Security Directory

P

Primum

primum.lv

44

Primum is a leading accounting firm based in Latvia, offering world-class accounting, financial management, tax, legal, and employment services across the Baltic states. The company targets local and international businesses seeking professional financial and legal support. The website is built on the Tilda CMS platform, leveraging modern web technologies including Google Analytics for visitor tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with HTTPS implied but no visible security headers and use of an outdated jQuery version posing potential risks. Overall, the domain registration is consistent with the business claims, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

A

Aerodium Technologies

aerodium.technology

60

Aerodium Technologies is a pioneering company specializing in the design, manufacture, and operation of vertical wind tunnels used globally for entertainment, professional training, and military applications. With a history dating back to 1979 and over 115 projects in more than 46 countries, Aerodium holds a strong market position as an innovator and leader in vertical wind tunnel technology. Their website reflects a professional and content-rich presence targeting retail, entertainment venues, and specialized training sectors. Technically, the website employs modern tracking and analytics tools, is hosted with reputable providers, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the site is trustworthy and professionally managed, supporting Aerodium's credibility in its niche market.

I

IBSC

ibsc.lv

48

IBSC operates the RESICO platform, providing integrated sales and business management solutions tailored for retail, hospitality, and e-commerce sectors primarily in Latvia. Their offerings include certified POS systems, ERP software, digitalization services, and e-commerce integrations with popular platforms like Shopify and WooCommerce. The website is professionally designed using WordPress and Elementor, with modern analytics and marketing tools integrated alongside GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and consent-based tracking, though explicit security policies and headers could be improved. The domain is hosted on Google Cloud DNS, indicating a professional infrastructure. Overall, the business presents a credible and mature digital presence with room for enhanced privacy and security disclosures.

A

ALUKON

alukon.lv

52

ALUKON is a Latvian company specializing in the design, manufacture, and installation of glass facades using Schüco aluminum and Jansen steel systems. Established in 1994, it has over 25 years of experience and a portfolio of more than 200 projects. The company operates its own production facilities equipped with modern machinery and serves both local and export markets. The website reflects a professional business with clear contact information and a focus on quality engineering and fabrication services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, and reCAPTCHA v3, ensuring a responsive and interactive user experience. The site is well-structured with good SEO practices and mobile optimization. Security measures include HTTPS and form protection via reCAPTCHA, though some security headers are missing. From a security perspective, the site shows a good baseline posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance and user trust. Overall, ALUKON's website presents a credible and professional business presence with moderate technical maturity and a solid security foundation. The absence of WHOIS data limits full domain legitimacy verification, but the site content and business details align well with a legitimate manufacturing company in Latvia.

ARCO REAL ESTATE is a Latvian real estate agency established in 1992, offering brokerage, property valuation, consulting, and marketing services primarily focused on residential and commercial properties within Latvia. The website presents a professional and content-rich platform targeting property buyers, sellers, renters, and investors in the Latvian market. The company maintains an active social media presence and provides clear contact information, enhancing trust and accessibility. Technically, the website employs modern web technologies including jQuery, Foundation CSS framework, Leaflet.js for maps, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security practices include HTTPS usage and a cookie consent mechanism, but explicit security headers and incident response policies are not evident from the HTML content. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response transparency. Privacy compliance is basic with GDPR-related cookie consent and a privacy policy page available. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification, but website content and business information appear consistent with a legitimate real estate business. Overall, the website is professional and trustworthy with room for enhanced security and compliance measures. Strategic recommendations include strengthening security headers, publishing incident response and terms of service documents, and improving accessibility compliance to further solidify the company's digital maturity and trustworthiness.

O

OLIMPS

olimps.lv

44

OLIMPS is a well-established multidisciplinary engineering company based in Latvia, operating since 1991 with a strong presence in the Baltic, European, and CIS markets. The company specializes in project design, industrial automation systems, and construction services primarily in the energy and transport sectors. Their portfolio includes over 1000 projects and ISO certifications, reflecting a reputable market position. The website is professionally designed using WordPress CMS, featuring modern technologies such as Google Analytics and Typekit fonts, with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and email obfuscation implemented, though lacking advanced security headers and explicit privacy/cookie policies. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, OLIMPS demonstrates a mature digital presence aligned with its business operations.

AGroup is a technology company specializing in Human Capital Management solutions, offering a comprehensive suite of HR digitalization services and software modules including payroll, core HR, time and attendance, performance evaluations, recruitment, and more. The company targets businesses primarily in Latvia, Estonia, Lithuania, and Poland, positioning itself as a regional leader in HR management technology. The website is built on WordPress CMS with modern technologies and provides a professional, content-rich user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit privacy policies are missing. Tracking is done via Google Analytics and Facebook Pixel (commented out), with cookie consent managed by CookieYes. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

D

DTS LTD

dts.lv

67

DTS LTD operates a professional e-commerce platform specializing in original OEM auto spare parts for a wide range of car manufacturers. With over 25 years of experience and more than 500 active B2B clients, the company positions itself as a reliable supplier offering fast worldwide deliveries and technical expertise. The website is well-structured, multilingual, and provides comprehensive catalogs and inquiry services to assist customers in finding genuine parts efficiently. Technically, the website employs modern JavaScript libraries such as jQuery, Flatpickr, Font Awesome, Alpine.js, and Swiper.js, alongside analytics tools like Google Analytics and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism implemented via Usercentrics CMP. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices including secure forms with CSRF tokens and no exposed sensitive data. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data due to query limits limits full domain legitimacy verification, but the website content and trust indicators suggest a legitimate and established business. Overall, DTS LTD presents a strong digital presence with professional design, solid technical infrastructure, and good privacy compliance. Strategic improvements in security transparency and WHOIS data availability would further enhance trust and compliance.

S

Sigma Industry Power & Energy

sigmaindustrype.se

47

Sigma Industry Power & Energy is a consulting company specializing in industrial electricity, automation, electrical power, and energy solutions. It operates under the larger Sigma Group umbrella, which has a significant presence across 13 countries with 5000 employees, owned by Danir AB. The company targets industrial and energy sector clients primarily in Sweden, offering expert consulting services to address complex challenges in these fields. The website reflects a professional and consistent brand image aligned with its parent group. Technically, the website is built on Drupal 10, leveraging modern libraries such as jQuery and Bootstrap for responsive design and user experience. It employs Google Analytics for visitor tracking but lacks a cookie consent mechanism, which is a privacy compliance gap. The site is mobile-optimized and has good SEO practices but could improve accessibility features. Hosting details suggest a reliable provider, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but the absence of cookie consent and security.txt files indicates room for improvement in compliance and transparency. The domain registration is consistent with the business profile, showing legitimacy and appropriate age. Overall, the website presents a solid business and technical foundation with moderate security and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and policy disclosures would enhance trust and compliance posture.

H

HundrED

hundred.org

68

HundrED is a mission-driven non-profit organization dedicated to transforming K12 education globally by curating, amplifying, and implementing impactful and scalable education innovations. It holds a leading market position as a global curator and partner in the education sector, serving a broad audience including educators, innovators, and youth. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on education innovation and community engagement. Technically, the site employs modern JavaScript frameworks, analytics tools like Matomo and Google Analytics, and follows good practices such as HTTPS enforcement and cookie consent mechanisms. Security posture is solid with room for improvement in security headers and explicit security policies. The domain is longstanding and privacy-protected, consistent with a reputable global non-profit. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

SODECA is a manufacturer specializing in industrial ventilation solutions including fans, smoke evacuation systems, and pressurization controls. The company operates internationally with multiple country-specific websites, indicating a strong global presence. Their business model focuses on manufacturing and direct sales complemented by consulting services for ventilation projects. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frontend technologies such as Bootstrap 5, Font Awesome, and Google Analytics for tracking. It employs HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through cookie consent and a comprehensive privacy policy. The WHOIS data is redacted, typical for privacy protection, but the website's professionalism and consistency across multiple domains support its legitimacy. Overall, the site presents a low risk profile with recommendations to enhance security headers and publish incident response information to further strengthen trust and compliance.

SODECA is an established manufacturer specializing in industrial ventilation solutions including fans, smoke exhaust systems, and pressurisation control for staircases and evacuation routes. The company operates internationally with multiple country-specific websites, indicating a broad market presence and a focus on industrial and engineering clients. Their website provides comprehensive product information, technical tools, and consulting services, positioning them as a key player in the industrial ventilation manufacturing sector. Technically, the website employs modern frontend technologies such as Bootstrap 5, Font Awesome, and Google Fonts, with Google Analytics integrated for user tracking. The site is HTTPS secured with a valid SSL certificate and includes a cookie consent mechanism compliant with GDPR standards. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for comprehensive security posture. The absence of WHOIS data due to domain naming irregularities reduces trustworthiness from a domain registration standpoint. Overall, the website is professional, functional, and secure for typical business operations, but improvements in transparency around security policies and domain registration legitimacy would enhance trust and compliance.

SODECA is a Portuguese manufacturer specializing in industrial ventilation and exhaust solutions, including smoke control, tunnel ventilation, stair pressurization, and indoor air quality improvement. The company maintains a strong international presence with multiple country-specific websites, targeting industrial clients and technical professionals. Their business model combines manufacturing with direct sales, supported by online tools and technical consultancy services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates analytics and advertising tools like Google Analytics, Google Tag Manager, and Bing Ads. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks explicit security headers and published security policies or incident response contacts. Overall, the security posture is solid but could be improved by implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process. The domain WHOIS data aligns well with the business claims, supporting legitimacy. The website provides comprehensive contact information and privacy compliance features, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

SODECA is a medium-sized Spanish manufacturing company specializing in industrial ventilation solutions, including smoke extraction, pressurization systems, and air quality improvement. The company maintains a strong international presence with multiple country-specific websites, indicating a well-established market position. Their website offers comprehensive product information, technical resources, and consulting services, targeting industrial clients and engineering professionals. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and multilingual support. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though some security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The lack of accessible WHOIS data due to Red.es restrictions limits domain registration transparency, but the professional presentation and consistent branding support the site's legitimacy. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates good digital maturity with room for improvement in security policies and incident response disclosures. Strategically, SODECA should focus on enhancing security headers, publishing explicit security and incident response policies, and maintaining GDPR compliance to strengthen trust and regulatory adherence.

A

AERMEC NA

aermec-na.com

49

AERMEC NA is a regional branch of a leading global air conditioning manufacturer, providing products, services, and green solutions tailored to commercial, residential, multifamily, data center, public space, education, and healthcare markets. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating SEO and analytics tools such as Google Analytics and Microsoft Clarity. Security posture is solid with HTTPS and Cloudflare DNS, though there is room for improvement in security headers and explicit security policies. Privacy compliance is currently weak due to the absence of privacy and cookie policies. The domain is newly registered, indicating a recent launch or regional expansion. Overall, the site is credible and trustworthy but should enhance privacy and security transparency to align with best practices.

Elva Sport is a local sports and culture organization serving the Elva municipality in Estonia. The website provides information about sports facilities, training, events, and community engagement, with a focus on children and youth sports as well as outdoor activities. The organization appears to be a public or non-profit entity, founded around 2019, with a clear local community focus. Technically, the website is built on WordPress using common plugins such as MonsterInsights for analytics and GDPR Cookie Compliance for privacy management. The site is moderately performant, mobile-optimized, and uses HTTPS with a good SSL configuration. Security practices are adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page in Estonian. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its community purpose effectively.

SODECA is an international manufacturer specializing in industrial ventilation solutions, including smoke exhaust, tunnel ventilation, and pressurisation systems for staircases and evacuation routes. The company supports its product offerings with technical consulting and digital tools such as product selectors and CAD models, targeting industrial clients and engineering firms globally. The website is professionally designed, multilingual, and provides comprehensive product and corporate information, reflecting a mature business presence. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, integrates Google Analytics for user insights, and implements a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized and offers good SEO and accessibility features, although some security headers are missing. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further verification. Overall, SODECA presents a solid digital presence with good security and privacy compliance but should address WHOIS transparency and enhance security headers to improve trust and resilience.

E

E-kataloog ESTER

ester.ee

55

E-kataloog ESTER is a centralized digital catalog service aggregating the collections of major Estonian libraries. It serves as a key resource for library users including students, researchers, and the general public in Estonia, providing unified search capabilities and access to various library resources. The platform integrates institutional authentication via CAS and offers accessibility features for visually impaired users. Technically, the website employs standard web technologies such as JavaScript, jQuery, and Modernizr, and uses Google Analytics for user tracking. While the site is functional and professionally designed, it lacks visible privacy and cookie policies, which impacts its privacy compliance posture. Security-wise, HTTPS is implied, and session timeout mechanisms are implemented, but explicit security headers are missing. Overall, the site is a trusted educational resource but would benefit from enhanced privacy disclosures and security hardening.

L

Liikumisharrastuse kompetentsikeskus

liikumisaasta.ee

49

Liikumisharrastuse kompetentsikeskus is a government-affiliated non-profit organization established by the Estonian Olympic Committee in 2022 to promote physical activity and healthy lifestyles across Estonia. The website serves as a central hub for information, resources, and events related to physical movement, targeting a broad audience including youth, adults, seniors, and partners in the health and sports sectors. The organization positions itself as a leader in driving a national movement towards increased physical activity and wellness.

Maaturism.ee is the official website of MTÜ Eesti Maaturism, a non-profit organization dedicated to promoting rural tourism in Estonia. The website offers comprehensive information about accommodation, active holidays, food services, health tourism, family vacations, themed farms, museums, seminars, weddings, and cooperation networks. It also highlights various projects aimed at developing rural tourism products and services, targeting tourists interested in nature and cultural experiences in Estonia and the Baltic region. The organization has a strong local presence and a network of members, positioning itself as a key player in Estonia's rural tourism sector. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for mapping, Google Tag Manager, and Google Analytics for tracking. It uses HTTPS with a hosting provider Elkdata OÜ, an Estonian registrar and hosting company, ensuring secure connections. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the site uses HTTPS and asynchronous script loading, but no explicit security headers were detected. There is no visible vulnerability disclosure or incident response contact information. The WHOIS data is transparent and consistent with the website's business and location, supporting legitimacy. Overall, the site demonstrates a moderate to good security posture but could improve compliance and security best practices. The overall risk assessment is moderate with recommendations to implement privacy and cookie policies, add security headers, and establish vulnerability disclosure mechanisms to enhance trust and compliance.

Z

Zone Media OÜ

spoku.ee

40

Spoku.ee is a government-focused support application and processing system primarily serving Estonian municipalities and institutions. The platform offers a comprehensive suite of features including application submission, payment integration, digital contract signing, and data integration with national registries. The website is built on WordPress with modern plugins and technologies, reflecting a moderate level of digital maturity. While the technical implementation is solid and the site is mobile-optimized with good SEO practices, there is a lack of published privacy, cookie, and security policies, which impacts compliance and trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal incident response documentation. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

P

Piksel OÜ

arno.ee

41

Arno.ee is a professionally developed WordPress-based website representing Piksel OÜ's software system for managing educational services in Estonia. The platform targets municipalities, schools, kindergartens, and hobby schools, offering modules for youth work, parental consent, invoicing, and digital signing via Smart-ID. The website demonstrates a consistent brand presence and good content quality, with a clear focus on the Estonian education sector. Technically, the site uses modern web technologies including WordPress 6.8.1, Kadence Blocks, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partial; a privacy policy is present and GDPR compliance is indicated, but cookie consent mechanisms are missing. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness.

P

Põllumajanduse Registrite ja Informatsiooni Amet (PRIA)

pria.ee

55

PRIA (Põllumajanduse Registrite ja Informatsiooni Amet) is the official Estonian government agency responsible for managing agricultural subsidies, registers, and providing information services to farmers and rural entrepreneurs. The website serves as a comprehensive portal offering subsidy information, registers, news, and e-services such as the e-PRIA login portal. The site targets Estonian agricultural stakeholders and the general public interested in rural development. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics and business intelligence tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and shows no signs of exposed sensitive data or vulnerabilities. Overall, the website demonstrates a strong security posture and good privacy compliance, supporting its role as a trusted government resource.

M

MTÜ Eesti Raamatukoguvõrgu Konsortsium

elnet.ee

46

MTÜ Eesti Raamatukoguvõrgu Konsortsium operates as a non-profit consortium dedicated to serving the public interests of Estonian libraries. The organization provides key shared services such as the E-kataloog ESTER, Eesti artiklite andmebaas, Eesti märksõnastik, and the E-varamu portaal, targeting libraries, researchers, and the general public interested in library resources. The website reflects a medium-sized, well-established entity with a consistent brand and a clear focus on education and information services within Estonia. Technically, the website is built on a modern WordPress platform using the Enfold theme and several plugins including Yoast SEO and Ajax Search Pro. It employs HTTPS with good SSL configuration and integrates Google Analytics with user consent mechanisms. The site demonstrates good mobile optimization and accessibility features, including options for visually impaired users. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response information, and vulnerability disclosure channels. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, reinforcing the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the consortium, with room for improvement in security transparency and incident response readiness.

I

Infohunt

infohunt.ee

41

Infohunt.ee is a government-backed Estonian youth information portal providing localized event and activity information for young people. The platform aggregates data on youth events, hobby education, and projects, supporting youth engagement and participation. It is operated under the auspices of the Estonian Ministry of Education and Research (Haridus- ja Teadusministeerium) and hosted by EENet, reflecting a strong institutional foundation. The website uses WordPress with modern SEO and accessibility features, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, Infohunt.ee is a credible, well-maintained portal serving the Estonian youth sector effectively.

M

MTÜ Lastekaitse Liit

markalast.ee

41

MTÜ Lastekaitse Liit operates the 'Märka Last' web portal, a non-profit platform dedicated to promoting child rights and welfare in Estonia. The website offers a variety of content including opinion articles, podcasts, news updates, and educational resources targeting parents, children, youth, and child protection professionals. The organization is well-established with a domain registered since 2019 and maintains a consistent brand presence online. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and basic security practices in place, though improvements such as enabling DNSSEC and publishing a security.txt file are recommended. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively.

H

Haridus- ja Teadusministeerium (EENet)

elurikkus.ee

44

eElurikkus is a government-backed public portal aggregating biodiversity data for Estonia, integrating scientific, monitoring, and citizen science datasets. It serves researchers, environmental agencies, and the public by providing access to species taxonomy, occurrence records, and monitoring projects. The platform is built on the PlutoF biodiversity data infrastructure and collaborates with global partners like GBIF. Technically, the website uses modern JavaScript libraries such as Leaflet for mapping and Google Analytics for user tracking. The site is mobile-optimized with a clear navigation structure and good content relevance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy links. Overall, the site is trustworthy and professionally maintained, reflecting its governmental and research affiliations.

L

Lääne-Viru Omavalitsuste Liit

virol.ee

46

Lääne-Viru Omavalitsuste Liit is a regional government association serving the municipalities of Lääne-Viru County, Estonia. The organization focuses on regional development, public health, safety, education, tourism, entrepreneurship, and cooperation among local governments. The website reflects a well-established entity with a domain registered since 2010, consistent with its government association status. The site targets local government officials, residents, and regional partners, providing information on programs, events, and strategic initiatives. Technically, the website is built on WordPress with modern plugins and technologies, including GDPR-compliant cookie consent and Google Analytics integration. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

C

Caotica

caotica.eu

54

Caotica is a small technology service provider specializing in web development and online marketing, targeting medium-sized companies primarily in Estonia and internationally. The company offers a broad range of digital services including SEO, Google Ads, social media campaigns, email marketing, and content management. The website is professionally designed using WordPress with modern SEO and analytics tools integrated, reflecting a mature digital presence. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit incident response or security policy pages are available. The lack of publicly available WHOIS data due to EURid privacy policies limits transparency but is common for .eu domains. Overall, the website is trustworthy and functional with room for improvement in contact transparency and security best practices.

M

Moss

getmoss.com

69

Moss is a technology company offering a SaaS platform focused on corporate spend management, including unlimited corporate credit cards, expense management, and accounts payable automation. The website positions Moss as a modern financial technology provider targeting businesses seeking to optimize their spending processes. The platform aims to accelerate month-end financial closing and streamline corporate expenses. Technically, the website is built using modern frameworks such as React and Next.js, with integrations for analytics and consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent management tools but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the professional website and use of reputable third-party services suggest a legitimate business. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

S

Sotsiaalkindlustusamet

tarkvanem.ee

46

Tarkvanem.ee is a government-affiliated Estonian website operated by Sotsiaalkindlustusamet, providing comprehensive parenting information and resources targeted at parents of children of all ages. The site offers educational content on child development, parenting styles, health, and safety, supported by tests, videos, and expert advice. It holds a strong market position as a trusted public information portal in Estonia. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, alongside SEO optimization via Yoast. The site is mobile-optimized and accessible with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited but includes a verified company email and a contact form. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

Techindustry.lv is the official website for the largest and most significant industry exhibition in the Baltic region, focusing on machine building, metal processing, automation, electronics, and related technologies. The event is organized by BT 1, a leading Baltic exhibition organizer, and targets industry professionals and companies seeking to showcase and discover innovations. The website provides comprehensive information about exhibitors, news, and event details, supported by partner organizations and ticketing platforms. Technically, the site uses modern tracking and analytics tools, including Google Analytics and Facebook Pixel, and implements cookie consent mechanisms. However, it lacks explicit privacy and terms of service pages, and security headers are not detected, which are areas for improvement. The site is accessible without WAF or blocking mechanisms, and contact information is clearly provided with named personnel.

W

Webware

webware.ee

46

Webware OÜ is an established Estonian technology company specializing in comprehensive and flexible information and document management solutions through its flagship platform, WebDesktop. With over 23 years of experience, Webware serves a broad client base including major organizations in Estonia and Northern Europe, positioning itself as a market leader in the info management sector. The company offers a range of services including software analysis, development, hosting, training, and workflow and risk management, targeting both private and public sector organizations. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

I

Intuizi

intuizi.com

51

Intuizi is a technology company specializing in predictive consumer intelligence by leveraging large quantitative models and anonymized consumer data to generate actionable insights. Their platform, the Anonymous Knowledge Graph (AKG), enables businesses to analyze de-identified consumer behavior across digital and physical environments, supporting adtech, marketing, and data monetization efforts. The company positions itself as a privacy-conscious data analytics provider with a focus on compliance and innovation. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and HubSpot. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security-wise, the site uses HTTPS and includes some security best practices but lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS data for the domain is a notable anomaly that impacts domain trustworthiness. Overall, Intuizi presents a credible business with strong technical and content quality but should address domain registration transparency and enhance security policies.

T

Tervise Arengu Instituut

terviseinfo.ee

38

Terviseinfo.ee is a well-established Estonian health information portal managed by the Tervise Arengu Instituut, a government-affiliated health development institute. The website provides comprehensive health promotion content, news, and educational resources targeted primarily at health promotion specialists and the general public. It covers a broad range of health topics including alcohol, HIV/AIDS, nutrition, mental health, and more, positioning itself as a trusted national resource for health information. Technically, the site is built on Joomla CMS and utilizes common JavaScript libraries such as MooTools and jQuery, along with Google Fonts and Google Analytics for tracking. The site is served over HTTPS, ensuring secure communication, and includes CSRF tokens in forms to protect against cross-site request forgery. However, it lacks explicit security headers like Content-Security-Policy and HSTS, and does not have a visible cookie consent mechanism or privacy policy page, which are important for GDPR compliance. From a security perspective, the website demonstrates a moderate security posture with secure form handling and HTTPS usage but could improve by implementing additional HTTP security headers and publishing clear privacy and cookie policies. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The WHOIS data aligns well with the website's governmental health mission, showing a consistent and legitimate registration since 2011. Overall, the website is professional, trustworthy, and serves its public health mission effectively, but should enhance privacy compliance and security headers to strengthen its security posture and regulatory adherence.

S

Sorglos Design AG

sorglos-design.ch

57

Sorglos Design AG is a Swiss-based company specializing in the retail and exhibition of premium wellness and outdoor living products including solid wood saunas, the Round Cube Sauna, sauna stoves by Huum, hot tubs, the proprietary low-smoke fireplace 'Feuerzunge', glamping accommodations, and garden furniture. The company targets consumers seeking high-quality wellness and outdoor lifestyle products, positioning itself as a niche premium provider in the Swiss market. The website reflects a professional and consistent brand image with a clear product focus and multiple social media channels to engage customers. Technically, the website employs modern web technologies such as Font Awesome 6 Pro, Google Fonts, and the Splide.js slider, likely built on Ruby on Rails given the presence of CSRF tokens and asset pipeline conventions. The site is mobile-optimized with good SEO practices and moderate performance. Google Analytics is integrated for user tracking, though no explicit cookie consent mechanism or privacy policy is present. From a security perspective, the site uses HTTPS with a valid SSL configuration and includes CSRF protection tokens, indicating a baseline security posture. However, it lacks advanced security headers and does not provide a vulnerability disclosure or security.txt file. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is functional, professional, and secure at a basic level but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

S

Sentinel Research

sentinel-research.com

59

Sentinel Research is a student-led academic organization dedicated to pioneering innovative counterintelligence solutions to enhance national security. The organization positions itself as a leader in the academic research space with a focus on interdisciplinary approaches and strategic collaborations. Their offerings include research publications, policy recommendations, and educational resources aimed at students, academics, and national security professionals. The website is built on a modern WordPress platform with SEO and analytics integrations, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

N

Nucleate Bio, Inc.

nucleate.org

56

Nucleate Bio, Inc. operates a globally recognized, student-led organization dedicated to empowering biotech leaders and innovators. The organization offers educational programs, venture acceleration through its Activator program, and fosters a global community of bio-entrepreneurs. Supported by leading biotech companies and world-class advisors, Nucleate positions itself as a key player in the biotech innovation ecosystem. Technically, the website is built on WordPress with modern SEO and analytics tools, delivering a professional and responsive user experience. Security posture is solid with HTTPS and no evident vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and trustworthy organization with room for improvement in privacy and security transparency.

Meriton Energy Services operates as an Australian energy retailer focused on providing fairer energy costs and simplified contracts primarily targeting residential customers, including Meriton apartment residents. The company emphasizes transparent pricing, no lock-in contracts, and Australian-based customer support, positioning itself as a customer-friendly alternative in the Australian energy market. The website is professionally designed with clear calls to action and multiple contact forms to facilitate customer engagement. Technically, the site uses a mix of legacy and modern web technologies, including Google Analytics and reCAPTCHA for security and tracking. However, the use of an outdated jQuery version presents a potential security risk. Security posture is generally good with HTTPS enforced and spam protection on forms, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and DNS setup are consistent with a legitimate Australian business, enhancing trustworthiness.

C

CORE Indonesia

youtheconomicsummit.org

52

Youth Economic Summit (YES) is a program organized by CORE Indonesia aimed at engaging Indonesian youth in advancing the national economy through digital and green economy initiatives. The website serves as a platform to promote events, programs, publications, and multimedia content related to youth economic empowerment. The target audience includes young professionals, students, and community groups interested in economic innovation and sustainability. Technically, the website employs modern frontend technologies such as Tailwind CSS, Flowbite, and Swiper.js, hosted behind Cloudflare DNS, ensuring good performance and mobile responsiveness. However, the site lacks critical privacy and cookie policies, and no direct contact information is provided, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is recent but consistent with the event timeline and uses privacy protection appropriately.

PT. Arkadia Digital Media Tbk. is a medium-sized Indonesian digital media group operating multiple web portals and offering a range of services including advertising, event production, social media management, and influencer marketing. The company holds a strong market position in Indonesia's digital media landscape with a diversified portfolio and extensive partner network. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics, and is hosted with Cloudflare DNS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are critical for compliance and trust. Overall, the site is accessible, professionally designed, and provides clear contact information, but improvements in privacy compliance and security best practices are recommended.

A

Accorp Sp. z o.o.

pollster.pl

72

Instytut Badań Pollster, operated by Accorp Sp. z o.o., is a well-established Polish market research institute founded in 2012. It specializes in comprehensive market and opinion research services, including CAWI, CAPI, CATI, and qualitative studies. The company holds a strong market position, ranking second in Poland for CAWI interviews in 2022, and targets businesses and institutions seeking data-driven insights to support growth. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, Google reCAPTCHA, Hotjar, and Google Analytics, with a CMS identified as Bolt. Hosting and domain registration are managed by home.pl S.A. The site is mobile-optimized and demonstrates good SEO practices. Privacy compliance is robust, featuring a consent management platform and detailed privacy and cookie policies, ensuring GDPR adherence. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and integrates a consent management platform. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong compliance and professional business representation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and trust.

V

Vana-Võidu Autokeskus OÜ

vvautokeskus.ee

40

Vana-Võidu Autokeskus OÜ is a small Estonian automotive service company established in 1996, specializing in car repair, maintenance, tire services, and trailer repair and sales. The company operates locally near Viljandi and targets vehicle owners requiring these services. The website is built on the Voog CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized with good design and navigation, providing clear business and contact information. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in privacy and security transparency.

B

Billetto Sweden

billetto.se

70

Billetto Sweden operates as an established online event ticketing platform primarily serving the Swedish market. Founded in 2010, it offers event discovery and ticket sales services targeting both event attendees and organizers. The website demonstrates a consistent brand presence with localized content and multiple user roles supported, including ticket buyers, organizers, and door staff. The platform integrates modern technologies such as Stripe for payments, Google Analytics for tracking, and OneTrust for cookie consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is generally good with HTTPS enforced and CSRF protections in place, though the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. WHOIS data confirms the domain's legitimacy with consistent registration details and appropriate domain age. Overall, Billetto Sweden presents a professional and trustworthy online presence with moderate technical maturity and security awareness.

U

UA-Футбол ᐉ Новости футбола онлайн • Результаты футбольных матчей сегодня • Все о футболе на сайте UA-football.com

ua-football.com

66

UA-Football.com is a Ukrainian-based online media platform specializing in football news, live match results, tournament tables, and related sports content. The website targets football fans and bettors interested in both Ukrainian and international football. It offers a variety of services including live match centers, betting information, video content, and lifestyle news related to sports. The platform monetizes primarily through advertising and affiliate marketing with bookmakers. Technically, the site employs modern web technologies such as Google Tag Manager, Google Analytics, lazy loading, and a cookie consent management platform, ensuring a good user experience and moderate performance. Security-wise, the site uses HTTPS and has implemented cookie consent mechanisms but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data for the domain is unavailable, raising concerns about domain registration transparency, although the active and professional nature of the website suggests legitimate operation. Overall, the site presents a solid digital presence with room for enhanced compliance and security practices.

The International Society for Ethnology and Folklore (SIEF) is a well-established academic non-profit organization that fosters collaboration among scholars in European Ethnology, Folklore Studies, and Cultural Anthropology. The website serves as a hub for information on congresses, working groups, publications, and membership, targeting an academic audience. The organization maintains a consistent brand presence and offers comprehensive content relevant to its community. Technically, the site employs a mature technology stack including Bootstrap, jQuery, Google Analytics, and cookie consent mechanisms, hosted likely by NomadIT. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved and the use of an outdated jQuery version presents a minor risk. WHOIS data is unavailable, which slightly impacts domain trust but is not uncommon for non-profits. Overall, the site is professional, accessible, and trustworthy with room for technical and security enhancements.

C

Certia Oy

nefk2025.fi

43

The website nefk2025.fi represents the 36th Nordic Ethnology and Folklore Conference scheduled for June 2025 in Turku, Finland. The event is organized by Certia Oy in partnership with Åbo Akademi University and Turku University, targeting Nordic scholars and researchers interested in ethnology, folklore, and cultural studies. The site provides comprehensive information about the conference theme, programme, important dates, and practical details, supporting a niche academic audience. Technically, the site is built on WordPress using WPBakery Page Builder and integrates standard SEO and analytics tools. It is hosted by Louhi Net Oy with a valid SSL certificate ensuring secure HTTPS access. Security posture is good with cookie consent mechanisms and no visible vulnerabilities, though security headers could be improved. The WHOIS data is transparent and consistent with the business purpose, enhancing trust. Overall, the site is professional, well-structured, and compliant with privacy regulations.

The website folklore.ee is an authoritative academic and cultural platform managed by the Estonian Literary Museum's Folklore Department. It provides extensive resources on Estonian folklore, oral traditions, and related research projects, targeting scholars, students, and the interested public. The site is primarily in Estonian with some multilingual content and serves as a key national repository and dissemination channel for folklore knowledge. Technically, the site uses a stable but basic infrastructure with FreeBSD and PostgreSQL, and includes Google Analytics for visitor tracking. However, it lacks modern CMS features and advanced mobile optimization. Security posture is moderate with HTTPS implied but no explicit security headers or incident response information published. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Business credibility is high given the institutional backing and consistent domain registration. Overall, the site is functional and trustworthy but would benefit from enhanced privacy, security, and technical modernization.

A

A Million Ads

amillionads.com

56

A Million Ads (AMA) is a technology-driven company specializing in dynamic creative advertising for audio platforms. They position themselves as a leader in delivering customized, data-driven audio ads across major platforms, serving notable clients such as Target, Starbucks, and American Express. The website reflects a mature digital presence with professional design, strong branding, and extensive client showcases. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected and no dedicated security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the professional image and client portfolio, raising legitimacy concerns. Overall, the site is functional, professional, and compliant but would benefit from improved transparency on domain registration and security policies.