Security Directory

V

Virumaa Rannakalurite Ühing MTÜ

vrky.ee

38

Virumaa Rannakalurite Ühing MTÜ is a regional non-profit association established in 2007 in Estonia, serving fisheries sector stakeholders in Ida- and Lääne-Virumaa. The organization supports local fisheries businesses, non-profits, and municipalities through project coordination and information dissemination. The website reflects a focused regional presence with clear business objectives and a target audience within the local fisheries community. Technically, the site is built on WordPress with modern libraries such as jQuery, Swiper.js, and Google Fonts, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity appropriate for a small non-profit organization.

G

Goldcar

goldcarhelp.com

54

Goldcar is a well-established car rental company operating primarily in Spain with a strong presence in major tourist destinations. The company offers a variety of car rental services, including innovative features like the Key'n Go automatic key pickup system and a loyalty program called GO Club. The website serves as a comprehensive help center supporting customers with FAQs, booking assistance, and contact options. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a CDN likely provided by Akamai, ensuring moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

D

Dollar Car Rental

dollar.com

66

Dollar Car Rental operates a professional and user-friendly website offering car rental services across Europe with over 400 locations. The company targets budget-conscious travelers and provides flexible rental options with an emphasis on ease of booking and management. The website demonstrates a mature digital presence with modern technologies and compliance mechanisms such as cookie consent and privacy policies. However, the domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional branding and content. The site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published incident response policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency on domain registration and enhanced security practices.

T

Thrifty Car Rental

thrifty.com

66

Thrifty Car Rental operates a professional and user-friendly website offering car rental services primarily across Europe. The company targets both business and leisure travelers with a broad fleet including electric and economy vehicles. The website demonstrates a mature digital presence with responsive design, clear navigation, and integration of modern technologies such as Google Tag Manager and cookie consent management via Securiti.ai. However, the absence of WHOIS registration data for the domain www.thriftycars4rent.com raises concerns about domain legitimacy, despite the website's strong branding alignment with the parent company Hertz. Security posture is generally good with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhancement of security transparency.

E

Eesti Puuetega Inimeste Koda

epikoda.ee

48

Eesti Puuetega Inimeste Koda (EPIK) is a well-established Estonian non-profit organization founded in 2010, dedicated to improving the quality of life, social inclusion, and self-realization opportunities for people with disabilities and chronic illnesses. The organization operates primarily in Estonia and targets disabled individuals, their families, and professionals working in related fields. Their key services include advocacy, counseling, accessibility initiatives, publications, international cooperation, podcasts, and newsletters. The website reflects a professional and accessible digital presence with multi-language support and clear navigation.

The Journal of Zoo and Aquarium Research (JZAR) is an open access academic journal affiliated with the European Association of Zoos and Aquaria, focusing on publishing peer-reviewed research related to zoos and aquaria. The journal operates on an open access model without publication fees, targeting researchers, academics, and professionals in the zoological and aquarium fields. The website is professionally designed and uses the Open Journal Systems platform, supported by modern web technologies such as jQuery and Bootstrap, hosted by Greenhost in the Netherlands. From a technical perspective, the site demonstrates good performance, mobile optimization, and accessibility. However, there is room for improvement in security practices, notably the absence of DNSSEC and security headers. The site enforces HTTPS and has domain transfer protections, which are positive indicators. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the security posture is moderate with no critical vulnerabilities detected, but enhancements in security headers and explicit policies would strengthen trust. The domain WHOIS data aligns well with the business, showing a consistent and legitimate registration. The site maintains a minimal user tracking footprint and does not employ advertising or tracking scripts, supporting user privacy. Strategically, the journal should prioritize publishing privacy and cookie policies, enable DNSSEC, and implement security headers to improve compliance and security posture. These steps will enhance trust and align with best practices for academic publishing platforms.

M

Międzynarodowy Festiwal Komiksu i Gier w Łodzi

komiksfestiwal.com

67

The Międzynarodowy Festiwal Komiksu i Gier w Łodzi website represents a well-established cultural event focused on comics and games, primarily targeting creators and enthusiasts in Poland and Central-Eastern Europe. The festival is the largest of its kind in the region, with a history dating back to 2006 for the domain and earlier for the event itself. The site offers multilingual support, event information, contests, and partner links, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a standard but effective infrastructure. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Privacy compliance is basic but present, with cookie and privacy policies accessible and a consent mechanism implemented. Business credibility is strong due to the festival's reputation, social media presence, and consistent branding. Overall, the site is professional and trustworthy with room for security enhancements.

K

KiVa / Tenz

kivaschool.be

48

The website www.kivaschool.be represents the KiVa anti-bullying program operated by Tenz in Belgium, supported by recognized educational institutions. It provides comprehensive information about the program, resources for schools, parents, and educators, and includes a webshop and training offerings. The site is well-structured with consistent branding and clear navigation, targeting educational stakeholders in Flanders. Technically, the site uses a custom CMS (Ambacht CMS) with common web technologies such as jQuery, Bootstrap 3, and Select2, and integrates Google Analytics and ReadSpeaker for accessibility. Security posture is moderate with no visible security headers and unknown SSL configuration, but it implements a detailed cookie consent mechanism. WHOIS data is unavailable due to registry restrictions, which reduces transparency but the site content and contact details support legitimacy. Overall, the site is professional and functional with room for improvement in security and privacy policy disclosures.

T

Tervise Arengu Instituut

toitumine.ee

40

The website toitumine.ee is an official Estonian government health information portal managed by the Tervise Arengu Instituut under the Haridus- ja Teadusministeerium (EENet). It provides comprehensive nutrition guidelines, health advice, and tools such as a BMI calculator targeted at Estonian residents across various life stages and health conditions. The site is well-structured with rich content and expert contributions, positioning it as a trusted national resource for healthy eating information. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security practices.

M

Ma Armastan Aidata

armastanaidata.ee

54

Ma Armastan Aidata is a well-established Estonian donation platform founded in 2008, operating in partnership with Swedbank and Heateo Sihtasutus. It aggregates trustworthy Estonian charitable organizations and facilitates donations through secure login methods including national ID card, Mobile-ID, and bank links. The platform offers categorized projects for donations and maintains active communication channels including news and social media. Technically, the website uses a modern tech stack with jQuery, Bootstrap, Tailwind CSS, and integrates cookie consent and reCAPTCHA for privacy and security. Security posture is strong with HTTPS, secure login, and cookie consent, though it lacks published security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a medium-sized non-profit sector audience in Estonia.

P

Placet Group OÜ

placetgroup.com

55

Placet Group OÜ is a financial services company established in 2005, specializing in secured and unsecured loans, credit cards, and related financial products. Operating primarily in Estonia and Lithuania, with additional brands in Poland, the company serves private individuals and legal entities, emphasizing fast, convenient, and reliable financing solutions. Their market position is supported by a broad customer base and multiple subsidiaries, with a focus on individual customer approach and quality service. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, and various carousel libraries, hosted under a domain registered since 2010. The site is mobile optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and Google reCAPTCHA on its contact form, but lacks DNSSEC, security headers, and published security or privacy policies. The WHOIS data is consistent with the business claims, indicating legitimacy. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website demonstrates a moderate to good security posture and business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

T

Telia Eesti AS

kaustik.ee

58

Kaustik.ee is an Estonian information system platform primarily serving the education sector, offering document register services and secure user authentication including Estonian electronic ID methods. The platform is operated under the domain registered by Telia Eesti AS, a reputable telecom provider in Estonia, indicating a legitimate and regionally focused service. The website content is basic but functional, with a focus on user login and document access. Technically, the site uses a proprietary WebDesktop system with modern JavaScript libraries such as jQuery and Bootstrap, providing a moderate level of digital maturity. However, SEO and accessibility features are minimal, and no advanced analytics or marketing tools are detected. Security posture is adequate with HTTPS and secure login options but lacks important security headers and privacy policies, which are critical for GDPR compliance and user trust. Overall, the site is moderately trustworthy but would benefit from enhanced security and privacy measures.

О

ООО «Мега Сервис»

mega-service.org

45

ООО «Мега Сервис» is a Russian service provider specializing in maintenance, repair, and recycling of digital satellite, cable, and terrestrial receivers. The company operates a large network of over 300 authorized service centers across Russia and owns facilities for electronic waste processing in Tula and Gusev. Their business model focuses on providing professional servicing and environmentally compliant recycling solutions, targeting both end-users and partner organizations. The website content is well-structured, professionally designed, and consistent with the company's market position as a medium-sized technology service provider founded in 2009. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery libraries. It is hosted under a reputable Russian registrar with HTTPS enabled, though it lacks advanced security headers and DNSSEC. The site performs moderately well with good mobile optimization but basic accessibility and SEO features. No major technical debt or outdated technologies were detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers that could mitigate common web threats. There is no visible privacy or cookie policy, nor incident response contacts, which indicates compliance gaps especially regarding GDPR or similar regulations. No forms or user data collection mechanisms were found on the main page, reducing immediate data exposure risks but also limiting user engagement features. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information for security incidents to enhance trust and regulatory compliance.

P

premium.pl Sp. z o.o.

time.pl

61

premium.pl Sp. z o.o. operates a well-established Polish domain marketplace platform, offering domain registration, transfer, auctions, leasing, and SSL certificates. The website time.pl is a premium domain listing within this marketplace. The company has a strong market position in Poland with a focus on domain-related services for businesses and individuals. The platform is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and consent management for privacy compliance. Hosting is provided by home.pl, a known Polish hosting provider. Security posture is solid with HTTPS enforced and secure forms, though there is room for improvement in security headers and published policies. WHOIS data confirms the legitimacy and long-standing registration of the domain, matching the business entity. Overall, the website is trustworthy and professionally maintained.

T

Topfinanses

topfinanses.lv

41

Topfinanses.lv is a Latvian online platform specializing in loan comparison and facilitation services, primarily focusing on quick loans, consumer loans, auto loans, and credit lines. The website aggregates loan offers from multiple Latvian financial institutions, providing users with detailed information and direct links to apply for loans. The platform targets Latvian consumers seeking fast and convenient credit solutions, positioning itself as a trusted intermediary in the Latvian finance market. Technically, the website is built on WordPress, utilizing common web technologies such as jQuery, FontAwesome, and Google Fonts, and integrates analytics tools like Google Analytics and Yandex Metrika. The site enforces HTTPS and includes affiliate marketing links to loan providers. However, it lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information or security incident channels, which are critical for compliance and trust. Security posture is moderate with HTTPS enforced but missing security headers and formal policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

S

Sinulaen

sinulaen.ee

47

Sinulaen.ee is an Estonian loan comparison portal providing consumers with independent and up-to-date information on various loan products including quick loans, small loans, auto loans, and refinancing options. The website serves as a platform to compare loan offers from multiple providers, facilitating informed financial decisions for its users. The business operates primarily in the Estonian market and targets individuals seeking consumer loans with a user-friendly online experience. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and loan comparison functionalities. It integrates multiple third-party analytics and advertising services, including Google Analytics, Yandex Metrika, and Google Adsense, and uses affiliate links to monetize loan referrals. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security best practices and privacy policy comprehensiveness.

F

Firmstudio Limited

firmstudio.com

64

FirmStudio Limited is a well-established creative digital agency based in Hong Kong, specializing in web design, UX/UI, branding, and digital marketing services. With over 18 years of experience and a portfolio of 250+ projects and 130+ awards, the company holds a strong market position as a leading agency in its region. The website reflects a professional and polished digital presence, showcasing their expertise and client work effectively. Technically, the site employs modern JavaScript libraries such as jQuery and integrates multiple analytics and advertising tools including Google Analytics, Google Tag Manager, and Baidu Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured navigation. Security-wise, the site uses HTTPS and secure form handling but lacks visible security headers and a formal security policy or incident response contact, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and contact details appear legitimate. Overall, the site scores well in content quality, technical implementation, and business credibility but could enhance privacy compliance and security posture.

Strantum OÜ is a small Estonian company providing essential municipal services such as water supply, heating energy, and maintenance for the Harku vald community. The company operates with a clear local focus, serving residents and property owners with utility and infrastructure services. The website reflects this local service orientation with content in Estonian and clear contact information. Technically, the site uses legacy JavaScript libraries and Cloudflare DNS/CDN services, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but outdated libraries and lack of explicit security policies present moderate risks. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy business presence.

M

MTÜ Noorteühing Tugiõpilaste Oma Ring Eestis

tore.ee

42

MTÜ Noorteühing Tugiõpilaste Oma Ring Eestis (TORE) is a well-established Estonian non-profit organization focused on youth peer support, mentoring, and training programs. The organization operates nationally with a history of nearly three decades, offering structured events such as summer and autumn schools, conferences, and supervision sessions. Their target audience includes Estonian students and their mentors, aiming to empower youth through systematic engagement and education. The website reflects this mission with relevant content, event announcements, and training information. Technically, the website is built on WordPress 6.8.1 with popular plugins like Yoast SEO and Modern Events Calendar Lite, indicating a mature digital infrastructure. The site uses HTTPS with a good SSL configuration, Google Fonts, and jQuery libraries. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, demonstrating awareness of privacy compliance. However, it lacks explicit privacy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the HTML content. Overall, the website is credible and professional, with strong business legitimacy and consistent branding. The main risks relate to privacy compliance and security best practices, which can be addressed to enhance trust and regulatory adherence.

A

admin

ajkerbarta.com

51

Ajkerbarta.com is a small Indonesian media website focused on delivering news and tips related to online gambling, specifically togel and slot games. The site uses WordPress CMS with common plugins such as Yoast SEO and jQuery libraries, hosted behind Cloudflare DNS and registered via GoDaddy. The content is primarily in Indonesian and targets the local gambling community. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which impacts its trustworthiness and compliance posture. Technically, the site is moderately optimized with basic mobile responsiveness and SEO but lacks advanced security headers and DNSSEC, which are recommended for improved security. The site links to multiple external domains, some of which appear suspicious or unrelated, raising concerns about advertising and affiliate practices. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards.

Run Japan is an online platform dedicated to providing international runners with comprehensive information and registration services for marathons and running events across Japan. The website positions itself as a gateway to Japan's best running events, offering race listings, travel planning assistance, and event registration. The target audience primarily consists of international and domestic runners interested in participating in Japanese marathons. The business operates in the niche sports and events sector, with a small company size and a recent founding date in 2024. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and Slick Carousel, hosted on Amazon AWS infrastructure. It uses Google Tag Manager for analytics and tracking. The site is mobile optimized with good SEO practices and a consistent branding approach. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy or cookie consent mechanism, which impacts privacy compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data shows privacy protection but is consistent with the business location in Japan, and the domain age aligns with the business launch. Overall, Run Japan presents a professional and functional platform with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and user data protection would enhance trust and compliance, supporting its growth in the international running community.

R

RSJ

rsj.com

56

RSJ is a financial group operating primarily in the Czech Republic with a strong presence in global derivative markets including London, Chicago, New York, Frankfurt, and Tokyo. The company manages a diversified portfolio of investments spanning financial derivatives trading, real estate development, private equity, and emerging sectors such as biotechnology and healthy food production. The website clearly communicates its business scope and warns investors about fraudulent schemes misusing its brand. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with a cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced, but lacks published security policies or incident response contacts. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, RSJ presents as a credible financial entity with room for improvement in transparency and security disclosures.

T

Tallinna Kontserdimaja AS

kontserdimaja.ee

38

Alexela Kontserdimaja is a prominent concert hall located in Tallinn, Estonia, recognized as the largest in the Baltic region with seating for up to 1829 visitors. The venue offers a variety of services including event hosting, ticket sales, and catering options such as pre-ordered coffee tables and private champagne salon rentals. The website reflects a well-established business with a domain registered since 2010, consistent with its market presence. The target audience includes cultural event attendees and event organizers in the region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and multilingual support via WPML. SEO is well-implemented using Yoast SEO, and analytics are managed through Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event information. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a baseline security posture. However, there is a lack of explicit security headers and no visible incident response or security policy pages, which could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and functional, serving its business purpose effectively. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

E

Eesti Kirjandusmuuseum

kirmus.ee

55

Eesti Kirjandusmuuseum is a well-established Estonian national scientific and cultural institution focused on managing important archives related to cultural history and folklore. The website serves a diverse audience including researchers, students, cultural enthusiasts, and the general public by providing access to archives, scientific projects, educational programs, exhibitions, and an online store. The institution holds a strong market position as a central cultural memory organization in Estonia. Technically, the website is built on Drupal 8 with modern libraries and tools, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and anonymized analytics, though security headers and explicit security policies could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

T

TJO Konsultatsioonid

tjo.ee

52

TJO Konsultatsioonid is a leading Estonian consulting firm specializing in management systems development, strategic management, and production efficiency enhancement. The company offers a range of consulting services and training programs targeted at businesses seeking to improve operational effectiveness and comply with international standards. Their market position is strong within Estonia, supported by multiple ISO certifications and a robust client base. The website infrastructure is built on WordPress, utilizing modern plugins such as Yoast SEO and Ninja Forms, integrated with Google Analytics and Google Tag Manager for performance and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, contributing to a positive digital maturity profile. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA on forms, and indications of security plugins like Wordfence. However, some security headers are not explicitly confirmed and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website and business present a trustworthy and professional image with no critical security issues detected. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a formal incident response policy to further strengthen security and compliance.

D

Dispak

dispak.ee

45

Dispak is an Estonian retail business specializing in the sale of paper and fabric bags, primarily targeting customers seeking packaging solutions for gifts and corporate gifts. The company claims over two decades of experience and offers custom logo printing services with a minimum order quantity. The website is primarily in Estonian and serves the local market with a product-focused approach. Technically, the site uses jQuery and jQuery UI libraries along with Google Analytics and Tag Manager for tracking. The hosting and domain registration are consistent with an Estonian business identity. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers and advanced security practices are not evident, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional with moderate technical implementation but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

S

SandFox OÜ

sandfox.ee

42

SandFox OÜ is a small Estonian company founded in 2016 specializing in integrated energy storage solutions, smart battery management, solar panel integration, and Linux-based IT infrastructure services. The company targets industrial clients and businesses in the energy sector, offering critical IT and industrial automation solutions. Their market position is supported by partnerships with major technology vendors such as RedHat, IBM, Huawei, and SUSE, and they emphasize business-critical IT solutions and energy management. Technically, the website uses a basic but functional stack including jQuery, Google Analytics, and Google Translate, hosted likely by Zone Media OÜ. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and visible privacy compliance mechanisms. Overall, the company presents a credible and trustworthy business presence with room for improvement in privacy compliance and technical modernization.

W

Wageningen University & Research

wur.nl

69

Wageningen University & Research is a prominent educational and research institution based in the Netherlands, specializing in life sciences, food production, environment, and health. The website serves as a comprehensive portal for academic programs including bachelor, master, and professional courses, targeting students, researchers, and professionals in related fields. The institution holds a strong market position as a leading global university in its sector. Technically, the website employs a modern technology stack including GX WebManager CMS, JavaScript libraries such as jQuery, and integrates advanced analytics and marketing tools like Google Tag Manager, Google Analytics, and Visual Website Optimizer. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements several best practices such as opening external links in new tabs and asynchronous script loading. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and explicit security governance disclosures to improve user trust and regulatory adherence.

K

Kiirlugemiskool OÜ

kiirlugemine.ee

39

Kiirlugemiskool OÜ is an Estonian education company specializing in speed reading, memory training, concentration, and self-management courses. Established since 2000, it offers both public and in-house training services targeting individuals and organizations seeking cognitive and personal development. The website presents a professional and user-friendly interface with clear navigation and relevant content about their services and trainers. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and privacy policies, indicating room for improvement in security and compliance. Contact information is clearly provided, including phone numbers, email, and physical address, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from updated security practices and privacy compliance enhancements.

A

AS Orient Office

kontorikaubad.ee

46

AS Orient Office operates a professional e-commerce website offering a broad range of office supplies, paper goods, household items, food products, and electronics primarily targeting Estonian businesses and consumers. The company has an established market presence since 2011 and provides a comprehensive product catalog with clear navigation and a consistent brand presentation. The website is built on Drupal CMS and leverages common web technologies including jQuery, Bootstrap, and Google Analytics for tracking and marketing purposes. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and incident response contacts indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which poses a compliance risk under GDPR. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security practices to strengthen user trust and regulatory compliance.

Tallinna Tervishoiu Kõrgkool is a nationally recognized public higher education institution in Estonia specializing in health and wellbeing education. It offers a wide range of applied higher education and vocational programs in nursing, midwifery, optometry, pharmacy, and other health-related fields. The institution is one of only two healthcare higher education providers in Estonia, positioning it as a key player in the national healthcare education sector. The website reflects a professional and comprehensive digital presence, supporting both prospective and current students with detailed program information, news, and multimedia content. Technically, the website is built on Drupal 11, utilizing modern JavaScript libraries and APIs such as Google Maps and ManyChat for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and multilingual support (Estonian and English). Analytics and tracking are implemented via Google Analytics and ManyChat, though a cookie consent mechanism is notably absent. From a security perspective, the site enforces HTTPS and uses secure Drupal forms with CSRF protection. However, it lacks explicit security policies, incident response information, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the institution's identity, confirming legitimacy and consistent registration details. Overall, the website demonstrates a strong business credibility and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in cookie consent and security policy publication would further strengthen trust and regulatory adherence.

A

Architektenkammer Berlin

ak-berlin.de

45

Architektenkammer Berlin is a professional self-governing chamber representing architects, urban planners, landscape architects, and interior architects in Berlin. The organization provides membership services, continuing education, legal advice, event management, and publishes relevant industry content. It holds a key position as the official chamber for architectural professions in Berlin, targeting professionals and stakeholders in the built environment sector. The website reflects a medium-sized government-related entity with a clear focus on professional development and community engagement. Technically, the website is built on TYPO3 CMS and leverages modern frontend technologies including jQuery, Bootstrap, Flexslider, and Leaflet.js for interactive maps. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Analytics are handled via Matomo with user consent, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the site lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission effectively. Strategic improvements in security transparency and formal policies would further strengthen its posture.

A

Akademie der Kulturellen Bildung des Bundes und des Landes NRW e.V.

kulturellebildung.de

55

The Akademie der Kulturellen Bildung des Bundes und des Landes NRW e.V. is a prominent German non-profit educational institution specializing in cultural youth education. It serves as a federal and state central institute offering a broad range of courses, workshops, research projects, and events aimed at professionals and stakeholders in cultural education. The website reflects a strong market position with comprehensive program offerings and active engagement through newsletters and social media channels. Technically, the site is built on a modern WordPress platform with advanced plugins for SEO, user management, and analytics, demonstrating a mature digital infrastructure. Security measures include HTTPS enforcement, security monitoring via WP Sentry, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with clear contact information and privacy policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and secure online presence.

CruiseTMK (주)투어마케팅코리아 is a South Korean travel marketing company specializing in cruise travel services. The company offers booking and marketing services for major cruise lines such as Royal Caribbean, Celebrity Cruises, and Disney Cruises, targeting Korean-speaking cruise travelers and travel agents. The website is professionally designed with a modern technical stack including Vue.js components and common JavaScript libraries, hosted likely on AWS infrastructure. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and transparent, supporting business legitimacy.

AUTOUNIT Ν. ΠΟΥΛΑΚΗΣ ΑΕΒΕ is a well-established Greek automotive company specializing in the sale of new and used cars, automotive parts, and comprehensive vehicle services including maintenance, bodywork, and painting. With over 30 years of experience and an authorized Renault-Dacia dealership, the company holds a strong market position in Greece's transportation sector. Their business model combines retail and service offerings targeting automotive customers seeking quality vehicles and parts. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel, ensuring a responsive and user-friendly experience. Integration of Google Tag Manager and Facebook Pixel indicates moderate user tracking for marketing purposes. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit published security policies or incident response contacts, and security headers are not detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is solid but could be improved by adding formal security documentation and enhancing HTTP security headers. The overall risk assessment is low, with the website demonstrating good business credibility, privacy compliance, and technical implementation. Strategic recommendations include publishing security policies, adding incident response contacts, and implementing additional security headers to further strengthen the security posture and trustworthiness.

F

Feldhaus Klinker

feldhaus.lt

50

Feldhaus Klinker is a Lithuanian-based company specializing in the sale of clinker tiles, bricks, and pavers, representing a historic European brand established since 1857. The website serves as an e-commerce and product catalog platform targeting construction professionals and retail customers primarily in Lithuania and neighboring regions. The business model focuses on providing high-quality building materials with additional tools such as a product configurator and galleries to support customer decision-making. The company maintains a consistent brand presence with active social media channels and a clear contact phone number. Technically, the website is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various UI and gallery plugins. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or security policy information is publicly available, indicating room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

U

UAB "DVIGUBAS AČIŪ"

dovanossiluteje.lt

41

UAB "DVIGUBAS AČIŪ" operates the website dovanossiluteje.lt, an e-commerce platform specializing in gift coupons and flower delivery services primarily targeting the Šilutė region in Lithuania. The business has been active since 2015 and positions itself as a regional leader in retail gift services, offering a variety of gift categories and convenient online purchasing options. The website is professionally designed with clear navigation and localized content tailored to its audience. Technically, the site employs a mix of established JavaScript libraries such as jQuery and Bootstrap, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Visual Website Optimizer, and uses HTTPS to secure communications. While the site demonstrates good privacy compliance with a cookie consent mechanism and a comprehensive privacy policy, it lacks explicit security policies and incident response information. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is trustworthy and professionally maintained, with a moderate to good technical and security maturity level.

Š

Šiaulių regiono atliekų tvarkymo centras

sratc.lt

50

Šiaulių regiono atliekų tvarkymo centras (ŠRATC) is a regional government-affiliated entity focused on waste management services in the Šiauliai region of Lithuania. The organization provides comprehensive waste sorting education, collection, disposal, and composting services, targeting both residents and businesses. The website reflects a mature public service provider with a clear mission to promote environmental sustainability and circular economy principles. Technically, the website employs a modern tech stack including jQuery, Fancybox, Swiper, Select2, Google reCAPTCHA, and Bing Maps API to deliver an interactive and user-friendly experience. The site is mobile-optimized with good navigation and content relevance. However, the CMS appears custom or proprietary, and no advanced frameworks were detected. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA to protect forms. Cookie consent and privacy policies are present and GDPR compliant. However, the absence of security headers and explicit incident response or vulnerability disclosure pages indicates areas for improvement. The WHOIS data is unavailable due to query limits, limiting domain trust verification, but the website content and contact information strongly suggest legitimacy. Overall, ŠRATC's website is a well-structured, professional public service portal with good privacy and security practices, serving an important environmental function in Lithuania. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance.

J

Jūrų muziejus

ljm.lt

44

The website ljm.lt represents the Jūrų muziejus (Maritime Museum) in Lithuania, providing detailed information about maritime exhibitions, dolphin shows, aquarium visits, and historical ship tours. The site targets tourists, families, and educational groups interested in maritime culture. It operates a ticketing system with event scheduling and seat availability, indicating a functional e-commerce component. The business model revolves around cultural education and entertainment services with a regional focus. Technically, the site uses a combination of jQuery, jQuery UI, Google Fonts, and Google Analytics, with a Blueprint CSS framework for styling. The site is mobile-optimized and provides a good user experience with clear navigation and event information. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and detailed security or incident response policies. WHOIS data is unavailable due to query limits, but the site content and domain usage suggest legitimacy. Overall, the site is professionally maintained with moderate technical sophistication and good privacy compliance.

L

Lietuvos nacionalinis kultūros centras

lnkc.lt

48

Lietuvos nacionalinis kultūros centras (LNKC) is a Lithuanian governmental cultural institution dedicated to preserving and promoting national culture, folklore, and heritage. The website serves as a portal for cultural information, events, publications, and archives, targeting cultural organizations, folklore enthusiasts, and the general public interested in Lithuanian traditions. The institution holds a significant position in Lithuania's cultural landscape, providing authoritative resources and organizing national cultural events. Technically, the website uses a custom CMS (Smart Web) with a technology stack including jQuery, Bootstrap, and Google Analytics. While the site is mobile-optimized and well-structured, it uses outdated JavaScript libraries that may pose security risks. Security posture is moderate, with HTTPS implied but no visible security headers and outdated libraries. Privacy compliance is basic with cookie consent and privacy policy present, but no terms of service or incident response information is found. Overall, the website is professional and trustworthy but would benefit from technical and security improvements.

A

API FOOTBALL

api-football.com

51

API-Football is a technology company providing a comprehensive RESTful API service for football and other sports data, covering over 1,100 competitions worldwide. Their platform offers real-time livescore, standings, teams, odds, fixtures, events, player statistics, and prediction data, targeting developers and businesses requiring sports data integration. The company operates a subscription-based business model with free and paid plans, and integrates with RapidAPI to enhance accessibility and security. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience.

C

Core77 Inc.

designdirectory.com

59

Core77 Design Directory is an established online platform providing a comprehensive guide to design firms and creative agencies, primarily targeting businesses and individuals seeking design services. The website offers extensive search and filtering capabilities across specialties, locations, and budgets, supported by a large database of over 5000 firms. The business operates under Core77 Inc., with a domain age dating back to 2002, indicating a mature presence in the design directory market. The platform includes premium listings and a newsletter subscription to engage its audience. Technically, the website employs a custom CMS with a technology stack including older versions of jQuery and jQuery UI, Modernizr, Typekit fonts, and integrates analytics and monitoring tools such as Google Analytics and New Relic. Performance is moderate with basic mobile optimization and accessibility features. SEO practices are basic but functional. Hosting details are limited but the domain registrar is Network Solutions, LLC. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain transfer protection. However, it lacks DNSSEC and explicit security headers, and uses outdated JavaScript libraries which may pose risks. Privacy compliance is basic; a privacy policy and terms of service are present but no cookie consent mechanism or detailed GDPR compliance indicators are found. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is functional and professional with moderate security and privacy posture. Strategic improvements in security headers, updated libraries, cookie consent, and enhanced privacy compliance would strengthen trust and reduce risk.

UAB Santjana is a Lithuanian company specializing in building maintenance services for business clients and administration and maintenance of apartment buildings for private clients. The website presents a professional and consistent brand image, targeting local Lithuanian customers with clear service offerings and contact information. The company maintains an active social media presence and complies with GDPR through a privacy policy and cookie consent mechanism. Technically, the website uses modern JavaScript libraries and enforces HTTPS with a valid SSL certificate, ensuring secure communications. Security measures include Google reCAPTCHA on contact forms to prevent spam. However, explicit security headers and a dedicated security policy page are absent, representing areas for improvement. Overall, the site is well-structured, mobile-optimized, and provides a good user experience with moderate performance.

U

UAB „Meistro pasaulis"

meistropasaulis.lt

50

Meistro Pasaulis is a Lithuanian-based small retail company specializing in professional hair care cosmetics. The website serves as an e-commerce platform offering a variety of branded hair care products, targeting both individual consumers and beauty professionals. The company positions itself as an official representative of several high-quality hair care brands in Lithuania, providing original products with free delivery for orders over 30 EUR. The site includes a beauty magazine section to engage customers and enhance brand loyalty. Technically, the website employs a custom CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Select2, alongside Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and WHOIS data is unavailable due to query limits, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and Google ReCaptcha to protect forms from spam. Privacy and cookie policies are present and accessible, indicating a good level of privacy compliance. No critical vulnerabilities or exposed sensitive data were found. The absence of incident response contacts and security policy pages suggests room for improvement in security transparency. Overall, the website presents a professional and trustworthy front for a niche retail business. Strategic improvements in security headers, WHOIS transparency, and incident response information would enhance the security posture and trustworthiness further.

Procolore is a Lithuanian manufacturing company specializing in paints, wood impregnations, fillers, decorative plasters, adhesives, varnishes, and sealants for home renovation. With over 30 years of experience and a production volume exceeding 1500 tons annually, the company holds a strong position in the Lithuanian market. Their product range targets homeowners and construction professionals, supported by an e-commerce platform for direct sales. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options. Technically, the site uses modern JavaScript libraries and enforces HTTPS with Google reCAPTCHA for form security. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. However, WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Security headers are not evident, and no explicit security or incident response policies are published, indicating room for improvement in security posture. Overall, the site is trustworthy and functional but would benefit from enhanced security transparency and WHOIS data availability.

M

Mokytoja Veronika

mokytojaveronika.lt

50

Mokytoja Veronika is a Lithuanian small business focused on providing educational materials and resources, including reading flashcards and school supplies, through an e-commerce platform. The website also features a blog and personal branding content about the teacher Veronika, targeting parents, teachers, and students. The business model combines direct product sales with educational content delivery, positioning itself as a niche provider in the education sector within Lithuania. Technically, the website employs a modern JavaScript stack including jQuery, Fancybox, Swiper, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-optimized for mobile devices and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. Hosting details are not explicitly identified, but the site uses HTTPS with a valid SSL certificate. From a security perspective, the site enforces HTTPS and uses Google ReCaptcha on forms to mitigate spam. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are clearly presented. However, the absence of explicit security headers and incident response information indicates room for improvement in security posture. No vulnerabilities or suspicious activities were detected in the visible content. Overall, the website presents a trustworthy and professional front for a small educational business. The lack of WHOIS data due to query limits and privacy protection is typical for small businesses and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party libraries to strengthen security and compliance.

Y

Yardi

yardi.com

67

Yardi is a leading enterprise software provider specializing in real estate management solutions. Their platform offers comprehensive tools for property management, investment management, and facilities management, serving a global clientele. The company positions itself as an innovator in the real estate technology space, emphasizing efficiency and growth enablement for its customers. The website reflects a mature digital presence with strong branding and extensive content tailored to real estate professionals worldwide. Technically, the site is built on WordPress with modern SEO and analytics integrations, including HubSpot and Google Tag Manager, and employs a robust cookie consent mechanism to ensure privacy compliance. Security-wise, the site enforces HTTPS, uses multiple security headers, and holds recognized certifications such as SOC 2 and ISO 27001, indicating a strong commitment to data protection. However, the absence of a public security policy and incident response contact information suggests areas for improvement in transparency. Overall, the website demonstrates a high level of professionalism and trustworthiness, though the lack of WHOIS transparency slightly tempers the domain trust score.

Fizinių ir technologijos mokslų centras (FTMC) is the largest scientific research institute in Lithuania, specializing in physics, chemistry, and technology research and development. The organization focuses on advanced scientific research in laser technologies, optoelectronics, nuclear physics, organic chemistry, bio- and nanotechnologies, electrochemical materials science, functional materials, and electronics. FTMC also provides doctoral studies and innovation services to businesses and society. The website is professionally designed, content-rich, and well-structured, targeting researchers, students, and industry partners. Technically, the site uses modern JavaScript libraries and Google services for analytics and security, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA, but lacks explicit security policies and security headers. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, FTMC presents a credible and authoritative presence in its sector.

Baltic News Service (BNS) is a leading news agency serving the Baltic states of Estonia, Latvia, and Lithuania, providing economic and political news in multiple languages. The company operates under AS Postimees Grupp and targets professional information users and media outlets. The business model is subscription-based, requiring valid information service agreements for access to the news terminal. The website content is professionally presented with clear navigation and relevant news updates, reflecting a strong market position in the regional media sector. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.4.2, TinyMCE, and Google Tag Manager for analytics. While HTTPS is enforced and cookie consent is implemented, the use of outdated libraries introduces security risks. No explicit privacy or terms of service policies were found, indicating room for compliance improvement. Overall, the site is accessible without WAF or blocking mechanisms, and the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.