Security Directory

U

UkrNet

ukr.net

62

UkrNet is a prominent Ukrainian online news portal providing comprehensive news coverage across politics, economy, sports, culture, technology, and entertainment. It serves a broad Ukrainian-speaking audience with fresh news updates and integrates additional services such as email and search. The website demonstrates a mature digital infrastructure with modern advertising and analytics technologies, including Google Tag Manager and MGID. Security posture is solid with HTTPS enforcement and sandboxed iframes for email widgets, though some security headers could be improved. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the analyzed content. WHOIS data is unavailable for the queried subdomain, which slightly reduces trust but does not detract from the site's evident legitimacy and market position. Overall, UkrNet is a well-established media platform with good technical and business credibility.

Г

ГОРДОН

gordonua.com

45

ГОРДОН is a Ukrainian media company operating an online news portal providing up-to-date news, exclusive interviews, and multimedia content focused on Ukraine and global events. The website targets Ukrainian-speaking audiences interested in politics, war, culture, and current affairs. It maintains a strong market position as a recognized news source with a medium-sized operation founded in 2013. The business model relies on advertising revenue and mobile app distribution. Technically, the site uses a mix of modern and legacy technologies, including Google Analytics, Google Tag Manager, Facebook Pixel, and Cloudflare DNS services. The site is mobile-optimized and SEO-friendly but uses an outdated jQuery version and lacks some security headers. Security posture is moderate with HTTPS enforced but missing DNSSEC and some headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but can improve security and privacy practices.

Р

РБК-Україна

rbc.ua

63

РБК-Україна is a prominent Ukrainian online news media portal providing comprehensive coverage of national and international news, political and economic analysis, currency exchange rates, interviews, and opinion pieces. The website targets Ukrainian-speaking audiences interested in current affairs and maintains a strong market position as a major news outlet in Ukraine. The business model is centered on digital news publishing with monetization through advertising and sponsored content. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Gemius for analytics and advertising. The site is well-structured with good SEO practices and basic mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website demonstrates a mature digital presence with high content quality and professional branding.

H

Holstre Külaselts

holstre.ee

40

Holstre Külaselts is a local community association representing the village of Holstre in Viljandi County, Estonia. The website serves as an informational portal providing news, cultural heritage trail details, local projects, and community events. The organization appears to be a small non-profit entity focused on promoting local culture and community engagement. The website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and plugins such as Google Analytics and 360-degree image viewers. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content for its target audience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a gap for GDPR compliance. Overall, the website is trustworthy and professionally maintained but could improve in privacy and security transparency.

M

Marché des Objets Graphiques

marche-objets-graphiques.com

55

The website 'Marché des Objets Graphiques' serves as an online presence for a recurring event organized by étapes magazine, focusing on graphic and artisanal objects. It targets creative professionals and enthusiasts in France, particularly in Paris, providing a platform for showcasing and selling unique graphic works and crafts. The site is well-structured, visually consistent, and uses modern web technologies including WordPress and Google Analytics for tracking visitor engagement. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and branding align with a known magazine entity. Security posture is adequate with HTTPS and spam protection, but lacks comprehensive security headers and visible privacy compliance documentation. Overall, the site is functional and professional but would benefit from improved compliance and transparency measures.

C

CostPocket

costpocket.com

70

CostPocket is a Finnish technology company specializing in AI-powered expense management and document digitization solutions for businesses and accounting firms. The company offers a SaaS platform that automates receipt and invoice processing, integrates with numerous accounting software, and provides mobile applications for ease of use. With over 13,000 companies using their service and more than 40 integrations, CostPocket holds a strong market position in the Nordic and Baltic regions. The website demonstrates a modern technical infrastructure leveraging Vue.js, cloud hosting, and multiple analytics and marketing tools. Security posture is solid with HTTPS enforcement and access controls, though improvements such as DNSSEC and published security policies could enhance trust. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, CostPocket presents a professional and trustworthy digital presence aligned with its business goals.

K

Kravia

validius.fi

64

Kravia is a cloud-based SaaS provider specializing in automated debt collection software, invoicing services, and portfolio management. The company integrates with popular accounting platforms to streamline financial operations for businesses. Their website demonstrates a modern technical infrastructure leveraging Webflow CMS, Cloudflare CDN, and multiple analytics and marketing tools. Security posture is strong with HTTPS enforcement, use of Auth0 for authentication, and a comprehensive cookie consent mechanism. However, explicit privacy and terms of service pages are not found, which slightly impacts privacy compliance scoring. WHOIS data is unavailable, likely due to privacy protection, which is common for SaaS companies but limits full legitimacy verification. Overall, Kravia presents as a professional and trustworthy service provider in the finance technology sector.

S

Suomen Hostingpalvelu Oy

hostingpalvelu.fi

63

Suomen Hostingpalvelu Oy is a Finnish technology company specializing in domain registration, web hosting, and website building services. Established in 2008, it has positioned itself as a trusted local provider with a strong emphasis on customer service and technical reliability. The company offers a range of hosting packages, including AI-assisted WordPress hosting, targeting both individual and business customers in Finland. Their partnership with Suomen Yrittäjät further strengthens their market credibility. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, and integrates multiple analytics and marketing tools like Google Analytics, Hotjar, and Trustmary. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Hosting servers are located in Finland, ensuring good performance and compliance with local data regulations. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, Suomen Hostingpalvelu Oy demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the Finnish hosting market. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture.

XiBE is a Netherlands-based technology company offering a cloud-based ideas realization platform designed to facilitate employee collaboration in idea sharing, selection, and execution. The website presents a modern, user-friendly interface hosted on the Weebly platform, targeting organizations seeking to enhance bottom-up innovation. The platform emphasizes ease of use and community engagement, supported by client testimonials and logos from reputable organizations. Technically, the site employs standard web technologies including jQuery and Google Analytics, with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the site is professional and credible but would benefit from enhanced privacy compliance and security best practices.

A

Aspo Plc

aspo.com

62

Aspo Plc is a Finnish conglomerate specializing in demanding B2B customers, operating primarily in Northern Europe and selected growing markets. The company owns and develops businesses in sectors including shipping (ESL Shipping), food industry solutions (Leipurin), and industrial supplies and logistics (Telko). Aspo positions its subsidiaries as market leaders, focusing on sustainable and long-term value creation. The website reflects a professional corporate presence with comprehensive investor relations, governance, and sustainability information. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as jQuery, Highcharts, and Slick Carousel. It integrates Google Analytics and Google Analytics 4 for visitor tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional and consistent website content. Overall, Aspo Plc's website presents a credible and professional business front with room for improvement in security best practices and transparency regarding domain registration and incident response.

N

Neway

neway.ee

49

Neway is an award-winning brand and experience design agency based in Estonia, with a domain age consistent with its claimed business history since 2007. The company specializes in creating brands and experiences from strategy through execution, targeting businesses seeking high-quality creative services. The website showcases a professional portfolio with multimedia content and highlights multiple industry awards, positioning Neway as a reputable player in the creative agency market. Technically, the website uses modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools, and is hosted by Zone Media OÜ. Security posture is strong with HTTPS enforced, reCAPTCHA on forms, and cookie consent implemented, though explicit security policies and incident response information are absent. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the website is professional, trustworthy, and technically sound, with room for improvement in privacy and security transparency.

E

Etapes :

etapes.com

49

Étapes is a well-established French media company specializing in design, image, and visual communication since 1994. The website serves as a digital magazine platform offering editorial content, subscription services, event agendas, and job listings targeted at design professionals and enthusiasts. The company maintains a consistent brand presence across multiple social media platforms, reinforcing its market position as a reference media in its sector. Technically, the website is built on WordPress with WooCommerce integration for e-commerce capabilities, leveraging modern web technologies and SEO plugins to optimize content delivery and user experience. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and explicit privacy and cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

T

Thisispaper, Inc.

thisispaper.com

61

Thisispaper, Inc. operates a niche media website focused on art, design, and architecture, providing curated stories, travel guides, and a membership subscription model called Thisispaper+. The company targets creative professionals and enthusiasts seeking high-quality cultural content. The website is built on modern web technologies including Webflow CMS, Memberstack for membership management, and integrates payment gateways such as Stripe and PayPal. Analytics tools like Google Analytics and Microsoft Clarity are used for user behavior insights. Security posture is good with HTTPS enforced and secure payment integrations, though explicit security headers could be improved. Privacy compliance is limited with no clear privacy or cookie policies detected, which is a risk area. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the website is professional, content-rich, and technically sound but would benefit from enhanced privacy disclosures and domain registration clarity.

9

9Dots

9dotsmedia.com

57

9Dots is a Mediatech service provider specializing in advanced monetization solutions for publishers and app developers. Their offerings include header bidding, video and audio monetization, and app distribution services aimed at maximizing ad revenue and audience engagement. The company positions itself as an industry connector with innovative native monetization technologies. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and FontAwesome, and integrates Google Analytics and reCAPTCHA for analytics and security. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing or unavailable, raising concerns about domain legitimacy. Overall, the website is functional and professional but requires improvements in transparency and security documentation.

A

Accorp Sp. z o.o.

instytut-pollster.pl

72

Instytut Badań Pollster, operated by Accorp Sp. z o.o., is a well-established Polish market research institute founded in 2012. The company specializes in various research methodologies including CAWI, CAPI, CATI, and qualitative studies, holding a strong market position as the second largest CAWI research provider in Poland in 2022. Their services target businesses and institutions requiring reliable market and opinion data to support business growth and societal development. The website reflects a professional and modern digital presence with comprehensive content and clear navigation.

I

iPromote

ipromote.com

65

iPromote is a mature and established company specializing in programmatic digital advertising solutions. Their platform offers automated, scalable, and white-labeled advertising services across multiple channels including display, paid search, CTV/OTT, social media, native, video, and Yelp ads. The company positions itself as an industry leader with award-winning technology and a strong partner ecosystem. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site is built on WordPress with advanced SEO and performance optimizations, integrating tools like Google Tag Manager, HubSpot, and Jetpack for analytics and marketing. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent branding and social media presence.

E

Edumus Education OÜ

edumus.ee

51

Edumus Education OÜ operates the Edumus platform, offering engaging and practical online courses targeted at primary and secondary school youth in Estonia and Ukraine. The platform emphasizes hybrid learning with live online classes and self-paced assignments, supported by expert-created curricula. The company has established a credible market presence with over 100 specialists contributing to education content and partnerships with educational foundations. Technically, the website is built on Squarespace, leveraging modern analytics and marketing tools, and provides a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers are recommended. Overall, Edumus demonstrates a trustworthy and professional online presence aligned with its educational mission.

T

Taimne Teisipäev | Sest elu on tähistamist väärt!

taimneteisipaev.ee

42

Taimne Teisipäev is a niche Estonian website dedicated to promoting healthier eating habits by encouraging more plant-based food consumption. The site targets health-conscious consumers interested in lifestyle changes towards plant-based diets. The business model appears to be informational and advocacy-focused, without direct e-commerce or transactional services. The website uses modern frontend technologies including Bootstrap and Nuxt.js, and integrates popular analytics and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of explicit privacy, cookie, and terms of service policies suggests gaps in compliance and transparency. Security posture is moderate with HTTPS usage implied, but lacks published security policies or incident response contacts. Overall, the domain registration is consistent and legitimate, supporting the website's credibility. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

L

Lastekaitse Liit

kiusamisestvabaks.ee

42

Kiusamisest vabaks is a non-profit educational platform operated by Lastekaitse Liit, focused on bullying prevention in Estonia. The website offers multilingual educational materials and awareness content targeting nurseries, kindergartens, and grade schools. It collaborates with reputable partners including the Estonian Ministry of Education and Research and international child protection organizations. The platform is well-positioned within its niche, serving educators, parents, and children with relevant resources. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services for analytics and tag management. It employs multilingual support via WPML and uses SEO best practices including structured data and Open Graph metadata. The site is mobile-optimized and performs moderately well, with a consistent and professional design. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

R

Ridango AS

pilet.ee

52

Pilet.ee is a well-established Estonian online platform specializing in public transportation ticket sales and management of the Ühiskaart travel card. Operated by Ridango AS, the service provides users with convenient access to tickets across multiple regions and transport types in Estonia. The website offers clear navigation and service descriptions targeting public transport users, supporting multiple languages including Estonian, English, and Russian. The platform integrates with regional ticketing subdomains and partners such as Omniva for card sales. Technically, the website employs standard web technologies including JavaScript, jQuery, and Google Analytics for user tracking. DNS is managed via Cloudflare, but DNSSEC is not enabled. The site uses HTTPS, ensuring encrypted communications, but lacks advanced security headers which could improve protection against common web threats. Mobile optimization and accessibility are basic but functional. From a security perspective, the site demonstrates a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as a consent mechanism despite the use of Google Analytics, indicates compliance gaps with GDPR and privacy best practices. No incident response or security policy information is publicly available. Overall, Pilet.ee is a credible and professional service with a solid market position in Estonia's transportation sector. Strategic improvements in privacy compliance, security headers, and user consent mechanisms would enhance trust and regulatory adherence, supporting long-term operational security and customer confidence.

C

Corgea

corgea.com

66

Corgea is an AI-driven security platform focused on automatically detecting, triaging, and fixing insecure code, targeting developers and security teams. The company appears to be a small technology startup founded in 2020, offering SaaS solutions in the cybersecurity domain. The website is professionally designed using Framer, with good content relevance and user experience, though it lacks explicit privacy and cookie policies as well as contact information. Technically, the site uses modern analytics and marketing tools such as HubSpot and Google Analytics, but lacks security headers and DNSSEC, which are recommended for enhanced security. The domain registration is consistent and transparent, registered with NameCheap since 2020, aligning with the company's startup profile. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices.

T

Toka

tokagroup.com

69

Toka is a specialized cybersecurity and digital forensics company focused on providing advanced lawful digital forensics, intelligence, and force protection solutions primarily to government, law enforcement, and security agencies. Their offerings include forensic investigations, targeted intelligence, covert operations, and national-level cyber capacity building services. The company positions itself as a trusted partner in homeland security and cyber defense, with recognition from entities such as the World Bank and StateUp. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery and Glide.js for UI components, and integrates Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile optimized with good design quality and clear navigation, though accessibility features are basic. Performance is moderate, typical of Webflow-hosted sites. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks visible security headers and does not provide public security policies or incident response contacts. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. The WHOIS data is missing or indicates the domain may not be registered, which is a significant trust concern. Overall, while the business and technical presentation is professional and targeted, the lack of WHOIS transparency and privacy compliance documentation reduces trustworthiness. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance credibility and compliance.

Cleva is a fintech startup founded in 2023 that provides US-based dollar accounts and virtual USD cards to global users, including non-US residents. The company positions itself as a solution for cross-border USD banking, enabling users to receive payments from platforms like Upwork, Deel, and Amazon, convert currencies, and make transfers with low fees. Supported by Y Combinator and featured in reputable media outlets, Cleva demonstrates a growing market presence in the fintech space. The website is built on modern technologies such as React and Next.js, hosted on AWS infrastructure, and optimized for mobile devices with good performance and SEO practices. Security posture is solid with HTTPS and domain protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Overall, the site is professional and trustworthy but should enhance transparency and security policies to improve compliance and user trust.

G

Fluently: Your AI English Speaking Coach

getfluently.app

62

Fluently is an AI-driven English speaking coach platform offering affordable and accessible language tutoring services. The website positions itself as a cost-effective alternative to traditional human tutors, targeting English learners who want to improve speaking skills and confidence. The technical infrastructure is built using Framer with integrations of popular analytics tools such as Google Analytics, Facebook Pixel, Amplitude, and Plausible, indicating a modern digital maturity level. Security posture is strong with HTTPS enforced and appropriate security headers, but lacks visible privacy and cookie policies, as well as contact information and incident response details, which are important for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

L

Liquid Instruments

liquidinstruments.com

68

Liquid Instruments is a technology company specializing in innovative software-reconfigurable hardware platforms designed for scientists, engineers, students, and professionals in test and measurement fields. Their flagship product, Moku, offers multi-instrument modes and cloud compilation services, positioning them as a niche leader in scientific instrumentation. The website reflects a professional and modern digital presence, leveraging WordPress with advanced marketing and analytics integrations such as HubSpot, Google Analytics, and Hotjar. The technical infrastructure is robust, hosted on DreamHost with a secure HTTPS configuration and a consistent branding approach. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and no detected vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website demonstrates a mature digital footprint with good business credibility and technical implementation.

A

Ai Palette

aipalette.com

57

Ai Palette operates an AI-powered SaaS platform focused on accelerating product innovation and market intelligence primarily for the food and beverage industry. Their platform offers multiple AI-driven tools such as trend discovery, product concept creation, virtual validation, and a chat-driven assistant for food innovation. The website is professionally designed using WordPress with modern plugins and SEO optimizations, indicating a mature digital presence. Security posture is generally good with HTTPS enabled and anti-spam measures in place, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. The domain WHOIS data is missing, which raises concerns about domain legitimacy despite the active and professional website. Overall, the site is functional and credible but requires improvements in privacy compliance and domain registration transparency.

P

Private by Design, LLC

texel.ai

57

Texel.ai is a US-based technology startup founded in 2022, operating as a SaaS platform that enables users to create and edit images, videos, and audio using AI-powered tools and APIs. The platform targets developers and businesses seeking fast, cost-effective AI media generation and editing solutions. The website presents a professional and modern design with clear navigation, showcasing key services and partner logos to build trust. Technical infrastructure leverages Django, Tailwind CSS, and Cloudflare DNS, with Google Analytics for user tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and domain protections but lacks explicit security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is consistent and supports legitimacy. Overall, the site scores well on content and technical implementation but needs improvements in privacy and security transparency.

C

Cloudchipr

cloudchipr.com

66

Cloudchipr is a technology company offering a cloud optimization platform that empowers teams with AI agents to optimize cloud costs, explain anomalies, send reports, and automate workflows. The platform targets FinOps professionals, engineers, and leadership teams, providing real-time observability and management across multiple cloud providers. The website is professionally designed using Webflow CMS and integrates modern analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and PostHog. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enabled and reCAPTCHA used for forms, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Business credibility is supported by consistent WHOIS data and professional content, but contact information is not explicitly provided. Overall, the website is functional and professional but requires improvements in privacy compliance and security transparency.

S

Speedoc Singapore

speedoc.com

62

Speedoc Singapore operates as a healthcare service provider specializing in delivering medical services such as doctor home visits and telemedicine consultations within Singapore. The company positions itself as a convenient and accessible healthcare solution, bringing doctors, nurses, ambulance, and medicine directly to patients' locations. The website reflects a medium-sized enterprise with a focus on the Singapore market and healthcare sector. Technically, the site is built using modern web technologies including React and Next.js, with integration of popular analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized and presents a professional user experience with good SEO practices. Security-wise, the website enforces HTTPS and uses hCaptcha for bot protection, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. The WHOIS data for the subdomain sg.speedoc.com is unavailable, which is typical for subdomains, but the main domain's registration details are not provided here. Overall, the website is credible and functional but could enhance privacy compliance and security posture further.

Nasdaq Baltic operates as the regional stock exchange platform for the Baltic countries of Estonia, Latvia, and Lithuania, providing trading services for shares, bonds, and funds. The website serves investors, companies, brokers, and advisers by offering real-time market data, news, and capital raising facilitation. It is part of the larger Nasdaq Inc. corporate group, reflecting a strong market position in the finance sector. The site is professionally designed with consistent branding and clear navigation, targeting financial market participants and stakeholders in the Baltic region. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, jQuery, Swiper.js, and Highstock for data visualization. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile optimized and SEO friendly, with structured data enhancing search engine understanding. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, Nasdaq Baltic's website demonstrates a mature digital presence with strong business credibility and good security hygiene. Strategic improvements could focus on enhancing DNS security, publishing formal security policies, and expanding incident response transparency to further strengthen trust and compliance.

V

Váš Hosting s.r.o.

hlidam.to

66

Hlídám.to is a Czech-based professional server monitoring service operated by Váš Hosting s.r.o. The company offers uptime and performance monitoring, outage alerts, email server monitoring, and API access, targeting website owners and IT administrators in the Czech market. The website is well-structured, with clear navigation and legal compliance including privacy and cookie policies. Technically, the site uses a custom CMS with common JavaScript libraries and frameworks such as jQuery and Bootstrap, and integrates third-party analytics and advertising tools with user consent. Security posture is solid with HTTPS enforced and secure login forms, though explicit security headers are not detected. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a web form. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and privacy compliance.

C

Control Web Panel

centos-webpanel.com

52

Control Web Panel (CWP) is a free Linux web hosting control panel designed to simplify server management for dedicated and VPS servers without requiring extensive SSH console use. The website positions itself as a niche open-source alternative to commercial control panels, offering a broad feature set including web server management, PHP configuration, user and DNS management, email services, security features, and database administration. The business model includes free software with optional paid PRO support and additional services such as AntiDDoS Proxy and Service Monitoring. The site has an active social media presence and a long-standing domain registration dating back to 2013, supporting its legitimacy. Technically, the website runs on WordPress 4.9.23 with various plugins and uses technologies like Apache, Nginx, Varnish, PHP, and Postfix for backend services. The site includes Google Analytics for tracking and has moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured navigation. However, some components like WordPress and jQuery are outdated, posing potential security risks. From a security perspective, the site uses HTTPS and displays a SiteLock badge indicating PCI compliance and malware scanning. It implements several security best practices such as ModSecurity with OWASP rules, CSF Firewall, and user-level security limits. However, DNSSEC is not enabled, and no explicit HTTP security headers were detected in the HTML content. The absence of a cookie consent mechanism and outdated software versions are notable compliance and security gaps. Overall, the website is functional, professional, and moderately secure but would benefit from updates to software components, enhanced security headers, and improved privacy compliance mechanisms. The domain registration data is consistent with the website's claims, supporting its trustworthiness. Strategic improvements in security and privacy compliance will enhance the site's credibility and reduce risk.

L

Lappset GmbH

lappset.de

57

Lappset GmbH operates as a manufacturer and supplier of innovative playground and sports equipment, targeting organizations and communities interested in promoting active play and social interaction. The website presents a professional and consistent brand image with good content quality and user experience, primarily in German. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is trustworthy and well-maintained, with room for improvement in transparency and security best practices.

E

Ettevõtja infovärav Aktiva

aktiva.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages, including startups, operating companies, and those expanding internationally. The platform offers practical guidance, resources, and insights to help businesses succeed, with content tailored to the Estonian market and language. The website is positioned as a trusted resource for business knowledge and development in Estonia, with a clear focus on entrepreneurship and business growth.

B

BNI

bnipodcast.com

64

The Official BNI Podcast website serves as a professional content platform delivering weekly audio discussions led by Dr. Ivan Misner, founder of BNI, the world's largest business networking organization. The site targets business professionals seeking networking education and referral strategies, positioning itself as an authoritative media outlet within the business networking niche. The business model revolves around content publishing, podcast distribution, and educational sponsorships, supported by partnerships with related training and audio program providers. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various social sharing and marketing plugins. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. Security posture is solid with HTTPS enforced and some security best practices observed, but lacks advanced security headers and a formal vulnerability disclosure mechanism. From a security and compliance perspective, the site includes a cookie consent mechanism indicating GDPR awareness, but lacks a clearly linked privacy policy and terms of service pages. Contact information is limited to forms and subscription emails, with no explicit company emails or phone numbers found. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection, which impacts trustworthiness. Overall, the website is professionally maintained with high-quality content and strong brand association with BNI. However, the missing WHOIS data and incomplete privacy documentation suggest areas for improvement in transparency and compliance. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, verifying domain registration legitimacy, and improving accessibility features to strengthen trust and compliance.

A

Artis Zelmenis

artiszelmenis.lv

33

Artis Zelmenis operates a small Latvian-based business website offering a variety of services including web development, SEO, legal assistance, photography, advertising, and educational content. The site targets local SMEs, individuals, and students, providing multilingual content in English, Latvian, and Russian. The business appears niche-focused with a stable presence since 2012. Technically, the website uses standard JavaScript libraries and social media SDKs for Facebook, Twitter, VK, and Draugiem.lv, alongside Google Analytics for traffic monitoring. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS indications. SEO is reasonably addressed with meta tags and multilingual support. Security posture is moderate but with notable gaps: no visible HTTPS enforcement, absence of security headers, and use of some HTTP resources that may cause mixed content issues. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.

Baltic Legal operates a specialized immigration and legal consultancy website focused on residence permits and immigration services in Latvia and the broader European Union. The company offers services including residence permits via real estate investment, business investment, and bank deposits, alongside legal assistance in corporate and immigration law. The website is well-structured, multilingual, and provides detailed information about immigration policies, visa requirements, and investment options. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data is fully redacted as per EURid policy, which is typical for .eu domains and does not raise immediate concerns. Overall, the site presents a professional image with moderate technical maturity and some room for security and privacy improvements.

K

Kultuurkapital

kulka.ee

49

Kultuurkapital is a key Estonian non-profit government-related institution dedicated to supporting culture and cultural heritage through targeted funding and grants. The website provides extensive information about various cultural programs, expert groups, and funding opportunities, primarily targeting Estonian cultural organizations and artists. The domain is well-established since 2010 and registered with a reputable Estonian registrar, supporting the legitimacy of the organization. Technically, the website uses the Voog CMS platform and integrates Google Analytics and Tag Manager for user tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, explicit privacy and cookie policies are missing, and no contact emails or phone numbers are directly visible in the HTML content, which may impact user trust and privacy compliance. Security headers are not detected, indicating room for improvement in security posture. Overall, the website is professional and trustworthy but could enhance privacy compliance and security best practices.

I

International Table Tennis Federation

ittf.com

62

The International Table Tennis Federation (ITTF) operates as the global governing body for the sport of table tennis, providing comprehensive event management, rankings, anti-doping enforcement, and governance services. The website serves as the official platform for news, event calendars, and educational resources targeting players, officials, fans, and stakeholders worldwide. The organization maintains a professional digital presence with consistent branding and structured data to enhance search visibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for social media integration and video embedding. The site is mobile optimized and demonstrates good SEO practices, though performance is moderate. Analytics and marketing tools such as Google Analytics and AddThis are used for user tracking and engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks some security headers and explicit incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism, which may affect GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for such organizations. Overall, the ITTF website is a credible, well-maintained platform with good content quality and technical implementation. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and trustworthiness.

E

Eesti Olümpiakomitee

eok.ee

35

Eesti Olümpiakomitee is the official umbrella organization for sports and Olympic activities in Estonia, providing support to athletes, organizing events, and promoting sports culture nationally. The website reflects a well-established non-profit entity with strong partnerships and sponsorships, targeting the Estonian sports community and general public interested in Olympic sports. Technically, the site uses a modern stack including Bootstrap, jQuery, and Voog CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some improvements in security headers and library updates are recommended. Privacy compliance is moderate with a clear cookie consent mechanism but lacking explicit privacy policy and terms of service pages. Overall, the site is professional, trustworthy, and functional with room for technical and compliance enhancements.

P

PD Instore

neoinstore.com

43

NEO Retail Displayware is a specialized retail merchandising company offering innovative pegboard hardware and signage solutions under the patented neoPEGS™ brand. Their products target retail businesses seeking modern, customizable, and cost-effective displayware. The website is built on WordPress using WPBakery Page Builder and includes standard web technologies such as jQuery and FontAwesome. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

T

TESCO

tesco.cz

39

TESCO.cz is a Czech-based technology business specializing in servers and workstations, primarily offering Intel platform servers, server components, custom configurations, and maintenance services. The website presents a straightforward informational portal targeting businesses requiring reliable IT infrastructure hardware. The domain has a long history dating back to 1997, supporting the company's established market presence. Technically, the website uses jQuery and Google Analytics but lacks modern CMS or advanced frameworks. The site is basic in design and functionality, with limited mobile optimization and accessibility features. Security posture is moderate but lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, but no forms or social media links are available. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization.

L

LINANTO LLC

control-webpanel.com

63

Control Web Panel (CWP) is a technology company specializing in providing a free and professional Linux web hosting control panel targeted at system administrators and web hosting providers. Founded in 2016 and operated by LINANTO LLC based in Georgia, the company offers both a free version and a paid PRO version with premium support options. The website serves as a comprehensive platform for product information, support, and community engagement, positioning CWP as a competitive alternative to paid control panels with a strong emphasis on security and usability. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced functionality. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Analytics tools such as Google Analytics and Google Tag Manager are employed for user tracking, with basic privacy and cookie policies in place. From a security perspective, the site uses HTTPS and some security best practices but lacks comprehensive security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting the legitimacy of the website. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance trust and compliance.

R

Race for the Cure | Home

raceforthecure.eu

52

Race for the Cure is a European event organization focused on hosting the largest run and walk events across Europe, primarily aimed at charity participation. The website presents a professional and consistent brand image with clear navigation and a focus on participant engagement. Technically, the site is built on ASP.NET WebForms with Telerik UI components and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses modern web fonts and libraries, though accessibility features are basic. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with good content quality but no explicit contact or company information disclosed. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

O

Olivia Garden

oliviagarden.eu

71

Olivia Garden is a professional hair styling tools brand offering products such as hair brushes, combs, and scissors. The website targets professional hair stylists and consumers interested in hair care innovations. The brand appears established with a consistent and professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, Cookiebot for consent management, and reCAPTCHA for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is professional, trustworthy, and well-optimized, with room for improvement in transparency of security policies and contact information.

H

HP Papers - Printing & Copier Paper

hp-papers.eu

66

HP Papers is a European-focused paper product brand specializing in printing and copier paper with a strong emphasis on sustainability and climate action. Their product range includes various paper types certified by ClimatePartner, FSC®, PEFC, and the EU Ecolabel, positioning them as a responsible and quality-conscious player in the manufacturing and retail sectors. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, providing a good user experience with responsive design and clear navigation. However, the absence of explicit privacy and terms of service policies, as well as contact information, limits transparency and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks visible security headers and formal security policies.

A

Alma Career

lmc.eu

67

Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and across Europe. The company offers a comprehensive suite of services including job portals, online education platforms, recruitment management tools, employee engagement surveys, and salary benchmarking. Their market position is strong, supported by multiple well-known brands such as Jobs.cz and Platy.cz, serving a broad audience of HR professionals, employers, and job seekers. The website reflects a mature digital presence with modern technologies and a professional design. Technically, the website is built using Next.js and React frameworks, leveraging modern web standards and optimized for performance and mobile responsiveness. The use of Google Tag Manager and Analytics indicates a moderate level of user tracking balanced with privacy compliance. The site employs security best practices including HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the strong brand presence and consistent business information mitigate this concern. Overall, the risk is moderate with recommendations to enhance transparency around security policies and incident response. Strategically, Alma Career should focus on publishing detailed security and incident response policies, consider a vulnerability disclosure program, and continue to monitor domain registration details to maintain trust. Enhancing accessibility and expanding data retention disclosures would further improve compliance and user trust.

Z

Zalohujme.cz

zalohujme.cz

48

Zalohujme.cz is a Czech environmental initiative focused on promoting the implementation of a deposit return system for PET bottles and beverage cans in the Czech Republic. The website provides comprehensive information about the benefits of such a system, its operation, and examples from other European countries. It targets the general public, environmental advocates, municipalities, and beverage producers. The platform serves as an educational and advocacy tool to support legislative changes and increase recycling rates. Technically, the website is built on WordPress and employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. The site is mobile-optimized with good SEO practices including structured data and meta tags. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no explicit privacy or cookie policies or consent mechanisms were found. Contact information is limited to an email address in the header, with no phone numbers or physical addresses provided. Overall, the website is legitimate and professional in its presentation and content, though the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance the site's security posture and user trust.

AIMS (Association of International Marathons and Distance Races) operates a comprehensive website dedicated to global running events, including marathons and ultradistance races. The organization provides race calendars, results, news, and publishes the Distance Running magazine, positioning itself as a key resource for the international running community. The website targets runners, race organizers, and athletics enthusiasts worldwide, offering a membership model and partnerships with sports, photo, registration, and medals partners. Technically, the site uses a mix of JavaScript libraries such as jQuery, Cycle2, Leaflet.js for maps, and Google Analytics for tracking, with a custom or unknown CMS. The site is mobile optimized and has a moderate performance profile.

T

Turundajate Liit ehk TULI

turundajateliit.ee

42

Turundajate Liit ehk TULI is a professional association in Estonia that unites marketing agencies and brands to develop and improve the marketing sector. The organization acts as a connector, promoter, and evaluator within the marketing industry, offering news, events, job postings, training, and competitions such as the Kuldmuna awards. The website reflects a well-established entity with a clear focus on the Estonian marketing community, providing relevant and regularly updated content. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and standard security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, including GDPR. Contact information and social media presence are clearly provided, enhancing business credibility.