Security Directory

P

Peetri Kool

peetrikool.ee

38

Peetri Kool is a small educational institution located in Estonia, providing primary and kindergarten education services to the local community. The website serves as an informational portal offering details about school schedules, staff, admission, and extracurricular activities. The site is built on WordPress using the Education Hub theme and integrates basic modern web technologies such as jQuery and Font Awesome. Hosting appears to be managed by Elkdata OÜ, a local Estonian provider. The website is accessible, mobile-optimized, and includes clear navigation but lacks comprehensive content on the homepage. Security posture is moderate with HTTPS enabled but missing important security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Analytics are handled via plausible.io, indicating a privacy-conscious approach but without explicit consent mechanisms.

E

Elkdata OÜ

koerumuusikakool.ee

41

Koeru Muusikakool is a small, regionally focused music school based in Estonia, providing music education and cultural events primarily targeting students and the local community. The website is built on a modern WordPress platform using popular plugins such as WooCommerce and Tutor LMS, indicating a digital maturity suitable for educational content delivery and course management. The site features active social media integration and regularly updated news content, supporting engagement with its audience. Technically, the website is well-structured with responsive design and moderate performance, although accessibility and SEO optimizations are basic. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. The WHOIS data confirms the domain is legitimately registered to Elkdata OÜ since 2010, consistent with the business's operational history. Overall, the website presents a professional and trustworthy front for the music school but requires improvements in privacy compliance and security best practices to reduce risk and increase user confidence. Strategic enhancements in these areas will support sustainable growth and regulatory adherence.

Aktsiaselts Koeru Hooldekeskus is a regional healthcare and eldercare service provider based in Järva County, Estonia. The organization specializes in 24/7 general care, nursing assistance, special care for individuals with deep disabilities, and dementia care. The website reflects a medium-sized entity with a clear focus on providing comprehensive care services to elderly and special needs clients. The business maintains a consistent brand presence and provides clear contact information and service descriptions, positioning itself as a trusted local healthcare provider. Technically, the website is built on WordPress using a modern tech stack including LayerSlider, WPBakery Page Builder, and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and SEO-friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks some security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates a solid digital presence with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance the security posture and regulatory adherence.

E

Ettevõte

jarvakodu.ee

43

Järvakodu is a small healthcare business operating a newly renovated elderly care home in Järva-Jaani, Estonia. The facility offers 24/7 general care services with a focus on personalized attention, a supportive environment, and sustainable energy solutions such as solar panels and geothermal heating. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress using modern plugins and frameworks, hosted by Elkdata OÜ, and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is published. Overall, the site is trustworthy and well-maintained, supporting the business's credibility and customer engagement.

J

Järva Valla Noorsootöökeskus

jarvanoored.ee

40

Järva Valla Noorsootöökeskus is a local government youth work center in Estonia, focused on providing youth services, activities, and community engagement within the Järva municipality. The website serves as an informational portal for youth centers, events, hobby education, and youth council activities. The organization appears to be a small public sector entity founded recently in 2022, with a clear local community focus. Technically, the website is built on WordPress using Elementor and common plugins, hosted by Zone Media OÜ. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No analytics or advertising scripts are detected, indicating minimal user tracking. Security posture is basic with HTTPS enabled but no security headers detected and no visible privacy or cookie policies, indicating compliance gaps with GDPR. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The site links to multiple partner organizations and government-related domains, enhancing trust. Overall, the website is functional and serves its purpose as a local youth center portal but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

J

Järva Vallaraamatukogu

jarvaraamat.ee

45

Järva Vallaraamatukogu operates as a public library service for the Järva County region in Estonia, providing residents with access to books, cultural events, and library services including a mobile library bus. The website serves as an informational portal with news, events, and user resources, targeting local community members and library patrons. The business model is government-funded public service, with a clear focus on community engagement and education. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as Slider Revolution and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are not detected and no explicit security or incident response policies are published. Overall, the site is trustworthy and professionally maintained, reflecting its public institution status.

Z

Zone Media OÜ

visitjarva.ee

44

Visitjarva.ee is a regional tourism information website focused on Järvamaa (Järva County) in Estonia. It provides comprehensive information about local events, accommodation, cultural and historical sites, nature activities, food, wellness, and seminar facilities. The site targets tourists and visitors interested in exploring the region, offering curated content and links to social media channels for engagement. The business operates under Zone Media OÜ, with a domain established in 2016, indicating a stable presence in the regional tourism market. Technically, the website is built on WordPress CMS, utilizing common libraries such as jQuery, Owl Carousel, LazySizes, and Lightbox for enhanced user experience. SEO is well addressed through Yoast SEO plugin and structured data (JSON-LD). The site is mobile optimized and performs moderately well, though accessibility features are basic. Hosting and domain registration are consistent and transparent, managed by Zone Media OÜ. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes a cookie consent banner, demonstrating basic privacy compliance. However, it lacks explicit privacy policy and terms of service pages, security headers, and a vulnerability disclosure mechanism. No incident response or security policy information is published, which could be improved to enhance trust and compliance. Overall, the website is a good quality regional tourism portal with solid business credibility and technical implementation. Strategic improvements in privacy documentation, security headers, and incident response transparency would elevate its security posture and compliance standing.

Skepast & Puhkim OÜ is a leading Estonian consultancy specializing in infrastructure, environmental, and spatial planning services with over 15 years of experience. The company offers expert engineering and consulting services including infrastructure design, environmental impact assessments, and spatial planning solutions. Their market position is strong within Estonia, supported by a medium-sized team of 40 experts and a professional digital presence. The website is well-structured, multilingual, and provides clear contact channels and business information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and cookie consent banner. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and business operation.

P

PÕLTSAMAA KODANIK MTÜ

poltsamaaraadio.ee

41

Põltsamaa Raadio is a small, community-driven seasonal radio station operated by local youth in the Põltsamaa region of Estonia. It broadcasts both online and on FM frequency 95.0 MHz, supported by project funding from the LEADER program to enhance broadcast reach. The website serves as a portal for live streaming, program schedules, and community engagement, targeting local listeners and supporters. The business model relies on volunteer efforts, donations, and local sponsorships. Technically, the site is built on WordPress with Elementor and several plugins for podcasting and streaming, hosted by Zone Media OÜ. The site is mobile responsive and uses modern web technologies, though performance is moderate. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy for its community media purpose but would benefit from improved privacy and security practices.

P

Põltsamaa Vallavara OÜ

visitpoltsamaa.com

44

Visit Põltsamaa is a regional tourism information website dedicated to promoting the Põltsamaa municipality in Estonia. The site provides comprehensive information about local attractions, accommodations, dining options, events, and cultural heritage, targeting tourists and visitors interested in exploring the region. The business operates as a small entity, likely under Põltsamaa Vallavara OÜ, with a focus on hospitality and government-supported tourism promotion. The website is multilingual, supporting Estonian, English, Finnish, and Russian, enhancing accessibility for diverse visitors. Technically, the website is built on WordPress CMS with common plugins such as Yoast SEO for search optimization and WPML for multilingual support. It uses jQuery and Google Analytics for user tracking and performance monitoring. The site demonstrates good mobile optimization and a professional design, though accessibility features are basic. Performance is moderate, with room for improvement in technical implementation such as enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and security headers like Content Security Policy or HSTS, which could enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is provided but limited to an email and phone number in the footer. No incident response or vulnerability disclosure information is available. Overall, the website is a credible and functional regional tourism portal with good business credibility and technical foundation but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

R

Rakvere Spordikeskus

rakverespordikeskus.ee

48

Rakvere Spordikeskus is a well-established public sports center located in Rakvere, Estonia, founded in 2010. It serves as a key regional hub for sports facilities, events, and training programs targeting local residents, sports clubs, and event organizers. The website reflects a professional and community-focused organization with clear contact information and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although formal security policies and incident response information are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates a mature digital presence suitable for its public service role.

R

Rakvere kultuurikeskus

rakverekultuurikeskus.ee

43

Rakvere kultuurikeskus is a public cultural center based in Rakvere, Estonia, providing cultural event hosting, room rentals, and advertising services to the local community and visitors. The website serves as an information portal for cultural activities and services offered by the institution. The domain is well-established since 2012 and aligns with the organization's public service role. Technically, the website is built on WordPress using a modern theme and several plugins to enhance functionality, including social media integration and event management features. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, serving its purpose effectively with room for security and compliance improvements.

R

Rakvere Raamatukogu

lvkrk.ee

39

Rakvere Raamatukogu is a regional public library in Estonia providing a range of library and community services including book lending, e-catalog access, home delivery for vulnerable populations, and educational events. The website is built on Joomla CMS and integrates common web technologies such as Bootstrap, jQuery, and FontAwesome. It uses HTTPS and includes Google Analytics and Tawk.to live chat for user engagement and analytics. The site is well-branded and consistent with its public service mission, targeting local residents and library users. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. WHOIS data confirms domain legitimacy and long-term registration consistent with the institution's history.

S

Spin TEK AS

llr.ee

53

The website www.llr.ee operates as the national pet registry platform for Estonia, managed by Spin TEK AS. It serves municipalities, veterinarians, shelters, and pet owners by providing a centralized system for pet registration and data management. The site is primarily in Estonian with an English option, targeting local government entities and citizens. The business model is focused on providing a government-aligned service with partnerships across municipalities and veterinary services, positioning itself as an essential national infrastructure for pet management. Technically, the website uses standard web technologies including jQuery and Google Analytics, with HTTPS enforced. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but lacks explicit security headers such as CSP and HSTS. No vulnerability disclosures or incident response contacts are published, and no forms are present on the homepage to analyze input security. The use of Google Analytics without a cookie consent mechanism suggests potential GDPR compliance gaps. Overall, the website is legitimate and consistent with its stated purpose and ownership. The risk level is moderate due to missing privacy and security best practices. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and reduce potential regulatory risks.

T

Tamsalu Perearstid OÜ

tamsalutervisekeskus.ee

41

Tamsalu Perearstid OÜ operates the Tamsalu Tervisekeskus website, providing primary healthcare services in Tamsalu and Vajangu, Estonia. The company offers a range of medical services including vaccinations, paid therapies, dental care, and pharmacy services, targeting local residents. The website is professionally designed using WordPress with the Avada theme and integrates trusted Estonian healthcare portals and partners, reflecting a solid local market position as a small healthcare provider. Technical infrastructure is modern and includes SEO optimization and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with business founding in 2022. Overall, the site is trustworthy and functional but could improve privacy compliance and security practices.

T

Tapa Valla Spordikeskus

tapasport.ee

46

Tapa Valla Spordikeskus is a municipal sports center in Lääne-Virumaa, Estonia, offering diverse sports facilities including swimming pools, gyms, health trails, and event hosting. The website serves local residents and sports enthusiasts with information on training, events, and additional services such as accommodation and seminar rooms. The business operates under a government sector model, founded in 2020, and maintains a consistent and professional online presence with active social media channels. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted by Virtuaal.com OÜ, and optimized for mobile devices with good performance and accessibility. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and explicit privacy and cookie policies are missing, representing compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

V

Virumaa Rannakalurite Ühing MTÜ

vrky.ee

38

Virumaa Rannakalurite Ühing MTÜ is a regional non-profit association established in 2007 in Estonia, serving fisheries sector stakeholders in Ida- and Lääne-Virumaa. The organization supports local fisheries businesses, non-profits, and municipalities through project coordination and information dissemination. The website reflects a focused regional presence with clear business objectives and a target audience within the local fisheries community. Technically, the site is built on WordPress with modern libraries such as jQuery, Swiper.js, and Google Fonts, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity appropriate for a small non-profit organization.

V

Virumaa Koostöökogu

viko.ee

40

Virumaa Koostöökogu is a small Estonian non-profit organization focused on regional cooperation and rural development in the Virumaa area. Founded in 2006, it serves local municipalities and communities by managing projects, organizing events, and facilitating cooperation among stakeholders. The website reflects this mission with relevant content, event announcements, and organizational information. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but missing important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms despite tracking scripts. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

MTÜ Partnerid is a small Estonian non-profit organization established in 2006, focusing on regional development and cooperation among local municipalities, NGOs, and entrepreneurs in Lääne-Virumaa. The website serves as an information hub for projects, events, and organizational details, targeting local communities and stakeholders. The digital infrastructure is based on WordPress with a moderate technical maturity, leveraging common plugins for SEO, statistics, and event management. The site is well-structured, mobile-optimized, and provides clear navigation and contact information. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service published. Overall, the website is trustworthy and professional but would benefit from enhanced compliance documentation and security policies.

E

eHost OÜ

arenduskeskus.ee

40

Investor.ee is a small Estonian educational website focused on providing information and guidance about investing and financial growth. The site targets individuals and organizations interested in learning about investment strategies, risk management, and financial planning. The business operates primarily as an informational resource with content in Estonian, positioning itself as a niche player in the finance education sector. The website is built on WordPress using modern themes and plugins, with a moderate level of technical maturity and good mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security best practices such as security headers and explicit privacy policies are missing. Overall, the site demonstrates a moderate security posture with room for improvement in privacy compliance and security transparency.

K

Kihnu Muuseum

kihnumuuseum.ee

43

Kihnu Muuseum is a small cultural heritage museum located in Estonia, dedicated to preserving and presenting the unique Kihnu heritage culture. The museum operates both physical exhibitions and virtual tours, offering educational workshops, group visits, event organization, and guided services. The website is built on WordPress using the OceanWP theme and Elementor page builder, hosted by Elkdata OÜ. It employs modern web technologies including jQuery and Font Awesome, and uses plausible.io for privacy-conscious analytics. The site is accessible, mobile-optimized, and professionally designed with clear navigation and relevant content for its target audience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is trustworthy and credible for its business purpose, though improvements in security headers and privacy compliance are recommended.

K

Kihnu Vallavalitsus

visitkihnu.ee

43

Visit Kihnu is a specialized tourism website promoting the Estonian island of Kihnu. It provides comprehensive information about local events, accommodations, transport options, cultural heritage, and services, targeting tourists interested in visiting the island. The website is operated by Kihnu Vallavalitsus, an official local government entity, which adds credibility and trustworthiness to the platform. The domain is registered since 2017 and aligns well with the business purpose and location. Technically, the website uses a modern JavaScript stack including jQuery, Leaflet.js for maps, Google Analytics, and Facebook Pixel for tracking. It employs Google reCAPTCHA for form security and uses HTTPS to secure communications. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site has a good SSL configuration and uses CSRF tokens in forms, but no security headers were detected in the provided data. There is no visible incident response or vulnerability disclosure information. Tracking and analytics are moderately extensive, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is a credible and functional tourism portal with good business credibility and technical implementation. To improve, it should address privacy compliance by publishing policies and implementing cookie consent, enhance security headers, and provide incident response contacts to strengthen trust and compliance.

C

404 Page not found | Canary

cms-dt.com

48

The website cms-dt.com currently serves a 404 error page indicating that the requested content is not available or has been moved. There is no visible business information, contact details, or privacy-related policies on the accessible page. The domain is relatively new, registered in April 2023 via Amazon Registrar, Inc., and uses the Laravel framework with common JavaScript libraries such as jQuery and Bootstrap. The technical infrastructure appears standard but lacks advanced security configurations such as DNSSEC and security headers. The absence of privacy policies, cookie consent mechanisms, and contact information indicates low compliance with privacy regulations and poor user trust signals. Overall, the site is in an early or incomplete state, limiting its business credibility and security posture.

G

Goldcar

goldcarhelp.com

54

Goldcar is a well-established car rental company operating primarily in Spain with a strong presence in major tourist destinations. The company offers a variety of car rental services, including innovative features like the Key'n Go automatic key pickup system and a loyalty program called GO Club. The website serves as a comprehensive help center supporting customers with FAQs, booking assistance, and contact options. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a CDN likely provided by Akamai, ensuring moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

D

Dollar Car Rental

dollar.com

66

Dollar Car Rental operates a professional and user-friendly website offering car rental services across Europe with over 400 locations. The company targets budget-conscious travelers and provides flexible rental options with an emphasis on ease of booking and management. The website demonstrates a mature digital presence with modern technologies and compliance mechanisms such as cookie consent and privacy policies. However, the domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional branding and content. The site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published incident response policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency on domain registration and enhanced security practices.

T

Thrifty Car Rental

thrifty.com

66

Thrifty Car Rental operates a professional and user-friendly website offering car rental services primarily across Europe. The company targets both business and leisure travelers with a broad fleet including electric and economy vehicles. The website demonstrates a mature digital presence with responsive design, clear navigation, and integration of modern technologies such as Google Tag Manager and cookie consent management via Securiti.ai. However, the absence of WHOIS registration data for the domain www.thriftycars4rent.com raises concerns about domain legitimacy, despite the website's strong branding alignment with the parent company Hertz. Security posture is generally good with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhancement of security transparency.

Väike-Maarja vald operates as a local government entity in Estonia, providing a broad range of municipal services including administration, social welfare, education, culture, and community engagement. The website serves as an official portal for residents and stakeholders, offering news, event information, contact details, and access to various public services. The site is well-structured and content-rich, targeting local residents, businesses, and visitors. Technically, the website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, Google Analytics, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by Telia Eesti AS and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though accessibility features could be improved. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several important security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the municipality but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and regulatory adherence.

Vormsi.ee is the official local government and community information portal for Vormsi island, Estonia. The website provides current news, event calendars, administrative information, and local services primarily targeting residents and visitors of Vormsi. It is positioned as a trusted source of local information with a focus on community engagement and tourism. The site is multilingual, supporting Estonian, English, and Swedish languages, enhancing accessibility for diverse audiences. The business model is informational and governmental, with no evident commercial transactions. The domain is well-established since 2010, reinforcing its credibility and local presence. Technically, the website is built on WordPress CMS using a modern tech stack including PHP, jQuery, and popular plugins such as Yoast SEO and WPML for multilingual support. The site uses Google Tag Manager for analytics and employs a responsive design optimized for mobile devices. Performance is moderate with good SEO practices implemented. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no evidence of a published privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No security.txt or vulnerability disclosure information is present. The site does not appear to be behind a WAF or security challenge, and no critical vulnerabilities were detected in the provided content. Overall, Vormsi.ee is a credible and professionally maintained government website with good content quality and technical implementation. To enhance security posture and compliance, it should publish privacy and cookie policies, implement security headers, and provide clear contact information for incident response. These improvements will strengthen user trust and regulatory compliance.

Z

Zone Media OÜ

hiiumaa.ee

48

The website hiiumaa.ee serves as a comprehensive tourism information portal for Hiiumaa island in Estonia, providing visitors with details on events, accommodation, transport, and local attractions. It targets tourists and visitors interested in exploring the island, positioning itself as a regional tourism promotion platform. The business behind the domain is registered as Zone Media OÜ, an Estonian company, with the domain established in 2010, indicating a mature presence in the market. Technically, the site is built on WordPress 6.7.2 with a modern tech stack including Yoast SEO, Google Tag Manager, Facebook Pixel, and multilingual support via WPML. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected in the HTML content. However, the absence of a published security policy or incident response contact limits transparency. Overall, the website presents a professional and trustworthy front for regional tourism promotion, with moderate tracking and advertising practices. The lack of explicit privacy and terms of service policies is a compliance gap. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the site's security posture and user trust.

A

Anija vald

anija.ee

42

Anija.ee is the official website of Anija vald, a local government entity in Estonia. The site serves as a comprehensive portal for municipal information, including news, services, contacts, and community resources. It targets residents and stakeholders within the Anija vald municipality, providing essential public service information and facilitating communication between the government and its constituents. The website is well-structured with clear navigation and a consistent branding approach, reflecting its role as a trusted government resource. Technically, the website is built on WordPress CMS, utilizing modern plugins such as Max Mega Menu, Complianz GDPR Cookie Consent, and Carousel Block. It employs jQuery and FontAwesome for enhanced UI/UX. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. The presence of Google Tag Manager indicates usage of analytics and tracking, balanced with a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms a consistent and legitimate domain registration aligned with the website's governmental purpose. Overall, Anija.ee presents a secure, compliant, and professionally maintained digital presence for the Anija vald municipality. Strategic recommendations include enhancing security headers, adding explicit incident response contacts, and maintaining regular updates to CMS and plugins to sustain security and compliance.

E

Eesti Puuetega Inimeste Koda

epikoda.ee

48

Eesti Puuetega Inimeste Koda (EPIK) is a well-established Estonian non-profit organization founded in 2010, dedicated to improving the quality of life, social inclusion, and self-realization opportunities for people with disabilities and chronic illnesses. The organization operates primarily in Estonia and targets disabled individuals, their families, and professionals working in related fields. Their key services include advocacy, counseling, accessibility initiatives, publications, international cooperation, podcasts, and newsletters. The website reflects a professional and accessible digital presence with multi-language support and clear navigation.

B

BSTX

bstx.com

59

BSTX operates as a regulated national securities exchange integrating blockchain technology to modernize public securities trading. Powered by tZERO technology and jointly owned by BOX Digital Markets and tZERO, BSTX aims to reduce friction and complexity in securities trading. The website reflects a medium-sized finance and technology business with a clear focus on blockchain-enabled securities exchange services. The technical infrastructure is based on WordPress CMS with common plugins and integrations such as LayerSlider and Google Analytics, hosted likely on WP Engine with Cloudflare DNS. The site is well designed, mobile optimized, and SEO friendly, though some accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism or explicit GDPR compliance indicators. Contact information is limited to email and contact forms, with no phone or physical address listed. Overall, BSTX presents a credible and professional online presence consistent with its business claims.

U

UAB Eltechnika

eltechnika.eu

54

UAB Eltechnika is a Lithuanian-based company specializing in the distribution and sales of advanced laser and CNC machinery, including CO2, Fiber, UV lasers, and CNC milling machines. Established in 2015, it serves primarily the Baltic region as an official distributor for AEON and LightBurn, targeting manufacturing and industrial businesses seeking high-precision equipment. The website reflects a professional B2B business model with multilingual support and a focus on product exposition and customer engagement. Technically, the site is built on WordPress with common plugins for caching and multilingual content, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a credible and trustworthy business presence with room for improvement in privacy and security transparency.

AdForum is a well-established global platform serving the advertising and marketing industry by providing a comprehensive directory of agencies, production companies, and talent, alongside a creative library of campaigns and ads. The website demonstrates a strong market position with extensive content and a large user base, targeting marketers and advertising professionals worldwide. Technically, the site uses modern JavaScript libraries, Google advertising services, and Matomo analytics, with a responsive design and good SEO practices. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit privacy consent mechanisms could enhance compliance and trust. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional presentation and industry presence mitigate concerns. Overall, the site is a credible and valuable resource for its target audience.

Copix is a modern digital printing company based in Estonia, offering a wide range of printing products and services such as labels, floor stickers, books, and interior decoration prints. The company targets businesses and individuals requiring quality printing solutions and operates an e-commerce platform for convenient ordering. The website is built on WordPress with modern technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. The domain is newly registered in 2024, consistent with the business's apparent recent establishment. Contact information is comprehensive and transparent, enhancing business credibility.

General Public is an independent branding and design agency based in Newcastle upon Tyne, UK, founded in 2009. The company focuses on providing creative branding and design services to a niche market of businesses and organizations seeking professional brand development. Their website reflects a consistent and professional brand image, with a clear presentation of their portfolio and thought leadership content. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO and Google Analytics. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the business appears credible and established with a moderate trust level, but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

T

Tuumik Stuudio OÜ

tuumik.ee

49

Tuumik Stuudio OÜ is an established Estonian graphic design and photography studio founded in 2007. The company specializes in visual identity, illustration, print preparation, and photography services, targeting cultural institutions and corporate clients. Their website showcases a comprehensive portfolio demonstrating professional design and consistent branding. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

RP9 OÜ

rp9.ee

43

RP9 OÜ operates a pub named Pubi RP9 located at Raekoja Plats 9 in Tartu, Estonia. The business focuses on hospitality services including food and beverage offerings, sports event broadcasting, and table reservations. The website provides a comprehensive menu with detailed descriptions and pricing, targeting local residents and visitors interested in social dining and sports entertainment. The company is a small-sized entity founded in 2017, with a consistent brand presence and clear contact information. Technically, the website is built on the concrete5 CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is transparent and consistent with the business claims, indicating legitimacy.

T

Taararing OÜ

taararing.ee

42

Taararing OÜ is an Estonian company specializing in full solutions for deposit points and cleaning services for businesses, operating since 2006. The company serves retail stores and enterprises by managing deposit acceptance and providing cleaning services, employing approximately 50 people. Their market position is that of a trusted local service provider with a solid client base and over 16 years of experience in deposit acceptance management. Technically, the website is built on Concrete CMS with modern frontend technologies including Bootstrap 5 and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility is basic. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and credible but could improve in compliance and security transparency.

V

Verband der Zoologischen Gärten (VdZ) e.V.

zoosciencelibrary.org

51

The Zoo Science Library is a specialized online platform documenting peer-reviewed scientific publications involving modern zoological gardens and aquaria. It serves as a knowledge transfer and networking tool for the zoological research community, supported by reputable organizations such as the Verband der Zoologischen Gärten (VdZ) e.V. and the European Association of Zoos and Aquaria (EAZA). The website is professionally designed, bilingual (German and English), and provides a searchable database of over 1400 publications from 2018 to 2022. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and it uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable due to malformed query responses, which slightly reduces domain trust but is mitigated by the site's affiliations and content quality. Overall, the site is a credible, niche scientific resource with good technical and security standards.

The Journal of Zoo and Aquarium Research (JZAR) is an open access academic journal affiliated with the European Association of Zoos and Aquaria, focusing on publishing peer-reviewed research related to zoos and aquaria. The journal operates on an open access model without publication fees, targeting researchers, academics, and professionals in the zoological and aquarium fields. The website is professionally designed and uses the Open Journal Systems platform, supported by modern web technologies such as jQuery and Bootstrap, hosted by Greenhost in the Netherlands. From a technical perspective, the site demonstrates good performance, mobile optimization, and accessibility. However, there is room for improvement in security practices, notably the absence of DNSSEC and security headers. The site enforces HTTPS and has domain transfer protections, which are positive indicators. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the security posture is moderate with no critical vulnerabilities detected, but enhancements in security headers and explicit policies would strengthen trust. The domain WHOIS data aligns well with the business, showing a consistent and legitimate registration. The site maintains a minimal user tracking footprint and does not employ advertising or tracking scripts, supporting user privacy. Strategically, the journal should prioritize publishing privacy and cookie policies, enable DNSSEC, and implement security headers to improve compliance and security posture. These steps will enhance trust and align with best practices for academic publishing platforms.

The EAZA Reproductive Management Group is a small non-profit organization dedicated to providing knowledge and guidelines on animal contraception within European zoos and aquariums. Their website serves as an educational resource offering guidelines, protocols, and a free course registration link, targeting professionals involved in animal reproductive management. The affiliation with Chester Zoo adds credibility and trust to their operations. Technically, the website uses a somewhat dated technology stack including AngularJS and jQuery, with basic mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism or terms of service found. Overall, the website is functional and trustworthy but could benefit from modernizing its technical stack and improving security and privacy practices.

L

La Gazette Drouot

gazette-drouot.com

67

La Gazette Drouot is a leading French media outlet specializing in auction news, art market updates, and cultural heritage content. It operates both as a weekly magazine and an online platform, offering comprehensive coverage of auction calendars, results, and featured lots. The website targets collectors, art professionals, and enthusiasts, providing subscription services and advertising opportunities. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools, hosted behind Cloudflare for performance and security. The site is well-optimized for mobile and SEO, with good content quality and navigation. Security posture is strong with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with cookie consent and GDPR-aligned policies. However, the lack of WHOIS data for the domain raises questions about domain registration transparency, though the site content and branding strongly indicate legitimacy. Overall, the site scores well on content, technical implementation, and security, with room for improvement in business credibility and security transparency.

M

Moniteur des Ventes

moniteurdesventes.com

65

Moniteur des Ventes operates a professional online auction platform specializing in live, online, and catalogued auctions of professional equipment, vehicles, and industrial materials primarily targeting French-speaking markets. The platform connects auction houses, public entities, and businesses with buyers, offering a comprehensive auction calendar and account-based bidding services. The website demonstrates a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and various UI and analytics libraries. It integrates secure payment gateways such as Ingenico and Lemonway, and uses Google Analytics and Tag Manager for traffic analysis. The site is mobile-optimized and shows good SEO practices, though accessibility features are basic. Hosting includes Azure Blob Storage for some assets. From a security perspective, the site enforces HTTPS and uses secure payment processors, with a cookie consent mechanism supporting GDPR compliance. However, no explicit security headers or incident response policies are evident, and no direct contact information is provided on the main site. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the platform presents a solid business and technical foundation but would benefit from enhanced transparency in security policies and domain registration details to improve trust and compliance posture.

D

Drouot Estimations

drouot-estimations.com

57

Drouot Estimations is a French auction house operating under the Drouot group, specializing in art, antiques, jewelry, and collectibles. The website serves as a platform for auction calendars, results, object estimations, and online bidding services, targeting both French and international clients interested in auctions. The site is well-branded and professionally designed, reflecting a medium-sized business with a strong market position in the auction industry. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for sliders and carousels, ensuring a responsive and interactive user experience. Google Tag Manager and Google Analytics are integrated with a cookie consent mechanism, indicating some level of privacy awareness. However, explicit privacy and terms of service pages are not found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a concern, potentially indicating privacy protection or domain registration issues, which slightly lowers trust. Overall, the website is functional, professional, and trustworthy from a user perspective but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve compliance and trustworthiness.

O

Oikeusministeriö/Oikeushallinnon tietotekniikkakeskus

demokratia.fi

25

Demokratia.fi is an official Finnish government web portal managed by the Ministry of Justice, providing citizens with comprehensive information and tools to participate in democratic processes locally, nationally, and at the EU level. The site aggregates links to various government-maintained participation platforms and legislative tracking services, targeting Finnish citizens interested in civic engagement. Technically, the site is built on WordPress with modern JavaScript libraries and uses Matomo analytics configured for privacy. Security posture is solid with HTTPS and no exposed sensitive data, though DNSSEC and additional security headers could enhance protection. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professionally maintained, and serves as a key government resource for democratic participation.

V

Valtiovarainministeriö

rahanpesu.fi

54

Rahanpesu.fi is an official Finnish government website maintained by the Ministry of Finance (Valtiovarainministeriö) that provides comprehensive information and resources on preventing money laundering and terrorist financing. The site serves as a central informational hub for government officials, obligated entities, and the general public interested in anti-money laundering compliance and awareness. It offers news updates, guidance, and contact points for reporting suspicious activities, positioning itself as a trusted and authoritative source in Finland's regulatory landscape. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries including jQuery, React, and Alloy UI components. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Hosting appears to be managed by Finnish government infrastructure, ensuring reliability and security. Performance is moderate with a well-structured navigation system and clear content presentation. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While no explicit security headers were detected in the provided data, the site avoids exposing sensitive information and follows best practices for external link handling and analytics tracking. The absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the domain registration data aligns perfectly with the website's governmental purpose, showing a long-standing registration since 2005 under the Finnish Ministry of Finance. No suspicious patterns or privacy protection obfuscations are present, reinforcing the site's legitimacy. The website scores well across content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and authoritative resource in its domain.

V

Valtion tieto- ja viestintätekniikkakeskus Valtori

valtori.fi

53

Valtori is a Finnish government agency under the Ministry of Finance that provides ICT services to the Finnish state administration. The organization focuses on delivering sector-independent ICT services that meet high security and preparedness requirements. The website reflects a professional government entity with clear branding, multilingual support, and a focus on service information and news updates. The technical infrastructure is based on modern web technologies including Liferay CMS, React, and jQuery, hosted likely on Finnish infrastructure with Sonera/Elisa nameservers. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not prominently published. Overall, the domain registration data aligns well with the website content, confirming legitimacy and transparency.

Y

Ympäristöministeriö

ym.fi

55

Ympäristöministeriö is the Finnish Ministry of the Environment, responsible for environmental policy, climate action, nature conservation, housing, and sustainable development in Finland. The website serves as an authoritative portal providing information, news, and resources to Finnish citizens, government officials, and international partners. It reflects the ministry's role in shaping and implementing environmental legislation and policies. The site is well-structured, multilingual, and professionally designed, supporting accessibility and user engagement. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and Clay UI components. It employs HTTPS with good SSL configuration and includes accessibility and SEO best practices. The site is hosted likely on Finnish government infrastructure, ensuring reliability and compliance with national standards. From a security perspective, the site demonstrates strong posture with HTTPS enforcement, absence of exposed sensitive data, and use of secure coding practices. However, explicit security headers like Content-Security-Policy could be enhanced, and the site currently lacks a public security policy or incident response page. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is a trustworthy and professional government portal with a solid technical foundation and good security hygiene. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

M

Maa- ja metsätalousministeriö

mmm.fi

55

The website https://mmm.fi/etusivu represents the Finnish Ministry of Agriculture and Forestry, a government entity responsible for agriculture, forestry, food production, rural development, fisheries, and related environmental policies. The site serves as an authoritative source of information, policy updates, and public communications targeted primarily at Finnish citizens, stakeholders in agriculture and forestry sectors, and policymakers. The business model is that of a government ministry providing regulatory and informational services without commercial intent. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and Clay UI components. The infrastructure is hosted by Valtori, the Finnish Government ICT service provider, ensuring a secure and stable environment. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate rather than fast. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Security headers are likely present though not explicitly visible in the HTML. No vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response information, and a security.txt file, which are recommended for enhanced transparency and security posture. Overall, the website is trustworthy, professionally maintained, and consistent with its role as a government ministry portal. The WHOIS data confirms legitimate ownership and long domain history. Strategic recommendations include implementing DNSSEC, publishing security and incident response policies, and adding a security.txt file to facilitate vulnerability disclosures.