPC protection. Technically, the site uses modern web technologies, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site reflects a credible and mature financial service provider with a solid digital presence.

Stuudium operates an e-school platform primarily targeting students, parents, and teachers in Estonia. The website serves as a portal for users to select their school and log in to the platform. The business model is SaaS-based, providing educational institutions with digital tools for school management. The platform appears to have a moderate market position within the Estonian education sector, focusing on usability and accessibility for its target audience. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with assets hosted on a dedicated CDN domain. The site is basic in design and functionality, with minimal content and limited SEO or accessibility features. Mobile optimization is present but basic. No advanced frameworks or CMS platforms are detected from the provided HTML. From a security perspective, the site uses HTTPS (assumed from external asset URLs), but no explicit security headers or policies are visible. The form disables autocomplete and autocorrect to enhance input security. However, the absence of privacy, cookie, and terms of service policies indicates gaps in compliance with GDPR and other regulations. No contact or incident response information is provided, limiting transparency and trust. Overall, the website is functional but basic, with moderate business credibility but limited privacy and security maturity. Strategic improvements in compliance documentation, security headers, and user trust signals are recommended to enhance the platform's security posture and regulatory adherence.

P

Placet Group OÜ

laen.ee

68

Laen.ee is a well-established Estonian financial services provider specializing in a variety of loan products including credit cards, credit lines, consumer loans, and business loans. The company targets both private individuals and businesses within Estonia, offering flexible and user-friendly loan solutions. The website reflects a mature digital presence with clear service descriptions, a modern UI, and localized content in Estonian. Technically, the site employs standard web technologies such as JavaScript, jQuery, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be enhanced. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

E

Einwohnergemeinde Cham

cham.ch

54

The Einwohnergemeinde Cham website serves as the official digital presence for the municipality of Cham, Switzerland. It provides comprehensive information and services related to local governance, community life, infrastructure, environment, education, and events. The site targets residents and visitors seeking municipal services and information. The business model is that of a government entity providing public services and information digitally. The website is well-branded, consistent, and includes trust indicators such as official contact details and certifications like Energiestadt GOLD. Technically, the site uses a modern CMS platform (i-web.ch) with Bootstrap for responsive design, ensuring good mobile optimization and accessibility. The performance is moderate with proper SEO and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is good, with clear privacy and cookie policies and user consent mechanisms. Overall, the site is trustworthy and professional, with clear contact information and partner links to regional and cantonal entities. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security posture.

D

DinoMatic

dinomatic.com

68

DinoMatic is a specialized technology company providing WordPress themes, plugins, and custom CMS solutions tailored for gambling affiliate marketers focusing on casino, sports betting, and Forex niches. The company offers a comprehensive toolkit including starter websites and custom development services, positioning itself as a niche leader with a strong emphasis on performance, SEO, and affiliate conversion optimization. The website is professionally designed with excellent content quality, clear navigation, and mobile responsiveness, targeting small to medium-sized affiliate businesses. Technically, the site uses modern web technologies including Tailwind CSS and Alpine.js, hosted with Cloudflare, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, DinoMatic presents a trustworthy and credible online presence with a high level of professionalism and user engagement.

Fleximed as operates the Fleximoover.no website, offering a specialized mobility aid designed for patients with Huntington's disease. The company is positioned in the healthcare sector in Norway, targeting a niche patient group with a unique product. The website provides basic information about the product concept, features, and accessories, with clear contact details and some language options for international visitors. Technically, the site is built using Adobe Muse with standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.8.3, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is average; HTTPS is used, but no advanced security headers are detected, and the use of an outdated jQuery version presents potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent WHOIS data, domain age, and clear contact information. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and modernization of its technical stack.

О

ООО «Мега Сервис»

mega-service.org

45

ООО «Мега Сервис» is a Russian service provider specializing in maintenance, repair, and recycling of digital satellite, cable, and terrestrial receivers. The company operates a large network of over 300 authorized service centers across Russia and owns facilities for electronic waste processing in Tula and Gusev. Their business model focuses on providing professional servicing and environmentally compliant recycling solutions, targeting both end-users and partner organizations. The website content is well-structured, professionally designed, and consistent with the company's market position as a medium-sized technology service provider founded in 2009. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery libraries. It is hosted under a reputable Russian registrar with HTTPS enabled, though it lacks advanced security headers and DNSSEC. The site performs moderately well with good mobile optimization but basic accessibility and SEO features. No major technical debt or outdated technologies were detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers that could mitigate common web threats. There is no visible privacy or cookie policy, nor incident response contacts, which indicates compliance gaps especially regarding GDPR or similar regulations. No forms or user data collection mechanisms were found on the main page, reducing immediate data exposure risks but also limiting user engagement features. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information for security incidents to enhance trust and regulatory compliance.

P

Popup Sauna GmbH

popup-sauna.ch

57

Popup Sauna GmbH operates a niche hospitality business offering exclusive panoramic sauna rentals at lakeside locations in Switzerland, specifically in Cham, Oberwil, and Stansstad. The company targets private individuals and groups seeking unique sauna experiences with easy online booking via a third-party platform. The website is professionally designed with consistent branding and clear navigation, supporting German and English languages. Social media presence on Instagram and Facebook enhances customer engagement. Technically, the site uses modern web technologies and a Flexbe CMS platform, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS and security headers, though lacking published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible for its business scope.

F

Foras Ventures LTD

forasventures.com

63

Foras Ventures LTD is a UK-based company focused on driving investment and talent to the UK market, leveraging Scotland as a launchpad for global growth. Their business model centers on providing immersive international programmes, event management, and connecting startups, investors, corporates, governments, and academia to foster global expansion. The company targets founders, investors, venture builders, ecosystem leaders, and government agencies, positioning itself as a niche facilitator for UK market entry and international scaling. Technically, the website is built using modern web technologies with a clean and professional design. It uses HTTPS with good SSL configuration and is hosted via GoDaddy. The site integrates marketing tools such as HubSpot forms and event platforms like Luma. Performance and mobile optimization are moderate to good, though accessibility and SEO could be improved. From a security perspective, the site employs standard security headers and domain registration protections but lacks DNSSEC and visible security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the website presents a professional and trustworthy front for a newly founded company. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing detailed security and incident response policies, and providing explicit contact information to enhance trust and compliance.

I

Icebreaker.vc

icebreaker.vc

62

Icebreaker.vc is a Nordic early-stage venture capital firm focused on supporting over 100 startup teams from idea to seed stage and beyond, primarily in Estonia, Finland, and Sweden. Founded in 2017, the firm invests up to 1.5 million euros in initial funding rounds, positioning itself as a key player in the regional startup ecosystem. The website reflects a professional and consistent brand image, targeting startup founders and investors with clear calls to action such as applying for funding and investing with the firm. Technically, the website is built on the Webflow platform, utilizing modern web technologies including GSAP for animations and jQuery for DOM manipulation. Hosting is via Amazon Cloudfront CDN, ensuring fast load times and good mobile responsiveness. SEO and accessibility are adequately addressed, though accessibility could be improved further. Analytics are implemented using Umami, a privacy-focused analytics tool, indicating a moderate approach to user tracking. From a security perspective, the site enforces HTTPS with excellent SSL configuration and does not expose sensitive data or use vulnerable libraries. However, it lacks several security headers that could enhance protection against common web attacks. There is no visible cookie consent mechanism, which is a compliance gap given the EU funding and GDPR applicability. Incident response contact details and a vulnerability disclosure policy are also absent, limiting transparency in security management. Overall, Icebreaker.vc presents a trustworthy and credible online presence with a solid technical foundation and good business clarity. To further strengthen its security posture and compliance, the firm should implement security headers, add cookie consent, and publish clear incident response and vulnerability disclosure information.

The domain eis.ee is registered since 2010 under Zone Media OÜ, an Estonian registrar, indicating a legitimate and mature domain. However, the website content is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to any business or informational content. This prevents extraction of any privacy policies, contact information, or business descriptions. The technical infrastructure relies on Cloudflare security services, including Turnstile captcha and Cloudflare Insights for analytics. Due to the blocking, the website's security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates a baseline security measure. Overall, the site lacks visible content and compliance disclosures, resulting in a low AI score and limited trustworthiness assessment.

H

Hoperfy

hoperfy.com

53

Hoperfy is a small technology company specializing in a white-label event hotel booking platform designed to help event organizers monetize hotel bookings made by their international visitors. The platform offers a 50/50 revenue-sharing model and subscription upgrades with advanced analytics and flight booking capabilities. The website is professionally designed, mobile-optimized, and provides clear business information and customer testimonials, positioning Hoperfy as a niche player in the hospitality technology sector. Technically, the site uses modern JavaScript libraries, integrates Google Tag Manager and reCAPTCHA for security and analytics, and is hosted with reputable providers including GoDaddy and Cloudflare. Security posture is good with HTTPS and form protections, but lacks published security policies and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and credible but could improve transparency and security practices.

The website represents the Estonian Association of Architectural and Consulting Engineering Companies (EKEL), a professional industry association founded in 2015. It serves as a platform for member representation, training, news dissemination, and advocacy within the Estonian construction and architectural consulting sector. The site targets industry professionals and stakeholders in Estonia and Europe, positioning itself as a key national association with European affiliations such as EFCA. The business model is focused on membership services and sector development rather than commercial sales. Technically, the website is built on Joomla CMS using Bootstrap and jQuery, with Google Analytics and Google Tag Manager integrated for visitor tracking. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced accessibility features and comprehensive SEO optimizations. The hosting is provided by Zone Media OÜ, a known Estonian registrar and hosting provider. From a security perspective, the site uses HTTPS (implied by WHOIS domain status and no HTTP-only indications) but lacks visible security headers and does not provide privacy or cookie policies, nor a cookie consent mechanism. No contact information or incident response channels are visible, which limits transparency and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and functional but requires improvements in privacy compliance, security headers, and transparency of contact information to enhance trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies, implementing consent mechanisms, adding security headers, and providing clear contact details for security incidents.

Overwolf operates as a leading technology platform empowering players, developers, and creators to enhance gaming experiences through user-generated content (UGC). The company provides tools and services for building overlay apps, mods, game servers, and monetization solutions, positioning itself as a central ecosystem in the gaming industry. Their market position is reinforced by partnerships with major brands and a large active user base. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, comprehensive analytics, and strong mobile optimization. Security posture is robust, with HTTPS enforcement, security headers, and no visible vulnerabilities, although incident response contact details could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Overwolf presents a professional, trustworthy, and technically sound online presence.

E

Erply

erply.com

77

Erply is a well-established enterprise providing cloud-based retail POS and inventory management software solutions globally. Their platform supports retail businesses, franchises, and warehouses with a comprehensive suite of tools including employee scheduling, customer communication, BI dashboards, and payment processing. The website demonstrates a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, Erply leverages modern web technologies and AWS infrastructure, ensuring fast performance and scalability. Security posture is strong with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, Erply presents a trustworthy and professional online presence aligned with their business model and market position.

Webhotellit.com is a Finnish web hosting service provider that merged with Domainhotelli in May 2022. The website serves primarily as an informational landing page announcing this merger and redirecting users to Domainhotelli, which is positioned as a fast-growing and affordable hosting provider in Finland. The business targets Finnish customers seeking web hosting and domain registration services, with a focus on WordPress-optimized hosting and ease of use. The domain has a long history dating back to 2000, supporting the business's credibility and market presence. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager for analytics, and Iubenda for cookie consent management. The site is mobile optimized and includes SEO best practices such as canonical URLs and Open Graph metadata. However, the CMS or platform is not explicitly identified, suggesting a custom or proprietary solution. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. DNSSEC is not enabled, representing a minor security gap. No forms or sensitive data collection are present on the landing page, reducing immediate risk exposure. WHOIS data is consistent and legitimate, with no privacy protection masking registrant details. Overall, the website is functional and trustworthy as an informational portal for the merger, but lacks comprehensive privacy, security, and contact documentation. Strategic improvements include publishing privacy and security policies, enabling DNSSEC, and providing clear contact information to enhance trust and compliance.

S

Swiss-Belhotel International

swiss-belhotel.com

68

Swiss-Belhotel International operates a global hospitality business offering hotel and resort accommodations primarily across Asia-Pacific and the Middle East. The company targets both business and leisure travelers, providing direct booking options with exclusive rates and loyalty benefits. The website reflects a mature digital presence with multilingual support and integrated marketing tools. Technically, the site employs modern web technologies including service workers, multiple analytics platforms, and a cookie consent mechanism, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces domain trustworthiness but the professional site design and content mitigate concerns. Overall, the site presents a low risk profile with room for improvement in transparency and security documentation.

A

AS Emor

mediafacts.com

64

Mediafacts.com is an established online platform operated by AS Emor, specializing in providing market research reports and consumer insights focused on the Baltic countries of Estonia, Latvia, and Lithuania. The website serves business professionals and organizations seeking detailed market data and analysis to inform strategic decisions. The business model is based on e-commerce sales of research reports, leveraging the Shopify platform for digital storefront management. The company has a consistent brand presence and offers a range of reports covering various sectors and consumer trends in the region. Technically, the website is built on Shopify using the Debut theme, employing modern web technologies including JavaScript, CSS, and HTML5. The site is hosted on Shopify's CDN infrastructure, ensuring moderate to good performance and mobile responsiveness. SEO and accessibility features are well implemented, with proper meta tags, structured data, and ARIA roles enhancing user experience and search engine visibility. From a security perspective, the site enforces HTTPS and includes basic security headers such as Referrer-Policy. There is no DNSSEC enabled, which is a recommended improvement. Forms include CAPTCHA mechanisms to prevent abuse. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a visible cookie consent banner and a privacy policy page indicating GDPR adherence. However, explicit security policies and incident response contacts are not published. Overall, Mediafacts.com presents a trustworthy and professional online presence with a mature domain and consistent business information. The site is suitable for its target audience and maintains a good security posture with room for enhancements in DNS security and published security policies.

Outsourcing Pharma was a media platform providing insights and news for the pharmaceutical and biopharma industries. The website now serves as an announcement page informing visitors of the closure of Outsourcing Pharma and BioPharma Reporter, with a strategic shift by the parent company, William Reed Ltd, towards other sister brands in nutrition, food, cosmetics, and agriculture sectors. The business model was focused on industry news and analysis, targeting professionals in healthcare and related industries. The domain is well-established since 2005 and owned by a reputable UK-based media company. Technically, the website is a simple static HTML page using modern web fonts but lacks advanced frameworks or CMS indicators. Hosting is via Google Cloud DNS with no DNSSEC enabled. The site is mobile responsive with basic accessibility and SEO features but lacks privacy, cookie, and terms of service policies. No forms or interactive elements are present, indicating minimal data collection. Security posture is basic with no detected security headers or advanced configurations. The domain uses HTTPS (implied by domain status and hosting) but lacks DNSSEC and security policies. No contact information or incident response channels are provided, limiting transparency. The WHOIS data shows a consistent and legitimate registration with no privacy protection, supporting trustworthiness. Overall, the website is functional for its purpose as an announcement page but lacks comprehensive privacy, security, and compliance features expected for active business websites. Strategic recommendations include adding privacy and cookie policies, improving security headers, enabling DNSSEC, and providing contact information for security and data protection inquiries.

C

CSV Loader

csv-loader.com

60

CSV Loader is a technology-focused SaaS provider specializing in universal CSV import and export tools designed to integrate with over 100 business applications. Founded in 2022, the company targets businesses and professionals seeking efficient data management solutions. The website presents a professional and consistent brand image with clear service offerings such as CSV Import and Data Export, supported by customer testimonials and a 14-day free trial to encourage adoption. Technically, the website is built on the Tilda CMS platform, leveraging standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. There is no evidence of privacy or cookie policies, terms of service, or incident response information, which are critical for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, CSV Loader presents a moderate risk profile with strengths in business credibility and technical implementation but notable gaps in privacy compliance and security best practices. Strategic improvements in policy transparency, security headers, and contact information would enhance trust and compliance.

The website i.ua is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, business information, or policies. The domain appears to be a Ukrainian email service provider, but no direct business details or contact information are available on the presented page. The technical infrastructure includes Cloudflare's security services, indicating a focus on protection against automated abuse. However, the lack of accessible content limits the ability to assess the website's design, SEO, privacy compliance, or security posture comprehensively. The domain uses privacy protection in WHOIS, which is typical for popular email services, and no suspicious patterns were detected. Overall, the site is currently blocked from analysis, resulting in a low AI score and limited insights.

Т

ТОВ Редакція газети "Факти та коментарі"

fakty.ua

61

Факти.ua is a well-established Ukrainian online news media platform operated by ТОВ Редакція газети "Факти та коментарі", founded in 1997. The website offers a broad range of news, articles, commentaries, and analytical content targeting Ukrainian-speaking audiences interested in national and international affairs, culture, sports, and society. It maintains a strong market position as a trusted news source with consistent branding and professional content quality. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations of Google Analytics and Tag Manager for traffic analysis. The site is optimized for mobile devices and uses structured data (JSON-LD) for enhanced SEO. Performance is moderate with good mobile responsiveness but could benefit from additional accessibility improvements. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific disclosures. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with room for improvement in privacy compliance and security best practices. No blocking or WAF interference was detected, allowing full content access and analysis.

U

UkrNet

ukr.net

62

UkrNet is a prominent Ukrainian online news portal providing comprehensive news coverage across politics, economy, sports, culture, technology, and entertainment. It serves a broad Ukrainian-speaking audience with fresh news updates and integrates additional services such as email and search. The website demonstrates a mature digital infrastructure with modern advertising and analytics technologies, including Google Tag Manager and MGID. Security posture is solid with HTTPS enforcement and sandboxed iframes for email widgets, though some security headers could be improved. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the analyzed content. WHOIS data is unavailable for the queried subdomain, which slightly reduces trust but does not detract from the site's evident legitimacy and market position. Overall, UkrNet is a well-established media platform with good technical and business credibility.

The website korrespondent.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of meaningful business, contact, or policy information. The domain is registered since 2000 with Amazon Registrar, Inc., indicating a long-standing presence, but no registrant organization details are publicly available. The technical infrastructure includes Cloudflare DNS and WAF services, but DNSSEC is not enabled, and no security headers are visible in the provided HTML. No privacy, cookie, or terms of service policies are found, and no contact information is available on the challenge page. Overall, the website's digital maturity and security posture cannot be fully assessed due to content blocking, resulting in a low AI score and limited insights.

E

E-Katalog

e-katalog.ua

59

E-Katalog is a well-established Ukrainian online price comparison and product catalog platform operating since 2001. It aggregates product data from over 3000 online stores and offers consumers a comprehensive tool to compare prices, read reviews, and find the best deals across a wide range of product categories including electronics, household appliances, automotive goods, and more. The platform targets consumers primarily in Ukraine but also serves markets in Poland, USA, UK, and Kazakhstan through regional partner sites. Technically, the website uses a custom CMS with modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is adequate with HTTPS enforced and some security headers present, but lacks full implementation of best practices such as Content-Security-Policy and X-Frame-Options headers. Privacy compliance is basic; a privacy policy exists but lacks explicit GDPR compliance and no cookie consent mechanism is implemented. No direct contact emails or phone numbers are visible on the main page, which may impact user trust. Overall, the website is professional and trustworthy but could improve in privacy compliance and security hardening.

D

DIELINE STUDIO

dielinestudio.com

58

DIELINE STUDIO operates as a specialized brand and packaging consultancy focused on innovation, sustainability, and manufacturing matchmaking. Leveraging the authority of the DIELINE platform, it targets brands and designers seeking strategic design and sustainable packaging solutions. The website is professionally designed on Squarespace, featuring rich visual content and clear service descriptions. Technically, the site employs modern web technologies with good SSL security and moderate performance. However, the absence of privacy and cookie policies, lack of explicit contact emails or phone numbers, and missing WHOIS registration data introduce trust and compliance concerns. Security posture is solid with HTTPS and HSTS enabled, but additional security headers and incident response information are recommended. Overall, the site presents a credible business front but requires improvements in transparency and compliance to enhance trustworthiness.

Sysdec is an Estonian software company specializing in financial and economic software solutions, primarily through its SAF product line. The website focuses on providing updates about software versions, regulatory compliance changes, and company achievements such as the 'Edukas Eesti Ettevõte 2025' certification and a Creditinfo AA rating. The target audience is primarily Estonian businesses requiring accounting and tax software solutions. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript with jQuery 1.12.4, but the use of an outdated jQuery version presents a security risk. The site is accessible without any WAF or blocking mechanisms, but lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security headers are not evident, and no contact information or incident response channels are provided on the analyzed page, limiting transparency and security posture. Overall, the website is functional and professional but would benefit from modernization and enhanced security and privacy practices.

I

Inodia

inodia.fr

49

Inodia is a small regional digital agency based in Brittany, France, specializing in web design, SEO, and digital marketing services. The company targets local businesses and professionals in Lamballe, Rennes, and surrounding areas, offering tailored digital solutions to enhance online presence. The website is built on WordPress using Elementor and optimized with WPRocket, reflecting a modern and performant technical infrastructure. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS enforced and security headers present, though no explicit security policy or incident response information is published. The absence of WHOIS data limits domain trust assessment but the professional website and clear contact information support legitimacy. Overall, Inodia presents a credible and professional digital presence with room for improvement in transparency around security policies and domain registration details.

A

AS Latvijas Maiznieks

maiznieks.com

63

AS Latvijas Maiznieks is a well-established Latvian bakery company founded in 2003, specializing in a wide range of bakery and confectionery products including breads, cakes, frozen bakery goods, and snacks. The company targets retail consumers as well as institutional clients such as schools and kindergartens. Their website reflects a mature digital presence with detailed product catalogs, news updates, and social media integration, supporting their market position as a leading bakery brand in Latvia. Technically, the website uses standard web technologies including jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic security headers, though improvements such as DNSSEC and advanced security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Oxiapps.com presents a professional website offering a Shopify app focused on social login integration to simplify customer authentication and improve signup rates. The business targets e-commerce store owners seeking to enhance user experience through social media login options. The website is built on WordPress using WPBakery Page Builder and includes modern UI elements such as sliders and responsive design. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which impacts compliance and user trust. Security posture is moderate with no visible security headers or incident response information. Overall, the site is functional and well-designed but lacks critical compliance and trust elements.

Getty Images is a leading global provider of high-quality royalty-free images, editorial stock photos, vector art, video footage, and stock music licensing. The company targets creative professionals, marketers, and media companies seeking licensed digital content. The website reflects a mature digital media licensing platform with a strong brand presence and extensive content offerings. Technically, the site employs modern web technologies including AngularJS, Google reCAPTCHA for bot mitigation, and OneTrust for cookie consent management, indicating a well-maintained and user-focused infrastructure. Security posture is strong with HTTPS enforced and bot protection mechanisms, though explicit security headers and public security policies are not evident on this page. Privacy compliance is robust with clear privacy and cookie policies and GDPR considerations. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable due to domain naming rules, which does not detract from the legitimacy of the business.

Baltic Legal operates a specialized immigration and legal consultancy website focused on residence permits and immigration services in Latvia and the broader European Union. The company offers services including residence permits via real estate investment, business investment, and bank deposits, alongside legal assistance in corporate and immigration law. The website is well-structured, multilingual, and provides detailed information about immigration policies, visa requirements, and investment options. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data is fully redacted as per EURid policy, which is typical for .eu domains and does not raise immediate concerns. Overall, the site presents a professional image with moderate technical maturity and some room for security and privacy improvements.

T

togel online

regdisini.com

24

The website operates as an Indonesian online gambling platform branded as Kiostoto, offering various games such as togel, slots, sportsbook, live casino, and arcade games. It targets Indonesian players interested in online gambling and positions itself as a viral and trusted site for 2023-2025. The business model revolves around online gaming and betting services with a focus on accessibility via mobile devices. Technically, the site uses the AMP framework to optimize mobile performance and improve loading speeds. However, the site is served over HTTP without HTTPS, which is a significant security concern. The use of Google Tag Manager indicates some level of analytics and tracking, but privacy and cookie policies are absent, indicating poor compliance with data protection standards. Security posture is weak due to lack of HTTPS, missing security headers, and no visible incident response or security policies. Overall, the site has basic content quality and technical implementation but lacks critical security and privacy features, resulting in a low trustworthiness score.

S

SecurityNet.cz s.r.o.

securitynet.cz

65

SecurityNet.cz s.r.o. is a Czech Republic-based small IT service company specializing in comprehensive internet services including custom website and e-shop development, SEO optimization, custom software development, and hosting solutions. The company targets businesses and individuals requiring tailored IT and hosting services, positioning itself as a reliable provider with a portfolio of reputable clients such as KIKA, Gorenje, and T-Mobile. Their business model focuses on service delivery with an emphasis on quality and client satisfaction. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. The site is mobile optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Hosting details are not explicitly disclosed, but the presence of a partner hosting domain (hukot.net) suggests collaboration with a specialized hosting provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a visible privacy policy, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in their security posture. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced privacy compliance, security header implementation, and improved transparency regarding domain registration and security policies.

W

Web Tracking Services, LLC

web-stat.com

68

Web-Stat is a small technology company providing real-time web analytics services primarily targeting website owners and webmasters. The company offers a free analytics platform with upgrade options and an affiliate program, positioning itself as an established player since 1996. The website is professionally designed with good content quality and clear navigation, optimized for mobile users. Technically, it employs modern JavaScript libraries and standard web technologies, delivering moderate performance and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and dedicated security policies are absent. The lack of WHOIS registration data for the domain introduces uncertainty in domain legitimacy, though the business identity is strongly supported by structured data and trust indicators. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

SPWeb s.r.o. is a well-established Czech technology company specializing in custom web development, e-commerce solutions, SEO, PPC marketing, and IT infrastructure services primarily serving the Brno region. The company has a strong market position supported by over a decade of experience, positive client testimonials, and Google Partner certification. Their website reflects a professional and modern digital presence with comprehensive service offerings and clear contact information. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Fonts, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, demonstrating a mature digital infrastructure. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, indicating a generally secure environment. Overall, SPWeb s.r.o. presents a credible, trustworthy, and professional business with a strong online presence. The website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable partner for clients seeking web and IT services.