High-risk security reports

H

HC-Engineering Oy

itufloor.fi

43

HC-Engineering Oy operates the ItuFloor brand, providing floor heating and cooling solutions across Finland. The company offers both material delivery and turnkey installation services, targeting residential and commercial building sectors. The website is professionally designed, localized in Finnish, and demonstrates a clear market position with over a million square meters of installed floor heating. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain registration details align well with the business identity, supporting legitimacy and trustworthiness.

S

Sigma Industry West

sigmaindustrywest.se

40

Sigma Industry West is a Swedish consulting company specializing in technical expertise across various industrial sectors including product development, embedded systems, production technology, and energy. As part of the larger Sigma Group owned by Danir, the company has established a strong regional presence since 2014, offering both on-site consultants and project-based services. Their website reflects a professional and consistent brand with detailed service descriptions and contact information for multiple key personnel. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Analytics, and slick sliders, providing a good user experience and mobile optimization. However, there is room for improvement in security practices, including the implementation of security headers and explicit privacy and cookie policies. The absence of WHOIS data for the exact domain suggests it is a subdomain or alias, which slightly impacts trust but does not detract from the overall legitimacy given the strong branding and group affiliation. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks formal security policies and incident response information. Analytics usage is moderate with tracking via Google and Facebook pixels, but privacy compliance indicators are minimal. Overall, the site is professional and credible but would benefit from enhanced transparency and security hardening.

S

Sigma Industry South

sigmaindustrysouth.se

47

Sigma Industry South is a Swedish consulting company specializing in industrial engineering services focused on product and production development. As part of the larger Sigma Group owned by Danir AB, it serves southern Sweden's industrial sector with a broad portfolio including automation, electrical design, product development, project management, recruitment, and supply chain management. The company emphasizes career development for engineers through programs like Växtkraft and maintains a strong regional presence with consistent branding and professional content. Technically, the website is built on Drupal 9, uses modern libraries like jQuery and Bootstrap, and integrates analytics tools such as Google Tag Manager and Hotjar. While HTTPS is properly implemented, the site lacks some security headers and a cookie consent mechanism, which are areas for improvement. No blocking or WAF challenges were detected, allowing full content access and analysis.

S

Sigma Industry East North AB

sigmaindustryeastnorth.se

43

Sigma Industry East North AB is a Swedish engineering consulting company specializing in product development, production development, project management, validation, and quality assurance. As part of the larger Sigma group owned by Danir AB, it benefits from a global network spanning 17 countries and 66 cities. The company positions itself as a provider of high-quality engineering services with a strong local presence in Sweden and a commitment to sustainable technological advancement. The website reflects a professional and modern digital presence built on WordPress, incorporating SEO best practices and user-friendly design. The technical infrastructure includes common industry tools such as Google Tag Manager and Hotjar for analytics and user behavior tracking. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in DNS security and HTTP security headers. No critical vulnerabilities or blocking WAF mechanisms were detected, indicating stable accessibility and operational maturity.

Quadranet operates as a technology company specializing in hosting and data center services, with a domain established in 1999 indicating a mature presence in the market. The website content is extremely minimal, consisting solely of a centered logo image on a black background, lacking any substantive information, metadata, or user engagement features. This minimalism severely limits the ability to assess the company's digital maturity or customer engagement strategies. Technically, the website shows no evidence of modern web technologies, frameworks, or CMS platforms, and lacks essential SEO and accessibility features. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data reflects a legitimate and stable domain registration without privacy protection, supporting the domain's authenticity. Overall, the website's lack of content and security features presents a high risk for user trust and compliance, necessitating urgent improvements.

The website hokejablogs.lv is currently inaccessible due to a security challenge page implemented by BitNinja.IO, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism. The visible content is minimal, consisting mainly of a redirect countdown and browser integrity check scripts. The site references outdated CMS versions (Joomla 1.5 and WordPress 2.5) in its metadata, suggesting legacy technology usage. No business-specific content, contact information, or privacy-related policies are accessible, limiting the ability to assess the business or compliance posture. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details and further trust verification. Overall, the site exhibits a low security and business credibility posture with significant gaps in transparency and modern web practices.

W

Webbpartner AB

mediapaper.se

44

MediaPaper is a Swedish company specializing in converting traditional print materials such as PDFs into interactive digital publications. Their platform offers an easy-to-use SaaS solution that enables users to quickly digitize and distribute content optimized for multiple devices. The company targets businesses and individuals seeking to enhance their print materials with interactive features like clickable links and embedded videos. The website is professionally designed, mobile-optimized, and provides clear contact information, reflecting a credible and customer-focused business. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and integrates third-party marketing and analytics tools such as Google Analytics and Leadfeeder. Security posture is good with HTTPS enabled and secure form handling, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism and a cookie policy page, but no explicit privacy or security policies are found. WHOIS data for the exact domain is unavailable, suggesting the domain may be a subdomain or registered differently, which slightly impacts trust but does not detract from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and improving accessibility features.

W

Women Sports – Femmes et Sports – Sport au féminin

womensports.fr

44

Women Sports is a French media platform dedicated to women's sports, offering news, results, interviews, and a magazine subscription service. The website targets French-speaking sports enthusiasts, particularly women interested in female athletes and sports culture. It operates under the Sport & Sponsoring Media Group and maintains a subsidiary focused on African content. Technically, the site is built on WordPress with modern plugins and uses Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and Google reCAPTCHA is implemented, but the absence of security headers and missing WHOIS data slightly reduce trust. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is professional and trustworthy but could improve security posture and transparency.

P

Peace and Sport

peace-sport.org

45

Peace and Sport is an established international non-profit organization founded in 2007, dedicated to promoting peaceful, inclusive, and equitable communities through sport. The organization leverages a network of high-profile sports champions and global partnerships to advance peacebuilding initiatives worldwide. Their website reflects a professional and consistent brand image, with clear messaging and active engagement channels including social media and event forums. Technically, the site is built on WordPress with modern plugins and themes, providing good mobile responsiveness and SEO optimization. Security posture is strong with HTTPS and reCAPTCHA integration, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the organization's credibility given its public profile and external trust signals. Overall, the website serves as an effective platform for advocacy and stakeholder engagement in the peace through sport sector.

Habaja Viinavabriku is a small Estonian winery and distillery specializing in handcrafted berry and fruit wines, including sparkling varieties, produced primarily from local ingredients. Located 45 km from Tallinn, the business offers wine tastings, guided tours, weekend pizza café services, and event catering, positioning itself as a niche artisanal hospitality provider. The website is built on WordPress with a standard theme and SEO plugin, reflecting a moderate level of digital maturity. While the site is well-structured and content-rich, it lacks formal privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the business presents a trustworthy and professional image with clear contact details and social media presence.

V

Valgeranna Veinitall

veinitall.ee

43

Valgeranna Veinitall is a small Estonian hospitality business specializing in local wine tasting, event hosting, and wine sales. The website presents a niche local offering with a focus on historic ambiance and quality wine experiences near Pärnu, Estonia. The business appears to be newly established in 2021 and targets local visitors and wine enthusiasts. Technically, the website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no WAF blocking detected, but lacks advanced DNS security (no DNSSEC) and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

V

V360 agency

vvunk.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a creative and professional partner for businesses seeking to elevate their digital presence. Their website showcases a portfolio of projects and client testimonials, indicating a trusted market position within their niche. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

A

American Beauty Summer Meet

americanbeauty.ee

40

American Beauty Summer Meet is a niche event organizer focused on American car enthusiast gatherings in Estonia, with the upcoming event scheduled for July 2025. The website serves as an informational and ticketing platform for this event, targeting automotive fans in the region. The business operates on a small scale with a clear focus on event hosting and entertainment services. Technically, the website is built on WordPress using common plugins such as Yoast SEO and WPML, ensuring multilingual support and SEO optimization. The site is moderately performant and mobile-optimized, with a consistent branding approach and good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration aligns well with the business profile, indicating legitimacy.

Z

Zone Media OÜ

wland.ee

48

Wland.ee is a regional hospitality and event platform focused on promoting Läänemaa, Estonia as an ideal destination for team events, seminars, and corporate gatherings. The website aggregates information about seminar rooms, team activities, and leisure options, targeting businesses and organizations seeking venues and experiences in the region. The business is relatively new, founded in 2023, and operated by Zone Media OÜ. The platform positions itself as a comprehensive resource for event planning in a natural and tranquil environment, emphasizing quality services and cultural experiences. Technically, the website is built on WordPress using the Kadence theme and Yoast SEO plugin, with Google Tag Manager integrated for analytics and CookieYes for cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are consistent with the business entity, though DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Contact information is primarily via email and web forms, with no phone numbers or physical addresses explicitly provided. Overall, Wland.ee presents a professional and trustworthy platform for its niche market, with room for improvement in security hardening and expanded compliance documentation. The domain registration and website content align well, supporting legitimacy and business credibility.

A

AERMEC NA

aermec-na.com

49

AERMEC NA is a regional branch of a leading global air conditioning manufacturer, providing products, services, and green solutions tailored to commercial, residential, multifamily, data center, public space, education, and healthcare markets. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating SEO and analytics tools such as Google Analytics and Microsoft Clarity. Security posture is solid with HTTPS and Cloudflare DNS, though there is room for improvement in security headers and explicit security policies. Privacy compliance is currently weak due to the absence of privacy and cookie policies. The domain is newly registered, indicating a recent launch or regional expansion. Overall, the site is credible and trustworthy but should enhance privacy and security transparency to align with best practices.

A

Aermec

aermec.co.uk

49

Aermec UK Ltd. is a well-established company specializing in Heating, Ventilation, and Air Conditioning (HVAC) solutions for industrial and commercial sectors. With over 60 years of market presence in Europe, they position themselves as market leaders in systems engineering, offering a broad range of HVAC products, servicing, repairs, and comprehensive system testing. Their website reflects a professional and detailed presentation of their products and services, targeting industry and commercial enterprises requiring HVAC solutions. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes SEO best practices such as structured data and meta tags. Performance is moderate, with standard use of JavaScript libraries and tracking tools like Google Analytics and Tag Manager. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and security posture. Overall, the website is professional and credible, but the domain WHOIS data is unavailable and flagged as invalid by the registry, which raises concerns about domain legitimacy or configuration. This discrepancy should be addressed to ensure full trustworthiness and compliance.

A

Airlan

airlan.es

45

Airlan is a Spanish manufacturer specializing in climate control equipment, emphasizing technological innovation, energy efficiency, and comprehensive product offerings for centralized water installations. The company targets installers and businesses primarily in Spain and Latin America, offering products adapted to different electrical frequencies (50 Hz and 60 Hz). The website reflects a medium-sized enterprise with a professional online presence, including clear contact information and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as Slider Revolution and Google reCAPTCHA for security. While HTTPS is enforced and cookie consent mechanisms are in place, the absence of explicit security headers suggests room for improvement in security hardening. The WHOIS data is not publicly accessible due to Red.es restrictions, but the website content and business details appear consistent and trustworthy. Overall, the site scores well in content quality, business credibility, and privacy compliance, with moderate technical and security posture scores.

K

Kambja Valla Sõnumid

kambja.info

46

Kambja Valla Sõnumid is a local news portal serving the Kambja municipality in Estonia, providing news, events, cultural, and educational content targeted at local residents and stakeholders. The website is built on WordPress CMS with a variety of plugins to manage events and content, indicating a moderate level of digital maturity. The site is well-branded with consistent use of municipality logos and maintains a presence on major social media platforms, enhancing community engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and privacy compliance documentation. The absence of WHOIS registrant data reduces domain trustworthiness, although the website content aligns with a legitimate local government news source. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a security.txt file to improve transparency and compliance.

Elva Sport is a local sports and culture organization serving the Elva municipality in Estonia. The website provides information about sports facilities, training, events, and community engagement, with a focus on children and youth sports as well as outdoor activities. The organization appears to be a public or non-profit entity, founded around 2019, with a clear local community focus. Technically, the website is built on WordPress using common plugins such as MonsterInsights for analytics and GDPR Cookie Compliance for privacy management. The site is moderately performant, mobile-optimized, and uses HTTPS with a good SSL configuration. Security practices are adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page in Estonian. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its community purpose effectively.

V

Visit Elva

visitelva.com

48

Visit Elva operates as a regional tourism information portal focused on promoting the Elva area in Estonia. The website provides visitors with information on local attractions, events, accommodation, dining, and active leisure opportunities. It targets tourists and visitors seeking authentic experiences in the Elva region, positioning itself as a key resource for regional tourism promotion. The business model centers on providing curated content and event promotion to enhance visitor engagement and regional visibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the business location and purpose. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks DNSSEC and advanced security headers, which could enhance its security posture. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and readiness. Overall, Visit Elva presents a professional and trustworthy online presence with solid content and technical foundations. Strategic enhancements in security policies, DNS security, and incident response disclosures would further strengthen its risk management and compliance posture.

E

Elva Kultuur

elvakultuur.ee

44

Elva Kultuur is a local government cultural portal serving the Elva municipality in Estonia. The website consolidates information about various cultural institutions and events within the municipality, targeting residents and visitors interested in cultural activities. It provides event calendars, news updates, and detailed pages for multiple cultural houses and centers. The site is positioned as an official source for cultural information in the region, supported by local government entities.

E

Elva valla haridus- ja kultuuriosakond

elvaraamatukogud.ee

39

Elva valla raamatukogud is a local government cultural and educational platform serving the Elva municipality in Estonia. The website provides information about local libraries, events, news, and instructions for using book lockers. It targets local residents and library users, operating as a public service to promote cultural engagement and library cooperation. The site is modest in scale, reflecting a small-sized government entity with a focus on community services. Technically, the website is built on WordPress CMS, utilizing common libraries such as jQuery, Modernizr, and LazySizes for responsive images and feature detection. The site is hosted under the registrar Zone Media OÜ, with a domain age consistent with the business history. Performance is moderate with good mobile optimization and basic accessibility and SEO features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal security policies. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. The site uses Google Analytics for tracking without visible consent mechanisms. Contact information is limited to an official email and physical address, with no phone numbers or incident response contacts. Overall, the website is trustworthy and professionally maintained for its purpose but requires improvements in privacy compliance, security headers, and user data protection policies to enhance its security posture and regulatory adherence.

Airvent Légtechnikai Zrt. is a well-established Hungarian manufacturer specializing in innovative ventilation and air handling products. Founded in 1999, the company offers a broad portfolio of HVAC-related products and services, including design support, customer service, and commissioning. Their market position is solid within Hungary and surrounding regions, targeting professional customers in industrial and residential ventilation sectors. The website reflects a mature digital presence with multilingual support and detailed product information. Technically, the site employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, with secure HTTPS and CSRF protections on forms. However, explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, secure, and trustworthy, supporting the company's credibility and business operations.

The website linnuriik.ee serves as an informational and promotional platform focused on birdwatching and nature tourism in Matsalu National Park, Estonia. It provides detailed descriptions of bird species, observation towers, hiking trails, and virtual tours, targeting nature enthusiasts and tourists interested in the region. The site is operated by the Foundation of Lääne County and funded by the European Regional Development Fund, indicating a regional public interest focus. Technically, the website is built on WordPress using a modern tech stack including popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. The site is hosted under the registrar Zone Media OÜ, an Estonian entity, with HTTPS enabled and good SEO practices implemented. Mobile optimization and accessibility are adequate, though some improvements could be made. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and important security headers, and does not publish explicit security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is a well-maintained regional informational resource with good business credibility but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

V

Visit Haapsalu

visithaapsalu.com

45

Visit Haapsalu is a regional tourism promotion website focused on Haapsalu and Läänemaa in Estonia, targeting tourists including families, couples, and health seekers. The site provides comprehensive travel information, event listings, guided tours, and recommendations for accommodation and dining. It positions itself as a key regional tourism information portal with a consistent brand and active social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating Google Analytics for visitor tracking. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit cookie consent mechanism is present. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional website content. Overall, the site is functional, informative, and trustworthy for visitors but would benefit from enhanced transparency and security practices.

E

Ettevõtlusnädal 2025

ettevotlusnadal.ee

39

Ettevõtlusnädal 2025 is a prominent Estonian nationwide entrepreneurship event organized annually by regional development centers to foster entrepreneurial spirit and support business startups. The website serves as an information hub for event programs, regional trainings, and inspirational content targeting entrepreneurs and aspiring business owners. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and security, including Google Tag Manager and reCAPTCHA. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional digital presence for a non-profit event organization.

The website tartu2024.ee is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha to verify visitors as human. This indicates a strong security posture at the perimeter but prevents content analysis. The domain is registered since 2018 with Telia Eesti AS, a reputable Estonian registrar, consistent with the domain's country context. No business, contact, or policy information is visible on the landing page, limiting insights into the organization's operations or compliance status. The technical infrastructure leverages Cloudflare's security and analytics services, but no CMS or other technologies are detectable due to blocked content. Overall, the site appears to be protected but lacks publicly accessible content for detailed evaluation.

V

Veinitee.ee

veinitee.ee

40

Veinitee.ee is a small Estonian hospitality business focused on promoting local wineries and wine tourism through a collaborative network of producers. The website serves as a portal to explore various wine routes and wineries across Estonia, targeting wine enthusiasts and tourists. The business is relatively new, founded in 2022, and leverages modern web technologies including WordPress with the Divi theme and Yoast SEO for content management and search optimization. The site integrates Google Tag Manager and Analytics for visitor tracking but lacks visible privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with enhanced security headers and incident response information. Overall, the website is professionally designed with good content relevance and navigation, though privacy compliance and explicit contact details could be enhanced to improve trust and regulatory adherence.

E

European University Sports Association

eusa.eu

47

The European University Sports Association (EUSA) is a well-established non-profit organization dedicated to promoting and organizing university sports across Europe. The website reflects a professional and comprehensive platform showcasing their events, projects, partnerships, and media presence. Their market position is strong, supported by numerous official partnerships with European institutions and sports federations. The target audience includes European universities, student athletes, and sports organizations. The business model revolves around organizing championships, games, and educational projects, supported by sponsorships and partnerships. Technically, the website is built on the Lytee CMS platform, utilizing modern JavaScript libraries such as Slick Slider and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured data. The presence of Google and Microsoft site verification tags indicates attention to search engine indexing and webmaster tools. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, there is a lack of explicit security policies, incident response information, and security headers which could enhance the security posture. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is privacy-protected as per EURid policies, which is justified for this type of organization. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include publishing security and incident response policies, adding security headers, and providing a vulnerability disclosure channel to further strengthen trust and security maturity.

C

Cleverec AB

cleverec.se

42

Cleverec AB operates a specialized SaaS platform called Cleverservice, designed to streamline referee assignments, digital receipts, payments, and tax reporting for sports associations primarily in Sweden. The company has an established market presence since 2014, focusing on a niche segment with tailored services for associations and referees. The website is built on WordPress with the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with a dedicated GDPR page and cookie policy. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business objectives.

Riga Hockey Cup is a youth ice hockey tournament organizer based in Latvia, providing a platform for various age groups to compete in a well-structured European championship. The website offers multilingual support and comprehensive event information, targeting youth hockey teams, coaches, and fans. The digital infrastructure leverages common web technologies such as jQuery, Fancybox, and social media integrations, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent implemented, reflecting GDPR awareness. The absence of WHOIS data limits domain legitimacy verification, but the site appears professional and trustworthy overall.

Talsu Kultūras centrs is a local cultural institution based in Talsi, Latvia, focused on organizing and promoting cultural events, exhibitions, and community activities. The website serves as an information hub for upcoming events and cultural programs, targeting residents and visitors interested in local culture and amateur arts. The business model is that of a public cultural center, supporting cultural policy implementation and community engagement. Technically, the website is built on WordPress 6.8.1 with common plugins and uses Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and user trust. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

The website ilmateenistus.ee is currently inaccessible due to a Cloudflare Turnstile security challenge that blocks automated access and requires human verification. This prevents retrieval of actual website content, including business descriptions, policies, and contact information. The domain is registered since 2013 with an Estonian registrar, indicating a stable and legitimate presence. The technical infrastructure relies on Cloudflare services for security and performance. Due to the blocking, no privacy, cookie, or terms of service policies are detectable, and no contact or business details are accessible. The security posture is strong in terms of WAF protection but limits content visibility for analysis. Overall, the site’s risk assessment is limited by lack of accessible data, and the AI score is capped low due to blocking.

K

Keep.eu

keep.eu

48

Keep.eu is a specialized platform providing aggregated information on Interreg and IPA-IPA cross-border projects, partners, and programmes. It serves governmental and non-profit organizations involved in cross-border cooperation by consolidating operational and financial data in one accessible location. The website leverages a WordPress CMS with modern JavaScript libraries and integrates Google services such as Maps and Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks comprehensive privacy and security policies, which are critical for compliance and trust. Overall, the platform is functional and professionally presented but would benefit from enhanced transparency and security documentation.

R

Running Industry Alliance

runningindustryalliance.com

44

Running Industry Alliance (RIA) is a UK and Ireland focused member-based trade organization dedicated to advancing the running industry through networking, education, and collaboration. The website presents a professional and consistent brand image, targeting businesses and professionals within the running sector. Technically, the site is built on WordPress with the Divi theme, uses modern web fonts, and integrates Google Analytics for visitor tracking. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks important security headers and published policies. The absence of WHOIS data for the domain is a notable concern, suggesting either privacy protection or data unavailability, which impacts trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and transparency.

The website apek.ee is currently inaccessible, returning a 503 Service Unavailable error indicating maintenance or capacity issues. Due to this, no business content, metadata, or contact information is available for analysis. The domain is registered since 2016 with Zone Media OÜ, a reputable Estonian registrar, suggesting legitimacy of the domain ownership. The technical infrastructure is basic, running on an Apache server hosted by Zone Media OÜ. Security posture is weak as no security headers or policies are detected, and the site lacks privacy and cookie policies. Overall, the site is not currently functional for end users, which severely limits its business and security effectiveness.

The website estonia.ee is currently inaccessible due to a Cloudflare Turnstile security challenge, which blocks content access and prevents detailed analysis of the site's business, security, and compliance posture. The domain is registered with Zone Media OÜ, an Estonian registrar, since 2010, indicating a legitimate and established presence likely related to the Estonian government. The technical infrastructure leverages Cloudflare services for security and performance, but no direct content or metadata is accessible to evaluate privacy policies, contact information, or business details. Due to the WAF challenge, the overall AI score is low, reflecting the inability to perform a full assessment.

A

Art Media Agency OÜ

elundidoonorlus.ee

41

The website elundidoonorlus.ee serves as an informational platform dedicated to organ, tissue, and cell donation and transplantation in Estonia. It is operated by Art Media Agency OÜ and provides educational content, registration links for organ donors, and related legal and statistical information. The site targets Estonian residents interested in organ donation and transplantation, positioning itself as a niche public health resource. Technically, the site uses legacy JavaScript libraries such as jQuery 1.4.4 and integrates Google Analytics and Facebook Pixel for user tracking. The hosting is provided by Zone Media OÜ, an Estonian registrar, and the domain has been active since 2011, indicating a stable presence. Security-wise, the site uses HTTPS but lacks visible security headers and employs outdated libraries that may pose vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, despite the use of tracking technologies. Contact information is not explicitly provided on the main page, limiting direct user engagement. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

A

AS Arstikeskus Confido

1220.ee

45

The website 1220.ee serves as the official Estonian health advice line platform, providing telephone and web chat medical consultation services. It targets Estonian residents and callers abroad, offering guidance on medical issues, prescription renewals, and emergency care decisions. The service operates under the auspices of the Estonian Health Insurance Fund (Tervisekassa) and collaborates with healthcare providers and pharmacies. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages (Estonian and Russian). Technical infrastructure includes modern JavaScript libraries, CDN-hosted resources, and integration with Facebook SDK and Google Tag Manager for analytics and marketing purposes. The site uses HTTPS and shows no signs of blocking or WAF interference, indicating good accessibility and security basics. However, it lacks visible privacy and cookie policies, which impacts GDPR compliance and privacy posture. Contact information is limited to phone numbers with no email or physical address disclosed. No forms collecting personal data are present on the main page, reducing immediate data protection concerns. Overall, the site demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and security policy transparency.

I

Izglītības pārvalde

tnip.lv

47

The website www.tnip.lv serves as the official online presence of the Education Department (Izglītības pārvalde) of Talsi Municipality in Latvia. It provides educational news, event information, regulatory documents, and contact details primarily targeting local residents, educators, and students. The site is built on WordPress with a range of plugins supporting social media integration, event calendars, and SEO optimization. The content is well-structured and relevant to its audience, though it lacks comprehensive privacy and cookie policies. Technically, the site uses HTTPS with a valid SSL certificate and modern web technologies, but it could improve by implementing security headers and accessibility features. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, but the domain's ccTLD and content alignment suggest authenticity. Overall, the site demonstrates a good balance of content quality and technical implementation suitable for a small public sector entity.

V

Visit Talsi

visittalsi.com

44

Visit Talsi is a regional tourism information center website dedicated to promoting the Talsi region in Latvia. The site provides comprehensive information about local attractions, events, accommodations, and dining options, targeting tourists and visitors interested in exploring the area. The business operates as a small entity focused on hospitality and regional tourism promotion, with a clear market position as a trusted local information source. The website is multilingual, primarily in Latvian, with options for English, German, Estonian, Lithuanian, and French, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and Google Fonts. It uses common plugins such as MonsterInsights for Google Analytics tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting is via name servers cloudns1.hostnet.lv and cloudns2.hostnet.lv, though the exact hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible privacy policy, cookie policy, or terms of service, and no consent mechanism for tracking cookies, which poses compliance risks under GDPR. Incident response and security policies are not published, indicating a low maturity in security governance. Overall, the website is professional, trustworthy, and serves its business purpose well but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts.

R

Rebelcreations AG

epeeglobal.org

45

EPEE is a European industry association representing the refrigeration, air conditioning, and heat pump sectors. The organization focuses on policy advocacy, sustainable heating and cooling solutions, and industry representation. The website reflects an established presence with a domain registered since 2000 and hosted by OVH in Germany. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices.

The website healthybuildingsdesigncompetition.com currently returns a 404 error page indicating that the site is not configured or accessible. There is no visible business content, contact information, or policies available. The domain is newly registered in March 2023 and hosted by OVH sas, a reputable registrar and hosting provider. The site uses TYPO3 CMS technology but lacks any active content or configuration. Due to the lack of content and accessibility, the technical maturity and security posture cannot be fully assessed. No security headers or HTTPS information was provided, and no privacy or cookie policies are present. Overall, the site appears to be inactive or under development, resulting in a low trust and credibility score.

A

Andmik

andmik.ee

45

Andmik is a specialized platform focused on providing data visualization and budget tracking services for Estonian municipalities. The website presents detailed geographic and demographic data for various local governments, targeting municipal officials and stakeholders. The platform leverages modern web technologies including Vue.js and Leaflet for interactive maps, supported by Google Analytics and Tag Manager for user tracking. The domain is registered with a reputable Estonian registrar, Zone Media OÜ, and was created in 2021, aligning with the platform's apparent recent launch. Technically, the website employs a modern JavaScript framework and mapping libraries, ensuring a responsive and interactive user experience. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the site lacks visible security headers and does not enable DNSSEC, which could be enhanced to improve overall security posture. Privacy compliance is weak, with no visible privacy or cookie policies, and no consent mechanisms, which is a significant gap given the use of tracking technologies. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and incident response information.

E

Euroopa rändevõrgustiku Eesti kontaktpunkt

emn.ee

44

The website www.emn.ee serves as the official Estonian contact point for the European Migration Network, providing comprehensive migration and asylum policy reports, applied research, and urgent information exchange. It targets policymakers, researchers, and migration professionals, positioning itself as a trusted government-related entity with a focus on migration statistics and policy analysis. The site is well-structured, content-rich, and regularly updated with news, events, and publications relevant to migration topics. Technically, the website is built on WordPress with Yoast SEO and integrates Google Analytics and Tag Manager for tracking. It demonstrates good mobile optimization and moderate performance. The use of HTTPS and cookie consent mechanisms reflects a solid privacy posture, although some security headers and explicit incident response information are missing. Security-wise, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks published security policies and vulnerability disclosure mechanisms, which could enhance trust and compliance. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional resource in its domain. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its position.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which serves as a local offline or error display, including the embedded Chrome Dino game. No external website content, business information, or contact data is present. The page is not a public website but a browser internal resource, thus no typical business or compliance information is available. The technical infrastructure is minimal, relying on Chromium's internal scripts and styles. Security posture is limited to the browser's internal environment with no external SSL or headers applicable. Overall, this page cannot be evaluated as a commercial or organizational website.

The website rtk.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks access to actual content. The domain is registered since 2012 by Zone Media OÜ, an Estonian registrar, indicating a legitimate and stable registration. However, no business, contact, or policy information is accessible on the challenged page. The technical infrastructure relies heavily on Cloudflare's security and analytics services, but no further CMS or platform details are available. Due to the blocking, the security posture cannot be fully assessed, but the use of Cloudflare indicates a baseline security measure. Overall, the site cannot be properly evaluated until the WAF challenge is passed.

O

OÜ Tervise Paradiis

veekeskus.eu

44

OÜ Tervise Paradiis operates the largest water center in Estonia, located in Pärnu, offering a wide range of recreational and sports facilities including pools, saunas, bowling, and fitness services. The website is well designed, multilingual, and provides comprehensive information and booking forms for various customer segments such as families, schools, and groups. Technically, the site is built on WordPress with modern plugins and frameworks, and it integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and secure form handling, though some security headers could be improved and no explicit security policies are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the domain registration is consistent with the business location and sector, indicating legitimacy and trustworthiness.