Security Directory

R

Rodinné zápolení | Další web používající WordPress

rodinnezapoleni.cz

50

Rodinnezapoleni.cz is a Czech language website created in 2011, built on WordPress using the Divi theme. The site appears to be a small-scale or personal project with limited content and minimal business information. The technical infrastructure is standard for WordPress sites, utilizing common libraries such as jQuery and Google Fonts. Hosting is provided by REG-ZONER, a Czech domain registrar and hosting provider, consistent with the website's regional focus. Security posture is basic with HTTPS enabled but lacking important security headers and policies. No privacy or cookie policies are present, indicating potential compliance gaps. Contact information and social media presence are not evident, limiting business credibility and user trust. Overall, the site is functional but lacks comprehensive security, privacy, and business transparency features.

R

Restaurace Tiskárna

restauracetiskarna.cz

38

Restaurace Tiskárna is a small hospitality business operating multiple restaurant locations in Prague, Czech Republic, specializing in modern Czech cuisine and quality draft Pilsner beer. The website provides clear contact information and basic business descriptions but lacks advanced digital maturity features such as privacy policies, cookie consent, and security disclosures. Technically, the site uses standard HTML and CSS with Google Fonts, hosted likely via REG-WEBGLOBE, but lacks modern CMS or frameworks. Security posture is weak due to missing security headers, unclear SSL status, and absence of vulnerability disclosures. Overall, the site is functional and professional but requires significant improvements in privacy compliance and security to reduce risk and enhance trust.

G

Getriebebau NORD GmbH & Co. KG

nord.com

73

Getriebebau NORD GmbH & Co. KG operates the website www.nord.com, presenting itself as a leading global supplier of mechanical and electronic drive technology solutions including gear motors, industrial gear units, electric motors, and frequency inverters. The company targets a broad industrial audience with a strong B2B focus, emphasizing product competitiveness and energy efficiency. The website supports multiple languages, indicating a global market presence. Technically, the site uses modern web technologies such as Bootstrap, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces transparency and business credibility, though the website content and branding are professional and consistent with a legitimate enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS information.

The Lindner Group website presents a comprehensive portfolio of interior fit-out and custom system products targeting construction and architectural professionals. The company positions itself as a strong partner in the manufacturing sector, focusing on acoustics, fire protection, sustainability, and design. The website is professionally designed with clear navigation and a broad product catalog, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools such as Matomo and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Privacy compliance is minimal, with no clear privacy or cookie policies detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

D

DAMI development s.r.o.

damidev.com

67

DAMI development s.r.o. is a Czech Republic based software development company specializing in mobile and web application development with over 13 years of market presence. They serve businesses and startups by delivering software solutions that enhance internal processes and cost efficiency. Their key services include development for multiple mobile platforms (Android, iOS, TV, wearables), web applications, third-party hardware/software integration, and innovative technologies such as IoT, augmented reality, and machine learning. The company showcases a professional website with clear navigation, client references, and modern technology usage, indicating a mature digital presence. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified.

N

NTM rozcestník

ntmvp.cz

42

The website ntmvp.cz serves as a virtual tour platform created in 2020 during the Covid-19 pandemic. It offers interactive virtual tours primarily targeting a general audience interested in immersive media experiences. The business model appears focused on providing virtual tour content without evident e-commerce or subscription services. The site is small-scale and localized to the Czech Republic, with no indication of a parent company or subsidiaries. Technically, the site uses modern web technologies including JavaScript, HLS.js for streaming, and WebVR polyfills to support virtual reality features. The site is mobile optimized and loads media assets efficiently, though performance is moderate. No CMS or third-party analytics/tracking tools are detected, indicating a lightweight custom implementation. From a security perspective, the site uses HTTPS and avoids forms or inputs that could introduce vulnerabilities. However, it lacks security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No contact or incident response information is provided, limiting transparency and trust. The domain registration data is consistent and appropriate for the business age and location, supporting legitimacy. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and regulatory adherence.

A

A-B help s.r.o.

abhelp.cz

58

A-B help s.r.o. is a Czech non-profit organization established in 2006 that focuses on improving the lives of disadvantaged children, seniors, and handicapped individuals by providing minibuses to social institutions. The organization partners with socially responsible companies that sponsor these vehicles, which are branded with sponsor logos to enhance corporate social responsibility visibility. The website is built on WordPress and presents a professional, content-rich platform primarily in Czech. It provides clear contact information and testimonials that enhance trustworthiness. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Technically, the site is well-structured, mobile-optimized, and secure with HTTPS, but could benefit from enhanced security headers and privacy mechanisms.

S

Slevomat.cz Praha – cesta k zážitkům

slevomat.cz

73

Slevomat.cz is an e-commerce platform focused on providing discounted experiences and travel deals primarily targeting consumers in the Czech Republic. The website content is accessible and professionally designed, indicating a mature digital presence aimed at leisure and travel customers. However, the absence of WHOIS data limits the ability to fully verify domain ownership and legitimacy. Technically, the site uses standard web technologies with good mobile optimization and SEO practices, but lacks visible advanced frameworks or CMS identification. Security posture is weak due to missing security headers and no visible HTTPS confirmation in the provided data. Privacy compliance is minimal with no detected privacy or cookie policies, which could pose regulatory risks. Overall, the site appears functional and business credible but would benefit from enhanced security and compliance measures.

K

Království tianDe

kralovstvi-tiande.cz

69

Království tianDe operates a professional e-commerce website focused on selling tianDe cosmetics and health products inspired by traditional Chinese medicine. The site targets consumers interested in natural beauty and health products within the Czech Republic. The platform is technologically modern, leveraging React, Google Tag Manager, Microsoft Clarity, Klaviyo, and Sentry for analytics, marketing, and error monitoring. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve business credibility. Overall, the website is functional, well-designed, and provides clear contact information, but could benefit from enhanced transparency and security documentation.

D

Duvel Moortgat

duvelmoortgat.be

71

Duvel Moortgat is a historic, fourth-generation family-owned brewing company founded in 1871, recognized globally for its high-quality specialty beers and multiple iconic brands. The company emphasizes tradition, quality, and sustainability, operating 13 breweries worldwide and targeting beer consumers, partners, and employees. The website reflects a mature digital presence with multilingual support, clear branding, and comprehensive corporate responsibility content. Technically, the site uses modern web technologies including Google Tag Manager and a cookie consent framework, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though the absence of visible security headers and a public security policy suggests room for improvement. WHOIS data is unavailable, which is unusual for a well-established brand, indicating possible privacy protection or registrar issues. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could enhance transparency in security and contact information.

G

GUN PRODUCTIONS

gutterdammerung.com

54

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

L

LIFE

life.be

71

LIFE is a Belgian real estate developer focused on creating sustainable, community-oriented living spaces that prioritize quality of life and architectural detail. Their projects emphasize energy efficiency and social inclusiveness, targeting residents and investors interested in innovative urban development. The website reflects a professional digital presence with multimedia content, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies and WordPress CMS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks security headers and published security policies, which are recommended for improvement. WHOIS data is restricted by the registry, limiting transparency but not necessarily indicating risk. Overall, the site is trustworthy and professionally maintained, with room for enhanced security and transparency.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder when a website is not accessible or fails to load. This page contains no actual business or website content, only embedded JavaScript and styles for the Chrome offline dinosaur game. Consequently, no business information, contact details, privacy policies, or security policies are present. The technical infrastructure is limited to client-side scripts related to the game, with no server-side or hosting information available. Security posture cannot be properly assessed due to the absence of real website content and security headers. Overall, this page does not represent a legitimate website but an error state within the browser, resulting in a very low trust and credibility score.

W

wineandspirit.eu is available for purchase - Sedo.com

wineandspirit.eu

52

The website is a domain sales landing page hosted on Sedo.com, offering the domain wineandspirit.eu for purchase. Sedo is a reputable domain marketplace platform with a long history since 1998, supported by a consistent WHOIS registration through World4You Internet Services GmbH. The site content is minimal, focusing solely on domain sale without additional business or contact information. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS, with HTTPS enabled and a cookie consent mechanism in place. However, there is no privacy policy, terms of service, or security policy published, which limits compliance and trust signals. Security posture is moderate with room for improvement in DNSSEC and security headers. Overall, the site serves its purpose as a domain sales page but lacks comprehensive business and compliance information.

Rentokil is a professional pest control service provider targeting residential and business customers in Estonia. The website presents localized content in Estonian, emphasizing expertise and comprehensive pest control solutions. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Google Tag Manager, hosted primarily on Rentokil's CDN. While the website design and content quality are good, there is a lack of visible privacy, cookie, and security policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the security posture is moderate but could be improved by implementing security headers and explicit compliance documentation.

B

Baltic Legal

baltic-legal.com

44

Baltic Legal is a specialized corporate law office providing company formation, legal, accounting, and immigration services focused on the Baltic states of Latvia, Estonia, and Lithuania. The company targets entrepreneurs and businesses seeking to establish operations in these countries, offering a one-stop solution for business registration, tax management, and residence permits through investment. The website content is professionally structured and provides detailed service descriptions, although it lacks explicit contact information and privacy policies. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, Font Awesome icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, but lacks advanced accessibility features and security headers. The absence of HTTPS status information and security headers suggests room for improvement in security posture. From a security perspective, the site does not expose sensitive data and uses no known vulnerable libraries. However, the lack of privacy and cookie policies, absence of contact details for incident response, and missing WHOIS registration data reduce trustworthiness and compliance with data protection regulations. The WHOIS query returned no registration data, which is inconsistent with the active website presence and raises concerns about domain legitimacy. Overall, Baltic Legal presents a credible business offering with good content quality and technical implementation but requires significant improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

The website seitse.tv is currently a domain parking page owned by Private by Design, LLC, a US-based entity. The domain was registered recently in August 2024 and is actively offered for sale via the Sedo platform for 99 USD. The site content is minimal, primarily consisting of generic Finnish language category links and promotional text indicating the domain's availability for purchase. There is no active business or service presented on the site, and no direct contact information or privacy compliance mechanisms are implemented. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting and DNS appear to be managed via Sedo and Porkbun, respectively. The site lacks DNSSEC and security headers, and no HTTPS status was determinable from the provided data. Performance and mobile optimization are basic, reflecting the minimal content and simple design. From a security perspective, the domain registration includes protections against unauthorized deletion and transfer, which is positive. However, the absence of DNSSEC, security headers, and HTTPS reduces the overall security posture. No privacy or cookie consent mechanisms are present, and no incident response or security policies are disclosed. Overall, the site represents a low-risk domain parking page with limited business credibility and minimal content. Strategic recommendations include enabling DNSSEC, implementing HTTPS with strong security headers, adding privacy and cookie policies with consent mechanisms, and providing clear contact information to improve trust and compliance.

M

meedium.ee is available for purchase - Sedo.com

meedium.ee

53

The website is a domain sales landing page hosted on Sedo.com, offering the domain meedium.ee for purchase. Sedo is a recognized domain marketplace platform with a long-established presence since 1998. The page content is minimal, focusing on domain availability and purchase options, targeting domain investors and buyers. Technically, the site uses modern web technologies including JavaScript ES modules and Cloudflare DNS services, with HTTPS enabled and a clientTransferProhibited domain status enhancing security. However, the absence of privacy and terms of service policies, as well as lack of direct contact information, limits the site's compliance and business credibility. Security posture is good with HTTPS and Cloudflare DNS, but DNSSEC is not enabled. Overall, the site is functional for its purpose but lacks comprehensive compliance and business transparency documentation.

KV.EE is a leading Estonian real estate portal offering a wide range of property listings including apartments, houses, land, and commercial spaces for sale and rent. The website targets Estonian property buyers, sellers, and renters, positioning itself as the first and foremost real estate portal in Estonia. The business model revolves around providing an online marketplace and listing service for real estate, supported by RSS feeds and categorized property types. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, and uses popular fonts and icon libraries. The design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible advanced frameworks or CMS identification and shows moderate performance.

VAREGER presents itself as a specialized blockchain product lab offering software development services with expertise in blockchain, machine learning, and cryptography. The website content is professionally designed and targets clients seeking advanced technical solutions in these domains. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The technical infrastructure appears modern with CDN usage for media assets, but lacks visible advanced frameworks or analytics integrations. Security posture is moderate with no evident security headers or policies, and privacy compliance is minimal due to missing privacy and cookie policies. Overall, the site is functional and professional but requires improvements in transparency, security, and compliance to enhance trust and credibility.

T

Techyparts LLC

techyparts.com

64

Techyparts LLC is a small technology company specializing in providing tailored IT hardware solutions, including new and used equipment from leading brands. With over 20 years of combined experience, the company offers custom system assembly, international shipping, and hardware recycling services. Their market position is that of a niche provider focused on value, service, and warranty support. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses modern web technologies including htmx and Google Tag Manager, hosted via Cloudflare, ensuring good performance and security through HTTPS. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is supported by clear contact information and customer testimonials. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security practices.

E

Elektrum Eesti OÜ

elektrum.ee

61

Elektrum Eesti OÜ is a well-established energy company operating in Estonia, offering a range of electricity packages, insurance, renewable energy solutions, and electric vehicle charging services. As part of the Latvenergo group, it holds a strong market position in the Baltic energy sector, serving both private and business customers with a focus on reliability and environmental sustainability. The website reflects a professional digital presence with clear navigation, multi-language support, and comprehensive service information. Technically, the site employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Google Tag Manager and Usercentrics for cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good privacy compliance and business credibility, supported by consistent WHOIS data and transparent contact information.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as an offline or error display within the Chrome browser. It includes embedded JavaScript and CSS for the Chrome Dinosaur game, but contains no actual business or website content. There is no evidence of a commercial entity, business description, or contact information. The page is not accessible as a public website and does not provide privacy, cookie, or terms of service policies. Technically, the page uses standard HTML5, CSS3, and JavaScript with Canvas and Web Audio APIs to render the game. Security posture is minimal but acceptable given the lack of external inputs or forms. Overall, this is not a live website but a browser error page, and thus cannot be evaluated as a business website.

Meidron is a small Estonian company founded in 2011, offering IT support and consulting services, EU funding project management, and environmental consulting. The company targets businesses and organizations requiring specialized consulting and support services. The website is simple and functional, providing basic business information and contact details, including email, phone, and LinkedIn profile. The market position appears niche and regional with a focus on professional service delivery. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. Hosting appears to be on Oracle Cloud infrastructure. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected, indicating a custom or static site. From a security perspective, the domain is well-registered with a long history and transfer protection. However, the site lacks DNSSEC, visible HTTPS enforcement, and security headers. No privacy or cookie policies are present, and no consent mechanisms are implemented, indicating GDPR compliance gaps. The use of Google Analytics without cookie consent further impacts privacy compliance. No incident response or vulnerability disclosure information is provided. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

The website kodu.co.uk is a domain parking page currently offered for sale via Sedo, a domain marketplace. The site contains minimal content, primarily advertising links and a search box powered by Google Ads and Sedo's platform. There is no active business or service presented on the site, and the content is in Finnish, targeting general internet users or potential domain buyers. The domain has been registered since 2012 with Fasthosts Internet Ltd, a reputable registrar, indicating a legitimate domain ownership history but no active business presence. Technically, the site uses standard HTML5 and CSS3 with embedded scripts from Sedo and Google Ads for monetization. The site is moderately optimized for performance and mobile use but lacks advanced SEO or accessibility features. There is no evidence of a CMS or modern web frameworks. Hosting appears to be via the registrar and Sedo's parking infrastructure. From a security perspective, the site does not expose any forms or sensitive data but also lacks visible security headers and explicit HTTPS confirmation in the provided data. Privacy compliance is minimal, with a basic privacy policy linked via Sedo and a cookie consent banner present. No incident response or security policies are disclosed. Overall, the security posture is basic and typical for a parked domain. The overall risk is low for visitors as the site is informational and advertising-based, but the lack of business content and contact details limits trust and credibility. Strategic recommendations include improving transparency with contact information, enhancing security headers and HTTPS enforcement, and providing clearer privacy and security policies to increase trustworthiness.

H

Hauser's Jewelers

hausersjewelers.com

60

Hauser's Jewelers is a long-established retail and e-commerce business specializing in high-end jewelry and watches, with a heritage dating back to 1898. The website serves as a professional online storefront built on the Shopify platform, showcasing various jewelry collections and brands. The business targets consumers seeking luxury jewelry and watch products, offering both sales and repair services. The site demonstrates consistent branding and good content quality, reflecting its market position as a reputable jeweler. Technically, the website leverages modern web technologies including Shopify's Expression theme, web fonts, and JavaScript libraries. It is hosted on Shopify's infrastructure with Network Solutions as the domain registrar. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Performance is moderate, with standard Shopify CDN usage. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information is limited to contact forms without explicit emails or phone numbers. No vulnerability disclosure or incident response information is provided. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security header implementation to improve its security posture and regulatory adherence.

S

Studio One

studio-one.am

56

Studio One is a medium-sized Armenian IT consulting and digital services company specializing in web design, development, mobile apps, online marketing, and security audits. The company serves a diverse client base including governmental, financial, e-commerce, manufacturing, consulting, and media sectors. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Maps API, but lacks some advanced accessibility and mobile optimization features. Security posture is moderate with HTTPS usage but missing important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is functional and professional but could improve in privacy and security transparency.

Media Menu International AS is a Swedish-Estonian digital media production studio specializing in online and mobile advertising assets including HTML5 banners, landing pages, email templates, web design, video production, and graphic design. Established in 2010, the company serves a global client base with a strong presence in Europe and the USA, supported by long-term partnerships and positive client testimonials. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap and Leaflet.js, ensuring good mobile optimization and user experience. However, the absence of privacy and cookie policies, security headers, and incident response information indicates areas for improvement in compliance and security posture. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security disclosures to align with best practices.

The website harno.ee is registered to the Estonian Ministry of Education and Research (Haridus- ja Teadusministeerium) and appears to be a government-related domain. However, the actual website content is inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents a full analysis of the website's offerings, policies, and user interface. The domain is relatively new, created in 2020, which aligns with possible recent governmental digital initiatives. Technically, the site uses Cloudflare for security and performance, but no DNSSEC is enabled, and no security headers are visible in the provided data. The lack of visible privacy, cookie, or terms of service policies, as well as absence of contact information, limits the assessment of compliance and user support. The site does not expose any forms or data collection fields beyond the captcha mechanism. From a security perspective, the use of Cloudflare's WAF and captcha indicates a proactive approach to mitigate automated threats and abuse. However, the absence of DNSSEC and security headers suggests room for improvement in hardening the domain's security posture. The lack of visible compliance documentation and contact channels is a concern for transparency and user trust. Overall, the site is legitimate and consistent with a government entity but currently inaccessible for detailed content and compliance evaluation. Strategic recommendations include enabling DNSSEC, publishing clear privacy and cookie policies, adding contact and incident response information, and implementing security headers to enhance trust and security.

The website cityntel.com represents a small Chinese company specializing in the rental, leasing, sales, and recycling of diesel generators ranging from 30KW to 2000KW, focusing on imported brands such as Cummins, Mitsubishi, and Caterpillar. The target audience includes infrastructure sectors such as railway, transportation, municipal engineering, real estate, factories, hotels, and construction sites. The business model is primarily service-oriented, providing equipment solutions tailored to client needs. The website content is primarily in Simplified Chinese and provides product listings, case studies, team introductions, and news updates related to diesel generators. Technically, the website is built on the EmpireCMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, and libraries such as Blazy for lazy loading and WOW.js for animations. The site has basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. There is no evidence of modern frameworks or advanced hosting details. The WHOIS data shows inconsistencies, including a domain creation date in the future and minimal registrant information, which raises legitimacy concerns. From a security perspective, the website lacks critical security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement information. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure information is provided. These gaps indicate a low security maturity level and potential compliance issues with data protection regulations such as GDPR. Overall, the website presents a functional but basic online presence for a niche diesel generator rental business. The main risks relate to domain legitimacy concerns and insufficient security and privacy practices. Strategic improvements in security posture, compliance documentation, and WHOIS transparency are recommended to enhance trust and reduce operational risks.

A

Alarmeco

alarmeco.ee

42

Alarmeco is an Estonian company specializing in low-voltage, building automation, and security systems. Positioned as a domain expert, it offers modern technical solutions primarily targeting businesses and organizations within Estonia. The website reflects a professional and consistent brand image with clear contact information and relevant business descriptions. Technically, the site uses standard web technologies including Google Tag Manager for analytics, and it is well-optimized for mobile devices with moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

broadline.eu is available for purchase - Sedo.com

broadline.eu

52

The analyzed website is a domain sales landing page hosted on Sedo.com, a well-known domain marketplace platform. The page advertises the availability of the domain broadline.eu for purchase. The business model revolves around domain brokerage and marketplace services targeting domain investors and buyers. The website content is minimal, focusing primarily on domain sale information without detailed business or contact information. Technically, the site uses modern web technologies including JavaScript modules and CSS3, hosted via a reputable registrar and Cloudflare DNS, ensuring good performance and security basics. However, the site lacks privacy and cookie policies, contact details, and security policy disclosures, which impacts its privacy compliance and business credibility scores. The WHOIS data shows the domain is long-registered since 1998 with a reputable registrar and has protective domain status, indicating legitimacy. Overall, the site is functional for its purpose but lacks comprehensive compliance and business transparency features.

C

Cedo Ltd

cedo.com

45

Cedo Ltd is a well-established manufacturer and supplier of household essentials, operating for over 60 years with a significant presence in Europe. The company focuses on producing goods such as refuse sacks, biodegradable bin liners, aluminium foil, freezer bags, cling film, and baking paper, serving both leading retailers and B2B operators. Sustainability and recycling are core to their business strategy, with a strong emphasis on reducing plastic waste and promoting circular economy principles. Their market position is supported by multiple production sites and a large workforce, reflecting a mature and stable business model. Technically, the website is built on a modern CMS platform (OctoberCMS) with standard web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and presents a professional design with good user experience. However, some technical improvements could enhance performance and accessibility further. The hosting provider is inferred from DNS records, and the domain is secured with HTTPS, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and domain registration protections but lacks advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is published, and no contact information for security issues is provided. Privacy compliance is partially addressed with a comprehensive privacy policy available as a PDF, but no cookie consent mechanism is present. The absence of visible contact details on the site may impact user trust and compliance. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced security practices and improved privacy compliance mechanisms. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, publishing security policies, and providing clear contact information to improve trust and compliance.

C

CBS Pakistan

cbspakistan.com

41

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

D

DeltaHeroes OÜ

deltaheroes.com

42

DeltaHeroes OÜ is a small Estonian consulting firm specializing in strategic partnership consulting, focusing on connecting Asia-Pacific with Estonian technology companies. Their core business involves investment scouting, matchmaking between startups and enterprises, organizing business delegations, and conducting seminars on corporate innovation and strategic investment. The company positions itself as a bridge between the Baltic and Asian regions, targeting entrepreneurs, investors, and enterprises interested in cross-regional collaboration. Technically, the website employs modern web technologies including Google reCAPTCHA for form security, Google Tag Manager for analytics, and lazy loading for images to optimize performance. The site is mobile-optimized with good navigation and SEO practices. Hosting appears to be managed via NameCheap, consistent with the domain registrar information. From a security perspective, the website enforces HTTPS and uses CAPTCHA on its contact form, which are positive indicators. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, representing an area for improvement. Overall, the website is professional and credible with consistent WHOIS data and clear business information. The main risks relate to privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms to enhance trust and compliance.

The website haljas.ee is currently a parked domain page primarily used for domain resale via the Sedo platform. It does not represent an active business or service but serves as a placeholder with advertising and a domain purchase offer. The technical infrastructure relies on basic HTML5, CSS normalization, and Sedo's domain parking scripts, with Google Ads integration for monetization. The site lacks a CMS or advanced frameworks and shows basic mobile optimization and accessibility. Security posture is minimal, with no evident security headers or policies, and no HTTPS status confirmed from the data. Privacy compliance is limited to Sedo's generic privacy policy and a basic cookie consent mechanism. Business credibility is low due to absence of contact information or company details. Overall, the site is functional for domain parking but lacks professional business presence or security maturity.

The website whatifi.com is currently a parked domain page indicating that the domain is registered but not linked to any hosting service. It primarily promotes web hosting packages from Zone.eu in multiple languages, targeting domain owners who may be interested in subscribing to hosting services. The content is basic and lacks any detailed business information, contact details, or privacy and security policies. Technically, the site uses standard HTML, CSS, and JavaScript with a Content-Security-Policy header but lacks other important security headers and HTTPS enforcement details. The domain registration is consistent and legitimate, with a long history dating back to 1999, registered through Ascio Technologies, Inc. Danmark. Overall, the site serves as a placeholder with minimal content and limited business credibility or trust signals.

The website famulus.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian domain registrar and hosting provider. The page informs visitors that the domain is registered but not linked to any hosting service and promotes Zone's web hosting packages in multiple languages. The business operates in the technology sector, focusing on domain registration and web hosting services, targeting domain owners seeking hosting solutions. The domain is mature, registered since 2010, and the registrant information aligns with the hosting provider, indicating legitimacy. Technically, the website is a simple static page built with standard HTML, CSS, and JavaScript. It is mobile responsive and provides basic user experience but lacks advanced SEO and accessibility features. Security headers are minimal, with a weak Content-Security-Policy allowing 'unsafe-inline' scripts, and DNSSEC is not enabled for the domain. No HTTPS configuration details are visible, but the domain status suggests it is active and likely supports HTTPS. From a security perspective, the site has a low security posture due to weak headers and lack of DNSSEC. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided. There are no analytics or tracking scripts detected, indicating minimal user tracking. The absence of contact details and policies reduces privacy compliance and user trust. Overall, the site serves as a placeholder with basic information and links to Zone Media OÜ's hosting services. The risk is low as no sensitive data is collected or exposed, but the lack of security best practices and compliance documentation suggests room for improvement. Strategic recommendations include enhancing security headers, enabling DNSSEC, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.

Statiiv OÜ operates a professional website focused on creative services including photography, quality calligraphy, and graphic design. The business targets individuals and organizations seeking artistic visual content, positioning itself as a small local creative service provider in Estonia. The website presents a clean, modern design with consistent branding and clear business identification through the company registration number. Technically, the website uses standard web technologies such as HTML5, CSS3, Google Fonts, and JavaScript. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or complex frameworks are detected, indicating a lightweight custom implementation. From a security perspective, the site does not exhibit advanced security measures such as security headers or documented policies. The email contact is obfuscated via JavaScript to reduce spam risk, and no forms collect sensitive data. However, the SSL status is unknown from the provided data, and no privacy or cookie policies are present, which are important for GDPR compliance. Overall, the website is functional and professional but would benefit from enhanced security practices, explicit privacy and cookie policies, and improved technical SEO and accessibility. The domain WHOIS data aligns well with the business information, supporting legitimacy and trustworthiness.

J

Joss Services

joss-services.com.au

55

Joss Services is a 100% Indigenous owned and operated company specializing in security, construction, and commercial cleaning services primarily serving the Sydney Metro area. The company presents itself as a niche service provider with certifications such as FACCI ASSURED and membership in Supply Nation, indicating a commitment to quality and Indigenous business standards. The website is built on the Squarespace platform, featuring a professional design with clear navigation and mobile responsiveness. However, the absence of privacy and cookie policies, as well as incomplete WHOIS data, limits the overall trust and compliance posture. Security-wise, the site uses HTTPS but lacks security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a legitimate small business with room for improvement in privacy compliance and security best practices.

Christiansen Consulting OÜ is an international consulting firm with offices in Estonia, Denmark, and Greece, specializing in business development, organizational change, and leveraging cultural diversity. Their services include serious games development, team building, and strategic consulting projects across multiple countries. The website is professionally designed using Voog CMS, with good mobile optimization and clear navigation. Technically, it uses modern JavaScript libraries and supports HTTPS with no detected vulnerabilities. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but could improve in privacy compliance and security best practices.

P

PRIA

pria.org

60

PRIA is a well-established non-profit organization founded in 1982, specializing in participatory research, training, and capacity building to empower citizens and civil society in India and globally. The organization focuses on gender equality, sustainable urban futures, and participatory governance, positioning itself as a reputable leader in its sector. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site uses modern JavaScript libraries and CSS frameworks, hosted via GoDaddy, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published security policies. Privacy compliance is basic, with no cookie consent mechanism despite use of tracking tools. Overall, PRIA demonstrates strong business credibility and trustworthiness, though improvements in security and privacy practices are recommended.

NetMedia is a small Estonian technology-focused website providing educational content and reviews related to web development and hosting services. The site is built on WordPress and hosted by Zone Media OÜ, with a consistent domain registration and hosting provider alignment. The website demonstrates good content quality, SEO optimization, and a professional design with clear navigation. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security posture. The site uses HTTPS and modern technologies but could improve accessibility and security best practices.

C

For Sale Page

copterline.com

51

The website copterline.com currently serves as a domain parking and sales page hosted by the Spaceship.com marketplace platform. It does not represent an active business but offers the domain for sale with a fixed price and option to make an offer. The site targets domain investors and buyers, providing secure payment options and transaction support. The branding is consistent with the Spaceship marketplace, and the site includes a contact form for potential buyers to submit their information. Technically, the site uses standard HTML, CSS, and JavaScript, hosted on Spaceship's CDN infrastructure, with moderate performance and good mobile optimization. However, the site lacks advanced SEO, accessibility features, and security headers. The WHOIS data shows inconsistencies such as a future creation date and missing registrant details, which lowers trustworthiness. No privacy, cookie, or terms of service policies are present, and no direct company contact emails or phone numbers are provided. Overall, the site is functional for domain sales but lacks comprehensive business and security information.

Team Electric, LLC is a family-owned electrical contracting company based in Denver, Colorado, with a strong local market presence serving the Denver metropolitan area and broader Colorado region. The company offers a wide range of commercial and industrial electrical services including general electrical work, new construction, remodels, data cabling, lighting systems, and specialized equipment services. Their website reflects a professional and trustworthy business with detailed leadership bios and certifications from recognized industry organizations, positioning them as a premier electrical contractor in their market. Technically, the website is built using standard web technologies including HTML5, Bootstrap CSS, and jQuery, hosted on InMotion Hosting. The site is mobile responsive with good navigation and content quality, though performance is moderate and accessibility features are basic. There is no evidence of a CMS or advanced platform usage. SEO optimization is basic with standard meta tags but no advanced structured data or Open Graph tags detected. From a security perspective, the site lacks visible security headers and there is no confirmation of HTTPS usage in the provided data, which is a significant concern. The contact form includes a simple anti-spam question but no advanced security or privacy policies are present. The absence of privacy and cookie policies indicates compliance gaps, particularly with GDPR and other privacy regulations. WHOIS data shows a long-established domain with consistent registration details, supporting the legitimacy of the business. Overall, the website is functional and professional but requires improvements in security posture and privacy compliance to enhance trust and protect user data. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and enhancing form security. These steps will improve the site's security score and compliance standing, supporting business credibility and customer trust.

F

fort.ee is available for purchase - Sedo.com

fort.ee

54

The website is a domain sales landing page hosted by Sedo.com, a well-established domain marketplace platform. The page advertises the availability of the domain fort.ee for purchase. The business model revolves around domain brokerage and parking services targeting domain buyers and sellers globally. The technical infrastructure includes modern web technologies such as JavaScript modules and Cloudflare DNS, with HTTPS enabled ensuring secure connections. However, DNSSEC is not enabled, and no advanced security headers were detected, indicating room for improvement in security hardening. Privacy compliance is minimal, with no privacy policy or terms of service found on this page, though a cookie consent banner is present. Contact information and incident response details are absent, which may impact user trust and compliance. Overall, the site is functional but basic in content and security posture, suitable for its purpose as a domain sales landing page.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or not loaded. Consequently, no business information, metadata, or security policies are present to evaluate. The page is a technical placeholder rather than a functional website, preventing meaningful analysis of business operations or security posture.

SDF Group is a globally recognized manufacturer and distributor of tractors, diesel engines, and agricultural machinery, operating under multiple well-known brands. The company targets farmers and contractors seeking advanced farming technology and precision agriculture solutions. The website demonstrates a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, incorporating analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response policies could be improved. The absence of WHOIS data reduces domain registration trust but is offset by professional branding and comprehensive content. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a strong business credibility profile.

A

Ambient Sound Investments

asi.ee

46

Ambient Sound Investments (ASI) is a private asset management firm established in 2003 by four founding engineers of Skype. The company operates as a family office with a focus on investments across venture capital, private equity, listed equity, and real assets, with assets geographically located in Europe, the US, and Asia. The website presents a professional image with clear navigation and relevant business content, targeting investors and professionals interested in diversified asset management. The business model is niche and specialized, leveraging the founders' technology and finance backgrounds. Technically, the website is built on the Voog CMS platform, utilizing standard web technologies such as JavaScript, CSS, and HTML5. The site is mobile optimized and performs moderately well, though accessibility features are basic. The hosting and domain registration are consistent with the business location in Estonia, with no signs of privacy protection or suspicious WHOIS data. External scripts are limited and primarily related to the CMS platform. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and visible security policies. There are no privacy or cookie policies, nor contact information for security incidents or data protection officers. No vulnerabilities or exposed sensitive data were detected, but the absence of key compliance documents and security headers represents a moderate risk. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

The website ww.ee represents a small Estonian technology-related company operating under the names OÜ Wõrgu Wõlurid and Web Wizards LLC. The business appears to provide web or IT services, targeting both Estonian and English-speaking clients. The domain is well-established since 2010 and hosted by Zone Media OÜ, consistent with the company's location and language. The website content is minimal but accessible, providing basic contact information in two languages. Technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript without advanced frameworks or CMS platforms. Mobile optimization and accessibility are basic but functional. From a security perspective, the site lacks critical security headers and published policies such as privacy, cookie, or terms of service, which indicates compliance gaps and potential risks. No incident response or vulnerability disclosure mechanisms are present. The absence of analytics or tracking scripts suggests minimal user tracking, which is positive for privacy but also indicates limited marketing sophistication. WHOIS data is transparent and consistent with the website's claims, supporting legitimacy. Overall, the website scores moderately on business credibility but falls short on privacy compliance and security posture. The lack of published policies and security best practices presents risks that should be addressed to improve trust and regulatory compliance. Strategic improvements in security headers, policy publication, and incident response readiness are recommended to enhance the site's security and compliance maturity.