Security Directory

R

Route One

routeone.co.uk

70

Route One is a specialized retailer focusing on skateboarding, snowboarding, and streetwear apparel and accessories, targeting youth and young adults in Europe. The company operates a professional e-commerce platform built on Shopify, offering a broad product range and a user-friendly shopping experience. The website demonstrates good digital maturity with modern technologies, mobile optimization, and integrated marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears legitimate and professionally managed with a solid market position in its niche.

The website ww38.mineprofs.org is a domain parking page indicating that the domain mineprofs.org is potentially for sale. It lacks substantive business content, contact information, or any active services. The site primarily serves as a placeholder with advertising scripts and links to domain sale services. The technical infrastructure relies on basic HTML, CSS, and JavaScript, with third-party ad networks such as Google Adsense Domains and Youseasky tracking scripts. Hosting is via Amazon Cloudfront CDN. Security posture is minimal with no visible HTTPS enforcement or security headers, and privacy compliance is weak due to absence of cookie consent mechanisms despite extensive tracking. The WHOIS data is unavailable due to a malformed request, suggesting privacy protection or restricted access, which aligns with the domain's parked status. Overall, the site presents low business credibility and trustworthiness.

F

Fleep Technologies

fleep.io

64

Fleep Technologies operates the website fleep.io, offering a professional messaging platform designed for companies seeking simple and effective digital communication solutions. The service integrates team chats, project communication, and email messaging into a single app, targeting small to medium-sized businesses. The company positions itself as a straightforward, subscription-based communication tool with a free trial, emphasizing ease of use and cross-organization collaboration. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google Analytics integrated for typography and user tracking respectively. Hosting is managed via Amazon AWS DNS services, and the site is mobile-optimized with responsive design elements. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response information publicly available. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation. The absence of direct contact emails or phone numbers on the main pages is a minor gap. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which indicates that the actual website content for the domain 'chromewebdata' is not accessible or blocked. This page primarily contains embedded Chromium offline game scripts and styling, with no real business or website content available. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game code, with no external hosting or CMS detected. Security posture is minimal due to lack of accessible content and absence of security headers or HTTPS enforcement details. The domain WHOIS data is not provided, preventing any domain legitimacy or registration analysis. Overall, the site is inaccessible for meaningful business or security evaluation, resulting in a low AI score and no trust indicators.

S

Stagnation Lab

stagnationlab.com

44

Stagnation Lab is a medium-sized Estonian technology company founded in 2013, specializing in designing and building cross-device and platform digital experiences. Their portfolio includes notable projects such as Smart-ID, Telia TV, and Klarvinduer, indicating a strong market presence in the Baltic region and ambitions for wider European adoption. The company offers a broad range of services including design, web and mobile applications, e-commerce, TV and VR apps, as well as IoT and robotics hardware prototyping. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices and clear navigation, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with the company's founding date. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and security headers which are recommended for enhanced security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. No incident response or security policy information is provided, limiting transparency on security governance. Overall, the website is professional and trustworthy with moderate security posture and some compliance shortcomings. Strategic improvements in privacy documentation, security headers, and DNS security would enhance trust and reduce risk.

The website bpe.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian company specializing in domain registration and web hosting services. The site informs visitors that the domain is registered but not linked to any hosting service and promotes Zone Media's hosting packages in multiple languages (Estonian, Russian, Finnish, and English). The business model focuses on providing domain registration and hosting services primarily in the Baltic region. The website content is basic and serves as a placeholder rather than a fully developed business site. Technically, the site uses standard HTML5, CSS3, SVG graphics, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is Zone Media OÜ, consistent with the WHOIS data. The site is mobile-optimized and loads quickly but lacks advanced SEO and accessibility features. Security headers are minimal, with a Content-Security-Policy header present but weakened by the use of 'unsafe-inline'. HTTPS is implied but not explicitly confirmed in the HTML content. From a security perspective, the site shows basic security hygiene but lacks comprehensive security headers and policies. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is low risk but also low in business credibility and privacy compliance. It functions primarily as a domain parking page with promotional content for hosting services. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.

O

OpenNode LLC

opennodecloud.com

49

OpenNode LLC is a small technology company specializing in open-source infrastructure management software and cloud system implementations. Their product portfolio includes Waldur, an open-source multi-cloud marketplace; Kubernetes ON, a managed Kubernetes service; and the G-Cloud Platform, targeting government cloud solutions. The company targets enterprises and public sector organizations seeking cloud infrastructure management and governance solutions. The website is professionally designed, consistent in branding, and provides clear information about products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Leaflet.js for mapping, and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and published security policies such as privacy, cookie, incident response, or vulnerability disclosure statements. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the company's credibility. Overall, the website presents a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The platform targets mobile development teams seeking to automate build, test, and release workflows to accelerate app delivery. With over 150,000 developers trusting the service, Codemagic holds a strong market position as a focused mobile CI/CD solution with enterprise-grade features and integrations. Technically, the website demonstrates a modern and performant infrastructure hosted on AWS, utilizing JavaScript, CSS, and HTML5 with integrations for Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The platform itself offers cloud-based, fully maintained infrastructure with support for multiple hardware/software configurations, emphasizing ease of use and automation. From a security perspective, Codemagic maintains a robust posture with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and compliance with GDPR and CCPA. The website includes privacy and security statements and cookie consent mechanisms. However, there is no public incident response contact or security.txt file, which could enhance transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, Codemagic presents a trustworthy, professional, and technically sound offering with strong compliance and security practices. The domain registration is privacy protected but consistent with the company profile and age. Strategic recommendations include publishing a security.txt file, adding explicit incident response contacts, and enhancing security headers to further strengthen security posture and trust.

I

Interactive Brokers LLC

interactivebrokers.com

67

Interactive Brokers LLC operates a leading global online brokerage platform providing direct access to stocks, options, futures, currencies, bonds, and funds. The company targets a broad audience including individual traders, investors, advisors, and institutional clients. It holds a strong market position supported by a Nasdaq listing, substantial equity capital, and multiple industry awards. The website reflects a mature digital presence with comprehensive product information, multilingual support, and advanced trading technologies. Technically, the site uses modern frameworks like Bootstrap and jQuery, is well optimized for performance and mobile devices, and implements strong security headers and HTTPS encryption. Privacy compliance is evident through cookie consent mechanisms and a detailed privacy policy. However, the absence of publicly available WHOIS data and explicit security policy or incident response contacts slightly reduce trustworthiness. Overall, the site demonstrates a high level of professionalism, security, and user experience suitable for a major financial services provider.

U

United Angels VC

unitedangels.vc

54

United Angels VC is an early-stage venture capital fund based in Estonia, with a portfolio of notable startups such as Bolt and Starship. The fund's investment period for United Angels Fund I has ended, and current investments are made under the Specialist VC Fund II brand. The website reflects a professional and consistent brand presence, with clear business information and legal disclosures. Technically, the site is built on the Voog CMS platform, utilizing modern web technologies and is mobile optimized. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and privacy compliance is limited due to absence of privacy and cookie policies. Contact information is limited but includes a verified company email and physical address. Overall, the site is trustworthy and credible but could improve privacy and security transparency.

The website kkfashion.eu is an early-stage or under-construction online presence for a fashion e-commerce business, as indicated by the linked shop subdomain. The site is built on WordPress 6.8.1 and hosted under the registrar Zone Media OÜ in Estonia, consistent with the domain's country. The content is minimal, with no privacy, cookie, or terms of service policies present, and no contact or security information provided. Technically, the site uses standard WordPress assets and scripts but lacks advanced SEO, accessibility, and security headers. No analytics or advertising technologies are detected, indicating a low digital maturity level. Security posture is basic with no visible vulnerabilities but also no advanced protections or policies. Overall, the site is low in trustworthiness and professionalism due to its incomplete state and lack of compliance documentation.

I

Intership Navigation Co. Ltd

intership-cyprus.com

49

Intership Navigation Co. Ltd operates as a specialized provider in the maritime transportation sector, focusing on ship and crew management services. Their offerings include technical management, crewing and training, commercial management, accounting, insurance, travel, catering, and sustainable management. The company positions itself as a leader with a commitment to safety, quality, and ESG principles, targeting shipowners and maritime stakeholders. The website reflects a medium-sized enterprise with consistent branding and trust signals such as certifications and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF detected, indicating reliable hosting and infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. No cookie consent mechanism is present, which impacts privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy, although the website content and certifications suggest a legitimate business. Overall, the website is professional and functional with room for improvement in privacy compliance, security best practices, and domain registration transparency. Strategic enhancements in these areas would strengthen trust and security posture.

Texas Instruments is a global semiconductor company specializing in the design, manufacture, testing, and sale of analog and embedded processing chips. The company maintains a comprehensive and professionally designed website that targets engineers, designers, and enterprises in the semiconductor industry. The site offers extensive product catalogs, design resources, and support forums, reflecting a mature and well-established business model with a strong market position. Technically, the website employs modern web technologies including JavaScript, CSS3, and custom CMS infrastructure, with integrated analytics and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers and explicit incident response contacts could be improved. The WHOIS data for the domain is not publicly available, which is unusual for a large enterprise but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the website demonstrates a high level of digital maturity and business credibility, with minor recommendations for enhancing security transparency and incident response visibility.

T

Tommi Mäkinen Racing Oy

tommimakinenracing.fi

50

Tommi Mäkinen Racing Oy operates the website www.tommimakinenracing.fi, offering specialized ice driving experiences featuring the Toyota GR Yaris and expert coaching by 4-time World Rally Champion Tommi Mäkinen. The business targets motorsport enthusiasts and individuals interested in rally driving on ice, leveraging the strong personal brand of Tommi Mäkinen to position itself as a niche leader in this segment. The website content is professionally presented with consistent branding and relevant imagery, emphasizing the adrenaline and precision of the driving experience. Technically, the website is built using the Framer platform, employing modern HTML5, CSS3, and JavaScript technologies. It includes proper meta tags for SEO and social media sharing, and the site is mobile optimized with good performance metrics. Security is well addressed with HTTPS enforced and multiple security headers present, indicating a mature security posture. However, the site lacks explicit privacy and cookie policies, GDPR compliance statements, and incident response contacts, which are important for regulatory compliance and user trust. Overall, the security posture is strong with no detected vulnerabilities or blocking mechanisms, but privacy compliance is weak due to missing policies and consent mechanisms. The business credibility is high given the clear association with Tommi Mäkinen and professional presentation, though contact information is not explicitly provided on the site. Strategic recommendations include adding comprehensive privacy and cookie policies, GDPR compliance disclosures, and clear contact channels for security incidents to enhance trust and compliance.

S

SRC Group

src.ee

46

SRC Group is a specialized marine and offshore engineering company focusing on retrofit engineering modifications including steel works, pipe works, mechanical and electrical installations, and interior refits. The company targets clients in the marine and offshore sectors, positioning itself as a niche service provider with solid references. The website reflects a small-sized business founded in 2010, with consistent branding and good content quality. Technically, the website uses modern web technologies and a custom CMS, hosted likely by Elkdata OÜ, an Estonian hosting provider. The site is mobile optimized and performs moderately well, though accessibility could be improved. Security posture is moderate with HTTPS implied but no visible security headers or policies published. Privacy compliance is good with a cookie consent mechanism and a privacy policy page. However, contact information and terms of service are not present in the analyzed content, limiting direct communication channels and legal transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

V

Volvo Trucks

volvotrucks.ee

48

Volvo Trucks is a globally recognized enterprise specializing in manufacturing and selling heavy-duty trucks and related services. The website serves the Estonian market, providing comprehensive information about truck models, financing, fleet management, and other services. The site is built on a robust technical infrastructure leveraging Adobe Experience Manager and Adobe analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit privacy and security policies are not found in the provided content. Overall, the website reflects a professional and trustworthy brand with room for improvement in transparency and compliance documentation.

S

SOL Group

solgroup.com

72

The SOL Group is a large Italian company specializing in the production, applied research, and marketing of technical and medical gases, home care services, biotechnologies, and renewable energy production. The company targets industrial clients, healthcare facilities, patients at home, and the biotechnology sector, positioning itself as a diversified and established player in the energy and healthcare industries. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on the Plone CMS platform, utilizing modern web technologies including Bootstrap, FontAwesome, and Cookiebot for privacy management. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the SOL Group website demonstrates strong digital maturity and compliance with privacy regulations, but the domain registration inconsistency slightly impacts trustworthiness. Strategic recommendations include publishing explicit security policies, incident response contacts, and a security.txt file to enhance transparency and security posture.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as an offline or error placeholder within the Chrome browser. No actual website content, business information, or external links are present. The page includes embedded scripts related to the Chrome Dino game, which is a built-in offline game in Chrome. Due to the nature of this page, no business or security policies, contact information, or marketing data are available. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture cannot be meaningfully assessed as this is not a public-facing website. Overall, this content is not a website but a browser error page, and thus no risk or compliance assessment applies.

D

Dolm IT

dolmit.com

55

Dolm IT is a specialized software development company based in Estonia, focusing on delivering complex enterprise and government software solutions. Established in 2015, the company positions itself as a customer-obsessed partner offering services including software engineering, product management, consulting, and UX architecture. Their clientele spans private and public sectors, including notable companies and government organizations, highlighting a trusted market position in the technology industry. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not implement DNSSEC, which could enhance domain security. The absence of privacy and cookie policies, as well as no visible incident response or vulnerability disclosure mechanisms, indicates gaps in compliance and security transparency. Overall, Dolm IT presents a professional and credible online presence with a solid business foundation. To improve risk posture and compliance, the company should implement comprehensive privacy and cookie policies, enhance security headers, and publish security and incident response information.

The website sosar.eu is a parked domain primarily serving as a placeholder indicating the domain is for sale. It does not provide any active business services or content beyond advertising and domain sale promotion. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising scripts from Google Adsense and related networks. There is no evidence of a content management system or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie consent mechanisms are implemented. The WHOIS data shows the domain is registered by Tool Domains EOOD, a domain registrar company, consistent with the domain parking status. Overall, the site lacks business credibility and trust indicators, making it unsuitable for professional or commercial use in its current state.

A

Arengupartner

arengupartner.ee

40

Arengupartner is a small Estonian coaching service provider established in 2010, offering life coaching, work-related coaching, team coaching, and training services. The website is built on Joomla! CMS using UIkit and Yootheme frameworks, hosted by Radicenter OÜ. The site is professionally designed with good navigation and mobile optimization, targeting individuals and teams seeking coaching services. Social media presence on Facebook and LinkedIn and partner logos enhance trustworthiness. Security posture is basic with HTTPS enabled but lacking security headers and formal policies. No privacy or cookie policies were found, indicating compliance gaps. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.

B

成人色站,在线视频,看片-DANDANAV

bindcreative.com

52

The website bindcreative.com is an adult video streaming platform primarily targeting Chinese-speaking audiences with a variety of adult content including Asian, Japanese, and Western adult videos. The business model appears to be advertising-driven with extensive use of third-party ad and tracking domains. The site is newly registered in March 2024 and lacks detailed business or contact information, which limits trust and credibility. Technically, the site uses modern JavaScript frameworks such as Vue.js and is hosted with Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. Privacy and compliance policies are absent, and no GDPR or data protection measures are evident. The site also lacks verified contact information and does not provide terms of service or cookie consent mechanisms, which raises compliance concerns.

A

antiviruspro.com

antiviruspro.com

41

The website antiviruspro.com is currently a parked domain primarily monetized through advertising networks such as Google Adsense and Bodis. It lacks original content, business information, or active services, serving mainly as a placeholder domain with ads related to antivirus software. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The domain is hosted via Bodis name servers and registered through a domain registrar reseller, consistent with typical parked domains. From a security perspective, the site uses HTTPS but lacks essential security headers and does not implement privacy or cookie consent mechanisms. There are no forms or inputs, reducing attack surface, but the absence of security policies or incident response information indicates a low security maturity level. The domain registration is recent and consistent with the parked domain status, with no privacy protection used. Overall, the site scores low on content quality, business credibility, and privacy compliance, reflecting its nature as a parked domain rather than an active business website. There are no signs of WAF or blocking mechanisms, and the site is fully accessible. Strategic recommendations include implementing security headers, adding privacy and cookie consent notices, and providing clear business and contact information if the domain is to be developed into an active service platform.

R

Reliance Jio Infocomm Limited

jio.com

77

Reliance Jio Infocomm Limited operates India's largest telecom network, offering a comprehensive suite of prepaid and postpaid mobile plans, broadband services including JioFiber and AirFiber, and a variety of digital applications. The website reflects a mature enterprise with a strong market position and a focus on delivering digital connectivity and entertainment solutions to both consumers and businesses across India. The company leverages modern web technologies such as Next.js and CDNs to ensure fast and responsive user experiences. Security posture is generally strong with HTTPS and secure form handling, though there is room for improvement in security headers and transparency around privacy and incident response. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing privacy compliance, publishing vulnerability disclosure information, and improving security header implementation to strengthen trust and compliance.

O

ORGO OÜ

orgo.ee

37

ORGO OÜ is a small Estonian company with a minimal web presence focused primarily on providing contact information. The website lacks detailed business descriptions, service offerings, or marketing content, indicating a basic digital footprint. The domain is registered with Elkdata OÜ since 2017, consistent with the company's Estonian origin and contact details. Technically, the website uses standard HTML5 and CSS3 with Google Fonts integration but lacks advanced frameworks or CMS platforms. Performance and mobile optimization are basic but functional. Security posture is weak due to absence of security headers, privacy policies, and visible HTTPS enforcement, although no critical vulnerabilities were detected. Overall, the site is legitimate but underdeveloped in terms of content, security, and compliance.

The website prepayway.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain is registered since 2017 with OVH sas and uses Cloudflare DNS and WAF services. Due to the blocking mechanism, no business information, contact details, or policies are available for review. The technical infrastructure shows use of Cloudflare security services but lacks visible security headers or privacy compliance indicators. Overall, the security posture cannot be fully assessed, and the lack of accessible content severely limits trust and credibility evaluation.

The website fraktal.ee currently serves only a 404 Page Not Found error page with no substantive content or business information. The domain is registered since 2010 under Edicy OÜ, which is consistent with the hosting provider and CMS platform (Voog) used. However, the lack of accessible content, contact details, and policies significantly limits the website's utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with minimal optimization and no advanced frameworks or analytics. Security posture is weak, with only a basic Content-Security-Policy header present and no evidence of HTTPS enforcement. Privacy compliance is absent, with no privacy or cookie policies detected. Overall, the site appears inactive or misconfigured, presenting a high risk for users seeking information or services.

M

Maxima

maxima.ee

69

Maxima is a large retail grocery chain operating in Estonia, offering over 2000 promotional deals weekly to its customers. The website is professionally designed with good content quality and clear navigation, targeting retail consumers seeking affordable daily groceries. Technically, the site employs modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating reliable hosting and security infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks visible security policies and incident response contacts. Privacy compliance is partially addressed via Cookiebot consent but lacks a publicly accessible privacy policy or terms of service pages. Overall, the site demonstrates moderate to good digital maturity with room for improvement in privacy transparency and security documentation.

E

Eesti Geoloogia Selts

egeos.ee

45

Eesti Geoloogia Selts is an established Estonian geological society with a domain registered since 2010. The website serves as an informational portal for society members and the geology community in Estonia, providing details about the society, its members, activities, projects, and events. The site is built on the Voog CMS platform and uses standard web technologies including HTML5, CSS3, and JavaScript libraries such as jQuery. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies. Social media presence on Facebook and LinkedIn supports community engagement. Overall, the website is professional and consistent with its non-profit educational mission but would benefit from enhanced privacy compliance and security best practices.

The website wearesubrosa.com is currently a parked domain placeholder page indicating that the domain has been registered but is not actively used for any business operations. The page offers potential buyers the opportunity to solicit a request to purchase the domain from the owner. The business model revolves around domain registration and resale facilitation, with additional promotional links to domain registration, SSL certificates, professional email, and website protection services offered by the registrar Gname 118 Inc. The website content is minimal and lacks any substantive business information, contact details, or privacy and security policies. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting and domain registration are managed by Gname 118 Inc. The website is mobile responsive with basic accessibility and SEO features. However, the site lacks HTTPS usage, DNSSEC is not enabled, and no security headers are present, indicating a low security posture. There are no analytics or tracking scripts detected beyond a single script from the registrar's domain. Security posture evaluation reveals that while the domain status clientTransferProhibited is set, providing some protection against unauthorized transfers, the absence of HTTPS, DNSSEC, and security headers are notable vulnerabilities. No privacy policy, cookie policy, or terms of service are present, and no contact or incident response information is available, limiting compliance with GDPR and other regulations. Overall, the website presents a low-risk profile due to its inactive status but lacks trustworthiness and business credibility. Strategic recommendations include enabling HTTPS, implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

L

AS Levira | Väljastus,võrguteenused, IT-teenused,striiming ja TV-tootmine, satelliit

levira.ee

52

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual website. This page is a standard offline or error page embedded within the Chrome browser, featuring the well-known Chrome dinosaur game. No real business or website content is accessible, and therefore no metadata, contact information, or policies are present. The technical infrastructure is limited to embedded JavaScript and CSS for the offline game, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers applicable to this internal page. Overall, the site is inaccessible for meaningful analysis, and no business or compliance information can be derived.

T

TERE AS

tere.eu

51

Tere dairy (TERE AS) is a medium-sized Estonian dairy product manufacturer and retailer offering a variety of dairy and plant-based products such as kefir drinks and puddings. The company targets consumers in Estonia and neighboring regions, providing products in multiple languages to cater to a diverse audience. The website is professionally designed with good content quality and clear navigation, supporting the company's market presence. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Fonts. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations could be improved. The presence of Google Tag Manager indicates moderate user tracking and analytics capabilities. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible privacy policies, terms of service, or incident response information, which are critical for compliance and trust. Cookie consent is implemented, but GDPR compliance indicators are minimal. WHOIS data is unavailable due to privacy restrictions, which is common but reduces transparency. Overall, the website demonstrates a solid business and technical foundation but requires improvements in privacy compliance, security headers, and transparency to enhance trust and regulatory adherence.

AS Stallion Ltd. is an established Estonian cybersecurity company founded in 1994, specializing in network security solutions such as firewalls, VPNs, data protection, and malware prevention. With over 30 years of experience and offices in Tallinn and Riga, Stallion serves business clients requiring comprehensive IT security and network infrastructure solutions. The company partners with leading global cybersecurity vendors, reinforcing its market position as a trusted provider in the Baltic region. Technically, the website employs basic web technologies including HTML, CSS, and JavaScript, with Google Analytics for visitor tracking. However, the site lacks modern security implementations such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. The site’s design and navigation are functional but could benefit from improved mobile optimization and accessibility. From a security perspective, the absence of HTTPS and security headers represents a significant risk, potentially exposing users to data interception and other attacks. The lack of privacy and cookie policies also indicates compliance gaps. No forms or input fields are present on the main page, reducing attack surface but also limiting user interaction. The company’s domain registration data aligns well with its business claims, supporting legitimacy. Overall, while Stallion demonstrates strong business credibility and domain trustworthiness, the website’s security posture and privacy compliance require urgent improvements to meet modern standards and regulatory requirements.

The website frens.ee currently serves only a 404 Page Not Found error page with no active business content or user engagement features. The domain is registered with Zone Media OÜ, an Estonian registrar, since 2010, indicating a legitimate and aged domain. However, the lack of content and absence of privacy, cookie, or terms of service policies suggest the site is inactive or a placeholder. Technically, the site uses basic HTML, CSS, and JavaScript with minimal security headers, notably a weak Content-Security-Policy allowing 'unsafe-inline' scripts, which reduces security effectiveness. No HTTPS status was explicitly provided, but the domain status is 'ok' and presumably supports HTTPS given the registrar and hosting provider. No analytics, tracking, or social media integrations are present, indicating minimal digital maturity. Security posture is weak due to missing standard headers and lack of secure forms or incident response information. Overall, the site scores low on content quality, privacy compliance, and business credibility, reflecting its inactive state.

The website astangu.ee is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents access to any substantive content. The domain is registered since 2010 with an Estonian registrar, indicating a legitimate and established domain. However, no business information, contact details, or policies are available on the accessible page. The technical infrastructure relies on Cloudflare for security and performance, but no CMS or additional technologies are detected. The security posture is limited to Cloudflare's WAF and captcha challenge, with no further visible security headers or configurations. Due to the content being blocked, a full analysis of business, compliance, and security posture is not possible, resulting in a low overall AI score.

The Archimedes Foundation website serves as a minimal informational page indicating that as of January 1, 2021, its activities were transferred to the Estonian Education and Youth Board and the Erasmus+ and European Solidarity Corps Agency. The foundation historically managed European educational and youth programs such as Erasmus+. The website content is very limited, with no privacy, cookie, or terms of service policies, and no contact information provided. Technically, the site uses basic HTML and CSS with Google Fonts, hosted under an Estonian registrar. No advanced security headers or analytics tools are detected, and the site lacks modern SEO and accessibility features. Security posture is minimal but no critical vulnerabilities are evident. Overall, the site appears to be a legacy informational page rather than an active service platform.

1

101domain GRS Limited

acino-pharma.com

47

The website acino-pharma.com is currently a parked domain managed by 101domain GRS Limited, a domain registrar and service provider established in 1999. The site does not host any active business content related to Acino Pharma but instead displays a placeholder page offering domain management and upsell services such as Google Workspace, web hosting, and corporate brand services. The target audience appears to be individuals or businesses interested in acquiring or managing domain names. The business model is that of a domain registrar and related service provider with a moderate market presence. Technically, the site uses standard HTML5, CSS3, and JavaScript technologies including jQuery and Modernizr. It is hosted on infrastructure associated with 101datacenter.net. The site is moderately optimized for mobile devices and has basic accessibility and SEO features. However, it lacks HTTPS, security headers, and advanced technical frameworks or CMS platforms. From a security perspective, the site has several weaknesses including the absence of HTTPS, no DNSSEC enabled, and no visible security policies or incident response contacts. The domain is locked against transfer but is not actively used for business purposes. No privacy or cookie policies are present, and no contact information is provided, limiting compliance with GDPR and other regulations. Overall, the security posture is weak, and the site is primarily a parked domain with minimal risk but also minimal trust signals. The overall risk assessment is low due to the lack of active business operations on the domain. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing DNSSEC, and providing clear contact and security information to improve trust and compliance if the domain is to be used actively in the future.

C

CYBERNETICA AS

cyber.ee

57

Cybernetica AS is a well-established Estonian technology company specializing in secure digital society technologies, including e-governance, cybersecurity, digital identity, and maritime surveillance. The company has a strong market position as the architect of e-Estonia and serves governments and enterprises globally. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional design. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Cybernetica demonstrates high business credibility and technical maturity, making it a trustworthy and professional entity in its sector.

The website ubiksolutions.eu is currently a parked domain with no active business content or services. It primarily serves as a domain for sale landing page, with advertising scripts and tracking mechanisms embedded. There is no evidence of an operational company or business model on the site. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with third-party ad networks such as Google Adsense and Youseasky. The site lacks modern security practices, including HTTPS enforcement and security headers, and does not provide privacy or cookie consent mechanisms. Overall, the security posture is weak, and the site does not comply with GDPR or other privacy regulations. The domain registration is consistent with a domain parking service provider, indicating no active business ownership. Strategic recommendations include implementing HTTPS, adding clear privacy and cookie policies with consent, providing legitimate business contact information, and improving site content and design to enhance trust and compliance.

G

GreatStudio

greatstudio.com.br

54

GreatStudio is a Brazilian technology company offering a SaaS platform tailored for photographers and photography studios. The platform provides tools for photo selection, online photo sales, album approval, and business management including financial and scheduling features. It serves over 18,000 photographers across 11 countries, positioning itself as a professional and easy-to-use solution with a free 7-day trial to attract new users. The website is well-branded, mobile-optimized, and uses Cloudflare for DNS and SSL, indicating a modern technical infrastructure. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. No direct contact information or incident response channels are visible, which could impact customer support and security responsiveness.

D

Duvel

duvel.com

73

Duvel is a well-established Belgian beer brand with a rich history dating back to 1871. The company operates a professional website that showcases its premium beer products, brand heritage, and visitor experiences. The site targets beer enthusiasts primarily in Belgium and internationally, offering detailed product information, awards, and an e-commerce platform. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Flowbox for social media integration, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, includes an age verification modal to comply with legal drinking age requirements, and implements cookie consent mechanisms aligned with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data for the domain is unavailable, which slightly impacts trust analysis. Overall, the website is professional, secure, and compliant, supporting Duvel's market position as a premium beer brand.

D

Dieter Schwarz Stiftung gGmbH

dieter-schwarz-stiftung.de

55

The Dieter Schwarz Stiftung gGmbH is a well-established non-profit foundation focused on promoting lifelong learning and scientific advancement in the Heilbronn-Franken region of Germany. With a history dating back to 1999 and over 1300 supported projects, the foundation plays a significant role in regional education and innovation. Their website reflects a professional and comprehensive digital presence, offering detailed information about their initiatives, events, and news updates. The target audience includes educational institutions, researchers, students, and the local community. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies such as SCSS, JavaScript libraries like Splide.js for carousels, and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security standpoint, the site enforces HTTPS and employs privacy consent mechanisms compliant with GDPR. While no explicit security headers were detected in the provided data, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.

The website www.lancome.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual site content. This prevents extraction of any meaningful business, technical, or security information. The WHOIS lookup for the domain returned no entries, indicating either privacy protection or lack of public registration data, which further limits trust and legitimacy assessment. Without access to the site content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure appears to rely on Cloudflare services for security and hosting, but no further details are available. The security posture is limited to the presence of Cloudflare's WAF, but no other security headers or configurations can be verified. Overall, the site cannot be fully analyzed, and the risk assessment remains low due to lack of accessible data.

4

42 Luanda

42luanda.com

44

42 Luanda is a free programming education center based in Angola, part of a global network offering innovative peer-to-peer learning without traditional teachers. The website presents a clear business focus on empowering youth through gamified programming challenges and practical projects. Technically, the site uses modern frontend technologies and is hosted with Cloudflare DNS, ensuring good availability and performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and explicit privacy or cookie policies. Tracking technologies like Facebook Pixel and Google Tag Manager are used without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is professional and credible but would benefit from enhanced security and privacy transparency.

G

GreatPages

greatpages.com.br

54

GreatPages is a Brazilian technology company specializing in providing high-performance landing page templates and a platform for infoproduct creators and online course sellers. Their service enables users to create optimized landing pages with marketing tool integrations and SEO configurations, targeting the Brazilian market. The website is professionally designed with good content quality and moderate technical implementation, including Cloudflare DNS for hosting and performance. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved with better security practices and transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security measures.

G

GreatSoftwares

greatsoftwares.com.br

54

GreatSoftwares is a Brazilian technology company offering a suite of software solutions primarily targeting photographers, studios, and businesses requiring digital tools. Their portfolio includes management systems, website builders, payment processing, email marketing, e-commerce, and membership platforms. The company positions itself as a comprehensive provider with a growing international presence. Technically, the website is built with modern web standards, uses HTTPS, and is hosted on a specialized platform, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy, with clear business information and compliance with privacy regulations.

W

WocaBee

wocademy.cz

44

WocaBee operates an educational platform focused on language learning and teacher support, exemplified by the WocaDemy conference targeting future and novice language teachers. The website serves as an event landing page providing detailed program information, speaker bios, partner affiliations, and a registration form. Technically, the site uses standard web technologies including jQuery and Animate.css, with a responsive design and moderate performance. However, it lacks key privacy and security disclosures such as privacy and cookie policies, security headers, and incident response contacts, which are critical for compliance and trust. The registration form collects personal data but does not show visible anti-bot protections. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures to improve compliance and user trust.

M

Manilot media s.r.o.

ucitelskenoviny.cz

64

Učitelské noviny is a well-established Czech weekly publication and online news portal dedicated to teachers and the educational community. It provides a wide range of content including news, expert opinions, reports, and educational resources, targeting educators and school stakeholders. The website is professionally designed with consistent branding and regularly updated content, reflecting its position as a trusted source in the Czech education sector. The business is operated by Manilot media s.r.o., indicating a medium-sized media entity focused on education. Technically, the website uses standard web technologies such as jQuery and custom JavaScript, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of visible privacy and cookie policies. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not negate the professional appearance and content quality of the site. Overall, the website presents a credible educational media outlet with room for improvement in privacy and security transparency.

M

Mapei

mapei.com

66

Mapei is a well-established enterprise specializing in adhesives, sealants, and chemical products for the building industry, boasting approximately 80 years of market presence. The website reflects a professional and comprehensive digital presence, targeting construction professionals and distributors globally. The company leverages a modern technical infrastructure including Sitefinity CMS, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, with clear navigation and rich content describing their products and services. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall website professionalism and content quality support the legitimacy of the business. Strategic improvements in security policy publication and contact information visibility would enhance trust and compliance.

Astralpool is a well-established company specializing in innovative solutions for pools and wellness, targeting both residential and commercial markets. Their website demonstrates a professional digital presence with a comprehensive product catalog and multilingual support, indicating a mature business model focused on manufacturing and retail of pool-related products and wellness equipment. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and visible privacy policies suggests room for improvement. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency but does not detract significantly from the website's operational professionalism. Overall, the site is well-designed, user-friendly, and trustworthy from a business perspective, though enhancing security and compliance disclosures would strengthen its risk profile.